Do Huawei devices spy on users? - Mate 8 General

Hi I know this sounds out there, but late last year it was discovered that some Chinese smartphones are spying on users. The only other reason is with my phone I noticed (could be a GPS issue) that my pictures with GeoLocation were showing as being in China, except using gps apps such as Google Maps showed the correct location. I'm not sure how this would occur. Has anyone experienced this same thing?
http://www.theepochtimes.com/n3/174...lled-on-lenovo-huawei-and-xiaomi-smartphones/

Yea it happens, but it doesnt matter too much. Im pretty sure the app is called Teleyphone. Its a call monitor app that runs in the background and records calls. People really worry too much about the whole spying thing and security risks. There was an article i read in recent memory about some journalist gone crazy and he wrote an article titled something like, All phones arent secure, only buy Google, samsung and apple phones. Its really not a big deal. What do you really call your friends about even if they were spying on you? Im pretty sure if u ask ur friend to eat at red robin the chinese wont meet you there.

davoidd said:
Hi I know this sounds out there, but late last year it was discovered that some Chinese smartphones are spying on users. The only other reason is with my phone I noticed (could be a GPS issue) that my pictures with GeoLocation were showing as being in China, except using gps apps such as Google Maps showed the correct location. I'm not sure how this would occur. Has anyone experienced this same thing?
Click to expand...
Click to collapse
the problem that the article is pointing out is because those phone aren't officialy available outside of china (Xiaomi ie) and the resellers often installed adaware and malwares before shipping the phones to the customers, if you imported the phone it's better to flash the phone so you're 100% sure that it's ok

That's a pretty layman's article.... Different roms are flashed for different distributions of the same phone. Not to mention you could quite easily unlock the bootloader and flash a custom rom that doesn't have whatever spyware people think is on the phone.
Also if this was the case, every single person on here would pretty much be using a custom rom...

Related

Annoying Market Problem

Just wondering if anyone knows details on how market listings work. I know there are some apps that show or not to certain phones, but is that just a version issue, a special exception google makes?
At any rate, it's moot, because if google has a solution, they aren't making it very clear to lots of people.
Anyway, the problem:
As android ages, the phones age, and the apps mature. There are lots of apps that won't adequately run on older phones, but as far as I can tell, the only recourse devs have is to put a note in the description, which stops no one from actually downloading it, then clogging the reviews with 1 star "does not work on the ___" reviews.
While this was always a problem, now that we've reached the point in time where this is starting to happen to Droid 1 users, it's less an annoyance, and more a serious issue. Ratings almost mean nothing on those apps, and it's hard to use the reviews to see if there are actually any real issues.
(There are 10 billion droid users, and because it was true for quite a while they seem particularly locked in to the "I have one of the better phones out there" mentality )
Ok, rant over. Not sure anyone else even notices this.
Also, I'm not sure the solution is to restrict access, but an official way to list the phones that work or don't work needs to be in place, and then maybe another dev option to still allow access*
Then, if your phone isn't compatible, but the dev okays downloading anyway, you are given an extra screen to dismiss, explaining the app probably wont work for you, and you aren't allowed to leave reviews.
*Not all phones are equal, a stock phone, and a tricked out custom kerneled OC'd version, are very different, so a user might opt to give it a whirl anyway.
I have several apps on the market. In the manifest for the app you declare the minimum version of Android required for the app, and it's my understanding that phones that do not have at least that version of Android will not see the app.
Now, just because an app doesn't work on one person's phone, and they write a nasty review saying "doesn't work on the Epic!" doesn't actually mean that it doesn't work on the Epic, it just means that one person couldn't get it to work. Also, the developer may have made some hardcoding choices (like directories, etc.) that are not universal, and that may lead to incompatibilities that were un-anticipated. But, other than version of Android, I'm not sure what else is available to a developer to restrict access.
Yeah, I figured you could set the version. It's too bad there's no way to control it a bit finer.
I also realize that it's entirely possible someone is just being an idiot, but the fact remains we're past the days where you could necessarily infer anything about the phones from the version, or NEED the latest API version to do something useful/cool.
There are apps that legitimately don't run on some phones, and I feel like google needs to offer an official solution, rather than rely on dev comments that no one reads.
Obviously there are lots of ways to fake what your phone is, and whatnot, so nothing is going to be perfect, but there needs to be some way to officially denote "This app only requires 2.2, but your phone can't be one that shipped with Cupcake"
Edit: perhaps an easier approach is to have a market setting that only factors ratings/reviews of people that have the same phone.
I also don't mean to sound like I install every 5 star app, and wont even think about installing a 3 star app, no matter what I've heard. I've just noticed this in apps I was installing for one reason or another, and felt bad for the devs. It also gives a little less incentive to provide new/cool things for those of us with better phones.
I also suppose there's no "official" guidelines on what these stars are supposed to mean, but to me 1 starring an ap that says "this won't work for you" when it doesn't work for you is like telling people your dentist sucks because he wouldn't change your oil or make you a burger.
Hey guys, remember when the carriers blocked wireless tethering apps from the market for 'their phones'? I don't believe they ever REMOVED the apps from the market, just tagged them in such a way that they are not visible to any of the phones they provide service for. Just a thought, maybe devs could do the same kind of 'blacklisting' based on model number...
Sent from my pocket rocket

[Q] Smartphone Data Privacy?

I am reading what some of these apps are accessing on my phone and I am pretty much horrified, especially since most of them have absolutely no reason to be grabbing my contact list, or text messages, or email addresses or my mood that day or whatever. Unfortunately I can see the usefulness of these same apps, so I have loaded them. Now I am afraid to use my phone other than making a phone call (Even then, I call people from numbers scribbled on a piece of paper because I am afraid to put there names and phone numbers in my phone), even though the phone numbers themselves are probably being intercepted anyway. I could probably live with something like location access so Google maps works, but my contact list?
So I have downloaded Avast and the AFWall+, but the dilemma I see is how to protect my personal information while still allowing the app to access the internet, because there are obviously legitimate reasons for apps to access the internet, updates being one of them, accessing certain data on your phone because the app will not work otherwise being another. Then there are apps like backups that need to access all the information listed above in order to perform a backup. You would think someone would come up with an app to lock out specific areas of the phone, but then again that app would take that information and it would be sold to the highest paying tracking company. So how are other people protecting their information; is there a better technique?
There's absolutely no need to panic and get all paranoid. First, you don't need those apps that you just downloaded onto your phone. It's waste of space and makes a person more paranoid. They don't work. They have never proven to work. They're also battery drainers. What you need to know if that you must know what you're downloading. Just be careful what you're downloading. Read the reviews of the application from other users. Google has already eliminated all (or most) of those malicious applications in the Play Store. If the article you are reading is about 1-2 years old, then it's just old news that has been addressed by Google.
I suggest you use this application instead. (Don't worry, it's safe.)
https://play.google.com/store/apps/...SwxLDEsImRlLndlYnNwbGF0dGVyLnN1c3BpY2lvdXMiXQ..
Use common sense when you are downloading an application. I always back out when I see an app has lots of low reviews. I always read the reviews to find anything "fishy".
You bought a high tech smartphone, so take advantage of it.
Sent from my Nexus 4 using Tapatalk 2
Ultimately you have 2 choices...
1. Embrace technology and just use common sense when installing apps (only from trusted sources, good reviews, etc.)
2. Go back to a dumb phone, put your tin foil hat back on and live in solitude for the rest of your life
EddyOS said:
Ultimately you have 2 choices...
1. Embrace technology and just use common sense when installing apps (only from trusted sources, good reviews, etc.)
2. Go back to a dumb phone, put your tin foil hat back on and live in solitude for the rest of your life
Click to expand...
Click to collapse
I like my tin foil hat
Sent from my Nexus 4 using xda premium

Uninstall harmfull app - Yota Reader

Hello,
since two or three days ago, from time to time I get a notification saying that Yota Reader is a harmful app (or something like that, since the my phone isn't configured in English) and that it could be collecting and sending data to track my activities.
Does anybody knows how serious is that claim? Can I just ignore that message? I use that app to read ebooks in the always-on display and I don't think there's an alternative.
I took a couple screenshots as a proof.
I receive similar messages about "book" and i think "book library"
Same here today
belive that is only for Andorid 6
YotaDevices officially declared that it can be safely ignored, because they are facing some incompatibility issues with their apps and Google. -> OFFICIAL YotaDevices Vkontakte page
queser.info said:
belive that is only for Andorid 6
Click to expand...
Click to collapse
Also in Android 5 (lollipop)
Sent from my KFFOWI using Tapatalk
I get the same message, deactivated now. But i still can use the app.
I receive alert for them. I deactivated the app.
Now i'm using FBREADER, it is ok on the epd screen
TheArt. said:
YotaDevices officially declared that it can be safely ignored, because they are facing some incompatibility issues with their apps and Google. -> OFFICIAL YotaDevices Vkontakte page
Click to expand...
Click to collapse
LMAO what does it matter what the manufacturer officially declares? It's an unknown Russian company. If it's spyware that they put there knowingly, what else do you think they could possibly say other than "it's cool guys, nothing to see here"?
I'll trust the Android anti-malware, thank you. If it's a false alarm, that's fine. But if it isn't... I'm not taking chances.
To be honest, this was my biggest fear about the phone with the whole fishy Russian-Chinese background, crazy low prices, and here we go, malware alert. Great.
paipa said:
LMAO....
Click to expand...
Click to collapse
Sure, everyone make their conclusions. For me, the fact that companies are Russian, Chinese, American, French, I don't care because it's just where they are from.
I'm the first who wants a SailfishOS everywhere, especially on my Yotaphone. But for know, we have to trust the companies who produce what we use in our everyday life. Microsoft, Google, Internet providers and so on. YotaDevices is a company as others are.
The dangerous software check in our phones has been developed by Google, for example.
TheArt. said:
Sure, everyone make their conclusions. For me, the fact that companies are Russian, Chinese, American, French, I don't care because it's just where they are from.
I'm the first who wants a SailfishOS everywhere, especially on my Yotaphone. But for know, we have to trust the companies who produce what we use in our everyday life. Microsoft, Google, Internet providers and so on. YotaDevices is a company as others are.
The dangerous software check in our phones has been developed by Google, for example.
Click to expand...
Click to collapse
Don't get me wrong, I'm not fundamentally biased against Russian products, and it didn't discourage me from buying the phone. But if a dangerous software alert comes up, I don't give them the benefit of the doubt. It's hard enough to trust any manufacturer nowadays, and it's especially true for the smaller ones with little to lose. It's just common sense.
So all I wanted to do is encourage everyone to stay on the safe side and not ignore the warning just because Yota say so. Only turn the affected software back on if the warnings are resolved.
Sure, I'll blindly trust Google, because they haven't done anything fishy, ever. Specially not in their EULAs and privacy agreements. I'll have them record my voice, habits and location history, and I will surely believe a dangerous app alert, no matter if I'm given the factual issues for it or not.
I recived also but I desactivated, hope is a false positive.
I disabled them but YotaReader is still working fine.

But is Phoenix OS safe and secure, or a danger?

I've just come across Phoenix OS and tried it out. While it works great for my purposes, I began to wonder about something. You know how there are stories in the news all the time about foreign countries, particularly China, Russia and North Korea are always finding ways of hacking into US secured sites and what not? How do we know that Phoenix isn't sharing all of our private info with hackers or something? I know it sounds paranoid, but we live in that sort of world now. Any thoughts? (Other than I'm crazy delusional, paranoid and don't use it.) Thanks.
netizenmt said:
I've just come across Phoenix OS and tried it out. While it works great for my purposes, I began to wonder about something. You know how there are stories in the news all the time about foreign countries, particularly China, Russia and North Korea are always finding ways of hacking into US secured sites and what not? How do we know that Phoenix isn't sharing all of our private info with hackers or something? I know it sounds paranoid, but we live in that sort of world now. Any thoughts? (Other than I'm crazy delusional, paranoid and don't use it.) Thanks.
Click to expand...
Click to collapse
Dude, after Snowden, the NSA leaks, and homeland security policy, you've honestly have a hell of a lot more to worry about domestically from your own country to be worried about any foreign nation trying to hack your system. The fact this app is made in a foreign land isn't something that should elevate concern, it's whether or not it connects to the internet and you happen to use it to do anything. That's the threat vector you should be worried about always. The fact you even posed this question implies you're somehow more secure on Windows 10 or Android in general just because they're not developed in China. I honestly trust these guys more than I ever would Microsoft or any other company Snowden's leaks long identified as part of Prism. Think Windows 10 forces updates only for our well being? They upload and download files constantly. My laptop has never been as quiet as when I'm on PhoenixOS. It's serene how at ease it is compared to the constant activity I see on Windows machines. Only one on your side here is you and what you do with the data under your domain, once you go online you're at risk. Once you lose your control or possession of your system, you're at risk. Whether in San Antonio or Shanghai.
it isnt 100% safe i dont recommend it can harm your system i dont know but safely is u use a memu ,andy or bluestack my favorite is memu
Use phoenix os it's not a problem for your datas, NSA already owns them, in the moment you begin using anything developed from US companies like microsoft apple or google you give your private life to them.
The real problem for the security is the usa not china,russia or any other country. If you are so paranoid you can use android x86 without google apps, avoid to use android emulator because they are closed source and you can't verify if there are backdoors.

Concerns for Security? (no, not the lockscreen video)

Hi,
I am currently testing a few dual-sim phones for use by a few people within my company. We purchased one Note 9, a few S9s and a OnePlun 6T (it's like Christmas early at my work).
First discovery was that "new, factory unlocked dual-sim" on Amazon doesn't always mean that. Since dual/sim phones aren't sold directly by Samsung, we had to buy them on Amazon and at the very least, one of the S9s was not new. It had a specific knox setting for a bank in south america so that did not come from the factory. So not having a trusted source for dual-sim Samsung is not something I like.
I then purchased a 6T directly from OnePlus and this one is clearly straight from the manufacturer. I'm happy with that and with the fast updates, but now that two phone manufacturers are making the news for security reasons, it doesn't make me confident that OnePlus doesn't gather data without users knowing. Huawei and ZTE are being boycotted left and right for security purposes, companies are shifting towards what I think in an illusion of safety by focusing on products made in the US (doesn't mean chips aren't made in China).
So for my own curiosity, are there people out there concerned by the fact that OnePlus phones are made in China and that as of right now, two electronics manufacturers are involved in security concerns?
Everyone is spying on everyone : Rule #1 , destroy one country's economy by hitting it's strongest companies : Rule # 2
Now all depends what kind of security you are looking for. Samsung has made an "enterprise edition" of the Note9. with
Huawei has very slow updates and being in the US (i guess you are based there) forget about it. This for obvious guarantees, etc...
OnePlus is a great company, it had it's issues in the press oneplus-phones-collecting-sensitive-data But i think this was dealt with.
now depends in what business you are in, and how sensitive your information is.
I hate to say this, but Apple does offer good security (apparently) and now you can order dual SIM cards, or even use e-sim + nano SIM.
Now if someone REALLY wants to know things about you, they will find out. Thus the famous "I gOt nOtHinG tO HiDe".
Everyone is logging data they shouldn't and without consent I'm sure OnePlus is still doing it even if you select disagree, Google is the worst offender all of their services log everything best way to avoid is to run AOSP and FOSS apps avoid stock roms and Google services if you value privacy.
Nic2112 said:
Hi,
I am currently testing a few dual-sim phones for use by a few people within my company. We purchased one Note 9, a few S9s and a OnePlun 6T (it's like Christmas early at my work).
First discovery was that "new, factory unlocked dual-sim" on Amazon doesn't always mean that. Since dual/sim phones aren't sold directly by Samsung, we had to buy them on Amazon and at the very least, one of the S9s was not new. It had a specific knox setting for a bank in south america so that did not come from the factory. So not having a trusted source for dual-sim Samsung is not something I like.
I then purchased a 6T directly from OnePlus and this one is clearly straight from the manufacturer. I'm happy with that and with the fast updates, but now that two phone manufacturers are making the news for security reasons, it doesn't make me confident that OnePlus doesn't gather data without users knowing. Huawei and ZTE are being boycotted left and right for security purposes, companies are shifting towards what I think in an illusion of safety by focusing on products made in the US (doesn't mean chips aren't made in China).
So for my own curiosity, are there people out there concerned by the fact that OnePlus phones are made in China and that as of right now, two electronics manufacturers are involved in security concerns?
Click to expand...
Click to collapse
Turn off all feedback to OnePlus and the phone does not make any pings to strange servers.
I have my phone rooted and have installed apps that log access to ip addresses. I haven't see anything strange in a month.
I'm not concerned and turned logging off.
tech_head said:
and have installed apps that log access to ip addresses.
Click to expand...
Click to collapse
I'm listening...
I don't buy any devices that can't run Lineage. You can remove the logging programs entirely if you are worried about them still reporting back to OnePlus after opting out. I removed a long list of things, and my phone still works. The couple Huawei devices I've had, and actually are still in the house, run Lineage, so not really worried about them either.
I only buy devices that can be unlocked, and with the intent of running Lineage on them, so I don't really care what software comes on them. Heck my OP 5T sat new in the box until Lineage was released, I used my Nexus 5X while I waited.
Thanks for your feedback.
There's a huge push towards not using Huawei network equipment or not doing business with people who do so. I'm not worried about someone knowing too much about what I do with my phone because between Facebook and Google, anyone can buy that information. The security I'm more concerned about is information theft, leaking screenshots like OnePlus supposedly did at one point, text files filled with "key words" like another news story mentioned. We are even reconsidering laptops and putting a huge emphasis on computers not made in China. I'm guessing the political situation with the Huawei CEO isn't helping the situation either.
Nic2112 said:
The security I'm more concerned about is information theft, leaking screenshots like OnePlus supposedly did at one point, text files filled with "key words" like another news story mentioned.
Click to expand...
Click to collapse
You have a OnePlus device? Remove the offending programs if you insist on running OxygenOS? You can secure your own device. Don't like Google collecting information, you can go without Google if you really wanted too. I just see this whole thing as a none issue I guess?
Nic2112 said:
We are even reconsidering laptops and putting a huge emphasis on computers not made in China. I'm guessing the political situation with the Huawei CEO isn't helping the situation either.
Click to expand...
Click to collapse
Which leaves you with? What devices aren't made in China or made from components from China? I'm not sure any one device is more secure than another.
Anyone see this story:
Germany Refuses To Ban Huawei, Citing Lack of Real Evidence
This is why open source, and open devices are so important. We need things we can update, and things that can be audited. Some people may argue that makes them vulnerable but I disagree.
OhioYJ said:
Which leaves you with? What devices aren't made in China or made from components from China? I'm not sure any one device is more secure than another.
Click to expand...
Click to collapse
That's also something I brought up, you can say Samsung phones don't say "Made in China" but it's highly likely that some components in there are which would have their own security flaws.
OhioYJ said:
You have a OnePlus device? Remove the offending programs if you insist on running OxygenOS? You can secure your own device. Don't like Google collecting information, you can go without Google if you really wanted too. I just see this whole thing as a none issue I guess?
Which leaves you with? What devices aren't made in China or made from components from China? I'm not sure any one device is more secure than another.
Anyone see this story:
Germany Refuses To Ban Huawei, Citing Lack of Real Evidence
This is why open source, and open devices are so important. We need things we can update, and things that can be audited. Some people may argue that makes them vulnerable but I disagree.
Click to expand...
Click to collapse
This is exactly why I unlock my BL and root my phone.
Once that is done, I own it and can do what I want.

Categories

Resources