Skip to main content

Xiaomi Is Vulnerable - Automatic App Installation

Xioami back-door detected where it can install Any App


Xiaomi which is also known by name MI a china based company founded in 2010 and getting biggest brand in couples of year. Xiaomi is famous for their cheap smartphones with better hardware. They are now a 4th largest smartphone making company in the world.

Xiaomi expected to launch their new smartphone Mi 5 on September 27. Which will come with some new features better camera update etc.

As Xiaomi going to launched their new phone in this month a news certainly spread everywhere that it xiaomi can download any app in your smartphone without any permission automatically

Thijs Broenink, a Computer Science student from Netherlands. He spell out that Xiaomi’s AnalyticsCore.apk constanly running on the background of smartphone and it's still go on even if you delete it from the smartphone.

Broenink research those codes and found that the app which checks for updates from Xiaomi every 24 hours, and sends all kinds of information to Xiaomi’s servers. This app also automatically installs the update from Xiaomi’s servers, if it finds it there, the update’s file is named ‘Analytics.apk

So these updates will install automatically in your android device without your permission which is so much weird about this phone

What Xiaomi say about this

"AnalyticsCore is a built-in MIUI system component that is used by MIUI components for the purpose of data analysis to help improve user experience, such as MIUI Error Analytics. As a security measure, MIUI checks the signature of the Analytics app during installation or upgrade to ensure that only the APK with the official and correct signature will be installed. Any APK without an official signature will fail to install. As AnalyticsCore is key to ensuring better user experience, it supports a self-upgrade feature. Starting from MIUI V7.3 released in April/May, HTTPS was enabled to further secure data transfer, to prevent any man-in-the-middle attacks."
Labels:

Comments

Post a Comment

Popular posts from this blog

Happy Birthday To Linux Turned 25 Today

Happy Birthday To Linux Turned 25 Today News Compressed : Linux operating system which is famous for their open source and also a largest shared mechanics technology of this world was developed on 25th 1991 by Linus Torvalds. Today it's been 25 years of Linux project which celebration is announced by it's programmer  Linus Torvalds. Linux which first started the open source technology revolution and it's programmer linus torvalds announced today that it's 25 august 2016 it's been 25th years of linux project so, it's time for celebration everyone. Linux foundation showen their report for last 25 years "that around 13,500 developers from 1,300 companies have contributed to the Linux kernel since the entire project gone live on Git in 2005." They say it through minix :- " I'm doing a (free) operating system (just a hobby, won't be big and professional like gnu) for 386(486) AT clones. This has been brewing since April, a...
Post a Comment
Read more

Anonymous Hacker Serve 16 Year In Jail For Exposing Steubenville rapists - Is That Justice

News Compressed : A anonymous hacker exposed the gang rapist of teenager of Steubenville, Ohio by hacked into the high school’s football sports fan site Roll Red Roll and found evidence of the 2012 rape case & also uploaded a video that showing the evidence of rape case but instead of look out those evidence federal government get anonymous hacker who help to expose those rapist in jail for 16 year and rapist still walks free. --------------------------------------------------------------------------------- I don't know what the hack is wrong with federal government and we can see and everyone can see it clearly the person who exposed the rapist of 14 year old girl and help minor are now himself faces jail for 16 year just for hacking a website for helping a minor( Meanwhile the rapist exposed by hacker are already free ) Means everything he did for exposing those rapist is waste The court finds him guilty in this case the defense of hacker  Deric Lostutter said t...
Post a Comment
Read more

Indian Hacker Gurukrit Singh Revealed The Way To Hack Millions OF Facebook Accounts

gurukrit singh facebook hack News Compressed : A Indian white hacker from califronia Gurukrit Singh revealed shows how easily he could’ve exploited Facebook’s password reset mechanism to hack numerous Facebook accounts. He do this by requesting 2 million valid facebook users password reset at short period by using their ID. What he did He said: To send emails, you first need to get access to 2 million Facebook usernames. Web scraping time! Point 1: Facebook IDs are generally 15 digits long, so I started with 100,000,000,000,000 and started making queries to Facebook Graph API to check which IDs were valid. I was also able to get profile picture and full name on the user’s account with ease since it seems there is no rate-limiting on public data (I just did it for fun). But wait! Facebook Graph API only lets authorized apps to fetch a user’s username, doesn’t it? Yes it does. Yes it does. All you have to do after making sure the ID is valid is visit the following lin...
Read more