Ubumfihlo besistimu yokusebenza ye-Android ngaphansi kwengilazi yokukhulisa
Muva nje kuvele izindaba zokuthi iqembu abacwaningi baseNyuvesi yase-Edinburgh bashicilele umphumela de ukuhlaziywa okwenziwa ku Smartphones brand I-Realme, i-Xiaomi ne-OnePlus ehlinzekwa ezimakethe zaseShayina nezasemhlabeni nalapho bathole khona ukuthi lezi babenokuthile ikakhulukazi, "ukuvuza kwedatha yomuntu siqu".
Kutholakale ukuthi wonke amadivayisi ane-firmware athengiswa e-China athumela imininingwane eyengeziwe kumaseva okuqoqwa kwe-telemetry, njengenombolo yocingo yomsebenzisi, izibalo zokusetshenziswa kohlelo lokusebenza, kanye nedatha yendawo, i-IMSI (Inombolo Yokubhalisa Ngamunye), I-ICCID (Inombolo Yomkhiqizo Wekhadi Le-SIM) namaphoyinti azungeze izindawo zokufinyelela okungenantambo. Futhi, amadivayisi we-Realme ne-OnePlus kubikwe ukuthi azosakaza umlando wekholi nomlando we-SMS.
I-China njengamanje iyizwe elinenombolo enkulu yabasebenzisi be-Android smartphone. Sisebenzisa inhlanganisela yamasu okuhlaziya amakhodi amile naguqukayo ukuze sifunde idatha edluliselwa izinhlelo zokusebenza zesistimu ezifakwe ngaphambilini kuma-smartphone e-Android avela kubathengisi abathathu abadume kakhulu e-China.
Sithole ukuthi inombolo ethusayo yomthengisi wesistimu efakwe ngaphambilini kanye nezinhlelo zokusebenza zezinkampani zangaphandle zinezimvume eziyingozi.
Kuyafaneleka ukusho lokho ku-firmware yemakethe yomhlaba wonke, umsebenzi onjalo awubonwa ngaphandle kokunye okuhlukileIsibonelo, amadivayisi we-Realme athumela i-MCC (ikhodi yezwe) ne-MNC (ikhodi yenethiwekhi yeselula), futhi amadivayisi we-Xiaomi Redmi athumela idatha mayelana ne-Wi-Fi exhunyiwe, i-IMSI, nezibalo zokusetshenziswa.
Kungakhathaliseki uhlobo lwe-firmware, wonke amadivaysi athumela isihlonzi se-IMEI, uhlu lwezinhlelo zokusebenza ezifakiwe, inguqulo yesistimu yokusebenza namapharamitha wehardware. Idatha ithunyelwa izinhlelo zokusebenza zesistimu ezifakwe umkhiqizi ngaphandle kwemvume yomsebenzisi, ngaphandle kwesaziso sokudiliva, futhi kungakhathaliseki izilungiselelo zobumfihlo kanye ne-telemetry yokulethwa.
Ngokuhlaziywa kwethrafikhi, sithole ukuthi amaningi alawa maphakethe angadlulisela ezizindeni eziningi zezinkampani zangaphandle ulwazi oluyimfihlo olubucayi oluhlobene nedivayisi yomsebenzisi (izihlonzi eziqhubekayo), i-geolocation (GPS).
izixhumanisi, izihlonzi ezihlobene nenethiwekhi), iphrofayela yomsebenzisi (inombolo yocingo, ukusetshenziswa kohlelo lokusebenza) nobudlelwano bokuxhumana nabantu (isb. umlando wekholi), ngaphandle kwemvume noma isaziso.Lokhu kudala ukungadalulwa okubucayi nokulandelela, kanye nezingozi ezikapakela ngaphandle kwase-China lapho umsebenzisi ehamba.
yezwe, futhi ifuna ukuphoqelelwa okuqinile komthetho wemfihlo wedatha osanda kwamukelwa.
ocingweni Redmi, idatha ithunyelwa kumsingathi tracking.miui.com lapho uvula futhi usebenzisa izinhlelo zokusebenza ezifakwe ngaphambili zomkhiqizi ezifana nezilungiselelo, amanothi, irekhoda, ifoni, imilayezo, nekhamera, ngaphandle kwemvume yomsebenzisi, ukuthumela idatha yokuxilonga phakathi nokusetha kokuqala. kumadivayisi I-Realme ne-OnePlus, idatha ithunyelwa kubasingathi ku-log.avlyun.com, aps.oversea.amap.com, aps.testing.amap.com noma aps.amap.com.
Iseva yokudonsa ithola ukuxhumana ocingweni futhi ikudlulisele ezindaweni ezihlosiwe, kuthiwa abacwaningi basebenzise i-proxy engumlamuli ukuze ikwazi ukunqanda futhi isuse ukubethela kwethrafikhi ye-HTTP/HTTPS.
Ukuze uhlukanise ngokuphelele izicelo eziqaliswe ifoni ye-Huawei Ekulayezweni Kwamafu esetshenziselwa ukuqapha umshini osingathiwe (i-VM), umhubhe obizwa ngokuthi usebenzisa iseva elibamba wokudonsa wadalwa. Baphinde basebenzisa i-mitmproxy 8.0.0 enezimvume zabasebenzisi abakhulu ku-port 8080 ku-VM futhi balungisa ama-iptables ukuze aqondise kabusha noma yikuphi ukuxhumeka kwe-TCP okushunqelwe ku-locahost:8080.
Ngale ndlela, i-mitmproxy ixhumana nefoni esikhundleni sezicelo ezivela ezindaweni zokugcina zeseva futhi iqalisa izicelo ezintsha ezindaweni zokugcina zeseva yendawo ngokuzenza ifoni, ivumela i-mitmproxy ukuthi ibambe isicelo ngasinye.
Ezinkingeni ezikhonjiwe, ukufakwa ekulethweni kwezicelo ezengeziwe zezinkampani zangaphandle, ezinikezwa izimvume ezinwetshiwe ngokuzenzekelayo, nakho kuyagqama. Sekukonke, uma kuqhathaniswa ne-codebase ye-Android AOSP, i-firmware ngayinye ecatshangelwayo iza nezinhlelo zokusebenza zezinkampani zangaphandle ezingaphezu kuka-30 ezifakwe ngaphambili ngumkhiqizi.
Ekugcineni, uma unentshisekelo yokwazi okwengeziwe ngakho, ungaxhumana ne- imininingwane kusixhumanisi esilandelayo.
Yeka into entsha, lokho akwenzeki kuphela ngomakhalekhukhwini baseShayina, kwenzeka nawo wonke amaselula emhlabeni futhi noma ubani okholelwa ngenye indlela akanalwazi.
Kuyiqiniso ukuthi omakhalekhukhwini bawukuvuza kwedatha futhi lokhu akumangazi, kodwa uma kunikezwe ukukhetha, ngikhetha ukuyinikeza i-Google kunohulumeni waseShayina.
Azikho izindaba mayelana nocwaningo olushiwo, kubonakala sengathi luhlukaniswe kakhulu ezimweni zamanje. Eqinisweni, ayikho i-smartphone evikelekile engu-100%.