|
| 1 | +<!DOCTYPE html> |
| 2 | +<html lang="en" prefix="og: https://ogp.me/ns#"> |
| 3 | + <head> |
| 4 | + <meta charset="utf-8"/> |
| 5 | + <title>Positon location service | Articles | GrapheneOS</title> |
| 6 | + <meta name="description" content="Information about the Positon location service."/> |
| 7 | + <meta name="theme-color" content="#212121"/> |
| 8 | + <meta name="color-scheme" content="dark light"/> |
| 9 | + <meta name="msapplication-TileColor" content="#ffffff"/> |
| 10 | + <meta name="viewport" content="width=device-width, initial-scale=1"/> |
| 11 | + <meta name="twitter:site" content="@GrapheneOS"/> |
| 12 | + <meta name="twitter:creator" content="@GrapheneOS"/> |
| 13 | + <meta property="og:title" content="Positon location service"/> |
| 14 | + <meta property="og:description" content="Information about the Positon location service."/> |
| 15 | + <meta property="og:type" content="website"/> |
| 16 | + <meta property="og:image" content="https://grapheneos.org/opengraph.png"/> |
| 17 | + <meta property="og:image:width" content="512"/> |
| 18 | + <meta property="og:image:height" content="512"/> |
| 19 | + <meta property="og:image:alt" content="GrapheneOS logo"/> |
| 20 | + <meta property="og:site_name" content="GrapheneOS"/> |
| 21 | + <meta property="og:url" content="https://grapheneos.org/articles/positon-location-service"/> |
| 22 | + <link rel="canonical" href="https://grapheneos.org/articles/positon-location-service"/> |
| 23 | + <link rel="icon" href="/favicon.ico"/> |
| 24 | + <link rel="icon" sizes="any" type="image/svg+xml" href="/favicon.svg"/> |
| 25 | + <link rel="mask-icon" href="[[path|/mask-icon.svg]]" color="#1a1a1a"/> |
| 26 | + <link rel="apple-touch-icon" href="/apple-touch-icon.png"/> |
| 27 | + [[css|/main.css]] |
| 28 | + <link rel="manifest" href="/manifest.webmanifest"/> |
| 29 | + <link rel="license" href="/LICENSE.txt"/> |
| 30 | + <link rel="me" href="https://grapheneos.social/@GrapheneOS"/> |
| 31 | + </head> |
| 32 | + <body> |
| 33 | + {% include "header.html" %} |
| 34 | + <main id="positon-location-service"> |
| 35 | + <h1><a href="#positon-location-service">Positon location service</a></h1> |
| 36 | + |
| 37 | + <p>The Positon location service is a proprietary and highly privacy invasive service |
| 38 | + created by developers from /e/OS with their funding. Using the service requires |
| 39 | + uploading sensitive location data to their service, similar to the Apple and Google |
| 40 | + location services. As with the Apple and Google services, it's a centralized proprietary |
| 41 | + service with fully proprietary data. Unlike those services, the people behind it have a |
| 42 | + history of publishing notoriously insecure software such as the /e/OS operating system |
| 43 | + itself which massively rolls back standard security, lags years behind on security |
| 44 | + updates and covers all of that up. They blatantly scam their users with false |
| 45 | + privacy/security claims for /e/OS, and nothing different should be expected from a |
| 46 | + location service from the same group of people. Multiple people involved in it are also |
| 47 | + actively involved in harassment targeting privacy/security researchers and engineers |
| 48 | + including but not limited to GrapheneOS team members.</p> |
| 49 | + |
| 50 | + <p>The people behind the Positon location service have repeatedly talked about the |
| 51 | + importance they see in centralizing the whole open source community around using their |
| 52 | + service while locking out alternatives to it through proprietary data. They have spread |
| 53 | + fear, uncertainty and doubt about making services using open mapping data through |
| 54 | + claiming that it's a privacy hazard for people to have access to maps of Wi-Fi networks |
| 55 | + publicly broadcasting their SSID despite that data already being available through many |
| 56 | + commercial providers including publicly queryable databases such as Wigle. Anyone can |
| 57 | + drive around building these maps and many companies have already built them, with the |
| 58 | + data available for sale, as Positon shows with them obtaining access to it. The real |
| 59 | + privacy hazard is sending your location in real time to a service, particularly a poorly |
| 60 | + secured one from people known to cover up and downplay vulnerabilities. Positon has been |
| 61 | + built to grab as much market share as possible early on before actual open options can |
| 62 | + emerge and gather the necessary data such as <a href="https://beacondb.net">beacondb</a>.</p> |
| 63 | + |
| 64 | + <p>The people involved in Positon have only ever cared about their careers, power and |
| 65 | + influence. Any claims that they're trying to do good by making yet another proprietary |
| 66 | + location service with a privacy invasive. They've consistently been on a side against |
| 67 | + real privacy and security, but rather focused on monetizing people's demand for it and |
| 68 | + grabbing as much market share as they can as quickly as they can with endless false |
| 69 | + marketing and attacks on projects like GrapheneOS. They see GrapheneOS as a huge threat |
| 70 | + to them due to us striving to bring people real privacy and security at no cost, which |
| 71 | + is far easier to obtain and use. This invalidates the business model of their companies |
| 72 | + like Murena. They consistently use their non-profits mainly as a way to earn money and |
| 73 | + promote their for-profit initiatives.</p> |
| 74 | + |
| 75 | + <p>The service claims to be free of charge, but a core goal is turning it into a way to |
| 76 | + get data from users to build their own database that's largely not going to be available |
| 77 | + for use by others. Using it is helping them build a future business at the expense of |
| 78 | + your privacy, little different from the Apple and Google services. This is not what the |
| 79 | + open source community needs from a location service. The claims of no strings attached |
| 80 | + and the implication that it's open are nonsense. Storing as little data as possible |
| 81 | + would mean using local database for the region, not a network-based service, and they're |
| 82 | + opposed to doing well rather than it being their long term goal. They explicitly aim to |
| 83 | + lock out other alternatives and deter local location detection via Wi-Fi.</p> |
| 84 | + </main> |
| 85 | + {% include "footer.html" %} |
| 86 | + </body> |
| 87 | +</html> |
0 commit comments