4 ms·

It's all covered in the 32 page research report: Xiaomi system applications (Security, MiBrowser, Cleaner, MIUI Package Installer and Themes) have been found t

It's all covered in the 32 page research report: Xiaomi system applications (Security, MiBrowser, Cleaner, MIUI Package Installer and Themes) have been found to regularly download the manufacturer’s updated configuration file MiAdBlacklistConfig from a server located in Singapore. This file contains a list composed of the titles, names and other information of various religious and political groups and social movements (at the time the analysis was performed, 449 records were identified in the MiAdBlacklistConfig file). Analysis of the Xiaomi application code showed that the applications have implemented software classes for filtering the target multimedia displayed on the device according to the downloaded MiAdBlacklistConfig list. This allows a Xiaomi device to perform an analysis of the target multimedia content entering a phone: to search for keywords based on the MiAdBlacklist list received from the server. When it is determined that such content contains keywords from the list, the device blocks this content. It is thought that this functionality can pose potential threats to the free availability of information. PDF here: https://www.nksc.lt/doc/en/analysis/2021-08-23_5G-CN-analysis_env3.pdf https://www.nksc.lt/doc/en/analysis/2021-08-23_5G-CN-analysi...

avodonosov 5y ago
Right
- reginold 5y ago
  I don't understand what you're saying or intending with your comments. There are 32 pages in the report. I'm curious about steps to replicate as well, generally for stuff like this.
  - avodonosov 5y ago
    I mean the piece quoted above is the correct original source. I wanted to post exactly this snippet myself. From that a possible test case can be to open this HN thread in MiBrowser and see the webpage blocked due to the "free Tibet" phrases posted here (assuming MiAdBlacklistConfig includes English versions). If anyone has a Xiaomi phone and is willing to accept the MiBrowser terms of use, please try.
    - reginold 5y ago
      Right. MiAdBlackListConfig does not include English versions, according to the 32 page research article. Therefore "Free Tibet" is not relevant. A user here testing this is irrelevant. If someone wants to verify, figure out where we can get the codebase and search these strings ourselves.
      - avodonosov 5y ago
        Chinese versions are posted already too, so this thead can be used for testing now.

avodonosov 5y ago

Right

reginold 5y ago
I don't understand what you're saying or intending with your comments. There are 32 pages in the report. I'm curious about steps to replicate as well, generally for stuff like this.
- avodonosov 5y ago
  I mean the piece quoted above is the correct original source. I wanted to post exactly this snippet myself. From that a possible test case can be to open this HN thread in MiBrowser and see the webpage blocked due to the "free Tibet" phrases posted here (assuming MiAdBlacklistConfig includes English versions). If anyone has a Xiaomi phone and is willing to accept the MiBrowser terms of use, please try.
  - reginold 5y ago
    Right. MiAdBlackListConfig does not include English versions, according to the 32 page research article. Therefore "Free Tibet" is not relevant. A user here testing this is irrelevant. If someone wants to verify, figure out where we can get the codebase and search these strings ourselves.
    - avodonosov 5y ago
      Chinese versions are posted already too, so this thead can be used for testing now.