miui ROM: privacy

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="background-color: white; color: #444444; font-size: 14px; line-height: 24px; padding: 0px; word-wrap: break-word;"><span style="color: dimgrey; word-wrap: break-word;"><span style="word-wrap: break-word;"><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif; font-size: 16px; word-wrap: break-word;">Xiaomi has obtained a permanent injunction against Indian InfoSec Consortium and Taiwan based security expert Mr. Chen Huang that restrains them from disclosing any information in regards to Xiaomi user accounts that they may possess.</span></span></span></div><div style="background-color: white; color: #444444; font-size: 14px; line-height: 24px; padding: 0px; word-wrap: break-word;"><span style="color: dimgrey; word-wrap: break-word;"><span style="word-wrap: break-word;"><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif; font-size: 16px; word-wrap: break-word;">Here is the entire story.</span></span></span></div><div style="background-color: white; color: #444444; font-size: 14px; line-height: 24px; padding: 0px; word-wrap: break-word;"><span style="color: dimgrey; word-wrap: break-word;"><span style="word-wrap: break-word;"><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif; font-size: 16px; word-wrap: break-word;">Taiwan based security researcher, Mr. Chen Huang was supposed to give a presentation on his research, titled: “<span style="color: #3b5a97; word-wrap: break-word;"><a href="http://g0s.org/speakers" style="color: #336699; word-wrap: break-word;" target="_blank">Privacy-Alert: Exposing China-based XIAOMI Mobiles</a></span>” at Asia’s biggest hackers conference, Ground Zero Summit (G0S) 2014 organized by Indian InfoSec Consortium in New Delhi (on 13th & 14th November).</span></span></span></div><div style="background-color: white; color: #444444; font-size: 14px; line-height: 24px; padding: 0px; word-wrap: break-word;"><span style="color: dimgrey; word-wrap: break-word;"><span style="word-wrap: break-word;"><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif; font-size: 16px; word-wrap: break-word;">In regards to his presentation, the website said,  “In this session Taiwanese Researcher will demonstrate how Xiaomi Phones have been sending device data and personal data of Xiaomi Phone user to Chinese Servers. The Researcher will also release Server Logs, Mi Account username, Emails and passwords of millions of Xiaomi users which have been obtained using a Zero Day flaw in the Xiaomi Servers.”</span></span></span></div><div style="background-color: white; color: #444444; font-size: 14px; line-height: 24px; padding: 0px; word-wrap: break-word;"><span style="color: dimgrey; word-wrap: break-word;"><span style="word-wrap: break-word;"><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif; font-size: 16px; word-wrap: break-word;">In short, Chen Huang was going to demonstrate how Xiaomi phones have been sending data to Chinese servers and he had server logs, account user names, emails and passwords to prove it.</span></span></span></div><div style="background-color: white; color: #444444; font-size: 14px; line-height: 24px; padding: 0px; word-wrap: break-word;"><span style="color: dimgrey; word-wrap: break-word;"><span style="word-wrap: break-word;"><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif; font-size: 16px; word-wrap: break-word;">From Xiaomi’s point of view, they have done the right thing by bringing a restraining order, so as to ensure that their user data does not become public. However, there is something quite startling in the what Xiaomi has said. They have mentioned that the researcher may be holding millions of Mi phone user names and passwords, which is quite significant.</span></span></span></div><div style="background-color: white; color: #444444; font-size: 14px; line-height: 24px; padding: 0px; word-wrap: break-word;"><span style="color: dimgrey; word-wrap: break-word;"><span style="word-wrap: break-word;"><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif; font-size: 16px; word-wrap: break-word;"><img alt="" border="0" class="zoom" height="335" id="aimg_xA595" src="http://trak.in/wp-content/uploads/2014/11/extractnew.jpg" style="cursor: pointer; word-wrap: break-word;" width="638" /></span></span></span></div><div style="background-color: white; color: #444444; font-size: 14px; line-height: 24px; padding: 0px; word-wrap: break-word;"><span style="color: dimgrey; word-wrap: break-word;"><span style="word-wrap: break-word;"><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif; font-size: 16px; word-wrap: break-word;">It is known fact that Xiaomi was sending the user data to Chinese servers, and subsequently they took steps to ensure user has a choice of avoiding it. The significant thing however this court order points is that Xiaomi thinks millions of user accounts may have actually been compromised.</span></span></span></div><span style="background-color: white; color: #444444; font-size: 14px; font-weight: 700; line-height: 21px; word-wrap: break-word;"><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif;">Complete Court Restraining Order.</span></span><br /><div style="background-color: white; color: #444444; font-size: 14px; line-height: 24px; padding: 0px; word-wrap: break-word;"><span style="color: dimgrey; word-wrap: break-word;"><span style="word-wrap: break-word;"><span style="font-family: Helvetica Neue, Arial, Helvetica, sans-serif; font-size: 16px; word-wrap: break-word;"><img alt="" border="0" class="zoom" height="1158" id="aimg_KopiQ" src="http://trak.in/wp-content/uploads/2014/11/page-1.jpg" style="cursor: pointer; word-wrap: break-word;" width="659" /><img alt="" border="0" class="zoom" height="1103" id="aimg_ptTo2" src="http://trak.in/wp-content/uploads/2014/11/Page-2.jpg" style="cursor: pointer; word-wrap: break-word;" width="660" /><img alt="" border="0" class="zoom" height="879" id="aimg_b04Zq" src="http://trak.in/wp-content/uploads/2014/11/Page-3.jpg" style="cursor: pointer; word-wrap: break-word;" width="658" /><img alt="" border="0" class="zoom" height="994" id="aimg_LPKV6" src="http://trak.in/wp-content/uploads/2014/11/Page-4.jpg" style="cursor: pointer; word-wrap: break-word;" width="654" /><img alt="" border="0" class="zoom" height="918" id="aimg_l0X2a" src="http://trak.in/wp-content/uploads/2014/11/Page-5.jpg" style="cursor: pointer; word-wrap: break-word;" width="641" /><img alt="" border="0" class="zoom" height="889" id="aimg_sSkta" src="http://trak.in/wp-content/uploads/2014/11/Page-6.jpg" style="cursor: pointer; word-wrap: break-word;" width="642" /></span></span></span></div></div>

Xiaomi / MI India User data Compromised? Delhi Court’s Restraining Order Shows It Might!

Xiaomi has obtained a permanent injunction against Indian InfoSec Consortium and Taiwan based security expert Mr. Chen Huang that restrains ...