Wednesday, December 31, 2014

Is Xiaomi secretly sending data to Chinese servers?

There is lots of News that Xiaomi secretly sending data to Chinese servers or this phone so cheap because its design for data hacking.

This issue raised higher concerns across many countries, proactively in India, Singapore and Taiwan. The Indian Air Force (IAF) — among the largest in the world — warned its employees and their belongings that their private information was being shipped over to servers in China, and asked them to avoid using Xiaomi smartphones due to security risk.

In a blogpost, Hugo Barra from Xiaomi denied all the allegations made by F-Secure.
MIUI does not secretly upload photos and text messages. MIUI requests public data from Xiaomi servers from time to time. These include data such as preset greeting messages (thousands of jokes, holiday greetings and poems) in the Messaging app and MIUI OTA update notifications, i.e. all non-personal data that does not infringe on user privacy.” Barra said.

What you should do ?
  • Don't use Mi Cloud: Mi Cloud enables users to back up and manage personal information in the cloud, as well as sync to other devices.  This includes contacts, notes, text messages and photos.Mi Cloud is turned off by default. Make sure you don't use this service.
  • Turn off User Experience Program: Mi phones have "User Experience Programs" setting which send anonymous data usage to Mi servers. Make sure you turn off this service.

Redmi 1S - Turn off - User Experience Program



Read More: http://thehackernews.com/2014/10/xiaomi-data-breach-hacker.html

http://securityaffairs.co/wordpress/27486/security/xiaomi-handset-usersdata.html

http://indiatoday.intoday.in/technology/story/we-do-not-spy-for-china-xiaomi/1/374865.html

Hugo Barra Answers the Privacy Issues on Redmi Note & Mi Cloud - http://en.miui.com/thread-31252-1-1.html

Update: 
Today, i have enabled the "Log" function in Wifi router through which i accessed the Internet on my Redmi 1S mobile. Here is what i found in log file:



31 Dec 2014 - ALLOW: api.chat.xiaomi.net
31 Dec 2014 - ALLOW: a0.app.xiaomi.net
31 Dec 2014 - ALLOW: hmma.baidu.com
31 Dec 2014 - ALLOW: f3.mi-stat.gslb.mi-idc.com
31 Dec 2014 - ALLOW: resolver.gslb.mi-idc.com
31 Dec 2014 - ALLOW: update.miui.com
31 Dec 2014 - ALLOW: tracking.miui.com

No comments:

Post a Comment