gps.conf因安全问题推荐配置

jackc

gps.conf因安全问题推荐配置

https: xtrapath1.izatcloud.net/xtra3grc.bin
https: xtrapath2.izatcloud.net/xtra3grc.bin
https: xtrapath3.izatcloud.net/xtra3grc.bin
https: ssl.gpsonextra.net/xtra3grc.bin



For Android devices, users should apply the December 2016 security patches.

For all other devices and based on information provided by Qualcomm,
the following mitigation steps are available:

For receivers that support XTRA and XTRA2 formats, switching to HTTPS
is recommended using the following URLS:

https: xtrapath1.izatcloud.net/xtra.bin
https: xtrapath2.izatcloud.net/xtra.bin
https: xtrapath3.izatcloud.net/xtra.bin
https:  ssl.gpsonextra.net/xtra.bin

https: xtrapath1.izatcloud.net/xtra2.bin
https: xtrapath2.izatcloud.net/xtra2.bin
https: xtrapath3.izatcloud.net/xtra2.bin
https:  ssl.gpsonextra.net/xtra2.bin

Receivers are encouraged to switch to the use of the new XTRA3
digitally signed format in conjunction with HTTPS. Details on the file
format and how the digital signature is verified is available to OEMs
directly from Qualcomm. The following URLs are available:

https:  xtrapath1.izatcloud.net/xtra3grc.bin
https:  xtrapath2.izatcloud.net/xtra3grc.bin
https:  xtrapath3.izatcloud.net/xtra3grc.bin
https:  ssl.gpsonextra.net/xtra3grc.bin

Vendor Responses

Qualcomm has acknowledged the issue as being known since 2014 and has
released guidance for their OEM customers on fixing the issue. The fix
includes the use of SSL servers to retrieve the XTRA and XTRA2 data
files, and the eventual switchover to the new XTRA3 data format which
includes a digital signature as described above.

Google has acknowledged that this issue affects the Android OS. A fix
for this issue is included in the December 2016 Android bulletin.

Apple and Microsoft have indicated to us via email that GPS-capable
devices manufactured by them including iPad, iPhones, etc. and
Microsoft Surface and Windows Phone devices are not affected, since
they use an internal secure delivery mechanism for this data, and do
not retrieve data directly from Qualcommas servers.

jackc

中间加//