Live data from Hacker News

Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

mobile.nytimes.com

41–50 of 170 posts

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#41
post #26

H guys, I'm one of the researchers with kryptowire if you have any questions

This seems very similar (or perhaps even worse) than the fact pattern in the HTC/Carrier IQ case. https://www.ftc.gov/news-events/blogs/business-blog/2013/02/...

Did you provide the Federal Trade Commission with an advance copy of your report, or just DHS? If not, why not?

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#42

Earlier quoted context omitted.

Sounds great! Does Android 7 run smoothly and stable-y on this device?

Custom roms never run stable from my experience and that is why I have stuck with Google Nexus devices in the past. Maybe if the phone is past its supported update lifespan then I would consider custom roms, otherwise I don't want to have to deal with these frustrations on a brand new device.

YMMV obviously but having used CyanogenMod for the past few years on various devices I've found it to generally exceed the stability of vendor-provided Android. Not to mention the better user experience and more rapid security patching.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#43

Earlier quoted context omitted.

Sounds great! Does Android 7 run smoothly and stable-y on this device?

Custom roms never run stable from my experience and that is why I have stuck with Google Nexus devices in the past. Maybe if the phone is past its supported update lifespan then I would consider custom roms, otherwise I don't want to have to deal with these frustrations on a brand new device.

"Custom roms never run stable from my experience and that is why I have stuck with Google Nexus devices in the past."

Coincidentally enough, the custom ROMs for the N4 and N5 are ubiquitous & surprisingly stable. My N4 running CM 10.1.3 has yet to crash or freeze w/out my fiddling with Privacy Guard(been fiddling with it for 2 years, became daily phone only recently). The Sailfish OS ROM has come a long way and is still actively updated. Sure they're dated & SFOS is somewhat limited(and trust isn't quite on par w/ Maemo) but what else is there? Yeah, Neo900 was an admirable reboot attempt, but roadblocks have put them even further behind the curve.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#44

Earlier quoted context omitted.

Sounds great! Does Android 7 run smoothly and stable-y on this device?

Custom roms never run stable from my experience and that is why I have stuck with Google Nexus devices in the past. Maybe if the phone is past its supported update lifespan then I would consider custom roms, otherwise I don't want to have to deal with these frustrations on a brand new device.

I have a custom ROM on my oneplus 2, it's smooth like butter.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#46
post #39

>Security contractors recently discovered preinstalled software in some Android phones that monitors where users go, whom they talk to and what they write in text messages. The American authorities say it is not clear whether this represents secretive data mining for advertising purposes or a Chinese government effort to collect intelligence. We can tell the same about Facebook, Google, Yahoo, Twitter, Uber, Microsof…

Somehow the USA manages that almost every key IT corporation has their headquarters in the states sooner or later.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#47
You cannot have privacy and security without free/libre software. While such doesn't doesn't guarantee privacy or security, operating systems that make an effort to build the system entirely from source without any proprietary components are much less likely to have a problem like this slip through the cracks of a large, active development community.

Unfortunately, currently the only Android operating system to do this is Replicant, which has terrible hardware support and---due to the sorry state of affairs for mobile---lacks many features requiring proprietary drivers. Cyanogenmod stops short, but would still make situations like this much more difficult.

Even if you don't subscribe to the principles of software freedom, please consider helping out the Replicant project if you know enough about the operating system. I use a Replicant device (S3) and I'd love to see others working to get version 6 out:

http://blog.replicant.us/2016/08/replicant-6-early-work-upst...

We also need reproducible builds of the operating system and its software---again, something that cannot be done without a fully free/libre OS.

Despite increased surveillance on such a vulnerable and enticing target, this doesn't get enough emphasis.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#48

Question for HN: I'm in the market for a new Android phone. If I want to avoid this sort of thing, are there manufacturers I should steer clear of?

> I'm in the market for a new Android phone. Find a phone which has a large community around it, and lots of custom ROMs available. An official Cyanogenmod release is a good sign. It's also a sign that your phone will have a longer usable life than whatever the manufacturer promises you now. Custom ROMs have a long history of extending the life of phones. For example the HTC G1 was abandoned by Google at Donut (1.6)…

I spent a day battling with getting a custom ROM on my Redmi 3 and gave up. In case anyone reads this: Xioami make amazing phones for the price. This $120 USD phone outperforms my S3. But getting a custom ROM on a Xioami is getting increasingly difficult - you have to ask for permission, jump through hoops to unlock the phone and sometimes it just does not work. Xioami is the Apple of China - great UI but increasingly closed ecosystem. Their OS is called MIUI, which is basically Android with more customization options (necessary for the markets they serve). It is a great phone and OS, but it is more complex than just flashing CyanogenMod (unfortunately).

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#50
post #39

>Security contractors recently discovered preinstalled software in some Android phones that monitors where users go, whom they talk to and what they write in text messages. The American authorities say it is not clear whether this represents secretive data mining for advertising purposes or a Chinese government effort to collect intelligence. We can tell the same about Facebook, Google, Yahoo, Twitter, Uber, Microsof…

Consent. The big difference is consent.
Post reply on HN