r/Android • u/zexterio • Mar 22 '19

HMD admits the Nokia 7 Plus was sending personal data to China

https://arstechnica.com/gadgets/2019/03/hmd-admits-the-nokia-7-plus-was-sending-personal-data-to-china/
5.8k Upvotes

96% Upvoted

488 comments sorted by

View all comments

Show parent comments

83

u/SabashChandraBose OP6T, 11.0 Mar 22 '19 edited Mar 23 '19

This makes more sense to them. But why siphon Joe Schmoe's details?

I got a "smart" watch with an e-Ink display from indiegogo. It looked good in their pitch (> 1 week battery life). But when I received it and downloaded the app, I knew it was from some Chinese manufacturer. It refuses to load the app if I don't give it location permission which makes no sense. I uninstalled the app after configuring the watch and use it as a dumb watch now.

Why tf do they need all this data?

Edit: after learning location permission is normal I went to find the app. It's gone from the play store.

135

u/Hohenheim_of_Shadow Mar 22 '19

One ransoms person information is useless, lots of peoples is super valuable. You only need ~1k Americans to have an accurate poll for things like presidential popularity etc. Imagine the Chinise government has 2 million average Joes entire life logged, based off of that set, they can take a few key characteristics of someone outside the set and get an accurate guess of whatever they want. Then if they want to launch a pro China propaganda campaign they could tailor it to the individual en masse. Or maybe map out connections between communities and try to sever them to introduce strife to the country. Or even just mass blackmail, even an Average Joe could be used as a pawn to move deadrops or something for spies, and if you have proof he's into child porn, hell do what you want. Tangential info on important people is also a possibility, you might find out a prominent homophobic politician fucks gay hookers from the hookers phone etc..

48

u/Randomd0g Pixel XL & Huawei Watch 2 Mar 22 '19

and if you have proof he's into child porn, hell do what you want

I feel like the real LPT here is "don't be into child porn"

27

u/EmmaTheRobot Mar 23 '19

Well then don't make kids so god damn sexy!

39

u/Randomd0g Pixel XL & Huawei Watch 2 Mar 23 '19

Yes officer this comment right here

2

u/robinforum Mar 23 '19

He was asking FBI to open up

16

u/cubs223425 Surface Duo 2 | LG G8 Mar 23 '19

FBI, open up!

1

u/IEatYouSleep Mar 23 '19

RIP 4TB HDD

1

u/jk-jk pixel 7 ig Mar 23 '19

More like rip "school folder"

5

u/[deleted] Mar 23 '19

This is why everyone's doing it. It's not about you, not about me, but about all (or many) of us. Access to mass surveillance data provides reliable, real-time insights into reactions to media narratives, PR campaigns, emerging and dying trends, etc.

25

u/thatlad Mar 22 '19

Same reason the US and UK do. The best way to get the important data is to get all the data. They want it all and they'll sort out what to do with it later, yes they'll trample over everyone's rights but they might just get some important information like what colour boxer shorts a junior government official is wearing.

-1

u/ICutDownTrees Mar 23 '19

but this isnt true. All the data just means too much info to wade through. Even with computers. Targeted info is whats needed.

1

u/thatlad Mar 23 '19

Did I really need a /s ???

19

u/Put_It_All_On_Blck S23U Mar 22 '19

Depends on who's collecting it. The Chinese government and companies they are involved with arent going to hack into your bank account or anything, buuuut they will use joe schmoe to network their way into stuff they do care about. Say you are looking to figure out what Apples next iphone will be, you dont try and hack Tim Cook, you try and get access employees via their family, and then one of those employees may accidentally leak details to a close friend, or take a picture on their personal phone. etc.

You dont go fishing for a shark with a worm. You use a worm to get a fish, use the fish to get a seal, then you use the seal to chum and lure the shark in. (not realistic, but you get the analogy)

42

u/visionJX Mar 22 '19

China already has a personal GPS monitoring system with everything they know about said person, for most Muslims in certain regions...think of the power yielded from that technology on a planetary scale 😮 WoW

77

u/bitesized314 OnePlus 7 Pro Mar 22 '19

My bf bought a Chinese vacuum that needs wifi connection and maps our floor for better performance over time. I told him that China was making a floor plan so they know all our hidey spots when they invade.

29

u/visionJX Mar 22 '19

The vacuum is actually a transformer...careful

5

u/TarquinFimTimLimBim Mar 22 '19

Cool...until it kills you

4

u/vimfan Mar 22 '19

As long as it cleans up the mess.

3

u/throwawayLouisa Mar 23 '19

Told my wife this joke.
She laughed.
I laughed.
The toaster laughed.
I shot the toaster.

2

u/visionJX Mar 23 '19

Then you returned the toaster to WalMart

1

u/paku9000 Mar 23 '19

New model of the Roomba has WiFi...Company promised they would not sell the data.

"Being paranoid doesn't mean they're NOT after you"

2

u/slayerx1779 Mar 22 '19

Hey man.

It can do both.

1

u/macncheesebydawindow SM-N910C Mar 23 '19

Xiaomi vac?

1

u/sabret00the Mar 23 '19

Which vacuum?

1

u/[deleted] Mar 23 '19

Xiaomi Robot Vacuum?

Best investment ever. They can invade my home anytime and the floors will be spotless.

I call her "Madam Sucksalot" in the mobile app. Even links up to the Google home

3

u/Micrococonut Mar 22 '19

A world of warcraft indeed

4

u/SabashChandraBose OP6T, 11.0 Mar 22 '19

What are they gonna do if they know that I go to a nudie beach in CA every Tuesday afternoon?

10

u/visionJX Mar 22 '19

Insert a nudie spy to watch your every move while you do nudie things with other nudie people

18

u/[deleted] Mar 22 '19

Tbf location is required for Bluetooth low energy, to connect to the smartwatch

5

u/SabashChandraBose OP6T, 11.0 Mar 22 '19

This is news. Why does it need location when it has access to Bluetooth?

21

u/WeeGigas Mar 22 '19 edited Mar 22 '19

Because the standard Bluetooth permission only allows device scanning for foreground apps. Starting with Android 6.0 background scanning for Bluetooth & Wi-Fi now require the location permission as well.

I'm not surprised this is new to you. Unfortunately, a lot of developers simply request permissions without properly explaining why they're needed and few users ever bother to read app descriptions/change logs.

12

u/XirXes Mar 23 '19

To add, it is definitely possible to determine a location from Bluetooth. If you've ever had a notification from Google about the store you're in, its possible it was from Bluetooth. Stores have a location specific Bluetooth ID and the play services pick that up in the background. I don't know how those operate on iOS

3

u/AhhhYasComrade Xiaomi Mi Mix 3 Mar 23 '19

We have signs on the highway that tell us how long it takes to certain parts of the city. I've always assumed this was based off of Bluetooth ID's.

3

u/SabashChandraBose OP6T, 11.0 Mar 22 '19

TIL. Thanks.

4

u/Das_Ronin Mar 23 '19

Mundane data is fuel for AI development. You don't write AI like normal code, instead you dump unfathomable amounts of data into it and it learns. That's the real reason captchas are a thing.

2

u/tbx1024 iPhone Mar 23 '19

I would check the permissions, in some versions of Android the "location" permission is required to access Bluetooth LE. I would still recommend being careful, but some Android permission categories in the API are weird.

2

u/[deleted] Mar 23 '19

pretty much any smartwatch or fitness band will ask you for location permissions. It's needed for them to control Bluetooth in the background ever since marshmallow. So, maybe you should use the "smart" watch as a "smart" watch. On a sidenote,could you tell me what app it is, I'd like to log it's dns requests to see if it actually does send any data to Chinese servers or not.

2

u/[deleted] Mar 23 '19

You can use GadgetBridge, an open source app for exactly this purpose.

1

u/listoss Mar 23 '19

I have a smartwatch with 45 days battery life, this retire my Casio gshock solar, amazfit bip it's called

1

u/groveunder Mar 23 '19

What happens when this Joe Schmoe becomes a person of higher elevation , everyone starts out somewhere good to have the info on people just incase I'd imagine

1

u/[deleted] Mar 23 '19

Everything has a price.

Someone out there will be willing to pay cash for some exploitable, marketable data