Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

gist.github.com

Post reply on HN
Print view View original

81–90 of 151 posts

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#81

Post by Pay08 »

Crestwave wrote: post #62
djtango wrote: post #6

Earlier quoted context omitted.

How do you sandbox on mobile? I can't say I love having various apps like wechat on my phone...

I quite like Shelter [1]. Shelter apps are installed in a separate work profile, which essentially sandboxes it from the rest of your data. It also has a neat feature to automatically disable (freeze) specific apps and seamlessly re-enable them when you launch them through Shelter. [1] https://github.com/achalmgucker/Shelter

It seems that the repository has moved to https://gitea.angry.im/PeterCxy/Shelter/.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#83

Post by Pay08 »

thenthenthen wrote: post #15
pibaker wrote: post #7

Shits like this is what makes me wary about Chinese made video games proliferating in the west. You never know if your kid's genshing impact or black myth wukong is listening to you and siphoning all data on your local network to China. A competent Western administration would have banned it all years ago. But instead of securing the future of Western civilization, they want detente and cheap plastic goods instead. S…

The new Delta Force is made in China nowadays and apparently scans your whole hdd (for anti cheat).

Isn't that somewhat common in AC software?

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#84

Post by nurettin »

Paradigma11 wrote: post #78
nurettin wrote: post #58

Earlier quoted context omitted.

A bit ambitious, isn't it?

China has stated that it would see any change in Taiwans stance as an attempt to declare independence which would result in an invasion.

Sounds like 5D chess, since Taiwan applied to be the "sole legal government of China" in the UN back in the 50s. (which was rejected) then they rejected the 70s resolution of "two Chinas". So it comes through as ambitious. But I will let the Taiwanese correct me on that.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#85

Post by MadnessASAP »

gkbrk wrote: post #75
jesterson wrote: post #24

Earlier quoted context omitted.

I recall there were quite a few experiments where people use certain keywords heavily just to get closely related ads later on. I can totally relate my experience with it as well. Of course it is inconclusive - but if there is an incentive, management of big companies will venture into it. And chinese management is no different from western ones to that matter.

They don't pick the keywords uniformly randomly from a list of all keywords though. They think they randomly picked something that popped up in their mind, but those keywords are either - stuff they saw online recently — ads or otherwise, which put the keywords in their mind - or stuff they were already interested in recently Not hard to imagine targeting algorithms picking up on either of these

As I tell my friends

You dont see those "coincidental" ads because your phone is listening to you, you see them because your freind showed interest in the product and theirs enough information to infer they talked to you about it. The good news is, your phone isn't listening to you without your consent. The bad news is, because it doesnt need to.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#86

Post by Pay08 »

jesterson wrote: post #13
tatersolid wrote: post #10

Earlier quoted context omitted.

[citation needed] Please stop with the hyperbole. Shit is bad enough; more fake news from any direction doesn’t help.

I am not sure where hyperbole is - if your believe it is "fake news", it's your choice. Do chinese apps make use of all data they can access? Absolutely. Do western apps make use of all data they can access? Absolutely. Both concepts are evil. Talking one is evil while dropping off the other is skew of discussion towards vilifying one side and omitting the subject.

China and Chinese companies flaunt every single law that at all hinders them, IP law being the typical example. The EU has the Privacy Shield agreement with the USA. Such an agreement with China would be effectively impossible, since even if it existed, they'd simply ignore it. People criticise Five Eyes, and for good reason, but it's existence at least means that intelligence agencies are willing to follow domestic law.

Not to mention the use of the word "Western", which is the kind of bullshit I could write a smaller book about.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#87

Post by anonym29 »

Wingman4l7 wrote: post #48
anonym29 wrote: post #34

Earlier quoted context omitted.

The difference is that the Chinese intelligence agencies abide by Chinese law and don't really pose any kind of threat to American citizens, while the American intelligence agencies engage in unconstitutional schemes (as ruled by a federal judge) to illegally spy on Americans and lie about it to both congress and the American people, murder American citizens, and can, at any moment they want, fabricate evidence to pr…

Perhaps because foreign governments with a known antagonistic stance would happily sell or hand over your data in order to cause large-scale economic instability via account attacks, political instability via fostering the prosecution of minority groups (as identified by said data)... get creative. Large-scale data on your enemy's citizenry is a new weapon in the modern arsenal, and we haven't seen anyone really try…

Care to elaborate on "known antagonistic stance"? Is there any evidence that China has ever actually performed any of these types of attacks you're discussing?

"Get creative" might work well for fictional writing exercises, but is it such a sound strategy for assigning guilt? Surely you wouldn't like being prosecuted for crimes that someone "got creative" with in accusing you of, no?

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#88

Post by nandomrumber »

raincole wrote: post #71
nandomrumber wrote: post #57

Earlier quoted context omitted.

I recently downloaded the Soundcloud app for the first time on this iOS device and it said something along the lines of: By continuing you agree to us sharing your data with our 954 partners…

Yeah and that means the data that you share with Soundcloud. It's very different from: > ps aux # Every running process with full arguments If you think these two cases are even remotely comparable, I don't know what to tell you.

> data that you share with Soundcloud.

I’m not in a position, nor do I have the skills, to fully validate exactly what I’m agreeing to. Let us assume that what I’m sharing is merely my app usage data: what I listen to, my likes, follows, comments, usage patterns, etc.

They share this data with 954 “partners” - what exactly does this mean? What other data do those organisations have? Who do they share it with?

I don’t think the average user has any chance of fully understanding what they’re agreeing to.

Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes

#89

Post by sciencejerk »

inventor7777 wrote: post #18
jesterson wrote: post #8

Earlier quoted context omitted.

> is listening to you and siphoning all data on your local network to China. How is it any different from western apps listening to you and siphoning all data on your local network to 3 letter agencies?

I hear this theory being claimed so much, but I don't see any real evidence for it; we have routers that you can monitor traffic on, we have microphone use indicators on mobile, and I would imagine it would be pretty clear if an app was uploading audio with even very basic monitoring tools. Correct me if I'm wrong, however. I'm not denying that a lot of data is likely surreptitiously collected, but I'm talking microp…

we have routers that you can monitor traffic on

Most traffic is encrypted with HTTPS unless you can root every single device you own

we have microphone use indicators on mobile, and I would imagine it would be pretty clear if an app was uploading audio with even very basic monitoring tools.

Complicated smartphone OS, firmware, drivers might have bugs allow overrides of visual indicators.

Companies have also been known to secretly eavesdrop and not tell users before (Apple + Siri https://www.courthousenews.com/judge-approves-95-million-app...)

Post reply on HN