Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

gist.github.com

Post reply on HN
Print view View original

141–150 of 151 posts

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#141

Post by inventor7777 »

sciencejerk wrote: post #89
inventor7777 wrote: post #18

Earlier quoted context omitted.

I hear this theory being claimed so much, but I don't see any real evidence for it; we have routers that you can monitor traffic on, we have microphone use indicators on mobile, and I would imagine it would be pretty clear if an app was uploading audio with even very basic monitoring tools. Correct me if I'm wrong, however. I'm not denying that a lot of data is likely surreptitiously collected, but I'm talking microp…

we have routers that you can monitor traffic on Most traffic is encrypted with HTTPS unless you can root every single device you own we have microphone use indicators on mobile, and I would imagine it would be pretty clear if an app was uploading audio with even very basic monitoring tools. Complicated smartphone OS, firmware, drivers might have bugs allow overrides of visual indicators. Companies have also been know…

That is fair. I do not think anyone could feasibly could detect/extract the exact data sent, because of HTTPS.

However I was more thinking of simple things, such as disabling anything that SHOULD be communicating with the Internet and seeing if any constant traffic persists.

Now of course, some very small (e.g plaintext) traffic might be almost undetectable, however that would suggest that most of the data would not be able to be transmitted due to size.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#142

Post by pyreko »

sheept wrote: post #40
Hasnep wrote: post #29

Earlier quoted context omitted.

I don't know why you're bringing Taiwan into this, and I don't think TSMC has an app...

Taiwan is the country that uses "mainland" (大陸 dalu) to refer to China

HKers also refer to the rest of China with 大陸 from my experience.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#143

Post by inventor7777 »

anonym29 wrote: post #92
inventor7777 wrote: post #18

Earlier quoted context omitted.

I hear this theory being claimed so much, but I don't see any real evidence for it; we have routers that you can monitor traffic on, we have microphone use indicators on mobile, and I would imagine it would be pretty clear if an app was uploading audio with even very basic monitoring tools. Correct me if I'm wrong, however. I'm not denying that a lot of data is likely surreptitiously collected, but I'm talking microp…

How confident or certain are you of what CSME or PSP or some code in TrustZone is doing? How certain are you that not a single piece of software on your machine, be it in the kernel, userland, drivers, is performing some type of surreptitious communication with CSME or PSP or program running in TrustZone? Do you know for sure whether PSP or CSME has ever done DMA, or fingerprinted stack/heap allocation patterns and t…

In my case, I don't currently have any capture software on my main computer at all.

Our routers are Asus, and so I'm able to install tcpdump and log traffic directly without the source device itself knowing anything. This makes it really easy to monitor the traffic of any device, albeit not knowing exactly what it is being sent.

But it is true that I really can't know much more than what tcpdump shows.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#145

Post by anonym29 »

inventor7777 wrote: post #143
anonym29 wrote: post #92

Earlier quoted context omitted.

How confident or certain are you of what CSME or PSP or some code in TrustZone is doing? How certain are you that not a single piece of software on your machine, be it in the kernel, userland, drivers, is performing some type of surreptitious communication with CSME or PSP or program running in TrustZone? Do you know for sure whether PSP or CSME has ever done DMA, or fingerprinted stack/heap allocation patterns and t…

In my case, I don't currently have any capture software on my main computer at all. Our routers are Asus, and so I'm able to install tcpdump and log traffic directly without the source device itself knowing anything. This makes it really easy to monitor the traffic of any device, albeit not knowing exactly what it is being sent. But it is true that I really can't know much more than what tcpdump shows.

Now, how confident are you of all of the above, but instead of for your computer, for your router?

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#146

Post by hulitu »

debazel wrote: post #30
jesterson wrote: post #8

Earlier quoted context omitted.

> is listening to you and siphoning all data on your local network to China. How is it any different from western apps listening to you and siphoning all data on your local network to 3 letter agencies?

There's a massive difference between having a country spying on it's own citizen versus having an adversarial country doing it. The three-letter agencies would likely not be trying to sabotage or destroy their own country's economy and global standing for one.

> There's a massive difference between having a country spying on it's own citizen

Like CIA, NSA, FBI ? Of course there is a difference.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#147

Post by hulitu »

gruez wrote: post #124
jesterson wrote: post #8

Earlier quoted context omitted.

> is listening to you and siphoning all data on your local network to China. How is it any different from western apps listening to you and siphoning all data on your local network to 3 letter agencies?

>How is it any different from western apps listening to you and siphoning all data on your local network to 3 letter agencies? Examples?

Google's Android, Apple's iOS, Microsoft Windows

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#148

Post by Paradigma11 »

nurettin wrote: post #84
Paradigma11 wrote: post #78

Earlier quoted context omitted.

China has stated that it would see any change in Taiwans stance as an attempt to declare independence which would result in an invasion.

Sounds like 5D chess, since Taiwan applied to be the "sole legal government of China" in the UN back in the 50s. (which was rejected) then they rejected the 70s resolution of "two Chinas". So it comes through as ambitious. But I will let the Taiwanese correct me on that.

Yes, the situation was different in the 50s and 70s. But for the last few decades it has been explicit chinese policy that any change of the status quo would lead to an invasion.

Somewhat similar to HongKong where China apologists always bring up that HK never had any democratic autonomy while conveniently not mentioning that China explicitly stated that such would instantly result in an invasion.

Putting a gun to someones head forcing him to say something and then using that against him.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#149

Post by gruez »

hulitu wrote: post #147
gruez wrote: post #124

Earlier quoted context omitted.

>How is it any different from western apps listening to you and siphoning all data on your local network to 3 letter agencies? Examples?

Google's Android, Apple's iOS, Microsoft Windows

That's not a source, just unsubstantiated assertions.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#150

Post by mrkstu »

pyreko wrote: post #142
sheept wrote: post #40

Earlier quoted context omitted.

Taiwan is the country that uses "mainland" (大陸 dalu) to refer to China

HKers also refer to the rest of China with 大陸 from my experience.

Which made sense since they used to be in a somewhat similar situation- not so much anymore, but I’m sure the habit remains…
Post reply on HN