Post #2865449

@nitrokey@social.nitrokey.com This either bad research or willingly or unwillingly bad representation of facts. It may hurt your reputation if it stands uncorrected and I think that you already got feedback to this through other channels, but I want to add it here for fediverse readers: This is about PSDS data which the chip wants to have for speeding up GPS location. PSDS is useful information, but it needs to be fetched from somewhere. This fetching is done through HTTP and in this case involves sending device information to the remote party. More information than required. Nitrokey implemented safeguards/workarounds for this, but they’re not the only party doing this. Also this isn’t strictly a pure software problem, but involves the firmware too. And while it is correct and important to publish these facts, Nitrokey aren’t the first ones to speak about this problem in public.