Institute For Ethical Hacking Course and Ethical Hacking Training in Pune – India

Extreme Hacking | Sadik Shaikh | Cyber Suraksha Abhiyan

Credits: The Register

Xiaomi phones at the center of tracking brouhaha

A Forbes report last week outlined how some Xiaomi Android phones track their owners’ web browsing and online activities.

It was claimed the handsets’ bundled Xiaomi browser collects things like browsing history, search queries, and news feed activity, and sends the data off to servers in China, even in private incognito mode.

Xiaomi, in response, claimed it anonymizes the harvested data for performance monitoring, though it did admit that this “aggregated data collection” included URLs even in incognito mode.

“Our user’s privacy and internet security is of top priority at Xiaomi,” the phone maker added. “We are confident that we strictly follow and are fully compliant with local laws and regulations.”

The two sides have had a bit of a barney over what exactly is happening. Xiaomi claimed it is not doing anything underhanded. Infosec bods said the data is anonymized using per-user unique ID numbers that do not frequently change, which isn’t particularly brilliant.

Andrew Tierney, one of the researchers involved in the probe, tore into Xiaomi, saying its response was unclear, and added: “There is no doubt that the [Xiaomi] Mint Browser sends search terms and URLs whilst in incognito mode.”

Today, the phone vendor issued an update for its Mi Browser, Mi Browser Pro on Google Play, and Mint Browser on Google Play to “include an option in incognito mode for all users of both browsers to switch on/off the aggregated data collection.” Which should, in theory, when disabled, stop Xiaomi’s software harvesting URLs and other stuff in private mode.

www.extremehacking.org

Sadik Shaikh | Cyber Suraksha AbhiyanEthical Hacking Training InstituteCEHv10CHFIECSAv10CASTENSACCNACCNA SECURITYMCITPRHCECHECKPOINT,  ASA FIREWALLVMWARECLOUDANDROIDIPHONENETWORKINGHARDWARETRAINING INSTITUTE IN PUNECertified Ethical HackingCSA Certified SOC AnalystCTIA EC-Council Certified Threat Intelligence AnalystCenter For Advanced Security Training in Indiaceh v10 course in Pune-Indiaceh certification in pune-Indiaceh v10 training in Pune-IndiaEthical Hacking Course in Pune-India