Motorola cell phones are regularly phoning home

Post by D9u » Tue, Jul 02, 2013, 1:34 AM UTC

D9u wrote: post #40

wfraser wrote: post #35

Earlier quoted context omitted.

Did you even read the article? It has nothing to do with EAS or Microsoft; it's Motorola software siphoning pretty much all the user's credentials off to Motorola servers.

Yes, I did read the article in its entirety. Did you? The author mentions ActiveSync more than once. *" What I am going to do as a result of this discovery As of 23 June 2013, I've removed my ActiveSync configuration from the phone, because I can't guarantee that proprietary corporate information isn't being funneled through Motorola's servers. I know that some information (like the name of our ActiveSync server, our…

    *" I was quickly able to determine that the connections to Motorola were triggered every time I updated the ActiveSync configuration on my phone, and that the unencrypted HTTP traffic contained the following data:

    The DNS name of the ActiveSync server (only sent when the configuration is first created).
    The domain name and user ID I specified for authentication.
    The full email address of the account.
    The name of the connection.

    As I looked through more of the proxy history, I could see less-frequent connections in which larger chunks of data were sent - for example, a list of all the application shortcuts and widgets on my phone's home screen(s)."*

Post by mikelward » Tue, Jul 02, 2013, 2:20 AM UTC

javert wrote: post #11

[deleted] wrote: post #7

[deleted]

> Fortunately, I already removed most of those apps when I first got the phone (it was loaded with enough bloatware), Lucky you. I can't remove, for example, my NFL application (which came installed by default), without rooting the phone. I do enough Linux stuff everyday that I really don't want to bother with it on my phone. Honestly, this kind of stuff makes me want to get as far away from engineering as possible.…

Post by inoop » Tue, Jul 02, 2013, 2:30 AM UTC

antoncohen wrote: post #13

I noticed that my Droid 4 running 4.1.2 was opening an XMPP connection to Motorola servers a month ago. I was watching the logs trying to diagnose another problem, and the XMPP connection happened to be failing at the time. The XMPP connection is no longer failing. D/CheckinProvider( 507): insertEvents Process tag not allowed: XMPPConnection I/XMPPConnection( 772): Preparing to connect user XXXXXXXXXXX to service: ja…

Post by jacalata » Tue, Jul 02, 2013, 2:44 AM UTC

D9u wrote: post #66

bskap wrote: post #64

Earlier quoted context omitted.

The author originally noticed the snooping because he happened to be examining the phone's traffic when the ActiveSync credentials were sent. If you actually read the entire article, you'll notice that credentials were sent for Exchange, Facebook, Twitter, Photobucket, Picasa, YouTube, IMAP, POP, Yahoo Mail, and Flickr. Of those, the Microsoft and Yahoo services are the only ones where passwords are NOT sent, meaning…

So what is the name of the software which is sending the information, if it's not ActiveSync?

Post by ww520 » Tue, Jul 02, 2013, 3:06 AM UTC