Live data from Hacker News

OnePlus OxygenOS built-in analytics

chrisdcmoore.co.uk

91–100 of 188 posts

Re: OnePlus OxygenOS built-in analytics

#91
This is part of why Google's move to forbid users from installing SSL certificates is so anti-security and anti-privacy: it disables the ability to MITM one's own device in order to observe traffic.

I'd support regulation forcing Google to permit users to install our own root CA certs.

Re: OnePlus OxygenOS built-in analytics

#92

The purpose of buying a OnePlus device is to get decent hardware for an okay price (I have the 3T), and then take advantage of their unlocked bootloader and the multitudes of highly functional kernels for it. Sultan's LineageOS ROMs are quite nice and even include WireGuard. If you're not immediately removing non-free OxygenOS when you receive your phone, you're most certainly already doing it wrong, data collection…

So, I owned the OnePlus One, two OnePlus 3T and currently run the OnePlus 5. I always used CM (or LineageOS) before the 5, they never completed the first setup once before I unlocked the bootloader, thereby reset to factory and I flashed a different ROM right away. Right now I'm on the stock ROM (and affected ofc) though. Question time: 1) Do you use your camera? I had the feeling that everytime I went from stock to…

At least for the OPO, Sultan includes the improved camera stuff that stock LineageOS is missing.

Re: OnePlus OxygenOS built-in analytics

#93
post #16

This is really shocking, this data along with my google data can be used to learn a lot more about the user like what i surf when, how much time i use my mobile in office and what do i use it for. I am wondering if there is a way to corrupt the data being sent by some way masking or sending gibberish data. For me rooting is not an option because my office email will not work on a rooted device.

got you, bud: https://www.xda-developers.com/uninstall-carrier-oem-bloatwa...

Re: OnePlus OxygenOS built-in analytics

#94

I have absolutely no doubt there is some data centre in Shenzhen full of my Huawei phone metrics! I think this is the biggest issue with android phones, they are full of potential data leakages like this. Privacy is definitely a concern and a pull factor to getting an iPhone again. There is a lot to be said for a company that is focused on hardware and not on serving content to that device. Then again it's also a rea…

Alternate idea: get rid of the smartphone. There are many benefits.

https://www.theguardian.com/technology/2017/oct/05/smartphon...

Re: OnePlus OxygenOS built-in analytics

#95
post #48

I have absolutely no doubt there is some data centre in Shenzhen full of my Huawei phone metrics! I think this is the biggest issue with android phones, they are full of potential data leakages like this. Privacy is definitely a concern and a pull factor to getting an iPhone again. There is a lot to be said for a company that is focused on hardware and not on serving content to that device. Then again it's also a rea…

This makes me wonder: why can we have a top of the line desktop PC which is totally libre, but not a smartphone? What has gone wrong?

That we ever had "libre" desktops is an accident of history resulting from home computers, widespread internet access, and awareness of public key crypto arising in that order.

IBM took on the personal computer market and made the PC standard, which launched the chain of backwards compatibility that continues to this day. Because they did this in 1981, the idea of "secure bootloaders" was not on their radar. By the time anyone started thinking along those lines, the standard was well entrenched; this same standard gave Linux and other free OSs a relatively static target to hit, just as the internet was gaining ground (a force multiplier for hippie free-software types). Before PC clones took off, every home computer was a different design, OSs were specific to each model, and open alternate OSs were not really a "thing".

For a glimpse of an alternate history where these things happened in a slightly different order, take a look at TI graphing calculators; each is a bespoke microcomputer using very 80s-ish technology (z80/m68k cpus, built-in BASIC etc) and each has RSA signed OS images, the keys for which were only factored in 2009. Even now that every single microscopic detail of the hardware is known, and the keys available, alternative OSs are niche and usually incomplete projects confined to a single model, because there is no standard to target.

All we have now is a reversion to the natural order of things, permitted by the shift to "mobile" breaking all the rules and allowing all the norms to be reset.

Re: OnePlus OxygenOS built-in analytics

#96

I have absolutely no doubt there is some data centre in Shenzhen full of my Huawei phone metrics! I think this is the biggest issue with android phones, they are full of potential data leakages like this. Privacy is definitely a concern and a pull factor to getting an iPhone again. There is a lot to be said for a company that is focused on hardware and not on serving content to that device. Then again it's also a rea…

> I feel I can trust Google with my data more than some other android manufacturer or reseller. Sure they'll serve me more adverts, but it's to some ends at least. I'm not sure I understand this logic. Can you explain your reasoning here? What makes Google different? Is it just about data security (e.g. you don't care what anyone does with your data as long as they don't leak it publicly)?

you're are right, I was a bit unclear. I guess I just feel I can trust Google more. Sure Google will take my data and deliver me targeted adverts, share it in some sort of aggregate form with partners and possibly use it to learn more about be than I know about myself, however I feel Google is good with dealing with privileged data. There data security is good and I never feel my account will be leaked, it's not Yahoo! (yet? .. that's another conservation).

It's business is fundamentally about trust, people trusting its services, I feel it offers good data security on its accounts and it offers services that I am happy I don't have to pay for. Almost 2 decades of email services, search, and drive space is something I'm glad I never pay for.

In certain cases I do keep data away from Google, I'll never upload all my photos to google photos, or put my media collection on a google drive, and i'll keep certain documents locally, but for the majority of the ephemera in my life, it's a fine place to leave it.

Nothing about my life is really that important or sensitive that security is a must and I need to be completely clandestine, if I leave a trail of breadcrumbs for someone to use to pipe adverts at me, so be it, but I can always stop them in browser with a good ad-blocker or a network level filter.

If I want that level of privacy I can always go down the proton-mail account route and use PGP or encrypted messaging. Although that's not really necessary when I'm just send my GF a gif of a seal playing a saxophone or deciding if I cook fajitas for dinner!

Re: OnePlus OxygenOS built-in analytics

#97

I have absolutely no doubt there is some data centre in Shenzhen full of my Huawei phone metrics! I think this is the biggest issue with android phones, they are full of potential data leakages like this. Privacy is definitely a concern and a pull factor to getting an iPhone again. There is a lot to be said for a company that is focused on hardware and not on serving content to that device. Then again it's also a rea…

Alternate idea: get rid of the smartphone. There are many benefits. https://www.theguardian.com/technology/2017/oct/05/smartphon...

I did this for 2 months, mainly forced to, I had my phone stolen, it was kinda nice, I read more newspapers and learnt i could send SMS messages from payphones!

Re: OnePlus OxygenOS built-in analytics

#98
post #44
post #27

Earlier quoted context omitted.

Google is also a US company, which means you at least have a different set of intelligence agencies after you. Given those two options, I think I’d prefer to give my data to the NSA, not the Chinese government.

Hmm, I'm in the opposite boat - China can't extradite me or arrest me. I'd much rather my information be in the hands of Chinese intelligence agencies than American ones.

You say that, yet the US government is pushing hard to extend their digital jurisdiction into other countries. Countries like France have also had rulings and laws where the right to be forgotten has to be obeyed worldwide, not just in France. It is entirely possible China attempts to extend its jurisdiction for online matters into other countries. It is extremely unlikely to come to any thing that will affect you, but not impossible I think

Re: OnePlus OxygenOS built-in analytics

#99
post #79

This is why I have no desire to upgrade to a new Android device and why I put my money into the Librem 5 project. This data collection is beyond ridiculous and if it's not already illegal, it should be.

Or just run LineageOS?

There's are still many privacy problems with Android beyond just this. Lineage has the proprietary Google Play Services (luckily they don't support SafetyNet -- one the most ridiculous breach of privacy and user's rights).

Re: OnePlus OxygenOS built-in analytics

#100
post #48

I have absolutely no doubt there is some data centre in Shenzhen full of my Huawei phone metrics! I think this is the biggest issue with android phones, they are full of potential data leakages like this. Privacy is definitely a concern and a pull factor to getting an iPhone again. There is a lot to be said for a company that is focused on hardware and not on serving content to that device. Then again it's also a rea…

This makes me wonder: why can we have a top of the line desktop PC which is totally libre, but not a smartphone? What has gone wrong?

You can have a similarly libre smartphone. All the phones Google sells have unlockable bootloaders and you can build Android from source yourself including the kernel. There are many 3rd party open-source ROMs built on this.

But since you end up with essentially the same OS with essentially the same userspace doing essentially the same thing it raises questions of why go through the effort and hassle. You're completely free to do so, though.

You will, however, still end up with binary black box device drivers. Just like you do on a top of the line desktop if you want to actually fully use the hardware.

Post reply on HN