Disable Check for Mock Location prevent gps spoofing

Question

Looking to find the best way to prevent   detect GPS spoofing on Android  Any suggestions on how this is accomplished  and what can be done to stop it  I am guessing the user has to turn on mock locations to spoof GPS  if this is done  then they can spoof GPS    I guess I would need to just detect if Mock Locations are enabled  Any other suggestions

User · Answer

try this code its very simple and usefull    public boolean isMockLocationEnabled             boolean isMockLocation   false          try                 if marshmallow             if Build VERSION SDK INT  gt   Build VERSION CODES M                    AppOpsManager opsManager    AppOpsManager  getApplicationContext   getSystemService Context APP OPS SERVICE                   isMockLocation    opsManager checkOp AppOpsManager OPSTR MOCK LOCATION  android os Process myUid    BuildConfig APPLICATION ID    AppOpsManager MODE ALLOWED                 else                      in marshmallow this will always return true                 isMockLocation    android provider Settings Secure getString getApplicationContext   getContentResolver     mock location   equals  0                            catch  Exception e                return isMockLocation                    return isMockLocation

User · Answer

Since API 18  the object Location has the method  isFromMockProvider   so you can filter out fake locations    If you want to support versions before 18  it is possible to use something like this    boolean isMock   false  if  android os Build VERSION SDK INT  gt   18        isMock   location isFromMockProvider      else       isMock    Settings Secure getString context getContentResolver    Settings Secure ALLOW MOCK LOCATION  equals  0

User · Answer

I have done some investigation and sharing my results here this may be useful for others  First  we can check whether MockSetting option is turned ON public static boolean isMockSettingsON Context context           returns true if mock location enabled  false if not enabled      if  Settings Secure getString context getContentResolver                                    Settings Secure ALLOW MOCK LOCATION  equals  quot 0 quot            return false      else         return true     Second  we can check whether are there other apps in the device  which are using android permission ACCESS MOCK LOCATION  Location Spoofing Apps  public static boolean areThereMockPermissionApps Context context        int count   0       PackageManager pm   context getPackageManager        List lt ApplicationInfo gt  packages           pm getInstalledApplications PackageManager GET META DATA        for  ApplicationInfo applicationInfo   packages            try               PackageInfo packageInfo   pm getPackageInfo applicationInfo packageName                                                          PackageManager GET PERMISSIONS                   Get Permissions             String   requestedPermissions   packageInfo requestedPermissions               if  requestedPermissions    null                    for  int i   0  i  lt  requestedPermissions length  i                          if  requestedPermissions i                           equals  quot android permission ACCESS MOCK LOCATION quot                            amp  amp   applicationInfo packageName equals context getPackageName                               count                                                                    catch  NameNotFoundException e                Log e  quot Got exception  quot    e getMessage                          if  count  gt  0          return true      return false     If both above methods  first and second are true  then there are good chances that location may be spoofed or fake  Now  spoofing can be avoided by using Location Manager s API  We can remove the test provider before requesting the location updates from both the providers  Network and GPS  LocationManager lm    LocationManager  getSystemService LOCATION SERVICE    try       Log d TAG   quot Removing Test providers quot       lm removeTestProvider LocationManager GPS PROVIDER     catch  IllegalArgumentException error        Log d TAG  quot Got exception in removing test  provider quot       lm requestLocationUpdates LocationManager GPS PROVIDER  1000  0  locationListener    I have seen that removeTestProvider    works very well over Jelly Bean and onwards version  This API appeared to be unreliable till Ice Cream Sandwich  Flutter Update  Use Geolocator and check Position object s isMocked property

User · Answer

Stumbled upon this thread a couple years later  In 2016  most Android devices will have API level    18 and should thus rely on Location isFromMockProvider   as pointed out by Fernando   I extensively experimented with fake mock locations on different Android devices and distros  Unfortunately  isFromMockProvider   is not 100  reliable  Every once in a while  a fake location will not be labeled as mock  This seems to be due to some erroneous internal fusion logic in the Google Location API   I wrote a detailed blog post about this  if you want to learn more  To summarize  if you subscribe to location updates from the Location API  then switch on a fake GPS app and print the result of  each Location toString   to the console  you will see something like this     Notice how  in the stream of location updates  one location has the same coordinates as the others  but is not flagged as a mock and has a much poorer location accuracy   To remedy this problem  I wrote a utility class that will reliably suppress Mock locations across all modern Android versions  API level 15 and up    LocationAssistant - Hassle-free location updates on Android  Basically  it  distrusts  non-mock locations that are within 1km of the last known mock location and also labels them as a mock  It does this until a significant number of non-mock locations have arrived  The LocationAssistant can not only reject mock locations  but also unburdens you from most of the hassle of setting up and subscribing to location updates   To receive only real location updates  i e  suppress mocks   use it as follows   public class MyActivity extends Activity implements LocationAssistant Listener        private LocationAssistant assistant        Override     protected void onCreate Bundle savedInstanceState            super onCreate savedInstanceState                          You can specify a different accuracy and interval here             The last parameter  allowMockLocations  must be  false  to suppress mock locations            assistant   new LocationAssistant this  this  LocationAssistant Accuracy HIGH  5000  false               Override     protected void onResume             super onResume            assistant start                Override     protected void onPause             assistant stop            super onPause                Override     public void onNewLocationAvailable Location location               No mock locations arriving here                    onNewLocationAvailable   will now only be invoked with real location info  There are some more listener methods you need to implement  but in the context of your question  how to prevent GPS spoofing  this is basically it   Of course  with a rooted OS you can still find ways of spoofing location info that are impossible for normal apps to detect

User · Answer

You can add additional check based on cell tower triangulation or Wifi Access Points info using Google Maps Geolocation API  The simplest way to get info about CellTowers  final TelephonyManager telephonyManager    TelephonyManager  appContext getSystemService Context TELEPHONY SERVICE   String networkOperator   telephonyManager getNetworkOperator    int mcc   Integer parseInt networkOperator substring 0  3    int mnc   Integer parseInt networkOperator substring 3    String operatorName   telephonyManager getNetworkOperatorName    final GsmCellLocation cellLocation    GsmCellLocation  telephonyManager getCellLocation    int cid   cellLocation getCid    int lac   cellLocation getLac      You can compare your results with site  To get info about Wifi Access Points  final WifiManager mWifiManager    WifiManager  appContext getApplicationContext   getSystemService Context WIFI SERVICE    if  mWifiManager    null  amp  amp  mWifiManager getWifiState      WifiManager WIFI STATE ENABLED            register WiFi scan results receiver     IntentFilter filter   new IntentFilter        filter addAction WifiManager SCAN RESULTS AVAILABLE ACTION        BroadcastReceiver broadcastReceiver   new BroadcastReceiver                  Override             public void onReceive Context context  Intent intent                    List lt ScanResult gt  results   mWifiManager getScanResults      lt -result list                                   appContext registerReceiver broadcastReceiver  filter               start WiFi Scan         mWifiManager startScan

User · Answer

This scrip is working for all version of android and i find it after many search  LocationManager locMan      String   mockProviders    LocationManager GPS PROVIDER  LocationManager NETWORK PROVIDER        try           locMan    LocationManager  getSystemService Context LOCATION SERVICE            for  String p   mockProviders                if  p contentEquals LocationManager GPS PROVIDER                   locMan addTestProvider p  false  false  false  false  true  true  true  1                          android hardware SensorManager SENSOR STATUS ACCURACY HIGH               else                 locMan addTestProvider p  false  false  false  false  true  true  true  1                          android hardware SensorManager SENSOR STATUS ACCURACY LOW                locMan setTestProviderEnabled p  true               locMan setTestProviderStatus p  android location LocationProvider AVAILABLE  Bundle EMPTY                      java lang System currentTimeMillis                     catch  Exception ignored               here you should show dialog which is mean the mock location is not enable

User · Answer

If you happened to know the general location of cell towers  you could check to see if the current cell tower matches the location given  within an error margin of something large  like 10 or more miles    For example  if your app unlocks features only if the user is in a specific location  your store  for example   you could check gps as well as cell towers  Currently  no gps spoofing app also spoofs the cell towers  so you could see if someone across the country is simply trying to spoof their way into your special features  I m thinking of the Disney Mobile Magic app  for one example    This is how the Llama app manages location by default  since checking cell tower ids are much less battery intensive than gps  It isn t useful for very specific locations  but if home and work are several miles away  it can distinguish between the two general locations very easily   Of course  this would require the user to have a cell signal at all  And you would have to know all the cell towers ids in the area --on all network providers-- or you would run the risk of a false negative

User · Answer

It seems that the only way to do this is to prevent Location Spoofing preventing MockLocations  The down side is there are some users who use Bluetooth GPS devices to get a better signal  they won t be able to use the app as they are required to use the mock locations    To do this  I did the following       returns true if mock location enabled  false if not enabled  if  Settings Secure getString getContentResolver           Settings Secure ALLOW MOCK LOCATION  equals  0            return false          else return true

[android] Disable / Check for Mock Location (prevent gps spoofing)

Examples related to android

Examples related to gps

Examples related to spoof