{"id":79889,"date":"2020-05-01T13:42:52","date_gmt":"2020-05-01T11:42:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona"},"modified":"2020-05-01T13:42:52","modified_gmt":"2020-05-01T11:42:52","slug":"speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona","title":{"rendered":"Turvaekspert \u2014 Xiaomi nutitelefonidest: \u00abSee on tagavara koos telefoni funktsioonidega\u00bb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Reuters'i v\u00e4ljaanne avaldas hoiatusartikli, et Hiina hiiglane Xiaomi salvestab miljonite inimeste isikuandmeid nende veebitegevuse ja seadme kasutamise kohta. \"See on ukse taha sissemurdmine telefonifunktsionaalsusega,\" \u00fctles poolnaljatades Gabi Cirlig oma uuest Xiaomi nutitelefonist.<\/p>\n

\"Turvaekspert<\/p>\n

See kogenud k\u00fcberturbeuuendaja r\u00e4\u00e4kis Forbesi ajakirjanikega p\u00e4rast seda, kui avastas, et tema Redmi Note 8 nutitelefon j\u00e4lgib k\u00f5ike, mida ta teeb. Need andmed saadeti seej\u00e4rel eemalolevatele serveritele, mis asuvad teise Hiina tehnoloogiahiiglase Alibaba serverites, mille ilmselt rendib Xiaomi.<\/p>\n

H\u00e4rra Cirlig avastas, et j\u00e4lgiti murettekitavas mahus andmeid tema k\u00e4itumise kohta, samal ajal kui erinevaid andmeid koguti seadme kohta \u2014 spetsialist oli hirmul, et Hiina ettev\u00f5tte jaoks oli tema isiklikud ja privaatelu andmed t\u00e4ielikult teada.<\/p>\n

<\/center><\/p>\n

Kui ta sirvis Xiaomi seadme vaikimisi installitud brauseris veebisaite, salvestas see k\u00f5iki k\u00fclastatud saite, sealhulgas otsingumootorite p\u00e4ringuid, olgu need siis Google v\u00f5i privaatsusele suunatud DuckDuckGo, samuti salvestati k\u00f5ik elemendid, mida vaadati Xiaomi liidese uudistevoos. See j\u00e4lgimine toimis isegi inkognito re\u017eiimis.<\/p>\n

\"Turvaekspert<\/p>\n

Seade salvestas, milliseid kaustu avati, milliseid ekraanivaateid vahetati, isegi kui jutt k\u00e4is olekuribast ja seadistuste lehelt. K\u00f5ik andmed saadeti paketina eemalolevatele serveritele Singapuris ja Venemaal, kuigi veebialused serverid<\/a> olid registreeritud Pekingi.<\/p>\n

Forbes'i palumise peale viis teine k\u00fcberjulgeoleku uurija Andrew Tierney l\u00e4bi oma uurimise. Ta avastas ka, et Xiaomi Google Play's pakutavad brauserid \u2014 Mi Browser Pro ja Mint Browser \u2014 koguvad samu andmeid. Google Play statistika kohaselt on neid kokku alla laaditud enam kui 15 miljonit korda, mis t\u00e4hendab, et miljonid seadmed v\u00f5ivad olla m\u00f5jutatud.<\/p>\n

Probleemid, nagu arvab h\u00e4rra Kirlig, puudutavad palju rohkem mudeleid. Ta laadis alla erinevate Xiaomi telefonide tarkvarauuendused, sealhulgas Xiaomi Mi 10, Xiaomi Redmi K20 ja Xiaomi Mi MIX 3, kinnitades seej\u00e4rel, et need kasutavad identset brauserit ja t\u00f5en\u00e4oliselt k\u00e4ivad nad l\u00e4bi samade privaatsusprobleemidega.<\/p>\n

Tundub, et probleeme on ka sellega, kuidas Xiaomi andmeid oma serveritesse edastab. Kuigi Hiina ettev\u00f5te v\u00e4idab, et andmed on kr\u00fcpteeritud, avastas Gabi Cirlig, et ta suudab kiiresti n\u00e4ha, mis tema seadmest \u00fcles laaditi, kuna kr\u00fcpteerimiseks kasutatakse lihtsat base64 algoritmi. Andmepakettide lugemiseks kulus vaid paar sekundit. Ta hoiatas ka: \"Minu peamine mure privaatsuse \u00fcle on see, et eemaldatud serveritesse saadetud andmeid on v\u00e4ga lihtne seostada konkreetse kasutajaga.\"<\/p>\n

\"Turvaekspert<\/p>\n

Vastusena nimetatud spetsialistide j\u00e4reldustele \u00fctles Xiaomi esindaja, et teadusuuringute v\u00e4ited ei vasta t\u00f5ele ning privaatsus ja turvalisus on prioriteetsed, ettev\u00f5te j\u00e4rgib rangelt ja t\u00e4ielikult kohalikke seadusi ja norme, mis puudutavad kasutajate isikuandmeid. Kuid esindaja kinnitas samas, et andmeid sirvimise kohta kogutakse, v\u00e4ites, et teave on anon\u00fc\u00fcmne ja ei ole seotud \u00fchegi isikuga, ning kasutajad annavad n\u00f5usoleku selliseks j\u00e4lgimiseks.<\/p>\n

Kuid nagu m\u00e4rgivad Gabi Kirlig ja Andrew Tierney, saadeti serverisse andmeid mitte ainult k\u00fclastatud veebisaitide v\u00f5i internetiotsingute kohta: Xiaomi kogub ka andmeid telefoni kohta, sealhulgas ainulaadne numbrid konkreetse seadme ja Androidi versiooni tuvastamiseks. Selliseid metaandmeid saab soovi korral h\u00f5lpsasti seostada reaalse inimesega ekraani taga.<\/p>\n

Xiaomi esindaja l\u00fckkas tagasi v\u00e4idete, et sirvimise andmeid salvestatakse inkognito re\u017eiimis. Siiski avastasid turvaeksperdid oma s\u00f5ltumatutes testides, et nende veebik\u00e4itumine edastatakse kaugserveritesse s\u00f5ltumata sellest, millises re\u017eiimis brauser t\u00f6\u00f6tab, esitades t\u00f5estuseks nii fotosid kui ka videoid.<\/p>\n

\r\n \"M\u00e4ngi\r\n
<\/div>\r\n <\/div><\/center><\/center><\/p>\n

Kuidas Forbesi ajakirjanikud esitasid Xiaomile video, kus n\u00e4idatakse, kuidas Google'i otsingud ja veebisaitide k\u00fclastused saadeti eemalolevatele serveritele isegi inkognito-re\u017eiimis, j\u00e4tkas ettev\u00f5tte esindaja selle eitamist, \u00f6eldes: «See video demonstreerib anon\u00fc\u00fcmsete vaatamiste andmete kogumist, mis on \u00fcks levinumaid lahendusi, mida internetiettev\u00f5tted kasutavad, et parandada sirvimiskeskkonda teabe anal\u00fc\u00fcsimise kaudu, mis ei identifitseeri isiku».<\/p>\n

Kuid turvaeksperdid arvavad, et Xiaomi brauseri k\u00e4itumine on palju agressiivsem kui teiste populaarsete brauserite, nagu Google Chrome v\u00f5i Apple Safari: viimased ei salvesta brauseri k\u00e4itumist, sealhulgas URL-e, ilma kasutaja v\u00e4ljendatud n\u00f5usolekuta ja privaatvaates.<\/p>\n

Lisaks leidis h\u00e4rra Kirlig oma uuringus, et Xiaomi eelinstallitud muusikapleier kogub teavet kuulamisharjumuste kohta: millised laulud m\u00e4ngitakse ja millal.<\/p>\n

Gabi Kirlig kahtlustab, et Xiaomi j\u00e4lgib tarkvara kasutamist, kuna iga kord, kui ta avab rakendused, saadetakse v\u00e4ike teave eemalserverisse. Teine anon\u00fc\u00fcmne uurija, kellele Forbes viitab, \u00fctles, et on samuti registreerinud, kuidas Hiina ettev\u00f5tte telefonid selliseid andmeid koguvad. Xiaomi ei olnud kommenteerinud.<\/p>\n

Teadetatakse, et andmed saadetakse Hiina anal\u00fc\u00fctika ettev\u00f5ttele Sensors Analytics (tuntud ka kui Sensors Data), mis asutati 2015. aastal ja tegeleb kasutajate k\u00e4itumise s\u00fcvaanal\u00fc\u00fcsiga ning professionaalsete konsultatsiooniteenuste pakkumisega. Tema t\u00f6\u00f6riistad aitavad klientidel uurida varjatud andmeid, uurides v\u00f5tme k\u00e4itumismustreid. Xiaomi esindaja kinnitas sidet start-upiga: «Kuigi Sensors Analytics pakub Xiaomi jaoks andmeanal\u00fc\u00fcsi lahendust, hoitakse kogutud anon\u00fc\u00fcmseid andmeid meie enda serverites<\/a> Xiaomis ja need ei anta edasi Sensors Analyticsile ega teistele kolmandatele osapooltele».<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Allikas: 3dnews.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0437\u0434\u0430\u043d\u0438\u0435 Reuters \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u0441\u0442\u0430\u0442\u044c\u044e-\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 Xiaomi \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043b\u044e\u0434\u0435\u0439 \u043e\u0431 \u0438\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044f\u0445 \u0432 \u0421\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. «\u042d\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430», — \u0437\u0430\u044f\u0432\u0438\u043b \u043f\u043e\u043b\u0443\u0448\u0443\u0442\u044f \u0413\u0430\u0431\u0438 \u041a\u0438\u0440\u043b\u0438\u0433 (Gabi Cirlig) \u043e \u0441\u0432\u043e\u0451\u043c \u043d\u043e\u0432\u043e\u043c \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0435 Xiaomi. \u042d\u0442\u043e\u0442 \u043e\u043f\u044b\u0442\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043b \u0441 \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 Forbes \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":79890,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-79889","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Turvaspetsialist \u2014 Xiaomi nutitelefonidest: \u201eSee on tagauks telefonifunktsioonidega\u201c | ProHoster","description":"Ajaleht Reuters avaldas hoiatava artikli selle kohta, et Hiina hiiglane Xiaomi salvestab miljonite inimeste isiklikke andmeid nende Interneti-aktiivsuse ja seadme kasutamise kohta.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u043e \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430\u0445 Xiaomi: \u00ab\u042d\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u00bb | ProHoster","og:description":"\u0418\u0437\u0434\u0430\u043d\u0438\u0435 Reuters \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u0441\u0442\u0430\u0442\u044c\u044e-\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 Xiaomi \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043b\u044e\u0434\u0435\u0439 \u043e\u0431 \u0438\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044f\u0445 \u0432 \u0421\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-01T11:42:52+00:00","article:modified_time":"2020-05-01T11:42:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"79889","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:29:39","updated":"2026-02-09 16:50:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/79889","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=79889"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/79889\/revisions"}],"predecessor-version":[{"id":164383,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/79889\/revisions\/164383"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/79890"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=79889"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=79889"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=79889"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}