Xiaomi Devices Found Tracking And Recording Browsing Data Of Millions

[BL33D]

Xiaomi has been tracking and recording an insane amount of private data, from user’s phone habits to queries in the Xiaomi’s default browsers.

According to a cybersecurity researcher, Cirlig, Xiaomi records all the search queries and items viewed on its default browser (Mi Browser Pro) as well as on the Mint browser. The tracking extends to Incognito mode as well.

The researcher was able to confirm the same pattern on other Xiaomi phones, including Mi 10, Redmi K20, and Mi MIX 3.

Xiaomi, in response, confirmed that it collects browsing data. However, the company says the data sent is anonymized, and users have consented to the data tracking. Meanwhile, it denied claims of information being monitored in Incognito mode.

The researcher, however, was able to prove that Xiaomi is recording Incognito mode data as well. In a video, he showcases how the information of him visiting a **** website in incognito mode is being sent to the servers.

Is it really anonymous?
When the information tracked in browsers is compiled with phone’s “metadata” collected by Xiaomi, Cirlig says the company can easily identify a single person.

My main concern for privacy is that the data sent to their servers can be very easily correlated with a specific user
Other than the browser data, Cirlig also noticed monitoring in Xiaomi apps and his touches on every screen. For instance, he observed the Xiaomi default music player app collecting information on his listening habits.

Upon much digging, the researcher was able to connect the app’s data monitoring with SensorDataAPI, which enables third-party access to app data. In the case of Xiaomi, the third-party was Sensors Analytics, a startup known for tracking users.

While Xiaomi validated the findings, it claimed that the data collected by Sensors Analytics remains anonymous and is stored on Xiaomi’s personal servers.

https://fossbytes.com/xiaomi-devices-found-tracking-and-recording-browsing-data-of-millions/

 

[vi-va]

@waz, duplicated thread.

 

[Octopod]

Xiaomi has been tracking and recording an insane amount of private data, from user’s phone habits to queries in the Xiaomi’s default browsers.

According to a cybersecurity researcher, Cirlig, Xiaomi records all the search queries and items viewed on its default browser (Mi Browser Pro) as well as on the Mint browser. The tracking extends to Incognito mode as well.

The researcher was able to confirm the same pattern on other Xiaomi phones, including Mi 10, Redmi K20, and Mi MIX 3.

Xiaomi, in response, confirmed that it collects browsing data. However, the company says the data sent is anonymized, and users have consented to the data tracking. Meanwhile, it denied claims of information being monitored in Incognito mode.

The researcher, however, was able to prove that Xiaomi is recording Incognito mode data as well. In a video, he showcases how the information of him visiting a **** website in incognito mode is being sent to the servers.

Is it really anonymous?
When the information tracked in browsers is compiled with phone’s “metadata” collected by Xiaomi, Cirlig says the company can easily identify a single person.

My main concern for privacy is that the data sent to their servers can be very easily correlated with a specific user
Other than the browser data, Cirlig also noticed monitoring in Xiaomi apps and his touches on every screen. For instance, he observed the Xiaomi default music player app collecting information on his listening habits.

Upon much digging, the researcher was able to connect the app’s data monitoring with SensorDataAPI, which enables third-party access to app data. In the case of Xiaomi, the third-party was Sensors Analytics, a startup known for tracking users.

While Xiaomi validated the findings, it claimed that the data collected by Sensors Analytics remains anonymous and is stored on Xiaomi’s personal servers.

https://fossbytes.com/xiaomi-devices-found-tracking-and-recording-browsing-data-of-millions/

No wonder the world is apprehensive of Chinese 5G equipment

 

[艹艹艹]

 

[BL33D]

@waz, duplicated thread.

Link me to the other thread. I didnt find any.

View attachment 628963View attachment 628964View attachment 628965

What has sales growth got to do with data privacy ??? Dont post stuff just for the sake of it.

 

[Daghalodi]

Indians will post anything against chinese stuff but than they get bych slapped when someone posts about indians buying chinese equipment in large numbers.

 

[Aspen]

To be fair, Google and Facebook openly have a spying deal with the NSA but no one seems to care about that.

Let's not pretend China is the only one spying on user data, US invented this idea before anyone else.

 

[BL33D]

To be fair, Google and Facebook openly have a spying deal with the NSA but no one seems to care about that.

Let's not pretend China is the only one spying on user data, US invented this idea before anyone else.

Discussing one issue doesnt have to include every other issue to make it valid. That has been pretty well reported and there is no "open spy deal". There might be. Any such issue should be concerning.

 

[Rusty]

I have a Huawei phone and as soon as the pixel4a comes out, I am replacing it.

 

[xyxmt]

Damn!!
never heard of smart phone, google, face book, apple ever recording user data
what is this world coming to

 

[rott]

Damn!!
never heard of smart phone, google, face book, apple ever recording user data
what is this world coming to

Part of the China containment plan by the US.

 

[CrazyZ]

Google also tracks and records your data. That's the price of free digital services.

 

[rott]

Google also tracks and records your data. That's the price of free digital services.

Yes correct, but the thing is, they will never appear in the news. Funny, right?

 

[BL33D]

Yes correct, but the thing is, they will never appear in the news. Funny, right?

https://www.nytimes.com/2019/03/20/business/google-fine-advertising.html

https://www.nytimes.com/2019/09/04/technology/google-youtube-fine-ftc.html

https://www.theverge.com/2019/1/21/18191591/google-gdpr-fine-50-million-euros-data-consent-cnil

www.bbc.com/news/technology-46944696

https://www.theverge.com/2018/7/18/17580694/google-android-eu-fine-antitrust

Google fined a record $5 billion by the EU for Android antitrust violations
Not privacy related but still - Google.

Now talk.

 

[Yaseen1]

every device does this so alternative products from non chinese companies are no better alternative of this