Live data from Hacker News

Xiaomi Recording ‘Private’ Web and Phone Use

forbes.com

61–70 of 254 posts

Re: Xiaomi Recording ‘Private’ Web and Phone Use

#61

Earlier quoted context omitted.

If you are a native English speaker kudos for writing "huevos" and not "Cahones" or other of its similar cringy misspellings. But 90% chance you are from the south cone so carry on.

my brain's classifier would predict upon hearing just huevos => mexican spanish. i'd imagine southern cone speakers would say pelotas, but might be way off here.

I disagree.

Re: Xiaomi Recording ‘Private’ Web and Phone Use

#62
post #10

The fucking huevos on Forbes to publish this article alongside the most godawful CCPA opt-out flow I've seen yet... Clicking the "do not sell my info" link takes you to a page where it asks you for your personal information to request to opt out... with the fine print telling you that you can actually opt out by going back to the previous dialog, selecting more info, then selecting one of the three cookie sections (w…

https://archive.md/rhr59

Re: Xiaomi Recording ‘Private’ Web and Phone Use

#63

Just wait till they: - start encrypting all the data they collect (with real encryption, not base64 encoding) - saving up the data for hours or days at time and sending it in bursts (so there is no immediate connection to a remote server) - sending the data to plausible U.S.-registered domains (rather than to Singapore and Russia) - monitoring at the kernel or firmware level so that it doesn't matter what browser or…

> due to signs of debuggers, development tools, network monitoring, usual network settings like to proxies or DNS, etc

Then that's your counter measure... run a debugger 24/7.

Re: Xiaomi Recording ‘Private’ Web and Phone Use

#64

Before you go shaming those bad, bad Chinese companies, imagine my surprise when I restored my Apple iPhone from iCloud only to find my (always set to private!) Safari back there with every tab I ever opened.

I sincerely doubt the veracity of your claim.

Re: Xiaomi Recording ‘Private’ Web and Phone Use

#65
post #4

I recently wiped my factory-unlocked Samsung S20, enabled debug mode, and ran "pm list packages" over ADB. The results were beyond startling. There were close to 100 packages running under com.samsung and other various namespaces with tons of sensitive permissions. Most of these processes I could not identify what they existed for. And I still can't figure out why a freshly wiped unlocked phone w/ a Sprint SIM is run…

I wonder if it is illegal under GDPR to include spying apps on phones without telling the user.

It is, there is no doubt about that.

Re: Xiaomi Recording ‘Private’ Web and Phone Use

#66

Just wait till they: - start encrypting all the data they collect (with real encryption, not base64 encoding) - saving up the data for hours or days at time and sending it in bursts (so there is no immediate connection to a remote server) - sending the data to plausible U.S.-registered domains (rather than to Singapore and Russia) - monitoring at the kernel or firmware level so that it doesn't matter what browser or…

I wonder how many devices already do this.

Re: Xiaomi Recording ‘Private’ Web and Phone Use

#67

On a Xiaomi device myself. Recently I've setup Nextdns.io to resolve all the DNS requests through it. Very frequent callbacks to Xiaomi servers for tracking. Blocked a bunch of them now, but it's half a solution.

I have a xiaomi rednote 8, how to block more privacy leaks?

Re: Xiaomi Recording ‘Private’ Web and Phone Use

#68

On a Xiaomi device myself. Recently I've setup Nextdns.io to resolve all the DNS requests through it. Very frequent callbacks to Xiaomi servers for tracking. Blocked a bunch of them now, but it's half a solution.

Other than the tracking, would you recommend it? Is LineageOS available? I've been curious about trying a Chinese phone for a while, but would only do it if Lineage is available, since I'm annoyed by anything more busy than stock Android.

I have lineage on my xiaomi.

The bootloader is locked by default but if you ask for it to be unlocked they will do it. The process is intentionally manual to prevent hacking, but ultimately smooth.

Re: Xiaomi Recording ‘Private’ Web and Phone Use

#69

I know apple keeps on getting headlines for breaking privacy (and also making phones that supposedly get thrown away because they don't have right to repair) My own sense is android phones are MUCH less private and secure AND have much shorter useful lives.

> I know apple keeps on getting headlines for breaking privacy

Seems like they're mostly in the news for the exact opposite.

Re: Xiaomi Recording ‘Private’ Web and Phone Use

#70

Earlier quoted context omitted.

This is why, without fail, I buy iPhones.

With the Bootloader exploit on iPhone X and older, its actually worth looking at them now.

Checkm8 is a tethered exploit, so probably not super useful if you want to sideload another OS and not have a bad time.
Post reply on HN