Reuters tau tshaj tawm tsab xov xwm ceeb toom tias Tuam Tshoj loj heev Xiaomi tau sau cov ntaub ntawv tus kheej ntawm ntau lab tus tib neeg txog lawv cov haujlwm hauv online thiab kev siv cuab yeej. Gabi Cirlig hais tias, "Nws yog qhov rov qab rau kev ua haujlwm ntawm lub xov tooj," hais tias Gabi Cirlig, ib nrab-jokingly, txog nws lub xov tooj Xiaomi tshiab.
Tus kws tshawb fawb txog kev nyab xeeb cybersecurity no tau hais rau Forbes tom qab pom tias nws Redmi Note 8 smartphone tau soj ntsuam txhua yam nws ua. Cov ntaub ntawv no tau raug xa mus rau cov chaw taws teeb tswj hwm los ntawm cov phooj ywg Suav tech loj heev Alibaba, uas zoo li yuav xauj los ntawm Xiaomi.
Yawg Kirlig tau tshawb pom tias muaj cov ntaub ntawv txaus ntshai txog nws tus cwj pwm tau taug qab thaum ntau hom ntaub ntawv tau sau ib txhij los ntawm lub cuab yeej - tus kws tshaj lij tau txaus ntshai tias cov ntsiab lus ntawm nws tus kheej thiab lub neej ntiag tug tau paub tag nrho rau Suav tuam txhab.
Thaum nws tshawb xyuas cov vev xaib hauv lub neej ntawd Xiaomi browser ntawm lub cuab yeej, tom kawg tau sau tag nrho cov chaw mus xyuas, suav nrog cov lus nug los ntawm kev tshawb fawb xyaw, xws li Google lossis DuckDuckGo tsom rau kev ceev ntiag tug, thiab txhua yam khoom tau saib hauv xov xwm pub ntawm Xiaomi plhaub tau kuj sau tseg. Ntxiv mus, tag nrho cov kev soj ntsuam no tau ua haujlwm txawm tias thaum siv "incognito" hom.
Lub cuab yeej kaw cov folders twg tau qhib, cov ntxaij vab tshaus tau hloov pauv, txawm tias thaum nws los txog rau qhov xwm txheej bar thiab nplooj ntawv teeb tsa. Tag nrho cov ntaub ntawv raug xa mus rau hauv cov khoom siv rau cov chaw nyob deb nroog hauv Singapore thiab Russia, txawm hais tias cov servers lub vev xaib tau sau npe hauv Beijing.
Ntawm Forbes qhov kev thov, lwm tus kws tshawb fawb cybersecurity, Andrew Tierney, tau ua nws qhov kev tshawb nrhiav. Nws kuj pom tau tias cov browsers muab los ntawm Xiaomi ntawm Google Play - Mi Browser Pro thiab Mint Browser - sau tib cov ntaub ntawv. Raws li Google Play cov txheeb cais, ua ke lawv tau teeb tsa ntau dua 15 lab lub sijhawm, txhais tau tias ntau lab ntawm cov khoom siv tuaj yeem cuam tshuam.
Cov teeb meem, raws li Mr. Kirlig, siv rau ntau tus qauv ntau dua. Nws rub tawm firmware rau lwm lub xov tooj Xiaomi, suav nrog Xiaomi Mi 10, Xiaomi Redmi K20 thiab Xiaomi Mi MIX 3, ua ntej lees paub tias lawv siv qhov browser zoo ib yam thiab yuav raug kev txom nyem los ntawm tib yam teeb meem ntiag tug.
Kuj zoo li yuav muaj teeb meem nrog txoj kev Xiaomi hloov cov ntaub ntawv mus rau nws cov servers. Txawm hais tias lub tuam txhab Suav tau lees tias cov ntaub ntawv raug encrypted, Gabi Kirlig pom tias nws tuaj yeem pom sai sai uas tau rub tawm los ntawm nws lub cuab yeej vim tias qhov encryption siv qhov yooj yim tshaj plaws base64 algorithm. Nws tsuas yog siv ob peb lub vib nas this los hloov cov ntaub ntawv pob ntawv rau hauv cov ntaub ntawv nyeem tau. Nws kuj tau ceeb toom tias: "Kuv qhov kev txhawj xeeb tseem ceeb txog kev ceev ntiag tug yog tias cov ntaub ntawv xa mus rau cov chaw taws teeb tswj tau yooj yim cuam tshuam nrog ib tus neeg siv tshwj xeeb."
Hauv kev teb rau qhov kev tshawb pom ntawm cov kws tshaj lij, Xiaomi tus kws tshaj lij tau hais tias qhov kev tshawb fawb thov tsis muaj tseeb, thiab kev ceev ntiag tug thiab kev nyab xeeb yog qhov tseem ceeb tshaj plaws, thiab lub tuam txhab nruj me ntsis ua raws li cov cai hauv zos thiab cov kev cai hais txog cov neeg siv khoom ntiag tug. . Tab sis tus kws tshaj lij tau lees paub tias kev tshawb nrhiav cov ntaub ntawv raug sau, hais tias cov ntaub ntawv tsis qhia npe thiab tsis khi rau ib tus neeg twg, thiab cov neeg siv pom zoo rau kev taug qab zoo li no.
Tab sis raws li Gabi Kirlig thiab Andrew Tierney taw qhia, nws tsis yog tsuas yog cov ntaub ntawv hais txog cov vev xaib tau mus xyuas lossis tshawb hauv Is Taws Nem uas raug xa mus rau server: Xiaomi kuj tau sau cov ntaub ntawv hais txog xov tooj, suav nrog cov lej tshwj xeeb txhawm rau txheeb xyuas cov cuab yeej tshwj xeeb thiab version ntawm Android. Xws li metadata tuaj yeem cuam tshuam nrog tus neeg tiag tiag tom qab lub vijtsam yog tias xav tau.
Ib tus neeg hais xov xwm Xiaomi kuj tsis lees paub tias kev tshawb nrhiav cov ntaub ntawv raug kaw hauv hom incognito. Txawm li cas los xij, cov kws tshawb fawb txog kev ruaj ntseg pom nyob rau hauv lawv cov kev sim ywj pheej uas lawv tus cwj pwm hauv online xa lus mus rau cov chaw taws teeb tswj tsis hais hom twg browser tab tom khiav, muab cov duab thiab yeeb yaj kiab ua pov thawj.
Thaum Forbes cov neeg sau xov xwm muab Xiaomi nrog cov vis dis aus uas qhia tias Google tshawb nrhiav thiab kev mus ntsib lub vev xaib raug xa mus rau cov chaw taws teeb tswj txawm tias nyob hauv hom incognito, tus kws tshaj lij lub tuam txhab txuas ntxiv tsis lees paub tias cov ntaub ntawv tau raug kaw: "Cov vis dis aus no qhia txog kev sau cov ntaub ntawv tsis qhia npe, uas yog ib qho kev txiav txim siab tshaj plaws los ntawm cov tuam txhab hauv Is Taws Nem los txhim kho tag nrho cov kev tshawb fawb los ntawm kev txheeb xyuas cov ntaub ntawv tsis yog tus kheej. "
Txawm li cas los xij, cov kws paub txog kev ruaj ntseg ntseeg tias tus cwj pwm ntawm Xiaomi browser yog qhov hnyav dua li lwm cov browser nrov xws li Google Chrome lossis Apple Safari: tom kawg tsis sau tus cwj pwm browser, suav nrog URLs, yam tsis muaj tus neeg siv pom zoo thiab hauv hom kev tshawb nrhiav ntiag tug.
Tsis tas li ntawd, hauv nws txoj kev tshawb fawb, Mr. Kirlig tau tshawb pom tias cov suab paj nruag tau teeb tsa ua ntej ntawm Xiaomi smartphones sau cov ntaub ntawv hais txog kev mloog tus cwj pwm: cov nkauj twg raug ntaus thiab thaum twg.
Gabi Kirlig kuj xav tias Xiaomi tab tom saib xyuas kev siv software vim tias txhua zaus nws qhib cov apps, cov ntaub ntawv me me raug xa mus rau cov chaw taws teeb chaw taws teeb. Lwm tus kws tshawb fawb tsis qhia npe los ntawm Forbes tau hais tias nws kuj tau sau tseg tias Suav tuam txhab xov tooj tau sau cov ntaub ntawv zoo li cas. Xiaomi tsis tau hais txog qhov no.
Cov ntaub ntawv tau tshaj tawm yuav raug xa mus rau Suav tuam txhab tshuaj ntsuam xyuas Sensors Analytics (tseem hu ua Sensors Data), uas tau tsim nyob rau xyoo 2015 thiab tau koom nrog hauv kev tshuaj xyuas qhov tob ntawm cov neeg siv tus cwj pwm thiab muab kev pabcuam kws tshaj lij. Nws cov cuab yeej pab cov neeg siv tshawb nrhiav cov ntaub ntawv zais los ntawm kev tshuaj xyuas tus cwj pwm tseem ceeb. Tus kws tshaj lij Xiaomi tau lees paub qhov kev sib txuas nrog kev pib: "Txawm hais tias Sensors Analytics muab cov ntaub ntawv tshuaj ntsuam xyuas rau Xiaomi, cov ntaub ntawv tsis qhia npe tau muab khaws cia rau ntawm Xiaomi tus kheej servers thiab yuav tsis muab qhia rau Sensors Analytics lossis lwm lub tuam txhab thib peb. "
Tau qhov twg los: 3d xov.ru