设为首页收藏本站

移动叔叔

搜索
查看: 1175|回复: 1
打印 上一主题 下一主题

[教程] gps.conf因安全问题推荐配置

[复制链接]
跳转到指定楼层
楼主
发表于 2016-12-8 14:24:12 | 只看该作者 回帖奖励 |倒序浏览 |阅读模式
gps.conf因安全问题推荐配置

https: xtrapath1.izatcloud.net/xtra3grc.bin
https: xtrapath2.izatcloud.net/xtra3grc.bin
https: xtrapath3.izatcloud.net/xtra3grc.bin
https: ssl.gpsonextra.net/xtra3grc.bin



For Android devices, users should apply the December 2016 security patches.

For all other devices and based on information provided by Qualcomm,
the following mitigation steps are available:

For receivers that support XTRA and XTRA2 formats, switching to HTTPS
is recommended using the following URLS:

https: xtrapath1.izatcloud.net/xtra.bin
https: xtrapath2.izatcloud.net/xtra.bin
https: xtrapath3.izatcloud.net/xtra.bin
https:  ssl.gpsonextra.net/xtra.bin

https: xtrapath1.izatcloud.net/xtra2.bin
https: xtrapath2.izatcloud.net/xtra2.bin
https: xtrapath3.izatcloud.net/xtra2.bin
https:  ssl.gpsonextra.net/xtra2.bin

Receivers are encouraged to switch to the use of the new XTRA3
digitally signed format in conjunction with HTTPS. Details on the file
format and how the digital signature is verified is available to OEMs
directly from Qualcomm. The following URLs are available:

https:  xtrapath1.izatcloud.net/xtra3grc.bin
https:  xtrapath2.izatcloud.net/xtra3grc.bin
https:  xtrapath3.izatcloud.net/xtra3grc.bin
https:  ssl.gpsonextra.net/xtra3grc.bin

Vendor Responses

Qualcomm has acknowledged the issue as being known since 2014 and has
released guidance for their OEM customers on fixing the issue. The fix
includes the use of SSL servers to retrieve the XTRA and XTRA2 data
files, and the eventual switchover to the new XTRA3 data format which
includes a digital signature as described above.

Google has acknowledged that this issue affects the Android OS. A fix
for this issue is included in the December 2016 Android bulletin.

Apple and Microsoft have indicated to us via email that GPS-capable
devices manufactured by them including iPad, iPhones, etc. and
Microsoft Surface and Windows Phone devices are not affected, since
they use an internal secure delivery mechanism for this data, and do
not retrieve data directly from Qualcommas servers.
沙发
 楼主| 发表于 2016-12-8 14:24:43 | 只看该作者
中间加//
回复

使用道具 举报

您需要登录后才可以回帖 登录 | 注册

© 2008-2024 移动叔叔. 版权所有,专业的网络售后平台 ( 闽ICP备18006692号-3 )

商务合作点击这里给我发消息|Email:service@mobileuncle.com|手机版|移动叔叔     

GMT+8, 2024-11-27 23:42 , Processed in 0.204281 second(s), 11 queries , Gzip On, Memcache On.

返回顶部