Live data from Hacker News

MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

gist.github.com

121–130 of 151 posts

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#121
post #114
post #32

Earlier quoted context omitted.

The context is somebody asking "Mainland US or Mainland China?" The comment you're responding to brought up Taiwan because that's the natural "not-mainland" when you're talking about China.

Taiwan is "not mainland China" in the same way that Greenland is "not mainland USA"

Almost. Both China and USA have threatened military action in Taiwan and Greenland respectively, but legally the USA and Greenland are not one; Greenland is a territory of Denmark despite having an independent government. Taiwan and Mainland China also have independent governments, but legally both consider themselves China, so it would be like North and South Korea if they had never agreed that they are separate countries now. Recently Taiwan has begun changing their identity as an independent country, and began the legal updates, however this is not internationally recognized because mainland china has resisted it, and frankly few countries want to go against china and risk sanctions or other political action from china. Even the USA doesn't recognize taiwan as separate, officially, although actions speak louder than words, and it is clear that most respect Taiwan's desire for independence and treat them as sovereign.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#122
post #7

Shits like this is what makes me wary about Chinese made video games proliferating in the west. You never know if your kid's genshing impact or black myth wukong is listening to you and siphoning all data on your local network to China. A competent Western administration would have banned it all years ago. But instead of securing the future of Western civilization, they want detente and cheap plastic goods instead. S…

Epic Games partially owned by Tencent and already was caught of including spyware [0][1] in their launcher, but “Tim Sweeney is the anti-corporate robinhood who will dismantle hegemony of Valve and Apple” is very popular narrative on every western tech site [0] https://news.ycombinator.com/item?id=19394399 [1] https://www.reddit.com/r/PhoenixPoint/comments/b0rxdq/epic_g...

>Epic Games partially owned by Tencent and already was caught of including spyware [0][1] in their launcher,

Your sources for that claim is a bit underwhelming, given that epic apparently (?) doesn't upload any information without explicit user consent.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#123

Earlier quoted context omitted.

For security, yo.

It's the least convincing excuse used to circle around GDPR and similar laws. "I swear, it's for security! (please ignore the part in our ToS that says we can resell your HW configuration profile and installed software stats to our commercial partners)".

>please ignore the part in our ToS that says we can resell your HW configuration profile and installed software stats to our commercial partners

source?

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#124
post #7

Shits like this is what makes me wary about Chinese made video games proliferating in the west. You never know if your kid's genshing impact or black myth wukong is listening to you and siphoning all data on your local network to China. A competent Western administration would have banned it all years ago. But instead of securing the future of Western civilization, they want detente and cheap plastic goods instead. S…

> is listening to you and siphoning all data on your local network to China. How is it any different from western apps listening to you and siphoning all data on your local network to 3 letter agencies?

>How is it any different from western apps listening to you and siphoning all data on your local network to 3 letter agencies?

Examples?

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#125
post #113

Earlier quoted context omitted.

Taiwan's official name is "Republic of China".

There are two countries that contain the substring "Republic of the Congo" and everyone seems to be okay with that

There are two governments that contain the substring of "China" and their constitutions claim a single unified Chinese country that includes mainland and Taiwan island, most of the world, seems ok with that.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#126

Earlier quoted context omitted.

I hear this theory being claimed so much, but I don't see any real evidence for it; we have routers that you can monitor traffic on, we have microphone use indicators on mobile, and I would imagine it would be pretty clear if an app was uploading audio with even very basic monitoring tools. Correct me if I'm wrong, however. I'm not denying that a lot of data is likely surreptitiously collected, but I'm talking microp…

we have routers that you can monitor traffic on Most traffic is encrypted with HTTPS unless you can root every single device you own we have microphone use indicators on mobile, and I would imagine it would be pretty clear if an app was uploading audio with even very basic monitoring tools. Complicated smartphone OS, firmware, drivers might have bugs allow overrides of visual indicators. Companies have also been know…

>Most traffic is encrypted with HTTPS unless you can root every single device you own

>Complicated smartphone OS, firmware, drivers might have bugs allow overrides of visual indicators.

This line of thinking gets dangerously close to unfalsifiable territory.

If apps are eavesdropping on us, where's the network data? It's encrypted.

But you can disable https pinning by jailbreaking/rooting? The spying logic automatically disables if it detects it's jailbroken/rooted.

Where's the jailbreak/root detection logic? It's buried in 9 layers of obfuscation so you can't find it.

What about microphone indicator? They found a 0day in both Android and iOS, or the two are complicit as well.

But we don't see any backdoors in AOSP? It's built into the hardware/baseband itself.

>Companies have also been known to secretly eavesdrop and not tell users before (Apple + Siri https://www.courthousenews.com/judge-approves-95-million-app...)

"secretly eavesdrop" implies they were intentionally doing it, when even the plaintiffs admit it wasn't intentional.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#128
post #7

Shits like this is what makes me wary about Chinese made video games proliferating in the west. You never know if your kid's genshing impact or black myth wukong is listening to you and siphoning all data on your local network to China. A competent Western administration would have banned it all years ago. But instead of securing the future of Western civilization, they want detente and cheap plastic goods instead. S…

> is listening to you and siphoning all data on your local network to China. How is it any different from western apps listening to you and siphoning all data on your local network to 3 letter agencies?

More than one thing can be bad at once.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#129

This is why im always feeling bad when putting mobile versions of games i love made by netease on my phone. Where i felt especially bad was Dead by Daylight mobile. Persona 5X is not made by NetEase but i still dont have a good feeling about them. I would think they would be more restricted in what they can collect on a Phone OS (android in my case) but i still wonder if there is some way to fully isolate shady apps.

Look into GrapheneOS. Or Calyx

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#130
post #30

Earlier quoted context omitted.

> is listening to you and siphoning all data on your local network to China. How is it any different from western apps listening to you and siphoning all data on your local network to 3 letter agencies?

There's a massive difference between having a country spying on it's own citizen versus having an adversarial country doing it. The three-letter agencies would likely not be trying to sabotage or destroy their own country's economy and global standing for one.

I beg you pardon.

We've got a live situation where three letter agencies are taking down their OWN country and citizens in its wake. Oh, and the alliances as well.

Sure, materially different.

Post reply on HN