[guardian-dev] Xiaomi phones send private data back to company servers

Cédric Jeanneret guardian at ethack.org
Mon Aug 11 12:07:54 EDT 2014


On August 11, 2014 5:47:50 PM CEST, Tim Bray <tbray at textuality.com> wrote:
>Very stupid behavior.  FWIW, they say they’re going to stop doing it:
>https://plus.google.com/110023707389740934545/posts/bkJTXzyXXmj
>
>
>On Mon, Aug 11, 2014 at 8:31 AM, Hans-Christoph Steiner <
>hans at guardianproject.info> wrote:
>
>>
>> This does not look good for Xiaomi phones.  It seems that they
>"silently
>> sent
>> out user details to a remote server":
>>
>> https://www.f-secure.com/weblog/archives/00002731.html
>>
>> .hc
>>
>> --
>> PGP fingerprint: 5E61 C878 0F86 295C E17D  8677 9F0F E587 374B BE81
>> _______________________________________________
>> Guardian-dev mailing list
>>
>> Post: Guardian-dev at lists.mayfirst.org
>> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
>>
>> To Unsubscribe
>>         Send email to:  Guardian-dev-unsubscribe at lists.mayfirst.org
>>         Or visit:
>>
>https://lists.mayfirst.org/mailman/options/guardian-dev/tbray%40textuality.com
>>
>> You are subscribed as: tbray at textuality.com
>>
>
>
>
>-- 
>- Tim Bray (If you’d like to send me a private message, see
>https://keybase.io/timbray)
>
>
>------------------------------------------------------------------------
>
>_______________________________________________
>Guardian-dev mailing list
>
>Post: Guardian-dev at lists.mayfirst.org
>List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
>
>To Unsubscribe
>        Send email to:  Guardian-dev-unsubscribe at lists.mayfirst.org
>Or visit:
>https://lists.mayfirst.org/mailman/options/guardian-dev/guardian%40ethack.org
>
>You are subscribed as: guardian at ethack.org

o_O using clear protocol in addition?!
Oook.

Orwall would have helped, as it blocks all IP traffic ^^ </auto-promo>

According to some basic tests, all androids sends stuff on the network, even before it's fully booted… didn't have time to check what was sent where, but will give it a try once.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mayfirst.org/pipermail/guardian-dev/attachments/20140811/069c149e/attachment.html>


More information about the Guardian-dev mailing list