Some Low-Cost Android Phones Come at a Price -- Your Privacy (cnet.com)
Cheap phones are coming at the price of your privacy, security analysts discovered. From a report: At $60, the BLU R1 HD is the top-selling phone on Amazon. Last November, researchers caught it secretly sending private data to China. Shanghai Adups Technology, the group behind the spying software on the BLU R1 HD, called it a mistake. But analysts at Kryptowire found the software provider is still making the same "mistake" on other phones. At the Black Hat security conference in Las Vegas on Wednesday, researchers from Kryptowire, a security firm, revealed that Adups' software is still sending a device's data to the company's server in Shanghai without alerting people. But now, it's being more secretive about it. "They replaced them with nicer versions," Ryan Johnson, a research engineer and co-founder at Kryptowire, said. "I have captured the network traffic of them using the Command and Control channel when they did it." An Adups spokeswoman said that it had resolved the issues in 2016 and that the issues "are not existing anymore." Kryptowire said it has observed the company sending data without telling users on at least three different phones.
Implying that ANY smartphone is going to be ANY better in this regard
we have privacy? what a joke, I haven't laughed this hard since the dotcom boom.
danger will robinson... phewww
Loss leader? I'm wondering if these low priced phones are actually subsidized by the Chinese government. How nice it would be if a similar priced phone could be offered with verifiable open source firmware. (Ok, from here in just call me Captain Obvious.)
When all you have is a hammer, every problem starts to look like a thumb.
There have been processes for behavioral tracking for years now. The trick is to root the device, yank the Chinese certificates out of your root CA store [1], add outgoing blocks on the iptables level to ensure that it doesn't phone home, add some ad blocking, and you will have a decent phone for a cheap price. Ideally, install an OS like LineageOS (if available.)
[1]: It is interesting to see what both Apple and Android device makers stick in the root CA store. It is wise to reduce that number.
Don't come with spyware.
The real purchasing decision should be which phones allow rooting without blowing an efuse or disabled marketed functionality.
If you can unlock the phone via usb and adb and maybe a password and it doesn't do anything funny, it is a good phone. Everything else should be treated as suspect.
People buying $60 phones would be the ones with less to no cash on the bank.
It's the wrong demographic to target!
It used to be kind of cool to get these cheap phones when everything else cost about 10x as much. Now, you can get much better hardware from Motorola for 2x the price, with only Google spying on you. There's little point in risking it with an unknown manufacturer.
When the spyware comes along...
You must root it!
plug a cable in the phone
you can root it!
https://theunlockr.com/2013/11...
Good people go to bed earlier.
I've just shat myself with surprise!
Who didn't automatically assume this was the case?
Seriously.
"Oh my God. This is terrible. This is the end of my Presidency. I'm fucked."; ~ Donald J. Trump
/sarcasm
I thought tis was already found on the BLU phones long ago? Aside from a few dedicated Android flavors, most Android devices harvest data and send it back to Google or the manufacturer. why is this news again?
All Android Phones Come at a Price -- Your Privacy
tl;dr (yes even the summary).
An oxymoron in the title. Bravo!
Trump leaks Israeli intel to the Russians, blabs nuclear secrets at his golf club, and grabs women by the pussy. Anything Hillary did, Trump has done worse. Anything.
I'm pretty sure all high-cost phones, including not-Android, send data to Google/Apple/MS. If only "some" of these low-cost ones are doing the same, that almost sounds like a worthy gamble.
(And yes, I realize that they mean "in addition to already sending your data to the OS makers" rather than "instead of." I'm just calling out the headline's phrasing..)
Hillary sent emails containing Top Secret info to her aid Huma's home computer to print because they couldn't figure out how to get the secure fax machine to work
Uh, no she did not. You are just mindlessly repeating half-baked conspiracy theories. And when I say half-baked I mean literally half - a bunch of highly motivated partisans latched on to a couple of vague facts and then made up a bunch of non-facts to produce a story that, surprise, surprise, was an exact fit for their preconceptions.
If she had actually done what you claim it would have been the smoking gun of intent that Comey needed to prosecute her.
Now you may proceed with more conspiracy theory logic to rationalize away your disappointment with the facts.
"I have captured the network traffic of them using the command and control channel when they did it."
With well programmed spyware this couldn't have happened. No one have spotted Ios doing this.
All Android Phones Come at a Price -- Your Privacy
Android is just a giant spyware ecosystem for Google.
He's also thick as pig shit, don't forget that.
Comment removed based on user account deletion
Comment removed based on user account deletion
All Cellular devices come at that price.
Windows does this too and barely anyone cares anymore. Their fanbois even claim the spying is for my own protection. Why should we expect different from a Chinese maker? Turn data off on the phone. Problem solved.
If you think your iPhone or high-end American Android phone is any more secure or safe, you're just lying to yourself. Building profiles of people is what Google does, and Apple is mandated to do so behind the curtains by the CIA and NSA. The recent revelations on CIA and NSA, and Apple's tendency to let critical security flaws sit unpatched for many months make it clear they have to keep the phones open and collect information when they're told to.
I have a Blu R1 HD. I got it for the kids to play games with, but it has no SIM card. Any advice on how to check that it's secure (without burning/crushing/etc.)?
So apparently the Amazon version didn't have the spyware, only the ones you got from elsewhere. Those phones have been easy to root, there are custom firmware for it and it is a great phone for the $60.
These days, if you can't root your phone and get full control, then you are just asking to be spied on.
Be seeing you...
so interested in what they are doing?
I'm still waiting for them to name one of their phones BLU-82. And for the batteries to turn out to be faulty.
...
I'll get my coat.
This Privacy thing, what is this? Sounds like a good idea. Where can I get one?
Don't fight for your country, if your country does not fight for you.
and now the Chinese want a direct tap into Trump voters...
I used to be a gadget freak having collected items like programmable tracks record player to multi-cassette changer, largest ever HD tube TV (Sony 40"), which most people were unaware of. Nowadays, my number one worry is how to know if the gadget is safe? I have started buying things conservatively instead of going for the latest and greatest. There is no guarantee that the gadgets you buy is not spying on you. So what do I have today: iPod, iPad, iPhone, MabBookPro, Nexus, PC From MS store (they wipe out all crapware and give you fresh install), only SanDisk USB, Canon-Sony digicams, LG-Samsubg TVs, HP business grade printer and so on. No digital devices from unreliable sources.