AbakwaReuters bakhiphe isihloko esiyisixwayiso sokuthi umdondoshiya waseShayina u-Xiaomi uqopha imininingwane yomuntu siqu yezigidi zabantu mayelana nemisebenzi yabo eku-inthanethi nokusetshenziswa kwedivayisi. "Kuwumnyango ongemuva ekusebenzeni kocingo," kusho uGabi Cirlig, ngokuncokola, mayelana ne-smartphone yakhe entsha ye-Xiaomi.
Lo mcwaningi ongumakadebona we-cybersecurity ukhulume nabakwaForbes ngemuva kokuthola ukuthi i-smartphone yakhe yeRedmi Note 8 ibihlola konke akwenzayo. Le datha yabe isithunyelwa kumaseva akude aphethwe omunye umdondoshiya wezobuchwepheshe waseShayina u-Alibaba, okungenzeka ukuthi aqashwa yi-Xiaomi.
UMnu Kirlig uthole ukuthi ulwazi olushaqisayo mayelana nokuziphatha kwakhe belulandelelwa ngenkathi izinhlobo ezahlukene zedatha ziqoqwa ngasikhathi sinye kusuka kudivayisi - uchwepheshe wethukile ukuthi imininingwane yobunikazi bakhe nempilo yangasese yaziwa ngokugcwele enkampanini yaseChina.
Lapho ephequlula amawebhusayithi esipheqululini esizenzakalelayo se-Xiaomi kudivayisi, lo wakamuva waqopha zonke izingosi ezivakashelwe, okuhlanganisa nemibuzo evela ezinjinini zokusesha, kungaba yi-Google noma i-DuckDuckGo egxile kubumfihlo, futhi waqopha zonke izinto ezibukwa esiphakelini sezindaba. Igobolondo le-Xiaomi. Ngaphezu kwalokho, konke lokhu kuqapha kwasebenza ngisho nalapho kusetshenziswa imodi "ye-incognito".
Idivayisi irekhode ukuthi yimaphi amafolda avuliwe, yiziphi izikrini ezishintshiwe, ngisho noma kufikwa kubha yesimo kanye nekhasi lezilungiselelo zedivayisi. Yonke idatha ithunyelwe ngamaqoqo kumaseva akude e-Singapore nase-Russia, nakuba izizinda zewebhu zamaseva zazibhaliswe e-Beijing.
Ngokwesicelo sikaForbes, omunye umcwaningi we-cybersecurity, u-Andrew Tierney, wenza uphenyo lwakhe. Uphinde wathola ukuthi iziphequluli ezinikezwe i-Xiaomi ku-Google Play - i-Mi Browser Pro ne-Mint Browser - ziqoqa idatha efanayo. Ngokwezibalo ze-Google Play, zihlangene zifakwe izikhathi ezingaphezu kwezigidi ezingu-15, okusho ukuthi izigidi zamadivayisi zingathinteka.
Izinkinga, ngokusho kukaMnu. Kirlig, zisebenza enanini elikhulu kakhulu lamamodeli. Ulande i-firmware yamanye amafoni we-Xiaomi, okuhlanganisa i-Xiaomi Mi 10, i-Xiaomi Redmi K20 ne-Xiaomi Mi MIX 3, ngaphambi kokuqinisekisa ukuthi basebenzisa isiphequluli esifanayo futhi kungenzeka bahlupheke ngezinkinga ezifanayo zobumfihlo.
Kuphinde kubonakale kunobunzima ngendlela i-Xiaomi edlulisela ngayo idatha kumaseva ayo. Nakuba inkampani yaseShayina ithi idatha ibethelwe, u-Gabi Kirlig uthole ukuthi angabona ngokushesha okulandwe kudivayisi yakhe ngoba ukubethela kusebenzisa i-algorithm ye-base64 elula kakhulu. Kuthathe imizuzwana embalwa ukuguqula amaphakethe edatha abe yizingcezu zolwazi ezifundekayo. Uphinde waxwayisa: "Okungikhathaza kakhulu mayelana nobumfihlo ukuthi idatha ethunyelwa kumaseva akude ihlotshaniswa kalula nomsebenzisi othile."
Ephendula lokho okutholwe yilabo chwepheshe abashiwo, umkhulumeli we-Xiaomi uthe izimangalo zocwaningo azilona iqiniso, futhi ubumfihlo nokuphepha kubaluleke kakhulu, futhi inkampani inamathela ngokuqinile futhi iyithobela ngokuphelele imithetho nemithetho yendawo mayelana nezindaba zobumfihlo zabasebenzisi. . Kepha isikhulumi ukuqinisekisile ukuthi idatha yokuphequlula iyaqoqwa, wathi imininingwane ayaziwa futhi ayiboshelwe kunoma yimuphi umuntu, futhi abasebenzisi bayakuvumela ukulandelwa okunjalo.
Kodwa njengoba u-Gabi Kirlig no-Andrew Tierney babonisa, kwakungelona nje ulwazi olumayelana namawebhusayithi avakashelwe noma ukusesha ku-inthanethi okwathunyelwa kuseva: I-Xiaomi iphinde yaqoqa idatha mayelana nefoni, okuhlanganisa nezinombolo ezihlukile zokuhlonza idivayisi ethile nenguqulo ye-Android. Imethadatha enjalo ingahlotshaniswa kalula nomuntu wangempela ngemuva kwesikrini uma ifunwa.
Umkhulumeli we-Xiaomi uphinde wachitha izinsolo zokuthi idatha yokuphequlula irekhodwa ngemodi ye-incognito. Kodwa-ke, abacwaningi bezokuvikela bathole ekuhloleni kwabo okuzimele ukuthi ukuziphatha kwabo ku-inthanethi kuthumela imilayezo kumaseva akude ngaphandle kokuthi isiphequluli sisebenza ngayiphi imodi, okuhlinzeka kokubili izithombe namavidiyo njengobufakazi.
Ngenkathi izintatheli zeForbes zinikeza u-Xiaomi ividiyo ekhombisa ukuthi usesho lwe-Google nokuvakasha kwamawebhusayithi kuthunyelwa kanjani kumaseva akude ngisho nangemodi ye-incognito, umkhulumeli wenkampani uqhubeke nokuphika ukuthi imininingwane iyarekhodwa: “Le vidiyo ikhombisa ukuqoqwa kwedatha yokuphequlula engaziwa, engaziwa. ngesinye sezinqumo ezivame ukwenziwa izinkampani ze-inthanethi ukuze zithuthukise ulwazi oluphelele lokuphequlula ngokuhlaziya ulwazi olungahlonzi umuntu siqu."
Kodwa-ke, ochwepheshe bezokuphepha bakholelwa ukuthi ukuziphatha kwesiphequluli se-Xiaomi kunolaka kakhulu kunezinye iziphequluli ezidumile njenge-Google Chrome noma i-Apple Safari: ezokugcina azirekhodi ukuziphatha kwesiphequluli, okuhlanganisa nama-URL, ngaphandle kwemvume ecacile yomsebenzisi kanye nemodi yokuphequlula eyimfihlo.
Ngaphezu kwalokho, ocwaningweni lwakhe, uMnu. Kirlig uthole ukuthi isidlali somculo esifakwe ngaphambilini kuma-smartphones e-Xiaomi siqoqa ulwazi mayelana nemikhuba yokulalela: yiziphi izingoma ezidlalwayo nokuthi nini.
U-Gabi Kirlig uphinde asole ukuthi u-Xiaomi uqapha ukusetshenziswa kwesofthiwe ngoba njalo lapho evula izinhlelo zokusebenza, inani elincane lolwazi lithunyelwa kuseva ekude. Omunye umcwaningi ongaziwa ocashunwe ngabakwaForbes uthe naye uqophe ukuthi amafoni enkampani yaseChina aqoqa kanjani imininingwane efanayo. U-Xiaomi akazange aphawule ngalolu daba.
Idatha kubikwa ukuthi ithunyelwe enkampanini yaseShayina yezibalo ze-Sensors Analytics (eyaziwa nangokuthi Idatha Yezinzwa), eyasungulwa ngo-2015 futhi izimbandakanye ekuhlaziyeni okujulile kokuziphatha kwabasebenzisi kanye nokuhlinzeka ngezinsizakalo zokubonisana ezichwepheshile. Amathuluzi ayo asiza amaklayenti ukuhlola idatha efihliwe ngokuhlola amaphethini okuziphatha ayinhloko. Umkhulumeli we-Xiaomi ukuqinisekisile ukuxhumana nokuqaliswa: "Yize i-Sensors Analytics ihlinzeka ngesixazululo sokuhlaziya idatha ye-Xiaomi, idatha eqoqiwe engaziwa igcinwa kumaseva e-Xiaomi futhi ngeke kwabelwane ngayo ne-Sensors Analytics nanoma yiziphi ezinye izinkampani zezinkampani zangaphandle."
Source: 3dnews.ru