6 ms·

tldr; - sends various analytics to google and xiaomi - downloads "blacklist", which contain china-sensitive phrases. Actual filtering is fortunately disabled

tldr; - sends various analytics to google and xiaomi - downloads "blacklist", which contain china-sensitive phrases. Actual filtering is fortunately disabled in EU. (I personally am not sure what filtering actually does. Decompiled code and the blacklist use "Ad" in naming a lot. So if to believe the naming, filtering is for advertisements) - sends sms to xiaomi for number registration when using cloud. There is some EULA type text, which user must accept for this to happen. Text does mention sms sending there. After sending sms is deleted (user can not check what was sent), its content encrypted, saved in db and sent to xiaomi server. edit: forgot the fact that blacklist filtering can be turned on by xiaomi at any moment.

someperson 5y ago
> Decompiled code and the blacklist use "Ad" in naming a lot It's a common tactic for spyware to use the term "Ad" and other terms that sounds innocuous at first glace. AdUps is a great example [1] [1] https://www.slashgear.com/adups-chinese-spyware-still-on-android-phones-including-blu-27493055/ https://www.slashgear.com/adups-chinese-spyware-still-on-and...
- arthur2e5 5y ago
  The “AD” name isn’t that far off. Chop the presentation off an advertisement framework… isn’t the tracking and C&C code already spyware?
  - someperson 5y ago
    The AdUps spyware constantly uploads all private messages, GPS locations and more from the Android device to a cloud server in China controlled by an unknown entity. The unknown entity is not the operating system vendor and there is no opt-out.
square_usual 5y ago
It should be stated clearly and unequivocally that Xiaomi phones cannot be trusted. They have been known to track your usage of their devices and send it back to their servers, including what you see in incognito tabs of their bundled browser. To see your local files or downloads on your phone you need to accept a ToS and a Privacy Policy, because of course they're sending that information back to the mothership too. Do not fall for Xiaomi's low prices - you are paying with your data instead. https://www.forbes.com/sites/thomasbrewster/2020/04/30/exclusive-warning-over-chinese-mobile-giant-xiaomi-recording-millions-of-peoples-private-web-and-phone-use/ https://www.forbes.com/sites/thomasbrewster/2020/04/30/exclu...
- cblconfederate 5y ago
  like i 've said before, if it becomes a dillema, i prefer to be tracked by china than the US, because china has no leverage on my daily life, can't affect my finances, and i have no strong desire to live there (i m not in the US , which matters a lot)
  - atlasunshrugged 5y ago
    Really? But at least with the U.S. there is due process and some accountability. Who knows what China will own in the future and how much power they'll have. What if they buy your favorite airline and now don't want to let you use it because they have your data? What if they build up the 5G infrastructure across the world? I mean, today they might not have that much global reach (although I think just earlier this week they went after some random person who tweeted something negative about the CCP while living abroad) but what about in 20 or 30 years?
    - sofixa 5y ago
      > Really? But at least with the U.S. there is due process and some accountability For non-citizens ? Since when and what is it?
      - atlasunshrugged 5y ago
        The most extreme example I can think of is extending the right of habeas corpus to challenge illegal detentions even of non-citizens on foreign territory (RE Bush/Guantanomo). https://www.forbes.com/sites/danielfisher/2017/01/30/does-the-constitution-protect-non-citizens-judges-say-yes/?sh=e05184f1dec1 https://www.forbes.com/sites/danielfisher/2017/01/30/does-th...
        sofixa 5y ago
        "Foreign territory" to an extent and within very specific cases ( a US ran illegal detention center and US customs). As a non-US citizen living in France, i have no rights under the US constitution because it has no jurisdiction over me. That doesn't stop the NSA though.

someperson 5y ago

> Decompiled code and the blacklist use "Ad" in naming a lot It's a common tactic for spyware to use the term "Ad" and other terms that sounds innocuous at first glace. AdUps is a great example [1] [1] https://www.slashgear.com/adups-chinese-spyware-still-on-android-phones-including-blu-27493055/ https://www.slashgear.com/adups-chinese-spyware-still-on-and...

arthur2e5 5y ago
The “AD” name isn’t that far off. Chop the presentation off an advertisement framework… isn’t the tracking and C&C code already spyware?
- someperson 5y ago
  The AdUps spyware constantly uploads all private messages, GPS locations and more from the Android device to a cloud server in China controlled by an unknown entity. The unknown entity is not the operating system vendor and there is no opt-out.

square_usual 5y ago

It should be stated clearly and unequivocally that Xiaomi phones cannot be trusted. They have been known to track your usage of their devices and send it back to their servers, including what you see in incognito tabs of their bundled browser. To see your local files or downloads on your phone you need to accept a ToS and a Privacy Policy, because of course they're sending that information back to the mothership too. Do not fall for Xiaomi's low prices - you are paying with your data instead. https://www.forbes.com/sites/thomasbrewster/2020/04/30/exclusive-warning-over-chinese-mobile-giant-xiaomi-recording-millions-of-peoples-private-web-and-phone-use/ https://www.forbes.com/sites/thomasbrewster/2020/04/30/exclu...

cblconfederate 5y ago
like i 've said before, if it becomes a dillema, i prefer to be tracked by china than the US, because china has no leverage on my daily life, can't affect my finances, and i have no strong desire to live there (i m not in the US , which matters a lot)
- atlasunshrugged 5y ago
  Really? But at least with the U.S. there is due process and some accountability. Who knows what China will own in the future and how much power they'll have. What if they buy your favorite airline and now don't want to let you use it because they have your data? What if they build up the 5G infrastructure across the world? I mean, today they might not have that much global reach (although I think just earlier this week they went after some random person who tweeted something negative about the CCP while living abroad) but what about in 20 or 30 years?
  - sofixa 5y ago
    > Really? But at least with the U.S. there is due process and some accountability For non-citizens ? Since when and what is it?
    - atlasunshrugged 5y ago
      The most extreme example I can think of is extending the right of habeas corpus to challenge illegal detentions even of non-citizens on foreign territory (RE Bush/Guantanomo). https://www.forbes.com/sites/danielfisher/2017/01/30/does-the-constitution-protect-non-citizens-judges-say-yes/?sh=e05184f1dec1 https://www.forbes.com/sites/danielfisher/2017/01/30/does-th...
      - sofixa 5y ago
        "Foreign territory" to an extent and within very specific cases ( a US ran illegal detention center and US customs). As a non-US citizen living in France, i have no rights under the US constitution because it has no jurisdiction over me. That doesn't stop the NSA though.