Slashdot Mirror

Several Xiaomi smartphone users are reporting that they are seeing ads in the Settings app of MIUI, a fork of the Android operating system that the Chinese phone maker ships on most of its smartphones. According to some users, ads started to appear at various locations -- including the lock screen -- on MIUI earlier this year. In a thread on Reddit over the weekend, a user noted that an ad has started to appear in the Settings app as well. The post, which has gleaned over 5,000 upvotes, sees plenty of users corroborate the claim.

Xiaomi, known for selling inexpensive but high-quality smartphones, is the fourth largest smartphone vendor in the world. Its handsets are immensely popular in emerging markets such as India, where it has been the largest smartphone maker for the last four quarters. In June this year, a senior executive at the company, the name of which means little rice, stated plans to enter the US market next year.

Xiaomi, the Chinese smartphone manufacturer many refer to as the "Apple of China," can silently install any app on your device, according to a Computer Science student and security enthusiast from the Netherlands. Thijs Broenink started investigating a mysterious pre-installed app, dubbed AnalyticsCore.apk, that constantly runs in the background and reappears even if you try and delete it. The Hacker News reports: After asking about the purpose of the AnalyticsCore app on the company's support forum and getting no response, Thijs Broenink reverse engineered the code and found that the app checks for a new update from the company's official server every 24 hours. While making these requests, the app sends device identification information with it, including the phone's IMEI, Model, MAC address, Nonce, Package name as well as signature. If there is an updated app available on the server with the filename "Analytics.apk," it will automatically get downloaded and installed in the background without user interaction. Broenink found that there is no validation at all to check which APK is getting installed to a user's phone, which means there is a way for hackers to exploit this loophole. This also means Xiaomi can remotely and silently install any application on your device just by renaming it to "Analytics.apk" and hosting it on the server. Ironically, the device connects and receives updates over HTTP connection, exposing the whole process to Man-in-the-Middle attacks."

stephendavion writes Looks like Chinese device maker, Xiaomi, is taking its "Apple of the East" tag too literally. First, their CEO brazenly copies Steve Jobs' signature look, sitting cross-legged on the floor. And now, Xiaomi's latest version of Android shamelessly rips off iOS 7. MIUI 6, which is Xiaomi's upcoming edition of Android for its latest phones and tablets, looks almost exactly like Apple's operating system for iPhones, iPads and the iPod Touch. It features the same bright color palette and a flat design. Heck, it even does away with Google's "app drawer" and puts all apps on your home screen. It's like the CEO handed iPhones to the design team and barked: "Here, copy this!"