Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

mobile.nytimes.com

Post reply on HN
Print view View original

31–40 of 170 posts

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#31

Post by jwfxpr »

kbart wrote: post #3
Tarrosion wrote: post #2

Question for HN: I'm in the market for a new Android phone. If I want to avoid this sort of thing, are there manufacturers I should steer clear of?

Get a phone that supports CyanogenMod. Sure, baseband still remains a blackbox and possibly backdoored, but at least you can get rid of most spyware/adware that comes preinstalled with Android. While we don't have fully open source OS with open drivers for smartphones, you cannot trust any manufacturer.

Baseband concerns are legitimate. A good tinfoil hat approach is to use an iPod touch running an end-to-end encrypted messaging/calling app of your choice, connected to a secure hotspot. Cuts out most baseband vulnerabilities (since your data is encrypted before touching any hardware or software connected to a potentially compromised baseband).

All other concerns raised elsewhere here still apply, but the baseband threat is mitigated. Worth it...? Check that threat model again.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#32

Post by dandelion_lover »

kbart wrote: post #22
mnw21cam wrote: post #19

Earlier quoted context omitted.

Or simply skip that step and get a phone that comes with CyanogenOS installed.

How do you know then that CyanogenOS itself was not modified to include unwanted software?

I guess one could believe the commercial companies whose revenue depends on the trust and on the ethics, such as https://tehnoetic.com/mobile-devices.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#33

Post by dandelion_lover »

aluhut wrote: post #30
dandelion_lover wrote: post #6

Earlier quoted context omitted.

The only good choice may be https://neo900.org .

> 990 EUR Before taxes (VAT, etc.) So this is the threshold I'll have to pass to get a chance for true privacy? A throw-away phone without ID bound to it would be my way to go then.

We have to start somewhere. I am asking anyone who can to go for it (I have no connection to this company). We can hope that later it will become more affordable.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#34

Post by kbart »

jwfxpr wrote: post #31
kbart wrote: post #3

Earlier quoted context omitted.

Get a phone that supports CyanogenMod. Sure, baseband still remains a blackbox and possibly backdoored, but at least you can get rid of most spyware/adware that comes preinstalled with Android. While we don't have fully open source OS with open drivers for smartphones, you cannot trust any manufacturer.

Baseband concerns are legitimate. A good tinfoil hat approach is to use an iPod touch running an end-to-end encrypted messaging/calling app of your choice, connected to a secure hotspot. Cuts out most baseband vulnerabilities (since your data is encrypted before touching any hardware or software connected to a potentially compromised baseband). All other concerns raised elsewhere here still apply, but the baseband th…

"A good tinfoil hat approach is to use an iPod touch running an end-to-end encrypted messaging/calling app of your choice, connected to a secure hotspot."

Yes, but it's not much of a phone if it's WiFi only. You could use any laptop for such scenario as well.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#37

Post by abhianet »

This can also be read outside the states as follows:

For about $50, you can get a smartphone with a high-definition display, fast data service and, according to security contractors, a secret feature: a backdoor that sends all your text messages to the USA every few seconds.

Security contractors recently discovered preinstalled software in some Android phones that monitors where users go, whom they talk to and what they write in text messages. The authorities say it is not clear whether this represents secretive data mining for advertising purposes or a government effort to collect intelligence.

[EDIT: Fixed formatting]

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#39

Post by akerro »

>Security contractors recently discovered preinstalled software in some Android phones that monitors where users go, whom they talk to and what they write in text messages. The American authorities say it is not clear whether this represents secretive data mining for advertising purposes or a Chinese government effort to collect intelligence.

We can tell the same about Facebook, Google, Yahoo, Twitter, Uber, Microsoft, Visa, AmericanExpress...

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#40

Post by McKayDavis »

duked wrote: post #26

H guys, I'm one of the researchers with kryptowire if you have any questions

From the article: "Kryptowire took its findings to the United States government. It plans to make its report public as early as Tuesday."

Can you share the report yet?

Post reply on HN