4 ms·
To my understanding, my Android phone on Verizon would also upload my data (contacts, sms, etc.) to both the carrier's own cloud. My data would also gets upload
by sahaskatta 12y ago
To my understanding, my Android phone on Verizon would also upload my data (contacts, sms, etc.) to both the carrier's own cloud. My data would also gets uploaded to Google's cloud as well.
Is Mi doing it without encrypting the data or without using SSL? Can someone explain this better?
- CaveTech 12y agoJudging purely by the screenshot, it's being done unencrypted over HTTP. Values are also being passed along by cookies in the clear.
- spyder 12y agoThe screenshot in the article shows it's a HTTP GET request, so no encryption and the GET request makes it more likely it's getting stored not only in their db but in access logs of other servers (web server, load balancers, proxies).
- sahaskatta 12y agoSo if they did use HTTPS and possibly encrypt the content underneath as well, would this not be an issue or is there more?
- StavrosK 12y agoIt would still be an issue, this just makes it larger.
- msh 12y agoThey are doing it even if you dont sign up for their cloud solution according to f secure, just after the phone is activated.
- sahaskatta 12y agoFYI the bloatware named something along the lines of "Verizon Backup Assitant" does the same thing without asking for your privileges. It starts pushing your texts, contacts, photos, and possibly other bits of data up to their cloud for "safekeeping." I think I bought a Samsung phone once as well which actually backed everything up to Lookout.com without my knowledge too.
- jmgrosen 12y agoIn addition to the other commentors' responses, I'd like to point something out: when you use Verizon to send an SMS, you know that they can read it (and may or may not actually store it), whereas in this case, it was being done without the user's knowledge. That's the major problem for me. (Along with it being unencrypted... eww.)