Magisk module to replace the SUPL (Secure User-Plane Location) provider in Android's gps.conf.
SUPL is used as part of the A-GPS (Assisted GPS) system to get a faster Time to First Fix. The problem is that Android's implementation automatically sends the IMSI (ID of the SIM card) to the SUPL provider for no apparent reason. And because Google is the default provider it's a big breach of privacy.
This module replaces the SUPL provider with a proxy server provided by GrapheneOS. The non-profit open source project is known for its security and privacy involvement.
The other active alternative providers with port 7275 accessible that I know of are:
- Orange:
agpss.orange.fr - Telstra:
agps.supl.telstra.com - T-Mobile:
lbs.geo.t-mobile.com - Qianxun SI (China based):
supl.qxwz.com
Another solution would simply be to disable SUPL altogether by replacing supl.google.com with localhost, but then the Time to First Fix can increase a lot, going from a couple of seconds to a couple of minutes.
If you want to learn more about the subject here's some reading material:
- A series of blog posts from a telecom engineer on how he discovered that Android is "leaking" the IMSI to the SUPL provider: https://blog.wirelessmoves.com/2014/08/supl-reveals-my-identity-and-location-to-google.html
- A blog post by a German security researcher that has done an in-depth analysis on to replace the SUPL provider: https://www.kuketz-blog.de/android-imsi-leaking-bei-gps-positionsbestimmung/
- A post on the subreddit /r/degoogle describing other modification you can make to android in order to "degoogle it" more: https://www.reddit.com/r/degoogle/comments/cldohl/how_to_degoogle_lineageos_in_2019/
This module also replaces the NTP server specified in the same configuration file with europe.pool.ntp.org which when resolved returns the IP of the closest european NTP server.
Simply download the latest build from the Release section and install it with Magisk Manager!
You can also flash it in a custom recovery like TWRP but using Magisk Manager is definitely recommended.
Contributions are welcome if you see any area of improvement!
- John Wu for the creation of the wonderful tool that is Magisk.
- The persons that have done analysis and written the blog posts linked above.
This project is released under the BSD 3-Clause License. A copy of the license is available in this project folder.