Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

mobile.nytimes.com

Post reply on HN
Print view View original

91–100 of 170 posts

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#91

Post by e40 »

codedokode wrote: post #86

I have a chinese Android phone. Instead of connecting it to the Internet I connected it to my computer over bluetooth and started monitoring the traffic it tried to send. There were attempts to connect to Google servers and chinese manufacturer's servers. The data sent to China was supposed to contain sensitive information like phone number or SIM card identifier. It also has an auto-update (read: backdoor) feature t…

As a consumer I am very disappointed and feel being deceived by Google.

Why Google and not the maker of the phone? They're the ones that wrote the backdoor that sent stuff to China. You're not suggesting that Google helped with that, are you?

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#92

Post by codedokode »

mbgaxyz wrote: post #89
codedokode wrote: post #86

I have a chinese Android phone. Instead of connecting it to the Internet I connected it to my computer over bluetooth and started monitoring the traffic it tried to send. There were attempts to connect to Google servers and chinese manufacturer's servers. The data sent to China was supposed to contain sensitive information like phone number or SIM card identifier. It also has an auto-update (read: backdoor) feature t…

Are there are any consumer protection laws that would help here, for example, to obtain a full refund if it is proven that a manufacturer and retailer sold you a product full of spyware?

I am not a lawyer. Ususally consumer protection laws protect only from not providing advertised features. There might be something related to privacy laws but I am not sure how they work internationally.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#93

Post by paradite »

codedokode wrote: post #86

I have a chinese Android phone. Instead of connecting it to the Internet I connected it to my computer over bluetooth and started monitoring the traffic it tried to send. There were attempts to connect to Google servers and chinese manufacturer's servers. The data sent to China was supposed to contain sensitive information like phone number or SIM card identifier. It also has an auto-update (read: backdoor) feature t…

Where did you buy that phone from and what brand was it?

I was under the impression that US does not allow selling of Android phones from most Chinese brands due to the reasons you mentioned, and for those that all allowed, they have strict vetting procedures to prevent phones with such capabilities from reaching the US market?

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#94

Post by code_duck »

kutkloon7 wrote: post #75

What's the big deal? Google does this on a much bigger scale and of course shares its data with the US government when asked. Why is it suddenly scary when a Chinese company does the same?

Either Google or an unknown company in another country could do something unwelcome with my data. However the type of thing either entity may do with it differs. For instance, unknown actors controlling malware on your phone might misuse banking or social media credentials to steal my money or post spam. Google is unlikely to do that.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#95

Post by codedokode »

e40 wrote: post #91
codedokode wrote: post #86

I have a chinese Android phone. Instead of connecting it to the Internet I connected it to my computer over bluetooth and started monitoring the traffic it tried to send. There were attempts to connect to Google servers and chinese manufacturer's servers. The data sent to China was supposed to contain sensitive information like phone number or SIM card identifier. It also has an auto-update (read: backdoor) feature t…

As a consumer I am very disappointed and feel being deceived by Google. Why Google and not the maker of the phone? They're the ones that wrote the backdoor that sent stuff to China. You're not suggesting that Google helped with that, are you?

Google could provide easy ways to control Internet traffic and to gain root access. For example, they could grant access to builtin linux iptables which doesn't cost anything to implement. And Google is easier to influence than noname chinese company.

Or they could not to sell Android license to companies not repecting consumer's privacy.

Even if I got refunded, what would I buy instead? Free market doesn't work here and all major manufacturers have some form of tracking and preinstalled software built in. It looks like the only way is to buy a backdoored proprietary device and replace a ROM (and then solve all kinds of problems with hardware not working properly or battery getting drained).

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#96

Post by code_duck »

freddref wrote: post #52

If we don't really object to sharing our data with a wide range of u.s. companies, why would we care if it is shared with China or anyone else also?

Chinese companies are harder to monitor and learn about. More importantly, they are not bound by and/or are unlikely to follow any data privacy laws.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#97

Post by codedokode »

paradite wrote: post #93
codedokode wrote: post #86

I have a chinese Android phone. Instead of connecting it to the Internet I connected it to my computer over bluetooth and started monitoring the traffic it tried to send. There were attempts to connect to Google servers and chinese manufacturer's servers. The data sent to China was supposed to contain sensitive information like phone number or SIM card identifier. It also has an auto-update (read: backdoor) feature t…

Where did you buy that phone from and what brand was it? I was under the impression that US does not allow selling of Android phones from most Chinese brands due to the reasons you mentioned, and for those that all allowed, they have strict vetting procedures to prevent phones with such capabilities from reaching the US market?

The manufacturer's name is Shenzhen Huafurui Technology if it tells you anything. The brand name is Cubot. I do not live in US but one can buy such kind of phone on Amazon (if you search manufacturer's name there you can find it is even cheaper now).

It is good to hear that in some countries importing such phones is not allowed.

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#98

Post by fzzzy »

paradite wrote: post #93
codedokode wrote: post #86

I have a chinese Android phone. Instead of connecting it to the Internet I connected it to my computer over bluetooth and started monitoring the traffic it tried to send. There were attempts to connect to Google servers and chinese manufacturer's servers. The data sent to China was supposed to contain sensitive information like phone number or SIM card identifier. It also has an auto-update (read: backdoor) feature t…

Where did you buy that phone from and what brand was it? I was under the impression that US does not allow selling of Android phones from most Chinese brands due to the reasons you mentioned, and for those that all allowed, they have strict vetting procedures to prevent phones with such capabilities from reaching the US market?

Where on earth did you get that impression?

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#99

Post by dopamean »

paradite wrote: post #93
codedokode wrote: post #86

I have a chinese Android phone. Instead of connecting it to the Internet I connected it to my computer over bluetooth and started monitoring the traffic it tried to send. There were attempts to connect to Google servers and chinese manufacturer's servers. The data sent to China was supposed to contain sensitive information like phone number or SIM card identifier. It also has an auto-update (read: backdoor) feature t…

Where did you buy that phone from and what brand was it? I was under the impression that US does not allow selling of Android phones from most Chinese brands due to the reasons you mentioned, and for those that all allowed, they have strict vetting procedures to prevent phones with such capabilities from reaching the US market?

Have you not heard of OnePlus?

Re: Secret Backdoor in Some U.S. Phones Sent Data to China, Analysts Say

#100

Post by hx87 »

codedokode wrote: post #95
e40 wrote: post #91

Earlier quoted context omitted.

As a consumer I am very disappointed and feel being deceived by Google. Why Google and not the maker of the phone? They're the ones that wrote the backdoor that sent stuff to China. You're not suggesting that Google helped with that, are you?

Google could provide easy ways to control Internet traffic and to gain root access. For example, they could grant access to builtin linux iptables which doesn't cost anything to implement. And Google is easier to influence than noname chinese company. Or they could not to sell Android license to companies not repecting consumer's privacy. Even if I got refunded, what would I buy instead? Free market doesn't work here…

> Google could provide easy ways to control Internet traffic and to gain root access. For example, they could grant access to builtin linux iptables which doesn't cost anything to implement. And Google is easier to influence than noname chinese company.

And the manufacturer could simply unroot the phone and lock its bootloader. At the end of the day it's the phone manufacturer that controls the product, even if Google tries to prohibit such practices in its contracts.

Post reply on HN