Saturday, May 2, 2020

Xiaomi Caught Logging Millions Of Consumers’ Internet And Phone Browsing Data

Xiaomi isn’t a brand that would usually raise alarms when it comes to privacy on their devices. Unfortunately, that concern changed overnight after it was caught allegedly recording both phone and internet usage of millions of customers.

The discovery was reported by Forbes, who in turn was speaking to a cybersecurity expert by the name of Gabi Cirlig. Specifically, Cirlig discovered says that he discovered his Redmi Note 8 was logging in and tracking his every action made with the device. What’s even more alarming was that the tracking still persisted even when he allegedly entered into an “incognito” mode.

It should be noted that the data logging seemed to occur on the device’es default Xiaomi browser, as well as Xiaomi’s Mi Browser Pro and Mint Browser. The browsers, which are available on Google Play, have been downloaded more than 15 million times. beyond the browsers, Cirlig also discovered that the Xiaomi Music Player was also listening in on his choice of music. Logging what songs he was playing and even when they were played.

To that end, the Redmi Note 8 isn’t the only Xiaomi device that seems to be executing the same data logging. At the time of writing, Cirlig confirmed that the privacy issue was also prevalent on the Mi 10, Redmi K20, and Mi MIX 3. Worst still was the way Xiaomi seems to be transferring the recorded data to its servers; Xiaomi says that its data is encrypted during transfer, but Cirlig supposedly proved otherwise by easily decoding a chunk of hidden information with a form of crackable encoding called base64.

In response to the findings, Xiaomi brushed off Cirlig’s discovery, citing that privacy and security have always been a top concern for the company. In addition, a spokesperson for the brand did confirm that the brand was collecting data, but in order to better understand its users’ behaviour. It also stated that these users had consented to the tracking, although that point is debatable.

(Source: Forbes)

The post Xiaomi Caught Logging Millions Of Consumers’ Internet And Phone Browsing Data appeared first on Lowyat.NET.



from Lowyat.NET https://ift.tt/2WhARUJ

Labels:

0 Comments:

Post a Comment

Subscribe to Post Comments [Atom]

<< Home