There was a recent posting about Nokia phones calling-home to China recently (https://news.ycombinator.com/item?id=19449824 https://news.ycombinator.com/item?id

There was a recent posting about Nokia phones calling-home to China recently (https://news.ycombinator.com/item?id=19449824 https://news.ycombinator.com/item?id=19449824) which I guess prompted this. Personally I think it would have been useful to see the java hosted directly in the git repo rather than as a zip, then we could have casually browsed or searched for tell-tale things (e.g. HTTP/TCP stuff in the java) within the repo without having to clone, decompress them all individually, then search on a local drive. Smali works I guess, but I am personally not familiar with it. For anyone interested, I had a month-or-so old Nokia 7.1 on Android 9 (UK one bought from a high street retailer). A lot of these packages look similar to that (not done an detailed check but the names look familiar). After the "phoning home" posting I installed NoRoot Firewall to examine what was going on and if any of these evenwell packages were calling out. I was not able to find any evidence of "phoning home" from the several days I was running NoRoot Firewall. The main weird thing was the camera app connecting to Facebook (for the live streaming) even though I hadn't set any of that up or have a Facebook account. Original comment: https://news.ycombinator.com/item?id=19450847 https://news.ycombinator.com/item?id=19450847 I am not saying that they never send anything, but I did not see any evidence of it happening for the 3 or 4 days I was looking for it.