Earlier quoted context omitted.
I was stupid enough to buy a Xiaomi phone without enough due diligence. Aside from all spying that is going on, the software is abysmal. The problem with replacing the OS is that I believe most banking apps I use will stop working. Might just need to write this phone off.
Banking has to be the dumbest "security" industry there is. Restrict apps, but can still log in via browser. I have one bank app that actually says to screenshot a payment screen for your records, while blocking screenshots via app policy.
Lithuania says throw away Chinese phones due to censorship concerns
321–330 of 427 posts
Re: Lithuania says throw away Chinese phones due to censorship concerns
#322Earlier quoted context omitted.
Given the erosion in the bill of rights here, I suspect things are on a similar playing field. The main difference is the US government only censors using indirect means or by attacking the providers of information like Julian Assange. Did we forget that the NSA is collecting most of the traffic on the internet?
> Given the erosion in the bill of rights here, I suspect things are on a similar playing field. Not even close. Ready? Joe Biden is suffering from worsening dementia. It was obvious before he took office. He's incompetent for the office. His aids constantly have to protect him from the public spectacle of his declining mental condition. The media also constantly does their part to artificially shield him. Biden was…
Re: Lithuania says throw away Chinese phones due to censorship concerns
#323Whole report is worth a read, but page 22 is where this "censorship" is discussed. Given this is HN I think some of you would be interested in the technical specifics in order to give a proper, informed opinion here.
The censorship involves blocking certain personalized ads within some of the core Xiao Mi apps by filtering political keywords. The keywords are all in mandarin, so ads that would be blocked would be Chinese ads. The list of keywords seems to be controversial political statements or news organization based on the report, including a pro china newspaper. The code is only run in China regions, but is stored on all these phones. Technically a standard software update could modify the code to remove that block.
I understand concerns about censorship are high, but logically I don't see the concern here; that is if you're not in mainland China. If you're in mainland China the wrong personalized ad can get you into trouble so this very elementary ad censorship is necessary, but this is about the EU region. It's bold to assume they'd allow this to be run in other regions after the user updated the apps, there's just no reason too, nor is there anything particularly invasive or malicious going on here that is different from other smart phones, based on the technical report.
Re: Lithuania says throw away Chinese phones due to censorship concerns
#324Earlier quoted context omitted.
I was stupid enough to buy a Xiaomi phone without enough due diligence. Aside from all spying that is going on, the software is abysmal. The problem with replacing the OS is that I believe most banking apps I use will stop working. Might just need to write this phone off.
This is why I still have my iPhone around. I know that one day my banking apps will just stop working. For now, Magisk Hide does the job. Next time when I'll be looking for a new Android phone to buy, stock Android will be a hard requirement. I was stupid to pick my Xiaomi phone for it's hardware, I should've just gone with a Motorola.
Re: Lithuania says throw away Chinese phones due to censorship concerns
#325Earlier quoted context omitted.
And based on recent discoveries it sounds like Xiaomi should be trusted less than others.
As stupid as it might sound, I do trust Pixel phones, and an hypothetical iPhone running a different OS, the most of all alternatives. If one want's a smartphone, if not just take a 20+ year old dumb phone. Or BlackBerry.
Re: Lithuania says throw away Chinese phones due to censorship concerns
#326Earlier quoted context omitted.
Banking has to be the dumbest "security" industry there is. Restrict apps, but can still log in via browser. I have one bank app that actually says to screenshot a payment screen for your records, while blocking screenshots via app policy.
Bank websites in some (developed, European) countries restrict you to 6-8 digit passwords (not alphanumeric), and don't have a 2FA option like Facebook or Google do. It's a massive joke.
Re: Lithuania says throw away Chinese phones due to censorship concerns
#327From the shared PDF page 23... "It has been established that during the initialisation of the system applications factory-installed on a Xiaomi Mi 10T device, these applications contact a server in Singapore at the address globalapi.ad.xiaomi.com (IP address 47.241.69.153) and download the JSON file MiAdBlacklistConfig, and save this file in the metadata catalogues of the applications. A list of applications for whic…
Is it me or is this an extremely clumsy way of doing censorship? Why not do this at network or server-side level? Why not use some kind of hash (ala Apple'e proposed child pornography hunter)? In this design, everyone would have to have this plain text configuration file ... also other brands (Oppo, Huawei etc.) would have to have it. What if it needs an update? Suppose the hui muslims starts causing trouble ... Or i…
China doesn’t control the network/servers in Lithuania and other countries. Doing it client-side gives them the power to extend their reach.
Re: Lithuania says throw away Chinese phones due to censorship concerns
#328Earlier quoted context omitted.
Is it me or is this an extremely clumsy way of doing censorship? Why not do this at network or server-side level? Why not use some kind of hash (ala Apple'e proposed child pornography hunter)? In this design, everyone would have to have this plain text configuration file ... also other brands (Oppo, Huawei etc.) would have to have it. What if it needs an update? Suppose the hui muslims starts causing trouble ... Or i…
I guess it comes down to, why bother when the simplest solution works ? Make no mistake: As and when they get caught out doing such things, the sophistication of their implementation is bound to increase, in response to it. Money is no object for state-actors and mega-corps.
You're right about this, including with backdoors. Electronics from China must be treated as treacherous computing devices that obey the orders of the Chinese Communist Party.
If the West was sensible, we simply wouldn't buy any electronics from them.
Re: Lithuania says throw away Chinese phones due to censorship concerns
#329Earlier quoted context omitted.
Not to sound paranoid, but won't even LinageOS phones have to run closed-sourced firmware and drivers?
Correct, its entirely possible they could be doing more insidious stuff at the firmware level, but dumb keyword checking is almost certainly implemented in userspace. I don't think you can trust any proprietary firmware out there, its just a question of which you trust less than the others.
Simple. I do not "trust less". I just do not trust. My phone is a phone. No Internet activity. I spend enough time in front of my desktop, dragging another computer anywhere I go is the last thing on my mind.
Re: Lithuania says throw away Chinese phones due to censorship concerns
#330Earlier quoted context omitted.
I guess it comes down to, why bother when the simplest solution works ? Make no mistake: As and when they get caught out doing such things, the sophistication of their implementation is bound to increase, in response to it. Money is no object for state-actors and mega-corps.
> the sophistication of their implementation is bound to increase You're right about this, including with backdoors. Electronics from China must be treated as treacherous computing devices that obey the orders of the Chinese Communist Party. If the West was sensible, we simply wouldn't buy any electronics from them.