{"id":79889,"date":"2020-05-01T13:42:52","date_gmt":"2020-05-01T11:42:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona"},"modified":"2020-05-01T13:42:52","modified_gmt":"2020-05-01T11:42:52","slug":"speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona","title":{"rendered":"Specialist \u00een securitate - despre smartphone-urile Xiaomi: \u201eAcesta este un backdoor cu func\u021bii de telefon\u201d","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

publica\u021bia Reuters a lansat un articol de avertizare referitor la faptul c\u0103 gigantul chinez Xiaomi colecteaz\u0103 date personale ale milioanelor de oameni despre activit\u0103\u021bile lor online, precum \u0219i despre utilizarea dispozitivului. \u201eEste o u\u0219\u0103 din spate cu func\u021bionalit\u0103\u021bile unui telefon\u201d, a declarat \u00een glum\u0103 Gabi Cirlig despre noul s\u0103u smartphone Xiaomi.<\/p>\n

\"Specialist<\/p>\n

Acest cercet\u0103tor experimentat \u00een domeniul securit\u0103\u021bii cibernetice a discutat cu jurnali\u0219tii de la Forbes dup\u0103 ce a descoperit c\u0103 smartphone-ul s\u0103u Redmi Note 8 \u00eei urm\u0103re\u0219te toate ac\u021biunile. Aceste date erau apoi trimise c\u0103tre servere externe, g\u0103zduite de un alt gigant tehnologic chinez, Alibaba, care, probabil, le \u00eenchiriaz\u0103 Xiaomi.<\/p>\n

Domnul Cirlig a descoperit c\u0103 erau urm\u0103rite volume alarmante de informa\u021bii despre comportamentul s\u0103u, \u00een timp ce simultan erau colectate diferite tipuri de date de pe dispozitiv \u2014 specialistul a fost \u00eengrijorat de faptul c\u0103 informa\u021biile despre identitatea \u0219i via\u021ba sa privat\u0103 erau complet cunoscute companiei chineze.<\/p>\n

<\/center><\/p>\n

C\u00e2nd naviga pe site-uri web \u00een browserul Xiaomi, preinstalat pe dispozitiv, acesta \u00eenregistra toate site-urile vizitate, inclusiv cererile de c\u0103utare, fie c\u0103 era vorba de Google sau de DuckDuckGo, care este orientat pe confiden\u021bialitate. De asemenea, erau \u00eenregistrate toate elementele vizualizate \u00een fluxul de \u0219tiri al interfe\u021bei Xiaomi. Mai mult, toat\u0103 aceast\u0103 urm\u0103rire func\u021biona chiar \u0219i atunci c\u00e2nd se utiliza modul \u201eincognito\u201d.<\/p>\n

\"Specialist<\/p>\n

Dispozitivul \u00eenregistra ce dosare erau deschise, ce ecrane erau schimbate, chiar \u0219i c\u00e2nd era vorba de bara de stare \u0219i pagina de set\u0103ri a aparatului. Toate datele erau trimise \u00een pachete c\u0103tre servere externe din Singapore \u0219i Rusia, de\u0219i domeniile web servere<\/a> fuseser\u0103 \u00eenregistrate \u00een Beijing.<\/p>\n

La cererea Forbes, un alt cercet\u0103tor \u00een domeniul securit\u0103\u021bii cibernetice, Andrew Tierney, a efectuat o investiga\u021bie proprie. El a descoperit, de asemenea, c\u0103 browserele furnizate de Xiaomi \u00een Google Play \u2014 Mi Browser Pro \u0219i Mint Browser \u2014 colecteaz\u0103 acelea\u0219i date. Conform statisticilor Google Play, \u00eempreun\u0103 au fost instalate de peste 15 milioane de ori, ceea ce \u00eenseamn\u0103 c\u0103 pot fi afectate milioane de dispozitive.<\/p>\n

Problemele, a\u0219a cum consider\u0103 domnul Kirlig, se refer\u0103 la un num\u0103r mult mai mare de modele. El a \u00eenc\u0103rcat firmware-uri pentru alte telefoane Xiaomi, inclusiv Xiaomi Mi 10, Xiaomi Redmi K20 \u0219i Xiaomi Mi MIX 3, dup\u0103 care a confirmat c\u0103 acestea folosesc un browser identic \u0219i, probabil, prezint\u0103 acelea\u0219i probleme de confiden\u021bialitate.<\/p>\n

Se pare c\u0103 apar dificult\u0103\u021bi \u0219i \u00een ceea ce prive\u0219te modul \u00een care Xiaomi transmite datele pe serverele sale. De\u0219i compania chinez\u0103 sus\u021bine c\u0103 datele sunt criptate, Gabi Cirlig a descoperit c\u0103 poate vedea rapid ce a fost \u00eenc\u0103rcat de pe dispozitivul s\u0103u, deoarece pentru criptare se folose\u0219te un algoritm simplu base64. A durat doar c\u00e2teva secunde pentru a transforma pachetele de date \u00een fragmente de informa\u021bie citibile. De asemenea, el a avertizat: \u201ePrincipala mea \u00eengrijorare legat\u0103 de confiden\u021bialitate este c\u0103 datele trimise pe servere remote pot fi u\u0219or corelate cu un anumit utilizator.\u201d<\/p>\n

\"Specialist<\/p>\n

Ca r\u0103spuns la concluziile acestor speciali\u0219ti, un reprezentant al Xiaomi a declarat c\u0103 afirma\u021biile referitoare la cercetare nu sunt reale \u0219i c\u0103 confiden\u021bialitatea \u0219i securitatea sunt priorit\u0103\u021bi absolute, iar compania respect\u0103 strict \u0219i se conformeaz\u0103 pe deplin legilor \u0219i reglement\u0103rilor locale privind datele personale ale utilizatorilor. Totu\u0219i, reprezentantul a confirmat c\u0103 datele de navigare sunt colectate, sus\u021bin\u00e2nd c\u0103 informa\u021bia este anonim\u0103 \u0219i nu este legat\u0103 de nicio identitate, iar utilizatorii \u00ee\u0219i dau consim\u021b\u0103m\u00e2ntul pentru aceast\u0103 urm\u0103rire.<\/p>\n

Dar, a\u0219a cum subliniaz\u0103 Gabi Kirlig \u0219i Andrew Tierney, pe server erau trimise informa\u021bii nu doar despre site-urile vizitate sau c\u0103ut\u0103rile online: Xiaomi colecteaz\u0103, de asemenea, date despre telefon, inclusiv numere unice pentru identificarea dispozitivului specific \u0219i versiunea Android. Aceste metadate pot fi u\u0219or corelate cu o persoan\u0103 real\u0103 din spatele ecranului, dac\u0103 se dore\u0219te.<\/p>\n

Reprezentantul Xiaomi a respins, de asemenea, afirma\u021biile c\u0103 datele despre vizualiz\u0103ri sunt \u00eenregistrate \u00een modul incognito. Cu toate acestea, speciali\u0219tii \u00een securitate au descoperit \u00een testele lor independente c\u0103 comportamentul lor online este trimis pe servere externe, indiferent de modul \u00een care func\u021bioneaz\u0103 browserul, prezent\u00e2nd at\u00e2t fotografii, c\u00e2t \u0219i videoclipuri ca dovezi.<\/p>\n

\r\n \"Reda\u021bi\r\n
<\/div>\r\n <\/div><\/center><\/center><\/p>\n

C\u00e2nd jurnali\u0219tii de la Forbes au furnizat un videoclip c\u0103tre Xiaomi, \u00een care se arat\u0103 cum c\u0103ut\u0103rile pe Google \u0219i vizitele pe site-uri erau trimise pe servere externe chiar \u0219i \u00een modul incognito, un reprezentant al companiei a continuat s\u0103 nege c\u0103 informa\u021biile sunt \u00eenregistrate: \u201eAcest videoclip demonstreaz\u0103 colectarea de date anonime despre vizion\u0103ri, ceea ce reprezint\u0103 unele dintre cele mai r\u0103sp\u00e2ndite solu\u021bii adoptate de companiile de internet pentru a \u00eembun\u0103t\u0103\u021bi mediul general din browser prin analiza informa\u021biilor care nu identific\u0103 persoana.\u201d<\/p>\n

Cu toate acestea, exper\u021bii \u00een securitate consider\u0103 c\u0103 comportamentul browserului Xiaomi este mult mai agresiv dec\u00e2t al altor browsere populare, precum Google Chrome sau Apple Safari: ultimele nu \u00eenregistreaz\u0103 comportamentul browserului, inclusiv URL-urile, f\u0103r\u0103 consim\u021b\u0103m\u00e2ntul explicit al utilizatorului \u0219i \u00een modul de navigare privat.<\/p>\n

\u00cen plus, \u00een cercetarea sa, domnul Kirlig a descoperit c\u0103 playerul muzical preinstalat pe smartphone-urile Xiaomi colecteaz\u0103 informa\u021bii despre obiceiurile de ascultare: ce melodii sunt redat\u0103 \u0219i c\u00e2nd.<\/p>\n

Gabi Kirlig suspecteaz\u0103, de asemenea, c\u0103 Xiaomi urm\u0103re\u0219te utilizarea aplica\u021biilor software, deoarece de fiecare dat\u0103 c\u00e2nd deschide aplica\u021biile, o mic\u0103 informa\u021bie este trimis\u0103 pe un server extern. Un alt cercet\u0103tor anonim, la care se refer\u0103 Forbes, a declarat c\u0103 a \u00eenregistrat \u0219i el modul \u00een care telefoanele companiei chineze colecteaz\u0103 astfel de date. Xiaomi nu a comentat acest aspect.<\/p>\n

Se raporteaz\u0103 c\u0103 datele sunt trimise companiei chineze de analitic\u0103 Sensors Analytics (cunoscut\u0103 \u0219i sub numele de Sensors Data), care a fost fondat\u0103 \u00een 2015 \u0219i se ocup\u0103 cu analiza profund\u0103 a comportamentului utilizatorilor \u0219i furnizarea de servicii profesionale de consultan\u021b\u0103. Instrumentele sale ajut\u0103 clien\u021bii s\u0103 exploreze datele ascunse prin studierea modelelor cheie de comportament. Un reprezentant al Xiaomi a confirmat leg\u0103tura cu startup-ul: \u201eDe\u0219i Sensors Analytics furnizeaz\u0103 o solu\u021bie de analiz\u0103 a datelor pentru Xiaomi, datele anonime colectate sunt stocate pe serverele proprii servere<\/a> Xiaomi \u0219i nu vor fi transmise c\u0103tre Sensors Analytics sau alte companii ter\u021be.\u201d<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Sursa: 3dnews.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0437\u0434\u0430\u043d\u0438\u0435 Reuters \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u0441\u0442\u0430\u0442\u044c\u044e-\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 Xiaomi \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043b\u044e\u0434\u0435\u0439 \u043e\u0431 \u0438\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044f\u0445 \u0432 \u0421\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. «\u042d\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430», — \u0437\u0430\u044f\u0432\u0438\u043b \u043f\u043e\u043b\u0443\u0448\u0443\u0442\u044f \u0413\u0430\u0431\u0438 \u041a\u0438\u0440\u043b\u0438\u0433 (Gabi Cirlig) \u043e \u0441\u0432\u043e\u0451\u043c \u043d\u043e\u0432\u043e\u043c \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0435 Xiaomi. \u042d\u0442\u043e\u0442 \u043e\u043f\u044b\u0442\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043b \u0441 \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 Forbes \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":79890,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-79889","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Specialist \u00een securitate \u2014 despre smartphone-urile Xiaomi: \u201eAceasta este o u\u0219\u0103 din spate cu func\u021bii de telefon\u201d | ProHoster","description":"Publica\u021bia Reuters a publicat un articol de avertizare referitor la faptul c\u0103 gigantul chinez Xiaomi \u00eenregistreaz\u0103 datele personale ale milioane de oameni despre activit\u0103\u021bile lor online, precum \u0219i despre utilizarea dispozitivului.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u043e \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430\u0445 Xiaomi: \u00ab\u042d\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u00bb | ProHoster","og:description":"\u0418\u0437\u0434\u0430\u043d\u0438\u0435 Reuters \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u0441\u0442\u0430\u0442\u044c\u044e-\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 Xiaomi \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043b\u044e\u0434\u0435\u0439 \u043e\u0431 \u0438\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044f\u0445 \u0432 \u0421\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/speczialist-po-bezopasnosti-o-smartfonah-xiaomi-eto-bekdor-s-funkcziyami-telefona","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-01T11:42:52+00:00","article:modified_time":"2020-05-01T11:42:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"79889","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:29:39","updated":"2026-02-09 16:50:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/79889","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=79889"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/79889\/revisions"}],"predecessor-version":[{"id":164383,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/79889\/revisions\/164383"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/79890"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=79889"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=79889"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=79889"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}