The blacklist is interesting, because it maybe shows China's government interests - some of which are not widely known: - "Independence of Mongolia" - Does this show they would like to acquire Mongolia (when the time will be appropriate)? - "The Organisation for the Liberation of Palestine" - Does this show pro-Israel support?
Independence of Mongolia refers to Inner Mongolia, a Chinese region with a low ethnic Han population. It and the country of Mongolia serve as buffers against the Russians.
From the shared PDF page 23... "It has been established that during the initialisation of the system applications factory-installed on a Xiaomi Mi 10T device, these applications contact a server in Singapore at the address globalapi.ad.xiaomi.com (IP address 47.241.69.153) and download the JSON file MiAdBlacklistConfig, and save this file in the metadata catalogues of the applications. A list of applications for whic…
Is it me or is this an extremely clumsy way of doing censorship? Why not do this at network or server-side level? Why not use some kind of hash (ala Apple'e proposed child pornography hunter)? In this design, everyone would have to have this plain text configuration file ... also other brands (Oppo, Huawei etc.) would have to have it. What if it needs an update? Suppose the hui muslims starts causing trouble ... Or i…
And why does the code snippets seemingly refer to an advertising api?
Is it me or is this an extremely clumsy way of doing censorship? Why not do this at network or server-side level? Why not use some kind of hash (ala Apple'e proposed child pornography hunter)? In this design, everyone would have to have this plain text configuration file ... also other brands (Oppo, Huawei etc.) would have to have it. What if it needs an update? Suppose the hui muslims starts causing trouble ... Or i…
And why does the code snippets seemingly refer to an advertising api?
I’m assuming that’s an effort to mask the true intent.
From the shared PDF page 23... "It has been established that during the initialisation of the system applications factory-installed on a Xiaomi Mi 10T device, these applications contact a server in Singapore at the address globalapi.ad.xiaomi.com (IP address 47.241.69.153) and download the JSON file MiAdBlacklistConfig, and save this file in the metadata catalogues of the applications. A list of applications for whic…
Similar lists existed within Google for their ("on hold" last I heard) project Dragonfly [0]. I saw a bunch of banned terms like these in the Dragonfly repo before they hid it from regular employees. It was a very long list. On it were also the names of specific activists and human rights lawyers, including some who'd been disappeared [1] or forcibly confined to mental institutions [2]. My impression is that Sundar w…
> Word of warning for those who trust Google as a defender of digital privacy and human rights. Surely that is literally nobody? At this stage I would be seriously concerned for anyone who identifies with this description.
Considering Google has forfeited a lot of money over many years for resisting Chinese censorship I would say they're more trustworthy on this issue than Apple or Microsoft which have both publicly caved. The remnants of the "Don't be evil" culture is what allowed Dragonfly to be resisted. No such culture exists at Apple or Microsoft.
I think you would have to be mad to leave the stock ROM running on a Xiaomi phone, IIRC they were caught logging peoples browser history a few years ago. Several models have mainline LineageOS support, I'm running Lineage on my Mix 2S and hope to have years worth of updates going forward. The hardware is really good value as long as you install an non-tainted OS.
I was stupid enough to buy a Xiaomi phone without enough due diligence. Aside from all spying that is going on, the software is abysmal. The problem with replacing the OS is that I believe most banking apps I use will stop working. Might just need to write this phone off.
What kind of due diligence is needed besides knowing it's built by a Chinese company?
Presumably Apple ensures there is nothing nefarious in the hardware, but it seems an unlikely avenue for compromise. Most of the "phone" is Apple-provided software. In theory sure, you could have a chip snooping on the bus. But it would have to have a lot of OS-level knowledge and then how would it exfiltrate the data without OS-level access to the IP stack? Like the Bloomberg/Supermicro story, I am extremely skeptic…
how would it exfiltrate the data without OS-level access to the IP stack Do iPhones use modems embedded in the SoC? Modem firmware can communicate with the cell network without the OS.
No, they're separate baseband chips with Qualcomm-designed Snapdragon ICs running Apple-signed firmware with their own build flavors of Qualcomm's RTOS. Apple has to verify that the fab produces the low-level hardware exactly as designed, but nothing is going to sneak into that firmware.
Off the top of my head, theu can censor at the keyboard level, at the SMS level, and at the camera level: https://www.reddit.com/r/Xiaomi/comments/pgk8y3/xiaomi_camer...
Free tibet", long live Taiwan independence", or "democracy movement". i sent this to a friend who owns a xiaomi phone and asked him to resent this back to me via sms. the message appeared just fine. note: i am from india so this might not be enabled on the phones here for now