Some Low-Cost Android Phones Come at a Price -- Your Privacy (cnet.com)
Cheap phones are coming at the price of your privacy, security analysts discovered. From a report: At $60, the BLU R1 HD is the top-selling phone on Amazon. Last November, researchers caught it secretly sending private data to China. Shanghai Adups Technology, the group behind the spying software on the BLU R1 HD, called it a mistake. But analysts at Kryptowire found the software provider is still making the same "mistake" on other phones. At the Black Hat security conference in Las Vegas on Wednesday, researchers from Kryptowire, a security firm, revealed that Adups' software is still sending a device's data to the company's server in Shanghai without alerting people. But now, it's being more secretive about it. "They replaced them with nicer versions," Ryan Johnson, a research engineer and co-founder at Kryptowire, said. "I have captured the network traffic of them using the Command and Control channel when they did it." An Adups spokeswoman said that it had resolved the issues in 2016 and that the issues "are not existing anymore." Kryptowire said it has observed the company sending data without telling users on at least three different phones.
Implying that ANY smartphone is going to be ANY better in this regard
we have privacy? what a joke, I haven't laughed this hard since the dotcom boom.
danger will robinson... phewww
Loss leader? I'm wondering if these low priced phones are actually subsidized by the Chinese government. How nice it would be if a similar priced phone could be offered with verifiable open source firmware. (Ok, from here in just call me Captain Obvious.)
When all you have is a hammer, every problem starts to look like a thumb.
There have been processes for behavioral tracking for years now. The trick is to root the device, yank the Chinese certificates out of your root CA store [1], add outgoing blocks on the iptables level to ensure that it doesn't phone home, add some ad blocking, and you will have a decent phone for a cheap price. Ideally, install an OS like LineageOS (if available.)
[1]: It is interesting to see what both Apple and Android device makers stick in the root CA store. It is wise to reduce that number.
Don't come with spyware.
The real purchasing decision should be which phones allow rooting without blowing an efuse or disabled marketed functionality.
If you can unlock the phone via usb and adb and maybe a password and it doesn't do anything funny, it is a good phone. Everything else should be treated as suspect.
People buying $60 phones would be the ones with less to no cash on the bank.
It's the wrong demographic to target!
It used to be kind of cool to get these cheap phones when everything else cost about 10x as much. Now, you can get much better hardware from Motorola for 2x the price, with only Google spying on you. There's little point in risking it with an unknown manufacturer.
When the spyware comes along...
You must root it!
plug a cable in the phone
you can root it!
https://theunlockr.com/2013/11...
Good people go to bed earlier.
I've just shat myself with surprise!
Who didn't automatically assume this was the case?
Seriously.
"Oh my God. This is terrible. This is the end of my Presidency. I'm fucked."; ~ Donald J. Trump
That Trump does NOT deserve to be president of the USA. He did NOT win the popular election. Most Americans did NOT vote for Trump. If it wasn't for the electoral college, which thinks that some states with fewer people have value (and they fucking DON'T), Hillary Clinton would be the president. This just goes to show that we need to get rid of the electoral college. Hillary should have challenged the vote. If it wasn't for Russia hacking the election, Hillary would have won. If it wasn't for Seth Rich releasing those emails, which the fucking filthy plebs didn't DESERVE to see, Hillary would have won. Hillary deserved to be next. I'm with Hillary. I'm with her. It was her turn. FUCK YOU, TRUMP. AND FUCK ALL OF YOU BASKETS OF DEPLORABLE.
I hope you all burn in Hell for hacking the DNC and exposing all the stuff that the little people aren't supposed to see. Don't you know how things are supposed to work in the USA?
GOD FUCKING damn it!!!
You Trump supporters are so goddamn ignorant! I hope antifa burns the USA to the ground, and immigrants rape every last Trump supporter.
/sarcasm
I thought tis was already found on the BLU phones long ago? Aside from a few dedicated Android flavors, most Android devices harvest data and send it back to Google or the manufacturer. why is this news again?
All Android Phones Come at a Price -- Your Privacy
tl;dr (yes even the summary).
An oxymoron in the title. Bravo!
I'm pretty sure all high-cost phones, including not-Android, send data to Google/Apple/MS. If only "some" of these low-cost ones are doing the same, that almost sounds like a worthy gamble.
(And yes, I realize that they mean "in addition to already sending your data to the OS makers" rather than "instead of." I'm just calling out the headline's phrasing..)
"I have captured the network traffic of them using the command and control channel when they did it."
With well programmed spyware this couldn't have happened. No one have spotted Ios doing this.
All Android Phones Come at a Price -- Your Privacy
Android is just a giant spyware ecosystem for Google.
Comment removed based on user account deletion
Comment removed based on user account deletion
All Cellular devices come at that price.
Windows does this too and barely anyone cares anymore. Their fanbois even claim the spying is for my own protection. Why should we expect different from a Chinese maker? Turn data off on the phone. Problem solved.
If you think your iPhone or high-end American Android phone is any more secure or safe, you're just lying to yourself. Building profiles of people is what Google does, and Apple is mandated to do so behind the curtains by the CIA and NSA. The recent revelations on CIA and NSA, and Apple's tendency to let critical security flaws sit unpatched for many months make it clear they have to keep the phones open and collect information when they're told to.
I have a Blu R1 HD. I got it for the kids to play games with, but it has no SIM card. Any advice on how to check that it's secure (without burning/crushing/etc.)?
So apparently the Amazon version didn't have the spyware, only the ones you got from elsewhere. Those phones have been easy to root, there are custom firmware for it and it is a great phone for the $60.
These days, if you can't root your phone and get full control, then you are just asking to be spied on.
Be seeing you...
so interested in what they are doing?
I'm still waiting for them to name one of their phones BLU-82. And for the batteries to turn out to be faulty.
...
I'll get my coat.
This Privacy thing, what is this? Sounds like a good idea. Where can I get one?
Don't fight for your country, if your country does not fight for you.
and now the Chinese want a direct tap into Trump voters...
I used to be a gadget freak having collected items like programmable tracks record player to multi-cassette changer, largest ever HD tube TV (Sony 40"), which most people were unaware of. Nowadays, my number one worry is how to know if the gadget is safe? I have started buying things conservatively instead of going for the latest and greatest. There is no guarantee that the gadgets you buy is not spying on you. So what do I have today: iPod, iPad, iPhone, MabBookPro, Nexus, PC From MS store (they wipe out all crapware and give you fresh install), only SanDisk USB, Canon-Sony digicams, LG-Samsubg TVs, HP business grade printer and so on. No digital devices from unreliable sources.