> Any other related rererences - the tech that enables this sort of tracking?
It's everywhere in mobile devices. It's better not to use them.
If you must use one, you must at least have root to disable AGPS + add stringent iptable rules to disable any outgoing communication by default: you should only enable connections per app, or per IP/domain for what you need.
Still, that'll be of a limited help since the baseband manages connections (3GPP profiles etc) and does the equivalent of NAT to your device.
For all I know, the baseband could tell android "location disabled? sure thing!" while still getting GPS fixes + sending the position by UDP packets processed by the baseband OS: Android won't even see it! Yet by virtue of sharing the same IP (or being "enriched" with your IMSI as you can see above), you will be totally trackable.
If you want, you can also recover the stock firmware (https://github.com/Biktorgj/quectel_eg25_recovery), but the ability to audit from top to bottom to disable data exfiltration requires a 100% free software solution.
Very cool to see this over here :)
A past GSoC project of mine ported the entire Lua test suite to the NetBSD kernel space: https://github.com/gszr/luatests (it needs to be updated... it's been on my to-do list). See also https://github.com/gszr/luaio for some cool IO bindings for Lua in kernel.
First of all, thank you for sharing your story. As others have mentioned, having a portfolio goes a long way. Contributing to open-source projects is a great place to start; it gives you exposure to software being used in the real world and sometimes inspiration for your own projects too. Also check out AngelList (angel.co); there are lots of positions worldwide that are open to remote employment. Wishing you the best!
I highly recommend Ben Eater's YouTube channel; great video tutorials. He manages to cover a lot in short videos. (Also, consider supporting him on Patreon :)
