Xiaomi Devices Have Cybersecurity Event

What is a Xiaomi device? It is a mobile phone made in China of course. At iide.co (a Colombia website)

A digital marketing course does a SWOT(Strength Weakness Opportunities Threats) analysis for Xiaomi:

“Xiaomi stands as a global technology giant of immense stature, securing a noteworthy position as the fourth-largest player in the electronic manufacturing landscape, alongside industry titans like Apple, Google, and Microsoft.”

HackerNews has the story…  of vulnerabilities in Xiaomi devices.

“The vulnerabilities in Xiaomi led to access to arbitrary activities, receivers and services with system privileges, theft of arbitrary files with system privileges, [and] disclosure of phone, settings and Xiaomi account data,” mobile security firm Oversecured said in a report shared with The Hacker News.

Some of the notable flaws include a shell command injection bug impacting the System Tracing app and flaws in the Settings app that could enable theft of arbitrary files as well as leak information about Bluetooth devices, connected Wi-Fi networks, and emergency contacts.

It’s worth noting that while Phone Services, Print Spooler, Settings, and System Tracing are legitimate components from the Android Open Source Project (AOSP), they have been modified by the Chinese handset maker to incorporate additional functionality, leading to these flaws.”

and

Techradar is espousing the virtues of the phone (As well as an actual ebay listing on a Xiaomi Note13.

Thus the Xiaomi phones are vulnerable inexpensive phones made out of China. People looking to buy Xiaomi for various reasons, will find out that security is not important in China, especially since CCP has to have an app on the phone and requires information to be sent back to CCP computers. Thus the modifications to Android apps by Xioami.

So this is a good thing for everyone to see the problems of this phone since they leak like a  draining basket, your data is not held on the phone it is passed to the company and CCP or whoever they see fit. (we do not know exactly what happens)

Try and hold some water with a draining basket… 🙂

In my eyes it is not surprising that Xiaomi phones have serious security problems, and I definitely look at manufacturer origin in my cellphone purchases.

Do you believe me or this website?

https://www.androidauthority.com/xiaomi-privacy-cheap-phone-1118444/

“To be perfectly clear — Xiaomi isn’t the only OEM that collects data. Your personal data is often just as important, if not more important, to companies than the phone in your pocket. It’s pretty much become a fact of life that you’ll have to surrender some privacy in order to use most services these days. However, lines need to be drawn in the sand, and credible claims dating back to 2020 show that certain OEMs have no problem crossing them.

What is most concerning about the findings is that, according to Cirlig, the company uses unique numbers which identify devices and, therefore, users. According to Forbes, “The device was also recording what folders he opened and to which screens he swiped, including the status bar and the settings page.” ”

It is past time to protect your computers to defend against the standard attacks of CCP and their workers. The reason the CCP wants to identify you is in case they are interested in your data, or even if they are not, there is an interest in accumulating metadata for AI purposes which is another blogpost altogether.

Just a taste from Forbes.com : “The device was also recording what folders he opened and to which screens he swiped, including the status bar and the settings page. All of the data was being packaged up and sent to remote servers in Singapore and Russia, though the Web domains they hosted were registered in Beijing.”

Take a look at my book to see if you have understanding of defense systems!!