Report claims that Xiaomi phones collect browisng data from its users - newstechnews

According to a security investigator working with Forbes, Xiaomi has been receiving searching data from users who are utilizing Xiaomi smartphone and the built-in browser. And the entertainment part is that the browser works so even in incognito mode or even when utilizing the privacy-conscious DuckDuckGo web browser.

Gabriel Cirlig, the safety investigator, is using a Redmi note 8 as an everyday driver and noticed that the equipment records lovely much everything he does on the phone and delivers the data to servers in Russia and Singapore, although the domains are hosted in Beijing. We are talking screens, websites visited, folders opened, backgrounds he changed, music played on the default app, etc.

The data itself is incorrectly encrypted using the base64 configuration, so it was very easy for him to transcribe the data into field text.

Cirlig got on just further and download the ROMs for xiaomi mi 10,the redmi k20 and the mi mix 3 and establish the very same security vulnerability on all of them. Following security experimenter, Andrew Tierney, found the doubtful behavior on the Mi Browser Pro and the Mint Browser too.

Xioami company responded to the announcements saying that Forbes discoveries are misleading and false. An agent for the company told that Xiaomi complies with all local rules and regulations on user database privacy and the collected browse data has been anonymized. As to why Xiaomi is collecting it,. it is because the company is trying to improve the user's browsing familiarity and it's a basic practice. More importantly, the data can't be traced back to a certain user. However, Gabriel Cirlig sent a video to Xiaomi showing how the browser mails its history to the said servers even in incognito mode.

Source