Live data from Hacker News

Smartphones with Qualcomm chip secretly send personal data to Qualcomm

nitrokey.com

211–220 of 346 posts

Re: Smartphones with Qualcomm chip secretly send personal data to Qualcomm

#211
post #154
post #144

Earlier quoted context omitted.

But worse, it's like being required to own a Tesla because it's the only car available.

And the cameras being integrated so the driving would break if you'd neutralize them.

And the laws are written such that replacing the software responsible for sending the camera feeds back to Tesla with a FOSS equivalent is illegal, because you're less trusted than the spying psychopathic corporation.

Re: Smartphones with Qualcomm chip secretly send personal data to Qualcomm

#212
post #188

Earlier quoted context omitted.

> just no foundation to the claim that there is a backdoor in Teslas for their own use. If it's not for their own use, whose use is it for? It's literally just for their use. They may promise that they won't use that backdoor for purposes that aren't for your benefit, but that's just their promise. And how do they define "for your benefit"? How secure from other attackers that back door is is only one aspect. It's im…

I don't know if we’re arguing semantics or what at this point but it’s not a backdoor if it’s advertised as part of the product that consumers pay for. It’s just a product feature that needs to be secure like any other— frontdoor . If you’re not comfortable with that feature then don’t buy the car. But don’t go spewing certifiable nonsense about how Tesla backdoors your car and steals your personal data for profit. T…

> If you’re not comfortable with that feature then don’t buy the car.

This was the only point I was actually making, yes.

> But don’t go spewing certifiable nonsense about how Tesla backdoors your car and steals your personal data for profit.

Aside from niggles about what constitutes a "back door", I was not doing that.

> There is nothing in their terms or privacy policy that indicates this is happening, and data collection that could expose PII is opt in.

None of that is actually reassuring, but the reason why is a whole other, very large, discussion.

> The way I see it, you’re essentially uncomfortable with Tesla being able to update the software on your system (which is also opt in BTW).

No, I'm uncomfortable with the data connection to Tesla. I'm uncomfortable with their data collection, and I'm uncomfortable with them having any sort of control over the car.

> Do you feel this way about all products that auto-update?

Yes. I consider auto-updating to be harmful. But the reasons why are another long, separate, conversation.

Re: Smartphones with Qualcomm chip secretly send personal data to Qualcomm

#213

This seems like much bigger news than it's being received as. Sure, other chip makers do sketchy things, but is that really where we're at in 2023? We're so beaten down by proprietary user-disrespecting hardware/software that we just shrug it off? This makes me mad. I'm so sick of this type of thing. It's a horrible time too because the embedded 5G chips are about to be part of everything , sending telemetry back abo…

>Imagine if you bought a car from somebody, and they secretly kept a spare key and periodically used your car to run their personal errand. It's worse than that. It's like you bought a house from somebody and they secretly left cameras all over the living room, bedroom, bathroom, and kitchen so they can get 'telemetry' ostensibly to improve the next house they build, for 'safety' in case there's an accident, and to '…

> the covert operating system (AMSS) has complete control over the hardware, microphone and camera. The Linux kernel and deGoogled /e/OS end-user operating system function as a slave on top of the hidden AMSS operating system

So they can also exfiltrate audio and video

Re: Smartphones with Qualcomm chip secretly send personal data to Qualcomm

#214

This seems like much bigger news than it's being received as. Sure, other chip makers do sketchy things, but is that really where we're at in 2023? We're so beaten down by proprietary user-disrespecting hardware/software that we just shrug it off? This makes me mad. I'm so sick of this type of thing. It's a horrible time too because the embedded 5G chips are about to be part of everything , sending telemetry back abo…

to generate more outage, we should change the title to :

Chinese mobile phone Xiaomi R1 spies on it's users

(or any chinese manufacturer using snapdragon 630)

Re: Smartphones with Qualcomm chip secretly send personal data to Qualcomm

#215
post #154
post #144

Earlier quoted context omitted.

But worse, it's like being required to own a Tesla because it's the only car available.

And the cameras being integrated so the driving would break if you'd neutralize them.

You can still drive it. You can’t use autopilot thought

Re: Smartphones with Qualcomm chip secretly send personal data to Qualcomm

#216

This seems like much bigger news than it's being received as. Sure, other chip makers do sketchy things, but is that really where we're at in 2023? We're so beaten down by proprietary user-disrespecting hardware/software that we just shrug it off? This makes me mad. I'm so sick of this type of thing. It's a horrible time too because the embedded 5G chips are about to be part of everything , sending telemetry back abo…

Just imagine what would happen if Qualcomm had a Chinese owner.

It almost did. There was a hostile takeover bid from Broadcom a few years back, and the US gov intervened to block it.

https://www.reuters.com/article/us-qualcomm-m-a-broadcom-tim...

Re: Smartphones with Qualcomm chip secretly send personal data to Qualcomm

#218

Well, Qualcomm just fell off the map. I'll never knowingly use one of their products again.

Good luck though. Even the PinePhone has a Qualcomm, and it is probably one of the most promising devices for privacy.

(that said, I'm not sure this particular service is used, especially if you use a custom firmware which provides an open source replacement to many of the original firmware components. GPS does not work very well until the userspace itself sends an xtra A-GPS file to the modem)

Re: Smartphones with Qualcomm chip secretly send personal data to Qualcomm

#219
post #19

Here is the technical data of what is really going on - it is not sinister, rather these are files needed by the GPS chipset: https://wwws.nightwatchcybersecurity.com/tag/qualcomm/

It may have a reasonable explanation of benefits it provides, but so does Intel Management Engine and nearly every privacy-invading feature ever. I know you didn't personally design it so I'm not asking you these questions, more just thinking through this (although anybody knows the answers I'd appreciate hearing them so I can be more informed). Why does this need to be built in at such a low level that not even flas…

> Why does this need to be built in at such a low level that not even flashing a new OS can see it/stop it?

Nobody has shown evidence of that. The article certainly didn't

Re: Smartphones with Qualcomm chip secretly send personal data to Qualcomm

#220
If they are really compliant with the GDPR they must answer an information request. I just found the policy[1] . I guess I will write my first letter to Korea.. Also I guess I would need my unique id or chipset serial id: does anyone know how to get them? Then i would be all set to request which Qualcomm actually collected on me. Btw, using unencrypted connections allone probably is an easy gdpr violation. Qualcomm seems to have European offices, so I also wonder which national/regional data protection authority would be the right one for a complaint.

Edit: found the policy

[1]https://www.qualcomm.com/site/privacy/services

Post reply on HN