Reuters yatulutsa nkhani yochenjeza kuti chimphona chaku China Xiaomi chikulemba zambiri za anthu mamiliyoni ambiri pazantchito zawo pa intaneti komanso kugwiritsa ntchito zida. "Ndi khomo lakumbuyo ku magwiridwe antchito a foni," adatero Gabi Cirlig, moseketsa, za foni yake yatsopano ya Xiaomi.
Wofufuza wodziwa za cybersecurity adalankhula ndi Forbes atazindikira kuti foni yake yamakono ya Redmi Note 8 imayang'ana zonse zomwe amachita. Izi zidatumizidwa kumaseva akutali omwe ali ndi chimphona chaukadaulo waku China Alibaba, omwe mwina adabwereka ndi Xiaomi.
A Kirlig adazindikira kuti zidziwitso zowopsa zamakhalidwe ake zikutsatiridwa pomwe mitundu yosiyanasiyana yazidziwitso idasonkhanitsidwa nthawi imodzi kuchokera pachidacho - katswiriyo adachita mantha kuti tsatanetsatane wa mbiri yake komanso moyo wake wamseri zimadziwika bwino ndi kampani yaku China.
Pamene adasakatula mawebusayiti mumsakatuli wosasinthika wa Xiaomi pa chipangizocho, womaliza adalemba masamba onse omwe adayendera, kuphatikiza mafunso ochokera kumainjini osakira, kaya Google kapena DuckDuckGo yoyang'ana zachinsinsi, ndi zinthu zonse zomwe zidawonedwa munkhani za chipolopolo cha Xiaomi zinali. zinalembedwanso. Kuphatikiza apo, kuyang'anira konseku kunagwira ntchito ngakhale njira ya "incognito" idagwiritsidwa ntchito.
Chipangizocho chinalemba mafoda omwe adatsegulidwa, zomwe zowonetsera zidasinthidwa, ngakhale zitafika pa bar ya chikhalidwe ndi tsamba la zoikamo za chipangizo. Deta yonse idatumizidwa m'magulu kumaseva akutali ku Singapore ndi Russia, ngakhale mawebusayiti a ma seva adalembetsedwa ku Beijing.
Pa pempho la Forbes, wofufuza wina wa cybersecurity, Andrew Tierney, adachita kafukufuku wake. Adapezanso kuti asakatuli omwe Xiaomi adapereka pa Google Play - Mi Browser Pro ndi Mint Browser - amasonkhanitsa zomwezo. Malinga ndi ziwerengero za Google Play, palimodzi adayikidwa nthawi zopitilira 15 miliyoni, kutanthauza kuti mamiliyoni a zida zitha kukhudzidwa.
Mavuto, malinga ndi Bambo Kirlig, amagwira ntchito ku chiwerengero chokulirapo cha zitsanzo. Adatsitsa firmware yamafoni ena a Xiaomi, kuphatikiza Xiaomi Mi 10, Xiaomi Redmi K20 ndi Xiaomi Mi MIX 3, asanatsimikizire kuti amagwiritsa ntchito msakatuli wofanana ndipo mwina amavutika ndi zinsinsi zomwezo.
Zikuonekanso kuti pali zovuta ndi momwe Xiaomi amasamutsira deta kumaseva ake. Ngakhale kampani yaku China imanena kuti detayo idabisidwa, a Gabi Kirlig adapeza kuti amatha kuwona mwachangu zomwe zidatsitsidwa pachipangizo chake chifukwa kubisako kumagwiritsa ntchito njira yosavuta kwambiri ya base64. Zinangotenga masekondi angapo kuti atembenuzire mapaketi a data kukhala zidutswa zowerengeka za chidziwitso. Anachenjezanso kuti: "Chodetsa nkhawa changa chachikulu pazachinsinsi ndichakuti zomwe zimatumizidwa kumaseva akutali zimalumikizidwa mosavuta ndi munthu wina wogwiritsa ntchito."
Poyankha zomwe akatswiriwa apeza, wolankhulira Xiaomi adati zonena za kafukufukuyu sizowona, ndipo chinsinsi ndi chitetezo ndizofunikira kwambiri, ndipo kampaniyo imatsatira mosamalitsa ndipo ikutsatira kwathunthu malamulo am'deralo ndi malamulo okhudza zinsinsi za ogwiritsa ntchito. . Koma wolankhulirayo adatsimikiza kuti kusakatula ukusonkhanitsidwa, ponena kuti chidziwitsocho sichikudziwika ndipo sichimalumikizidwa ndi munthu aliyense, ndipo ogwiritsa ntchito amavomereza kutsatira izi.
Koma monga Gabi Kirlig ndi Andrew Tierney akunenera, sizinali chabe zambiri zamawebusayiti omwe adayendera kapena kusaka pa intaneti zomwe zidatumizidwa ku seva: Xiaomi adasonkhanitsanso zambiri za foni, kuphatikiza manambala apadera kuti azindikire chipangizo china ndi mtundu wa Android. Metadata yotere imatha kulumikizidwa mosavuta ndi munthu weniweni kuseri kwa chinsalu ngati angafune.
Mneneri wa Xiaomi adakananso zonena kuti kusakatula kwa data kumajambulidwa mu incognito mode. Komabe, ofufuza zachitetezo adapeza pamayesero awo odziyimira pawokha kuti machitidwe awo a pa intaneti amatumiza mauthenga ku ma seva akutali mosasamala kanthu kuti msakatuli akuyenda motani, akupereka zithunzi ndi makanema onse ngati umboni.
Atolankhani a Forbes atapatsa Xiaomi kanema wowonetsa momwe kusaka kwa Google ndi kuyendera tsamba lawebusayiti kumatumizidwa kumaseva akutali ngakhale mumayendedwe a incognito, wolankhulira kampaniyo adapitiliza kukana kuti chidziwitsocho chikujambulidwa: "Kanemayu akuwonetsa kusonkhanitsa deta yosadziwika, yomwe ndi chimodzi mwazosankha zodziwika bwino ndi makampani apaintaneti kuti apititse patsogolo kusakatula kwanu posanthula zidziwitso zosadziwikiratu."
Komabe, akatswiri achitetezo amakhulupirira kuti machitidwe a msakatuli wa Xiaomi ndiwowopsa kwambiri kuposa asakatuli ena otchuka monga Google Chrome kapena Apple Safari: omaliza samalemba machitidwe asakatuli, kuphatikiza ma URL, popanda chilolezo cha wogwiritsa ntchito komanso kusakatula mwachinsinsi.
Kuphatikiza apo, mu kafukufuku wake, Bambo Kirlig adapeza kuti woyimba nyimboyo adayikidwa kale pa mafoni a Xiaomi amasonkhanitsa zambiri zokhudzana ndi kumvetsera: nyimbo zomwe zimaseweredwa komanso liti.
Gabi Kirlig akukayikiranso kuti Xiaomi akuyang'anira kugwiritsa ntchito mapulogalamu chifukwa nthawi iliyonse akatsegula mapulogalamu, chidziwitso chochepa chimatumizidwa ku seva yakutali. Wofufuza wina wosadziwika yemwe adatchulidwa ndi Forbes adati adalembanso momwe mafoni a kampani yaku China adatengera zomwezi. Xiaomi sanayankhepo kanthu pankhaniyi.
Detayo akuti idatumizidwa ku kampani yaku China yowerengera Sensors Analytics (yomwe imadziwikanso kuti Sensors Data), yomwe idakhazikitsidwa mu 2015 ndipo ikuchita kusanthula mozama zamakhalidwe a ogwiritsa ntchito ndikupereka upangiri waukadaulo. Zida zake zimathandiza makasitomala kufufuza deta yobisika pofufuza machitidwe akuluakulu. Mneneri wa Xiaomi adatsimikizira kulumikizana ndi kuyambikako: "Ngakhale Sensors Analytics imapereka yankho la kusanthula kwa data kwa Xiaomi, zomwe zasonkhanitsidwa mosadziwika zimasungidwa pa maseva ake a Xiaomi ndipo sizidzagawidwa ndi Sensors Analytics kapena makampani ena aliwonse."
Source: 3dnews.ru