logoalt Hacker News

legitsteryesterday at 7:27 PM6 repliesview on HN

At this point, your device is not giving anyone your location without explicit permission. So it really just comes down to your IP Address, which services do need.


Replies

golem14yesterday at 8:36 PM

I think your is statement is inaccurate to the point of being intentionally misleading:

Many devices, when running, and in some cases even if turned off but connected to their battery, will ping cell towers (maybe even BLE/Wifi) and get triangulated by the network infrastructure (such as cell towers) without actively broadcasting the GPS location.

That's why I don't quite understand why the gubernment needs to have finer grained data (esp around the US/Mexican border). Precision location info would only be needed if you need to track people in densely populated areas.

show 2 replies
notnullorvoidyesterday at 9:54 PM

IP Address is all you need to get fairly accurate (town or neighborhood) location for most of North America.

But it is necessary to send it somewhere, otherwise the internet wouldn't work.

Unfortunately it seems to have become accepted for our devices to communicate constantly and often with services we never explicitly started communication with (like Ad networks used in Apps).

Permission systems on devices should care about Network connections just as much as Location. Ideally when installing an app you'd get the list of domains it requests to communicate with, and you could toggle them. Bonus points if the app store made it a requirement to identify which Domains are third parties and the category like an Ad service.

titzertoday at 12:32 AM

If you use Google Location Services, which is stock install on basically all Android devices, it absolutely is uploading "anonymized" GPS data all the time.

tlavoieyesterday at 11:03 PM

I think the issue here is one of informed consent. You might say, "OK, this makes sense" when agreeing to location data for a weather app. In the context of whether it's going to hail soon, location is reasonable. What you only see in those GDPR-type banners is that the data is being re-sold off to 1001 "partners", none of whom are important for my hail-to-head concerns. Never mind all the cases where it's re-sold on to all the governments and personal-level creeps through aggregators.

unethical_banyesterday at 11:25 PM

IPv6 addresses, particularly hardlines, are often accurate down to the block.

tencentshillyesterday at 9:13 PM

Then you are obligated to obscure that with a trusted no-log VPN too.