Skip to content

Commit e484adb

Browse files
committed
Positon location service
1 parent 84ac3b4 commit e484adb

File tree

2 files changed

+88
-0
lines changed

2 files changed

+88
-0
lines changed

Diff for: generate-sitemap

+1
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ pages = [
1313
["/articles/", 0.5],
1414
["/articles/attestation-compatibility-guide", 0.5],
1515
["/articles/grapheneos-servers", 0.1],
16+
["/articles/positon-location-service", 0.5],
1617
["/articles/server-traffic-shaping", 0.5],
1718
["/articles/sitewide-advertising-industry-opt-out", 0.5],
1819
["/build", 0.5],

Diff for: static/articles/positon-location-service.html

+87
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,87 @@
1+
<!DOCTYPE html>
2+
<html lang="en" prefix="og: https://ogp.me/ns#">
3+
<head>
4+
<meta charset="utf-8"/>
5+
<title>Positon location service | Articles | GrapheneOS</title>
6+
<meta name="description" content="Information about the Positon location service."/>
7+
<meta name="theme-color" content="#212121"/>
8+
<meta name="color-scheme" content="dark light"/>
9+
<meta name="msapplication-TileColor" content="#ffffff"/>
10+
<meta name="viewport" content="width=device-width, initial-scale=1"/>
11+
<meta name="twitter:site" content="@GrapheneOS"/>
12+
<meta name="twitter:creator" content="@GrapheneOS"/>
13+
<meta property="og:title" content="Positon location service"/>
14+
<meta property="og:description" content="Information about the Positon location service."/>
15+
<meta property="og:type" content="website"/>
16+
<meta property="og:image" content="https://grapheneos.org/opengraph.png"/>
17+
<meta property="og:image:width" content="512"/>
18+
<meta property="og:image:height" content="512"/>
19+
<meta property="og:image:alt" content="GrapheneOS logo"/>
20+
<meta property="og:site_name" content="GrapheneOS"/>
21+
<meta property="og:url" content="https://grapheneos.org/articles/positon-location-service"/>
22+
<link rel="canonical" href="https://grapheneos.org/articles/positon-location-service"/>
23+
<link rel="icon" href="/favicon.ico"/>
24+
<link rel="icon" sizes="any" type="image/svg+xml" href="/favicon.svg"/>
25+
<link rel="mask-icon" href="[[path|/mask-icon.svg]]" color="#1a1a1a"/>
26+
<link rel="apple-touch-icon" href="/apple-touch-icon.png"/>
27+
[[css|/main.css]]
28+
<link rel="manifest" href="/manifest.webmanifest"/>
29+
<link rel="license" href="/LICENSE.txt"/>
30+
<link rel="me" href="https://grapheneos.social/@GrapheneOS"/>
31+
</head>
32+
<body>
33+
{% include "header.html" %}
34+
<main id="positon-location-service">
35+
<h1><a href="#positon-location-service">Positon location service</a></h1>
36+
37+
<p>The Positon location service is a proprietary and highly privacy invasive service
38+
created by developers from /e/OS with their funding. Using the service requires
39+
uploading sensitive location data to their service, similar to the Apple and Google
40+
location services. As with the Apple and Google services, it's a centralized proprietary
41+
service with fully proprietary data. Unlike those services, the people behind it have a
42+
history of publishing notoriously insecure software such as the /e/OS operating system
43+
itself which massively rolls back standard security, lags years behind on security
44+
updates and covers all of that up. They blatantly scam their users with false
45+
privacy/security claims for /e/OS, and nothing different should be expected from a
46+
location service from the same group of people. Multiple people involved in it are also
47+
actively involved in harassment targeting privacy/security researchers and engineers
48+
including but not limited to GrapheneOS team members.</p>
49+
50+
<p>The people behind the Positon location service have repeatedly talked about the
51+
importance they see in centralizing the whole open source community around using their
52+
service while locking out alternatives to it through proprietary data. They have spread
53+
fear, uncertainty and doubt about making services using open mapping data through
54+
claiming that it's a privacy hazard for people to have access to maps of Wi-Fi networks
55+
publicly broadcasting their SSID despite that data already being available through many
56+
commercial providers including publicly queryable databases such as Wigle. Anyone can
57+
drive around building these maps and many companies have already built them, with the
58+
data available for sale, as Positon shows with them obtaining access to it. The real
59+
privacy hazard is sending your location in real time to a service, particularly a poorly
60+
secured one from people known to cover up and downplay vulnerabilities. Positon has been
61+
built to grab as much market share as possible early on before actual open options can
62+
emerge and gather the necessary data such as <a href="https://beacondb.net">beacondb</a>.</p>
63+
64+
<p>The people involved in Positon have only ever cared about their careers, power and
65+
influence. Any claims that they're trying to do good by making yet another proprietary
66+
location service with a privacy invasive. They've consistently been on a side against
67+
real privacy and security, but rather focused on monetizing people's demand for it and
68+
grabbing as much market share as they can as quickly as they can with endless false
69+
marketing and attacks on projects like GrapheneOS. They see GrapheneOS as a huge threat
70+
to them due to us striving to bring people real privacy and security at no cost, which
71+
is far easier to obtain and use. This invalidates the business model of their companies
72+
like Murena. They consistently use their non-profits mainly as a way to earn money and
73+
promote their for-profit initiatives.</p>
74+
75+
<p>The service claims to be free of charge, but a core goal is turning it into a way to
76+
get data from users to build their own database that's largely not going to be available
77+
for use by others. Using it is helping them build a future business at the expense of
78+
your privacy, little different from the Apple and Google services. This is not what the
79+
open source community needs from a location service. The claims of no strings attached
80+
and the implication that it's open are nonsense. Storing as little data as possible
81+
would mean using local database for the region, not a network-based service, and they're
82+
opposed to doing well rather than it being their long term goal. They explicitly aim to
83+
lock out other alternatives and deter local location detection via Wi-Fi.</p>
84+
</main>
85+
{% include "footer.html" %}
86+
</body>
87+
</html>

0 commit comments

Comments
 (0)