Live data from Hacker News

OnePlus Is Again Sending User Data to a Chinese Company Without User Consent

twitter.com

21–30 of 47 posts

Re: OnePlus Is Again Sending User Data to a Chinese Company Without User Consent

#22
post #11
post #8

Earlier quoted context omitted.

If you're in the UK. Some of us Yanks aren't too happy with the state of things either, and don't have people looking out for us. /rant

*EU, the UK won't be part of the GDPR for long enough that it'd have relevant effects.

The UK is implementing GDPR in full in UK law.

Re: OnePlus Is Again Sending User Data to a Chinese Company Without User Consent

#23
post #17
post #13

Earlier quoted context omitted.

That sounds nice in theory, but in a global setting, how will it really work? Per GP comment, there is a whole tech stack of N providers, each piece made or running in a different country, pushing data to servers in another country, which data is bought by interests in a third country, for M destinations. Then you get the providers who intentionally don't store data in GDPR countries specifically so they can avoid th…

The GDPR applies extraterritorially. If a company even stores a record of a single EU citizen, the GDPR applies to it, and the EU has the right to seize the assets of the company for the purpose of enforcing it.

>The GDPR applies extraterritorially.

Yeah. Good luck with that.

It'll work for the big, entrenched companies like Facebook who couldn't bear to be without its UK customers, for example. But I don't see the EU successfully going after every little dot-com startup from Alabama to Angola, many of them in jurisdictions that barely have a functioning legal system, let alone respect for EU law.

If such extraterritorial enforcement was actually possible, there would be no 419 scammers.

Re: OnePlus Is Again Sending User Data to a Chinese Company Without User Consent

#24
post #10

How do we remove this? I'm getting quite tired of one plus. This is the third strike against them in at least the last 6 months. Anyone has good experience with a custom rom on a one plus 5?

I'm having good luck with the most recent Dirty Unicorns RC.

https://plus.google.com/+JoshChasky/posts/4B9q3PqgrVx

Re: OnePlus Is Again Sending User Data to a Chinese Company Without User Consent

#25
post #16

Why does it matter whether the company is Chinese or not? Isn't it bad enough that there's a background process running, unbeknownst to the user, and presumably uncontrollable by the user, that monitors the device's clipboard and has methods like containsBankAccount(String)?

Sure it's bad but there are a couple of reasons why it matters that it's a Chinese company. 1. It feeds into the suspicion many have that many (most? all?) large Chinese companies are effectively controlled by the Chinese government. This could go as far as having backdoors in, say, Huawei routing equipment. 2. Effectively disclosing a user's personal information to the Chinese government could, in some cases, imperi…

>It feeds into the suspicion many have that many (most? all?) large Chinese companies are effectively controlled by the Chinese government.

All is the correct answer. Just like it's not legal to own property in China, all companies are ultimately owned and controlled by the Chinese government. They have shiny, pretty, Western-looking front ends to attract foreign investment, but from a strictly legal standpoint, they're all owned by the government.

For some reason people forget that China is still a communist country. Nothing's changed other than it's gone from exporting rice to exporting phones.

Re: OnePlus Is Again Sending User Data to a Chinese Company Without User Consent

#26
post #18

Notice how there is actually no proof at all in these tweets. The author admits that they could not observe any network requests being made: > I didn't manage to trigger the network communications to the teddymobile servers but I will continue later. It looks to me like this person is cherrypicking random SDK methods that may seem suspicious out of context and making very wild assumptions of their purposes. For examp…

Playing devil's advocate here, we don't know the conditions of usage. It could be just inactive, or become active after X date or whatever other condition they wish. Speculating on use/non-use is a bit pointless until someone analyzes these in-depth.

What we do know is the intent of those functions, and it paints a quite horrible image.

Re: OnePlus Is Again Sending User Data to a Chinese Company Without User Consent

#28
post #10

How do we remove this? I'm getting quite tired of one plus. This is the third strike against them in at least the last 6 months. Anyone has good experience with a custom rom on a one plus 5?

I've been using Lineage on my oneplus 3 for some time, and it's very stable. https://wiki.lineageos.org/devices/cheeseburger

Re: OnePlus Is Again Sending User Data to a Chinese Company Without User Consent

#29

And what penalty will the company suffer? Virtually none.

This is one of the cases where they will probably suffer if any of this turns out to be true. OnePlus is a small manufacturer with a following of enthusiasts. They aren't large or popular enough to PR their way out of this.

Re: OnePlus Is Again Sending User Data to a Chinese Company Without User Consent

#30

On one hand, if you live in the USA maybe it's better that a Chinese company spies on you, because they're far away and the government/other gangsters are less likely to care about you than about local people involved in local politics etc. On the other hand, there's no guarantee your data isn't also made available to domestic parties, either as it's intercepted in transit or explicitly shared in bulk in exchange for…

> On one hand, if you live in the USA maybe it's better that a Chinese company spies on you

It depends on who the "you" is.

If it's a couple of internet nobodies like you and me that China is spying on, then it's no big whoop. But if the "you" in question is someone who works at the Pentagon, or at a defense contractor, or a diplomat, or government official, then there's a problem.

Post reply on HN