Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

mobile.nytimes.com

Post reply on HN
Print view View original

51–60 of 170 posts

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#51

Post by ralfn »

akerro wrote: post #39

>Security contractors recently discovered preinstalled software in some Android phones that monitors where users go, whom they talk to and what they write in text messages. The American authorities say it is not clear whether this represents secretive data mining for advertising purposes or a Chinese government effort to collect intelligence. We can tell the same about Facebook, Google, Yahoo, Twitter, Uber, Microsof…

Its actually easier to believe this was by accident because in China there is no expectation of privacy.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#53

Post by akerro »

static_noise wrote: post #46
akerro wrote: post #39

>Security contractors recently discovered preinstalled software in some Android phones that monitors where users go, whom they talk to and what they write in text messages. The American authorities say it is not clear whether this represents secretive data mining for advertising purposes or a Chinese government effort to collect intelligence. We can tell the same about Facebook, Google, Yahoo, Twitter, Uber, Microsof…

Somehow the USA manages that almost every key IT corporation has their headquarters in the states sooner or later.

I think that's because market is more mature and people adopt thing quicker, so it's easier to sell more at the beginning of a business.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#54

Post by matt4077 »

captainmuon wrote: post #23
kbart wrote: post #14

Earlier quoted context omitted.

"If your threat model includes a three letter agency, then don't use Android. Full stop. The iPhone is the ecosystem you want." I wouldn't count on that either.. It depends on how "interesting" you are for them, given their reach, I would be really surprised if some of these agencies doesn't have zero-days and/or backdoors stockpiled for high value targets.

Heck, or they even have cooperation from Apple. Apple claims they dont have a backdoor, and the FBI moans that they can't hack current iPhones. But honestly, who can ensure to me that there is no national security letter (or other mechanism I don't know about) forcing Apple to cooperate, with a gag order forcing them to keep silent? Who can ensure me that the NSA et al have are not bribing, blackmailing, or using cou…

If we turn completely cynical and tell everyone that all manufacturers are equal, we take away all incentives for them to actually try to protect their users' privacy.

Apple deserves some recognition for their attempts. At some point they were fighting several lawsuits seeking to protect their users, and were under massive attack by some politicians because one of the cases was a terrorist. That's quite risky – with the current political climate, being associated with one of the parties has the potential to cut your revenue in half.

The FBI may have ultimately gotten the data after buying a zero-day exploit, which is unfortunate. But Apple seemed to be winning in court at that time and the gov may have been quite happy to find a way to drop the lawsuits without losing face.

Apple also uses https://en.wikipedia.org/wiki/Warrant_canary, which may or may not be useful.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#55

Post by andybak »

dandelion_lover wrote: post #21
andrewvijay wrote: post #20

Huawei routers used in Indian govt offices were found to be sending data to China. They were banned after the discovery. Wont be surprised if cellular components that are made in China send back data quietly.

People at HN would appreciate the corresponding links...

I can find references to a ban based on 'security concerns' but not one that found actual evidence of snooping. I only had a brief look however. I too would be grateful to the GP for links.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#56

Post by ralfn »

andrewvijay wrote: post #20

Huawei routers used in Indian govt offices were found to be sending data to China. They were banned after the discovery. Wont be surprised if cellular components that are made in China send back data quietly.

Don't assume malice. This would be considered completely normal in China, both legally and culturally. You would a have hard time explaining the concept of privacy to them. This is likely not some big conspiracy.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#57

Post by jwfxpr »

kbart wrote: post #34
jwfxpr wrote: post #31

Earlier quoted context omitted.

Baseband concerns are legitimate. A good tinfoil hat approach is to use an iPod touch running an end-to-end encrypted messaging/calling app of your choice, connected to a secure hotspot. Cuts out most baseband vulnerabilities (since your data is encrypted before touching any hardware or software connected to a potentially compromised baseband). All other concerns raised elsewhere here still apply, but the baseband th…

"A good tinfoil hat approach is to use an iPod touch running an end-to-end encrypted messaging/calling app of your choice, connected to a secure hotspot." Yes, but it's not much of a phone if it's WiFi only. You could use any laptop for such scenario as well.

You could, though the attack surface on a laptop is arguably much larger than that on an iPod. And considering most security-conscious users are unlikely to use a classical cellular phone call for a sensitive conversation, it's actually pretty comparable to a phone, considering your hotspot can be as dumb as you like. An iPod + a prepaid portable hotspot is a damn sight more usable on the go than a laptop.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#58

Post by anonu »

cmdrfred wrote: post #44
Grazester wrote: post #24

Earlier quoted context omitted.

Custom roms never run stable from my experience and that is why I have stuck with Google Nexus devices in the past. Maybe if the phone is past its supported update lifespan then I would consider custom roms, otherwise I don't want to have to deal with these frustrations on a brand new device.

I have a custom ROM on my oneplus 2, it's smooth like butter.

That's interesting - which ROM are you using?

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#59

Post by QuantumRoar »

bluetwo wrote: post #50
akerro wrote: post #39

>Security contractors recently discovered preinstalled software in some Android phones that monitors where users go, whom they talk to and what they write in text messages. The American authorities say it is not clear whether this represents secretive data mining for advertising purposes or a Chinese government effort to collect intelligence. We can tell the same about Facebook, Google, Yahoo, Twitter, Uber, Microsof…

Consent. The big difference is consent.

Do not use the Internet. Do not use phones. Do not use bank accounts. Do not travel by plane. Do not enter public spaces. Do not show your face.

Otherwise you accept our Terms of Service.

Thank you for trusting us.

(Is it just me or is it actually very hard to figure out whom I've given consent to do something with something that is mine?)

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#60

Post by paradite »

abhianet wrote: post #37

This can also be read outside the states as follows: For about $50, you can get a smartphone with a high-definition display, fast data service and, according to security contractors, a secret feature: a backdoor that sends all your text messages to the USA every few seconds . Security contractors recently discovered preinstalled software in some Android phones that monitors where users go, whom they talk to and what…

This is largely correct but you are wrong about the price.
Post reply on HN