Starlink clients most likely have not used it, however SpaceX is shutting down a little-known GPS characteristic that can be utilized to trace and establish a Starlink dish’s location.
On Tuesday, the corporate started notifying clients concerning the demise of an open-source software program framework, gRPC, built-in into Starlink {hardware}. “Efficient Could 20, dish location will now not be out there through the native system gRPC API,” SpaceX stated within the e mail.
The corporate did not clarify why, describing it as an replace to Starlink’s “Location Information Entry.” However common customers don’t want to fret. You possibly can nonetheless see your dish’s location by way of the Starlink Cellular app below the “Subscription” part.
(Credit score: Paul Sutherland/Starlink)
The GPS information on the gRPC API isn’t leaking your location both. It must be manually turned on by the person, which was once potential by visiting the Debug Information part.
As an alternative, the change is anticipated to have an effect on third-party software program and Starlink resellers, significantly in relation to managing fleets of Starlink dishes used on the highway or at sea, in line with Paul Sutherland, a software program developer.
Sutherland is behind a desktop Starlink monitoring app referred to as Nexus Telemetry. He informed PCMag that the gRPC API is “very, very correct” at enabling a buyer to see the real-time location of a Starlink dish. The identical API has been a useful approach for third-party instruments to handle a number of Starlink dishes, together with on RVs or boats, to see their GPS areas.
However in a weblog publish, Sutherland famous the placement perform got here with a safety trade-off. “If you happen to’d enabled it, any system in your community, together with visitor gadgets, might silently learn your exact GPS coordinates,” he wrote. “That’s a privateness challenge in itself: your precise dwelling location, accessible to any system in your LAN with out consent. Past that, any app with community entry might bypass the working system’s location permission prompts fully by simply querying the dish over HTTP as a substitute of asking the OS for location companies.”
It’s why Sutherland suspects SpaceX is likely to be clamping down to forestall the perform from posing a risk to enterprise and even army clients, like these in Ukraine. “If [hackers] compromise a community with Starlink, they might be capable to discover the placement of that [dish] system,” he informed PCMag. “In the event that they had been broadcasting in a secret location, they might be capable to pinpoint the place it’s.
“In a battle zone or any state of affairs the place bodily location is delicate, that is an actual threat. Eradicating unauthenticated entry to location information is smart from that perspective,” he added. “That stated, the change impacts each Starlink person globally, not simply these in delicate areas, so I feel the first driver is the final privateness and safety concern reasonably than any particular army use case.”
Really useful by Our Editors
Nonetheless, the restriction threatens to dam respectable entry to location information for third-party instruments, together with Nexus Telemetry. Customers managing mounted Starlink dishes can merely log the place their tools is predicated, however not so for dishes on shifting automobiles. Sutherland wrote: “For cellular customers, RVs, vans, and boats, it’s extra of an issue. The entire level of polling the dish was that the placement up to date mechanically as you moved. You’ll now want another supply,” which might contain putting in a third-party GPS system. In response, Nexus Telemetry plans on including help for dongle-based USB GPS receivers.
One Starlink reseller famous the restriction additionally means “lowered troubleshooting accuracy, extra reactive operations, and diminished means to automate and implement SLAs [service level agreements] at a person web site stage.” Though SpaceX continues to be providing a “Telemetry API” for enterprise clients, it limits location information to approximate grid cells reasonably than particular coordinates.
“Such a transfer simply brings pointless points for a lot of customers who’re utilizing gRPC for respectable causes,” added Jianping Pan, a pc science professor on the College of Victoria in Canada who research satellite tv for pc web methods.
SpaceX didn’t instantly reply to a request for remark. However regardless of the looming restriction, it’s potential the corporate will reopen location entry by way of the API, although it’ll be protected by authentication. Some customers have additionally speculated that the restriction may block unhealthy actors from equipping drones with Starlink. However Sutherland stated: “I might say the drone angle is unlikely for the reason that native API is just accessible from gadgets on the dish’s personal community, and drone operators have already got onboard GPS.”
About Our Professional
Michael Kan
Principal Reporter
Expertise
I have been a journalist for over 15 years. I received my begin as a colleges and cities reporter in Kansas Metropolis and joined PCMag in 2017, the place I cowl satellite tv for pc web companies, cybersecurity, PC {hardware}, and extra. I am presently primarily based in San Francisco, however beforehand spent over 5 years in China, masking the nation’s expertise sector.
Since 2020, I’ve lined the launch and explosive development of SpaceX’s Starlink satellite tv for pc web service, writing 600+ tales on availability and have launches, but in addition the regulatory battles over the enlargement of satellite tv for pc constellations, fights with rival suppliers like AST SpaceMobile and Amazon, and the trouble to develop into satellite-based cellular service. I’ve combed by way of FCC filings for the most recent information and pushed to distant corners of California to check Starlink’s mobile service.
I additionally cowl cyber threats, from ransomware gangs to the emergence of AI-based malware. In 2024 and 2025, the FTC pressured Avast to pay customers $16.5 million for secretly harvesting and promoting their private data to third-party shoppers, as revealed in my joint investigation with Motherboard.
I additionally cowl the PC graphics card market. Pandemic-era shortages led me to camp out in entrance of a Finest Purchase to get an RTX 3000. I am now following how the AI-driven reminiscence scarcity is impacting the whole client electronics market. I am all the time desperate to study extra, so please bounce within the feedback with suggestions and ship me suggestions.
Learn Full Bio
