Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Nokia phones sent identifiable data to Chinese server

translate.google.com

Post reply on HN
Print view View original

171–180 of 191 posts

Re: Nokia phones sent identifiable data to Chinese server

#171

Post by kingosticks »

codedokode wrote: post #159
v4n4d1s wrote: post #28

This has to be fixed by HMD and I hope for an official investigation as most other manufacturers are probably doing the same. In the meantime, I recommend the following: 1. Remove any unnecessary packages through ADB ( https://www.xda-developers.com/uninstall-carrier-oem-bloatwa... ) 2. Use Shelter ( https://f-droid.org/en/packages/net.typeblog.shelter/ ) 3. Use a VPN-Firewall such as NetGuard ( https://f-droid.org/e…

You suggest installing userspace apps to control system software that might run in a privileged context. NoRoot Firewall, for example, doesn't control iptables, it just pretends to be a VPN server and privileged software, I assume, can bypass it.

According to the explanation about permissions within NoRoot Firewall itself, any app with the 'Internet' permission can create connections to bypass the VPN. This is how NoRoot Firewall itself works (else the filtered traffic would never escape the app/vpn).

Re: Nokia phones sent identifiable data to Chinese server

#172

Post by diftraku »

wjoe wrote: post #123
atzd4b wrote: post #45

It's shameful of Google (but totally expected) that they don't supervise the Android One program AT ALL. All of the Android One mobiles appear on the top list of their Android One microsite and I'm sure most of them contain malware built-in. https://www.android.com/one/ Having said this, I never expected Nokia to be doing that, too. Both Nokia and HMD are Finnish, do they really need to outsource the creation of the…

Yeah, Android One is a bit of a joke really. I got a Nokia 7 Plus on the promise that it would have fast updates, be bug free, and not contain any OEM modifications. None of those have really been true. Admittedly, updates are still a bit faster than the likes of Samsung and other big OEMs, but the process has shown that it's not as simple as Google rolling out the updates. OEMs still make changes to it, and it still…

One really big bugbears I have with HMD and the firmware updates is absolutely unusable WiFi after they released the January/February security updates for this year.

After installing the security updates, WiFi only works once after a reboot, the moment you disable it, you have to either sludge forward with modem speeds on 2.4GHz-band or none at all if you are on 5GHz-band. Since these problems manifested after installing the security updates, it's slowly starting to point towards a driver/firmware issue instead of a hardware problem as some have speculated.

Some fixes for this are "phantom SIM", resetting WiFi settings or booting into safe mode. Only common thing with these "fixes" is the reboot; so far it is the only thing that will fix the WiFi but turn it off once and you're boned. Similar issues are noticeable with the WiFi AP: first try after boot works just fine, next one you have to try to force 2.4GHz-band on the AP along with 5GHz, causing the AP to "soft reboot". After this, you are very likely in need of a reboot as the AP will no show up.

After this breach of privacy and data security, along with the WiFi issues, I'm slowly starting to lean towards filing a complaint to either HMD or the local customer protection agency here.

Worst of all, the support forum topics I've checked somewhat regularly on have no official replies from HMD or Nokia, only second-hand information from people who have been in touch with support.

Re: Nokia phones sent identifiable data to Chinese server

#173

Post by diftraku »

usr1106 wrote: post #106
atzd4b wrote: post #45

It's shameful of Google (but totally expected) that they don't supervise the Android One program AT ALL. All of the Android One mobiles appear on the top list of their Android One microsite and I'm sure most of them contain malware built-in. https://www.android.com/one/ Having said this, I never expected Nokia to be doing that, too. Both Nokia and HMD are Finnish, do they really need to outsource the creation of the…

HMD is Finnish, but AFAIK they have zero own software development in Finland. Not sure whether it is public knowledge where they buy the SW from. Of course the Google part is known, but I assume the application reported here is not from Google.

The firmware for my 7 Plus is littered with packages named "com.evenwell.*", including the very aggressive powersaving "feature".

Re: Nokia phones sent identifiable data to Chinese server

#174

Post by RandomBacon »

codedokode wrote: post #160
RandomBacon wrote: post #132

Shouldn't this be something that the NSA looks into and prevents? The NSA works with US companies to secure their systems from espionage. Shouldn't the NSA be analyzing consumer electronics to make sure they don't spy on US citizens, some of which will have sensitive information or trade secrets on their phones?

It seems that some companies do not like to be "secured" by NSA, according to the article [1] [1] https://www.wired.com/2013/10/nsa-hacked-yahoo-google-cables...

'Do as I say, not as I do'?

Aren't those companies tryig to get all the information they can about us?

Perhaps they don't want to be "secured" because it costs money to do so.

Re: Nokia phones sent identifiable data to Chinese server

#175

Post by molinwow »

yorwba wrote: post #137

I did some research on zzhc.vnet.cn and what its purpose might be. Zzhc is probably an abbreviation of 自注册, meaning self-registration. There is plenty of documentation (in Chinese) on how to implement it (e.g. [1]), but so far I haven't been able to figure out what it's actually good for. You can find implementations by Qualcomm and Mediatek on GitHub, the Mediatek one even comes with a minimal README [2]. That seems…

https://www.jianshu.com/p/6d257f83ecf8

江苏某项目采用CAT1模块做模块补贴，补贴中自注册失败，后经排查发现如下在补贴自注册中的几个共性问题：1、终端客户采购模块与模块厂家到广研送检模块和软件版本不一致；2、补贴受理中，如果是定向的，需要增加自注册的IP地址zzhc.vnet.cn IP:42.99.2.15；3、补贴受理时需开通4G功能。

Re: Nokia phones sent identifiable data to Chinese server

#176

Post by molinwow »

yorwba wrote: post #137

I did some research on zzhc.vnet.cn and what its purpose might be. Zzhc is probably an abbreviation of 自注册, meaning self-registration. There is plenty of documentation (in Chinese) on how to implement it (e.g. [1]), but so far I haven't been able to figure out what it's actually good for. You can find implementations by Qualcomm and Mediatek on GitHub, the Mediatek one even comes with a minimal README [2]. That seems…

More articles about "补贴", from same user, https://www.jianshu.com/u/3bff037f7a8b .

I assume the android implementation was done in China, then many requirements are related with "补贴", it is just part of them to submit some data to zzhc.vnet.cn. But didn't get deleted when they are making EU variants.

Re: Nokia phones sent identifiable data to Chinese server

#177

Post by apta »

arsenico wrote: post #100
quickthrower2 wrote: post #64

Earlier quoted context omitted.

This is exactly why I am back on iPhone. I have had enough of unremovable shitware. I also value the simplicity of getting basic things done such as Bluetooth pairing. Stuff seems easier. The only thing slightly worse on iPhone is google 2fa, because it needs to use the gmail app.

> google 2fa, because it needs to use the gmail app you mean the Google app, right? Not the GMail one.

Not the original poster, but yes you're right

Re: Nokia phones sent identifiable data to Chinese server

#178

Post by dang »

spacesuitman2 wrote: post #151
chvid wrote: post #128

Earlier quoted context omitted.

Why is there a Chinese flag in the article and not a Finnish flag? Because it gives more attention. The real story here is that the venerable brand of Nokia now is being used to sell sub-quality phones.

Because China is a totalitarian country that is a threat to free societies. You must be a chinese psyop

Comments like this are a bannable offense on HN. Three ways actually: nationalistic flamewar, personal attack, and insinuation of astroturfing. Please don't do any of these here again.

https://news.ycombinator.com/newsguidelines.html

Re: Nokia phones sent identifiable data to Chinese server

#179

Post by londons_explore »

mda wrote: post #27
culturestate wrote: post #19

Earlier quoted context omitted.

People inside China are very aware of it; most just don't care that much. They (willingly, if not happily) trade what westerners might consider pillars of freedom for widespread prosperity. When you consider the progress China has made over the last 50 years from the perspective of a typical Chinese citizen, you can see why they make that bargain.

I hear this often, but it kinda implies they prospered because they had this obnoxious rules, i fail to see if this is actually true. Wouldn't they still be better without this tyranical bullshit?

Imagine there were no strict rules.

There would now be political rallies, protests, different factions of people wanting different things, etc.

That distracts from economic progress.

It's fairly clear to me that in many cases freedom of speech and similar rights leads to less stability and less economic growth.

Re: Nokia phones sent identifiable data to Chinese server

#180

Post by LoneWolf »

cknight wrote: post #68
rrtwo wrote: post #61

How can I check if my phone is emitting these packets?

Install NoRoot Firewall as HenryBemis mentioned, it's on the Play store. The app tells you what IP addresses apps are trying to communicate with in a fairly neat and simple way. I've just installed it on my 6.1 Plus. Nothing sus yet but it's only been 5 minutes.

I did install it too on my 6.1 and found the System app trying to connect to several cloudfront IPs, cant find any kind of extra info, did you find the same?
Post reply on HN