Slashdot Mirror
Amazon Suspends Sales of Blu Android Phones Due To Privacy Concerns (cnet.com)
CNET reports: Amazon just put budget phone maker Blu in the penalty box. The online retailing giant told CNET that it was suspending sales of phones from Blu, known for making ultra-cheap Android handsets, due to a "potential security issue." The move comes after security firm Kryptowire demonstrated last week how software in Blu's phones collected data and sent it to servers in China without alerting people. Blu defended the software, created by a Chinese company called Shanghai Adups Technology, and denied any wrongdoing. A company spokeswoman said at the time it "has several policies in place which take customer privacy and security seriously." She added there had been no breaches. Blu said it was in a process of review to reinstate the phones at Amazon.
First thing I do with a new phone, I wipe it and install LineageOS. Somebody else builds the ROM and I don't have the time or resources to personally-inspect the source code, so it's mostly a more-trusted quantity; and everybody sees it and sees the build process, so there are at least a dozen primary developers, a couple hundred bored hobbyists, and the occasional security researcher looking at the built ROM and the source code. Between the diff against Android and the massive number of eyes on Android's source trees, a lot of people have to be involved in a conspiracy to mess with my phone for there to be anything intentionally-malicious in there.
I like OnePlus, but I'm not going to run their OS just so it can repeatedly try to sell themes to me. If there was a Lineage ChromiumOS, I'd put that on my Chromebook.
Support my political activism on Patreon.
I have a BLU Studio 5.0C, an, its rooted, and I removed ADUPS. However the version of Adups it used was not the version that was stealing people's info. I really like the quality of the Phone I have. I don't like that it has a MediaTek Chipset for which there is no Lineage OS Build.
BLU Needs to cough up Specs and Drivers to the Lineage OS Community, and start selling LineageOS on their phones, and don't put ADUPS on their Phones. They need to make amends with the Android Community. Because what they have been doing is selling people's personal info to the Chinese by using ADUPS.
"All user data is obtained without their permission, sure, but it's sent securely via encrypted transmission methods. Further, I assure all of our customers that the Chinese Communist Party servers that keep and analyze this data are under the highest security standards and the CCP does not share its data or findings with outside parties. So there is nothing to worry about. Our phones are doing exactly what our masters in the CCP are requiring them to do and doing so in a very secure manner."
News at 11. Amazon is going to suspend sales of Amazon Echo; followed by suspending their entire online shopping site due to "potential" security issues. Almost everything has potential security issues (other than a block of concrete 10 feet under), but as a customer, it's my right to make that trade-off.
As a customer it is your right to make that trade-off. You don't have the right to demand that Amazon be the one to sell it to you though.
It's your right to buy clam chowder but McDonalds doesn't have to sell it. It's your right to drive a Toyota Corolla, but your Honda dealership doesn't have to stock them. You're perfectly in your right to buy and wear a Rolex, but walmart doesn't have to have one waiting for you to buy.
Amazon has the right to choose not to sell BLU phones just as McDonalds has the right to not sell Clam Chowder.
I'm sure they don't want to be associated with spyware, or have negative customer satisfaction from people that buy those phones and incorrectly blame Amazon for selling them a spyware ridden phone. You may not blame Amazon but plenty of less tech savvy people would.
"That's the way to do it" - Punch
ALL the phones phone home. So are they going to block them as well, or is that OK, because it is not China, but companies.
TBJ, I am not sure if it is better to give my data to China or to Google/Apple/Windows/Amazon/....
Don't fight for your country, if your country does not fight for you.
Not sure. But the Amazon Dot were selling like hotcakes on Prime Day.
BLU Phones are Easily Rootable, and until the R1 HD, did NOT have locked bootloaders that prevented the installation of TWRP Recovery. However, Because they used MediaTek Chipsets instead of QualComm, they were GSM Exclusive. (Meaning: No CDMA because QualComm has a Patent on it in the US.)
That means ATT and T-Mobile only (and their Associated MVNO carriers.) No Verizon, and no Sprint. CDMA is very pervasive in the US.
Most LineageOS (formerly Cyanogen Mod) Programmers are from the US, so because of that MediaTek based Phones are a Tiny, Tiny, Tiny Minority. Wal-Mart Stopped carrying BLU Phones in the US because People would buy them, find out they were on a CDMA Carrier, (Sprint, Verizon) and then Wal-Mart would be swamped with Returns.)
BLU started locking the Bootloaders with the R1 HD due to the Lock Screen ads. People removed the ads, and denying them ad revenue seemed like theft to BLU.
The ONLY thing good about most BLU phones is that the touchscreen still functions after the screen cracks.
Oh, and the FM radio is at least guaranteed to work.
BT support sucks, hardware is RAM-starved, they rarely not do system updates, the list goes on and on...
Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
Amazon stopped selling the phone because of "a potential security issue" because an app on the phone collects data and sends it to China without the user's consent. Well, obviously, that's a *PRIVACY* issue, not a *SECURITY* issue.
You mean the Amazon that is marketing a device with a permanently-on microphone that listens to what you are saying and sends it to their servers? Yeah, I am sure they don't want to be associated with spyware.
My first program:
Hell Segmentation fault
There are gradations in privacy. The fact that I'm ok with having some small portion of my data used by corporations whose services I utilize does not mean that I'm ok with massive violation of privacy without any notice at all by some other corporation.
What the Blu phone does is way over the line. They are not only secretly sending data to China, they have "a command-and-control channel that can execute code on a user’s phone as a system user."
This is not merely "spyware"-- this is actual spying, by a foreign power.
http://www.cbsnews.com/news/researchers-find-phones-secretly-sending-data-china/
> calling them out as huge hypocrites when they sell plenty of other privacy invasive products
I don't think it is hypocrisy. The really invasive companies such as Google and Amazon have written in a lot of stuff, and spent a lot of money on lawyers, to handle data in aggregate, in ways that aren't supposed to invade our privacy, but still let them do targeted ads. This nuance is lost on you and I, sure (I, and probably you, want nothing to do with their endless parade of data hoarding), but it's still a real cost that they pay and it represents real restrictions on what they do with their data. Without even this basic assurance, it's a non-hypocritical position for a data conglomerate like Amazon to have issues with a company that does any of this secretly, and with open ended data usage (again, from a perspective like Google's, their data usage is not open ended, it is very constrained).
Part of the Bold experience, how to boldly offer a less expensive device. FaceBook and many of Google offerings also free- gee how generous, except the free is really a mutual exchange your info for their experience. Just be upfront about it.
Truly horrible garbage. Any idiot who walks around with a brick of spyware in their pocket is no geek, but a buffoon.
But it's not exactly the same. None Amazon, Facebook, Microsoft, Google, etc., all tell you they're doing it (so you're making an informed choice if you use their services), and amount of data they collect isn't as comprehensive.
Shanghai Adups = "Shanghai American Dups"?
Coder's Stone: The programming language quick ref for iPad
Fixed that for you: A company spokeswoman said at the time it "has several policies in place which take customer privacy and security, seriously."
The US government have made it clear that we have no inalienable rights; any we do not defend vigorously will be taken.
As if the Chinese have other means of stealing our data. I was well aware of that security issue and still bought an unlocked 50$ Blü phone, which is kick ass awesome. Others make flagship phones for 10 times the price and still collect all data. Would I rather not have gazillion companies and services spy on me? Sure, but US companies are not any better. Even the electric and gas companies insist on installing the meters outside of the house. They used to be inside and they had no problem driving by in their van to read them out. Now the world knows how much power and gas I use. How is that for privacy?