Sam Oliver
At least one device from upstart Chinese smartphone maker Xiaomi has been found to transmit user data — including SMS messages and photos — back to servers in mainland China without the user's permission, according to reports from Hong Kong.
While testing Xiaomi's Redmi Note handset, Kenny Li of Hong Kong forum IMA Mobile discovered that the device continued to make connections with IP addresses in Beijing even after switching off the company's iCloud-like MiCloud service. The transmissions occur only over Wi-Fi, though the device does stay in contact with the servers via small "handshakes" while using cellular data.
Li says that data transmission persists even after erasing and re-flashing the handset with a different Android ROM, suggesting that the functionality could be built in to the phone's firmware.
It remains unclear whether this is the handset's intended mode of operation or if it is the result of a software glitch, as Xiaomi has yet to respond to the allegations. The company has previously said that it will store customer data in China, but only after the user opts in.
While attention has been focused on American technology companies in the wake of Edward Snowden's spying revelations, Chinese companies have also come under the microscope in recent years. Chinese telecom giants — and Xiaomi competitors — Huawei and ZTE were called out as "national security risks" in a 2012 report from the U.S. House Intelligence Committee, though both denied having cooperating with the Chinese government.
Charles Martin
Malcolm Owen
William Gallagher
Christine McKee
Wesley Hilliard
32 Comments
I can tell you the Huawei has been under US suspicion since 2000, Companies which did business with the US government were told not to use Huawei networking product due to backdoor access that existed. This is nothing new, the fingers are just now being pointed to US companies, working on behalf the federal government.
Huh. I didn't know that their forked Android version, MIUI, was still compatible with and using at least some Google services. A little surprising as I thought only Google Android used Google services. Plainly I was mistaken.
The company has previously said that it will store customer data in China, but only after the user opts in.
Apparently opting in consists in using the handset.
this is why I'll never buy a Chinese brand phone
Or a Chinese or Korean smart TV.
Actually it's hard to use any electronics these days without someone tracking every step you take and every tap you make.
I'm going to stick with my old fashioned dumb appliances, thermostats, etc.
Guess they better hand over their source code to the Russia government too.