{"id":79889,"date":"2020-05-01T13:42:52","date_gmt":"2020-05-01T11:42:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona"},"modified":"2020-05-01T13:42:52","modified_gmt":"2020-05-01T11:42:52","slug":"speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona","title":{"rendered":"Stru\u010dnjak za sigurnost \u2014 o pametnim telefonima Xiaomija: 'To je backdoor s funkcijama telefona'","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Agentura Reuters objavila je upozoravaju\u0107i \u010dlanak o tome da kineski div Xiaomi bilje\u017ei osobne podatke milijuna ljudi o njihovim aktivnostima na mre\u017ei, kao i o kori\u0161tenju ure\u0111aja. «To je le\u0111a s funkcionalno\u0161\u0107u telefona», izjavio je polu\u0161ale\u0107i Gabi Cirlig o svom novom Xiaomi pametnom telefonu.<\/p>\n

\"Stru\u010dnjak<\/p>\n

Ovaj iskusni istra\u017eiva\u010d u podru\u010dju cyber sigurnosti razgovarao je s novinarima Forbesa nakon \u0161to je otkrio da njegov Redmi Note 8 prati sve \u0161to radi. Ovi podaci potom su se slali na udaljene servere, smje\u0161tene kod drugog kineskog tehnolo\u0161kog giganta Alibabe, koji vjerojatno iznajmljuje Xiaomi.<\/p>\n

Gospodin Cirlig otkrio je da su pra\u0107ene zabrinjavaju\u0107e koli\u010dine podataka o njegovom pona\u0161anju, dok su istovremeno prikupljani razli\u010diti tipovi podataka s ure\u0111aja \u2014 stru\u010dnjak je bio upla\u0161en \u0161to su informacije o njegovom identitetu i privatnom \u017eivotu bile potpuno poznate kineskoj kompaniji.<\/p>\n

<\/center><\/p>\n

Kada je pregledavao web stranice u Xiaomi pregledniku, koji je bio postavljen kao zadani na ure\u0111aju, on je snimao sve posje\u0107ene stranice, uklju\u010duju\u0107i upite pretra\u017eiva\u010da, bilo da je u pitanju Google ili privatnost usmjerena DuckDuckGo, tako\u0111er su se bilje\u017eili svi elementi koji su pregledavani u novinskom tijeku Xiaomi su\u010delja. Ova cjelokupna pra\u0107enja radila su \u010dak i kada je kori\u0161ten na\u010din «inkognito».<\/p>\n

\"Stru\u010dnjak<\/p>\n

Ure\u0111aj je bilje\u017eio koje mape se otvaraju, koje se stranice prebacuju, \u010dak i ako je rije\u010d o statusnoj traci i stranici s postavkama ure\u0111aja. Svi su podaci slani paketno na udaljene servere u Singapuru i Rusiji, iako su web domene poslu\u017eitelja<\/a> bile registrirane u Pekingu.<\/p>\n

Na zahtjev Forbesa, drugi istra\u017eitelj kibernetske sigurnosti Andrew Tierney proveo je vlastitu istragu. Tako\u0111er je otkrio da preglednici isporu\u010deni od strane Xiaomija na Google Play-u \u2014 Mi Browser Pro i Mint Browser \u2014 prikupljaju iste podatke. Prema statistici Google Play-a, zajedno su instalirani vi\u0161e od 15 milijuna puta, \u0161to zna\u010di da bi moglo biti pogo\u0111eno milijune ure\u0111aja.<\/p>\n

Problemi, kako smatra gospodin Kirlig, odnose se na znatno ve\u0107i broj modela. Preuzeo je firmware za druge Xiaomi telefone, uklju\u010duju\u0107i Xiaomi Mi 10, Xiaomi Redmi K20 i Xiaomi Mi MIX 3, nakon \u010dega je potvrdio da koriste identi\u010dan preglednik i vjerojatno imaju iste probleme s privatno\u0161\u0107u.<\/p>\n

\u010cini se da se pojavljuju pote\u0161ko\u0107e i u na\u010dinu na koji Xiaomi prenosi podatke na svoje poslu\u017eitelje. Iako kineska tvrtka tvrdi da su podaci \u0161ifrirani, Gabi Cirlig otkrio je da mo\u017ee brzo vidjeti ono \u0161to je u\u010ditano s njegovog ure\u0111aja, jer se za \u0161ifriranje koristi najjednostavniji algoritam base64. Bilo je potrebno samo nekoliko sekundi da se paketi podataka pretvore u \u010ditljive dijelove informacija. Tako\u0111er je upozorio: «Moja najve\u0107a briga u vezi s privatno\u0161\u0107u je ta da se podaci koji se \u0161alju na udaljene poslu\u017eitelje vrlo lako mogu povezati s odre\u0111enim korisnikom.»<\/p>\n

\"Stru\u010dnjak<\/p>\n

U odgovoru na zaklju\u010dke navedenih stru\u010dnjaka, predstavnik Xiaomija izjavio je da tvrdnje o istra\u017eivanjima nisu to\u010dne, a privatnost i sigurnost imaju prioritet, pri \u010demu kompanija strogo po\u0161tuje i u potpunosti se pridr\u017eava lokalnih zakona i propisa koji se odnose na osobne podatke korisnika. No, predstavnik je tako\u0111er potvrdio da se prikupljaju podaci o pregledima, tvrde\u0107i da su informacije anonimne i nisu povezane ni s jednom osobom, a korisnici pristaju na takvo pra\u0107enje.<\/p>\n

Me\u0111utim, kako navode Gabi Kirlig i Andrew Tierney, na poslu\u017eitelj su slane informacije ne samo o posje\u0107enim web stranicama ili pretra\u017eivanju interneta: Xiaomi tako\u0111er prikuplja podatke o telefonu, uklju\u010duju\u0107i jedinstvene brojeve za identifikaciju odre\u0111enog ure\u0111aja i verziju Androida. Takvi metapodaci lako se mogu povezati s stvarnom osobom izvan ekrana ako se to \u017eeli.<\/p>\n

Predstavnik Xiaomija tako\u0111er je odbacio tvrdnje da se podaci o pregledima bilje\u017ee u incognito na\u010dinu. Ipak, stru\u010dnjaci za sigurnost otkrili su u svojim neovisnim testovima da njihovo pona\u0161anje na mre\u017ei \u0161alje na udaljene poslu\u017eitelje bez obzira na to u kojem na\u010dinu preglednika rade, pru\u017eaju\u0107i kao dokaze i fotografije i videozapise.<\/p>\n

\r\n \"Pogledajte\r\n
<\/div>\r\n <\/div><\/center><\/center><\/p>\n

Kada su novinari Forbesa prikazali Xiaomi video koji pokazuje kako su pretra\u017eivanje na Googleu i posje\u0107ivanje web stranica slani na udaljene servere \u010dak i u incognito modeu, predstavnik tvrtke nastavio je negirati da se informacije bilje\u017ee: \u201eOvaj video prikazuje prikupljanje anonimnih podataka o pretra\u017eivanju, \u0161to je jedno od naj\u010de\u0161\u0107ih rje\u0161enja koja internet tvrtke primjenjuju za pobolj\u0161anje op\u0107eg okru\u017eenja u pregledniku kroz analizu podataka koji ne identificiraju identitet.\u201c<\/p>\n

Me\u0111utim, stru\u010dnjaci za sigurnost smatraju da je pona\u0161anje preglednika Xiaomi mnogo agresivnije u odnosu na druge popularne preglednike poput Google Chromea ili Apple Safari: potonji ne snimaju pona\u0161anje preglednika, uklju\u010duju\u0107i URL adrese, bez izri\u010ditog pristanka korisnika i u na\u010dinu privatnog pregleda.<\/p>\n

Pored toga, u svom istra\u017eivanju gospon Kirlig je otkrio da unaprijed instalirani muzi\u010dki plejer na Xiaomi pametnim telefonima prikuplja informacije o navikama slu\u0161anja: koje se pjesme pu\u0161taju i kada.<\/p>\n

Gabi Kirlig tako\u0111er sumnja da Xiaomi prati kori\u0161tenje softvera, budu\u0107i da se svaki put kada otvori aplikacije, mala koli\u010dina informacija \u0161alje na udaljeni server. Drugi anonimni istra\u017eiva\u010d, na kojeg se poziva Forbes, izjavio je da je tako\u0111er registrovao kako telefoni kineske kompanije prikupljaju sli\u010dne podatke. Xiaomi nije dao komentare o ovom pitanju.<\/p>\n

Javlja se da se podaci \u0161alju kineskoj analiti\u010dkoj tvrtki Sensors Analytics (poznatoj i kao Sensors Data), koja je osnovana 2015. godine i bavi se dubokom analizom pona\u0161anja korisnika te pru\u017eanjem profesionalnih konzultantskih usluga. Njezin alati poma\u017eu klijentima istra\u017eiti skrivene podatke putem prou\u010davanja klju\u010dnih obrazaca pona\u0161anja. Predstavnik Xiaomi potvrdio je vezu s ovim startupom: \u201eIako Sensors Analytics pru\u017ea rje\u0161enje za analizu podataka za Xiaomi, prikupljeni anonimni podaci pohranjuju se na vlastitim\u201c poslu\u017eiteljima<\/a> Xiaomi i ne\u0107e biti proslije\u0111eni Sensors Analyticsu ili bilo kojim drugim vanjskim kompanijama.\u201c<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Izvor: 3dnews.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0437\u0434\u0430\u043d\u0438\u0435 Reuters \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u0441\u0442\u0430\u0442\u044c\u044e-\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 Xiaomi \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043b\u044e\u0434\u0435\u0439 \u043e\u0431 \u0438\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044f\u0445 \u0432 \u0421\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. «\u042d\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430», — \u0437\u0430\u044f\u0432\u0438\u043b \u043f\u043e\u043b\u0443\u0448\u0443\u0442\u044f \u0413\u0430\u0431\u0438 \u041a\u0438\u0440\u043b\u0438\u0433 (Gabi Cirlig) \u043e \u0441\u0432\u043e\u0451\u043c \u043d\u043e\u0432\u043e\u043c \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0435 Xiaomi. \u042d\u0442\u043e\u0442 \u043e\u043f\u044b\u0442\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043b \u0441 \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 Forbes \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":79890,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-79889","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Stru\u010dnjak za sigurnost - o pametnim telefonima Xiaomi: \"To je bakdoor s telefonskim funkcijama\" | ProHoster","description":"\u010casopis Reuters objavio je upozoravaju\u0107i \u010dlanak o tome kako kineski div Xiaomi snima li\u010dne podatke miliona ljudi o njihovim aktivnostima na mre\u017ei, kao i o kori\u0161tenju ure\u0111aja.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u043e \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430\u0445 Xiaomi: \u00ab\u042d\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u00bb | ProHoster","og:description":"\u0418\u0437\u0434\u0430\u043d\u0438\u0435 Reuters \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u0441\u0442\u0430\u0442\u044c\u044e-\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 Xiaomi \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043b\u044e\u0434\u0435\u0439 \u043e\u0431 \u0438\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044f\u0445 \u0432 \u0421\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-01T11:42:52+00:00","article:modified_time":"2020-05-01T11:42:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"79889","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:29:39","updated":"2026-02-09 16:50:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/79889","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=79889"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/79889\/revisions"}],"predecessor-version":[{"id":164383,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/79889\/revisions\/164383"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/79890"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=79889"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=79889"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=79889"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}