I am curious how the author of the GitHub gist managed to figure all this out. Any ideas?
You can use fsevents to see which apps write where and firewalls will tell you which app is connecting to the internet.
MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes
91–100 of 151 posts
Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes
#92Earlier quoted context omitted.
> is listening to you and siphoning all data on your local network to China. How is it any different from western apps listening to you and siphoning all data on your local network to 3 letter agencies?
I hear this theory being claimed so much, but I don't see any real evidence for it; we have routers that you can monitor traffic on, we have microphone use indicators on mobile, and I would imagine it would be pretty clear if an app was uploading audio with even very basic monitoring tools. Correct me if I'm wrong, however. I'm not denying that a lot of data is likely surreptitiously collected, but I'm talking microp…
How confident or certain are you of what CSME or PSP or some code in TrustZone is doing? How certain are you that not a single piece of software on your machine, be it in the kernel, userland, drivers, is performing some type of surreptitious communication with CSME or PSP or program running in TrustZone?
Do you know for sure whether PSP or CSME has ever done DMA, or fingerprinted stack/heap allocation patterns and timing, or inspected the contents of your disk (after FDE was done being decrypted, of course), to evaluate whether common packet capture software is installed, or even whether it's currently running?
Detecting spyware is one thing. Detecting surreptitious nation-state spyware that behaves differently when it's being observed is a different challenge entirely.
Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes
#93Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes
#94Shits like this is what makes me wary about Chinese made video games proliferating in the west. You never know if your kid's genshing impact or black myth wukong is listening to you and siphoning all data on your local network to China. A competent Western administration would have banned it all years ago. But instead of securing the future of Western civilization, they want detente and cheap plastic goods instead. S…
It's even worse now with cheating creating the world of Kernel Level Anticheat (KLAC) who knows what they are doing! A dream for someone who wants to move laterally through a network, probe, etc.
Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes
#95Earlier quoted context omitted.
> is listening to you and siphoning all data on your local network to China. How is it any different from western apps listening to you and siphoning all data on your local network to 3 letter agencies?
There's a massive difference between having a country spying on it's own citizen versus having an adversarial country doing it. The three-letter agencies would likely not be trying to sabotage or destroy their own country's economy and global standing for one.
Wouldn't having an adversarial country to be spying on you be the better option for you personally? At least privacy wise, not using your machine as some infiltration point, as the country you reside in has many more opportunities to abuse the data
Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes
#96Earlier quoted context omitted.
Yeah and that means the data that you share with Soundcloud. It's very different from: > ps aux # Every running process with full arguments If you think these two cases are even remotely comparable, I don't know what to tell you.
> data that you share with Soundcloud. I’m not in a position, nor do I have the skills, to fully validate exactly what I’m agreeing to. Let us assume that what I’m sharing is merely my app usage data: what I listen to, my likes, follows, comments, usage patterns, etc. They share this data with 954 “partners” - what exactly does this mean? What other data do those organisations have? Who do they share it with? I don’t…
There is a difference when you simply lazy, or don’t care enough to understand the information in front of you, or when they don’t provide those information. You’re right, most people don’t care enough, but this is a huge difference. And west is magnitudes better with this.
Also I’m living in the EU. If I want I can get all of the information which you asked for.
But on the other hand, companies purposefully make those information as obscure as possible. Also, I’m not sure that people would care even if it had been clear. People love free stuffs.
Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes
#97This is why im always feeling bad when putting mobile versions of games i love made by netease on my phone.
Where i felt especially bad was Dead by Daylight mobile.
Persona 5X is not made by NetEase but i still dont have a good feeling about them.
I would think they would be more restricted in what they can collect on a Phone OS (android in my case) but i still wonder if there is some way to fully isolate shady apps.
Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes
#98Earlier quoted context omitted.
> is listening to you and siphoning all data on your local network to China. How is it any different from western apps listening to you and siphoning all data on your local network to 3 letter agencies?
There's a massive difference between having a country spying on it's own citizen versus having an adversarial country doing it. The three-letter agencies would likely not be trying to sabotage or destroy their own country's economy and global standing for one.
Like US saying EU is its adversary and spying on it? Trump had been pretty clear that he sees EU as a threat while China and Russia is not.
Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes
#99Earlier quoted context omitted.
There's a massive difference between having a country spying on it's own citizen versus having an adversarial country doing it. The three-letter agencies would likely not be trying to sabotage or destroy their own country's economy and global standing for one.
As someone from the EU, could I not use the argument to argue that for me it's both an adversarial country?
And to be fair only US is openly hostile to EU.
Re: MuMu Player (NetEase) silently runs 17 reconnaissance commands every 30 minutes
#100Earlier quoted context omitted.
> is listening to you and siphoning all data on your local network to China. How is it any different from western apps listening to you and siphoning all data on your local network to 3 letter agencies?
There's a massive difference between having a country spying on it's own citizen versus having an adversarial country doing it. The three-letter agencies would likely not be trying to sabotage or destroy their own country's economy and global standing for one.
And don’t forget that ICE sees both non-citizens and citizens as the enemy if they don’t agree with Trump.