Xiaomi Mi 3 is stealing your documents - Security Discussion

I just stumbled on the fact that my brand new Xiaomi Mi 3 is stealing my documents which I have not authorized.
I found that it is uploading my docs , zip files, .jpg files to web server.Not only this , it is extracting all the mails and its attachment from my email boxes (particularly Gmail and my company).
Earlier when of my friend disclosed it to me , then I put a setup and found that indeed it is stealing all the attachment from all the mail boxes.
I put pen drive in OTG, my MI3 secretly copied all the data and uploaded to Chinese web-server.
I found this alarming and to double check the status I re-downloaded the MIUI ver 6 form original site. and still it is the same .As on today I can say it is secretly uploading my data in encrypted format.
Even after blocking everything from "Security App"( A firewall app), Mi3 still uploads documents in background.
You all are requested to view and alert all developer to check the matter more deeply.
And send a alert to all users

Haha... oh really? 1 st post on XDA forum and already ton of bull**** without proof?
Nice trolling.

Related

E-Mail - Internet Pictures Blocked

Hi,
just wondering if there is a tweak for this. I am using my email a lot and I have a message saying
'Internet Pictures Blocked. To protect your privacy, pictures are not automatically downloaded'
Does anyone know of a way around this?
Thanks
I really would like to know this as well...
And me.....
I don't know a way round it but I do know that desktop outlook behaves in the same way. You have to consciously choose to download pictures - I beleive that this feature was brought in to prevent the execution of malicious code that could be hidden inside jpegs.
at least in desktop outlook, you can add domains to the safe sender list....
and on the desktop you can choose an option so it always downloads pictures.
my td2 isnt even showing me the pictures after i press download internet pictures for some reason
i searched alot & found answer: there is no solution for this.
bnm7bnm said:
i searched alot & found answer: there is no solution for this.
Click to expand...
Click to collapse
At least this works on WM6.1 for one email, but not for the next to come.
I click on Internet Pictures Blocked, then click on Download Pictures. Then I get the pictures in the email.
BeeGee_Tokyo said:
At least this works on WM6.1 for one email, but not for the next to come.
I click on Internet Pictures Blocked, then click on Download Pictures. Then I get the pictures in the email.
Click to expand...
Click to collapse
it works but if you downloaded pictures and closed email next time you need to download same images again... very annoying.
its supposed to be something for security to not download automaticly html pictures but its bs...
bnm7bnm said:
it works but if you downloaded pictures and closed email next time you need to download same images again... very annoying.
its supposed to be something for security to not download automaticly html pictures but its bs...
Click to expand...
Click to collapse
That's what internet pictures are. The pic's aren't embedded into the emails, the links to the actual images on the internet are, so the pics need to be shown from their web address on the net everytime you open the email. Same thing happens on the desktop and in all honesty people shouldn't really be sending emails this way, it's annoying and as people have mentioned insecure.
This is not something I want to happen on my device, data plans for mobile phones (esp where I'm from) are pretty nasty and if the images were large in size I could get a really nasty shock. You can set the max limit to dl per email (5k, 10k, 20k etc) but you don't really have this capability with stuff that's hotlinked ot the internet, so I'm guessing for these reasons they're disabled by default.
littlescott said:
That's what internet pictures are. The pic's aren't embedded into the emails, the links to the actual images on the internet are, so the pics need to be shown from their web address on the net everytime you open the email. Same thing happens on the desktop and in all honesty people shouldn't really be sending emails this way, it's annoying and as people have mentioned insecure.
This is not something I want to happen on my device, data plans for mobile phones (esp where I'm from) are pretty nasty and if the images were large in size I could get a really nasty shock. You can set the max limit to dl per email (5k, 10k, 20k etc) but you don't really have this capability with stuff that's hotlinked ot the internet, so I'm guessing for these reasons they're disabled by default.
Click to expand...
Click to collapse
me never use data connections only wifi and im sure there are many more so if its not a concern it should be possible...
images saved in some temp folder, there should be way to save these images in other folder and when opening email again, it will look in this folder before trying to download.
strange its not done cause seems ppl here doing much more complex stuff...

Access Group documents in SkyDrive

Hi everyone,
Yesterday I received a new Lumia 800 (great phone btw ) and everything works fine. However I was wondering, whether its possible to access documents stored in a live group through the SkyDrive App/Office App.
Regards
Chris
Sent from my Lumia 800 using Board Express
ChrisKringel said:
Hi everyone,
Yesterday I received a new Lumia 800 (great phone btw ) and everything works fine. However I was wondering, whether its possible to access documents stored in a live group through the SkyDrive App/Office App.
Regards
Chris
Sent from my Lumia 800 using Board Express
Click to expand...
Click to collapse
Group documents? I don't exactly know what you mean, but if you're referring to documents that are shared with you, they should just show up in your office hub (and of course in the skydrive app as well).
Thanks for your answer. I'm not referring to document that are shared with me. If you visit http://groups.live.com you can create a Group on the Windows Live Network with various people. This group can have its own mailinglist, a calender and has an "own" SkyDrive as well, where every group member can upload and edit files. I was reffering to the documents stored on this "group-SkyDrive". These docs wont show up in the "Shared With Me"-Section :-/
ChrisKringel said:
Thanks for your answer. I'm not referring to document that are shared with me. If you visit http://groups.live.com you can create a Group on the Windows Live Network with various people. This group can have its own mailinglist, a calender and has an "own" SkyDrive as well, where every group member can upload and edit files. I was reffering to the documents stored on this "group-SkyDrive". These docs wont show up in the "Shared With Me"-Section :-/
Click to expand...
Click to collapse
Ah, okay. I see what you mean. I think it doesn't show up because it's - just like you said - a standalone part of skydrive which is not connected to your personal skydrive. I'm afraid there's currently no way to make it show up somewhere in your personal skydrive. But it sure would be good to suggest it as a feature request.
I just checked back with the SkyDrive Team on twitter, and the confirmed that this feature is currently not implemented. But let's see. Maybe this will be implemented with an future update.
ChrisKringel said:
I just checked back with the SkyDrive Team on twitter, and the confirmed that this feature is currently not implemented. But let's see. Maybe this will be implemented with an future update.
Click to expand...
Click to collapse
Thanks for the heads up on this.
I might be wrong on this one but I think you have to use that Microsoft 365 live service for this.
This is easy, just open SkyDrive with IE and navigate to your group documents. If you open them, they will show in Office (if you open a OneNote document for instance, you can then syncronize it like your regular SkyDrive documents)
This dosn't work. The documents on the group skydrive are saved localy on the phone after editing (or on my personal skydrive)

[Q] Attaching file to emails

Long time WM user, fairly new WP7.5 user.
Love the platform and for the most part, don't miss WM at all.
Except, I used to be able to attach files to my emails like MP3 and Wav files but I have yet to see a way to do that under WP7.5.
I have searched and scrolled through this section to see if I could find something however nothing really addressed the question. Based on some of the threads I read, it looks like this cannot be done.
Can it? Does anyone know if it is coming out in a relase fix?
Thanks,
Rick
The EmailComposeTask class does not support attachments which is ridiculous and it's been a long time complaint. Microsoft doesn't seem to bothered by it and I haven't heard anything about them supporting it. I think it's part of their strategy to get devs to start using the cloud more.
Just noticed this wasn't the developer forum. My post is development related and doesn't really apply to question.
I agree about the cloud but you still need to be able to send a link in an expeditious way. Openning windowslive and finding the folder/file and then specifying share and sending an email is a PIA.
I do like the cloud for my contacts and other stuff since it is not taking space on my phone. I like it until I travel into the boonies of Texas and want to make a call but the contact list is not there cause there is not connection to 4G, 3G but to whatever was there before God created cell phones. Not looking forward to that day.
For most things it is done under the application. For example, in office word, you can hit share and choose the email account. Same within most apps. Zune though does not have this option. probably because your not supposed to pirate them to your friends.
Yet more prof that Windows Phone sucks and Windows Mobile still rules. What a damn shame. I tried to email someone and attach my resume but couldn't I had to go through the stupid office hub to do it, what a bunch of B.S. And they wonder why their sales suck ass.
ROCOAFZ said:
For most things it is done under the application. For example, in office word, you can hit share and choose the email account. Same within most apps. Zune though does not have this option. probably because your not supposed to pirate them to your friends.
Click to expand...
Click to collapse
You're not trying to imply that I would send MP3's that are illegal are you?
Just kidding.
Actually they are my own files and sometimes ring tones that I created and want to share.
As for the resume email... kind of hard to attach a file to an email when it is not located on your phone. I am liking the fact that the cloud has the files and not the phone. There just needs to be a simple way to access and send it. Like Sinister1, I would prefer to have it attached to an email that I authored like we have been doing every since email allowed attachments rather than going to the file on the cloud and sharing it with an individual.
Is there any way to extract files from our phones and store them in Dropbox or Skydrive? for example pdf files or mp3.
Office files will sync on SkyDrive, or if opened on the phone (from email or web) can be saved to SkyDrive or to the phone itself. In either case, you can then send them as attachments (but only that one file at a time) in email.
Sadly, though, that's the only way I know of to send email attachments other than pictures. Microsoft really needs to either add the API for attachments, or they need to allow Outlook Mobile to open files from the public parts of your phone.
Irony-mode: Zune (the hardware, all the way fromt he HD to the original 30GB model) allowed sending files by WiFi - a feature MS has not bothered to add to WP7 even though I'm pretty sure it wouldn't be difficult (both run on some variant of CE, both have WiFi, the HD even used a touch interface similar to the phone...). Instead, forget sending music, forget sending video, and you can barely send a Word doc!
GoodDayToDie said:
Office files will sync on SkyDrive, or if opened on the phone (from email or web) can be saved to SkyDrive or to the phone itself. In either case, you can then send them as attachments (but only that one file at a time) in email.
Sadly, though, that's the only way I know of to send email attachments other than pictures. Microsoft really needs to either add the API for attachments, or they need to allow Outlook Mobile to open files from the public parts of your phone.
Irony-mode: Zune (the hardware, all the way fromt he HD to the original 30GB model) allowed sending files by WiFi - a feature MS has not bothered to add to WP7 even though I'm pretty sure it wouldn't be difficult (both run on some variant of CE, both have WiFi, the HD even used a touch interface similar to the phone...). Instead, forget sending music, forget sending video, and you can barely send a Word doc!
Click to expand...
Click to collapse
Is there another way to extract pdfs, zips or mp3s of our phones even through data cable?
My PDF files are adding up. Whenever I open up Adobe reader, the files are pilling up. I know I can press and hold on any one of them and delete the file but some I want on my PC and this just is too funky.
@Rickgig, what phone do you have? Some WP7 devices are able to use apps that will access the phone and move/copy/transfer files.
Alternatively, don't you have other copies of those PDFs? I mean, they got onto the phone from somewhere, so wouldn't it be easier to get them from there? Then you could safely delete the unneeded ones off the phone.
GoodDayToDie said:
@Rickgig, what phone do you have? Some WP7 devices are able to use apps that will access the phone and move/copy/transfer files.
Alternatively, don't you have other copies of those PDFs? I mean, they got onto the phone from somewhere, so wouldn't it be easier to get them from there? Then you could safely delete the unneeded ones off the phone.
Click to expand...
Click to collapse
I have a Titan with AT&T.
You're right... I can get them from someplace else. They are mostly menu's from restaurants but then they are business documents too. I have since learned to upload them from my PC to Skydrive and access them there.
There's a work around for everything I just wanted some of the WM features to be here. Like the file that prompted me to start this thread in the first place. My son did some work on his car and took a short video of the results and MMS'd to me. I can forward it to others but that is about it. Can't save it, can't email it to myself... if I deleted the text thread, it's gone.

Trust Google Drive??

http://www.askmen.com/entertainment/tech-news/google-drive-licence-agreement.html
Gets u thinking actually. :-\
Sent from my epic touch with plenty of ICS treats to go around!
Wow that's crazy, will uninstall it now !
Thanks for the link !
You should probably read this. http://www.theverge.com/2012/4/25/2973849/google-drive-terms-privacy-data-skydrive-dropbox-icloud
Don't believe the hype. They need to have permission to use your content to provide services that process, index, copy to servers, translate, display, etc...anything they do to provide the service needs to be covered in legalese.
The part they gloss over in the "be very afraid" blog posts and articles is that "The rights that you grant in this licence are for the limited purpose of operating, promoting and improving our Services, and to develop new ones."
They also don't mention that the associated privacy policy that also governs how your information is used explicitly states that your personal information is not used for purposes outside that policy without your consent.
http://www.google.com/policies/privacy/
But if anyone is worried at all about keeping their data in the "cloud," they should honestly trust no one. Unless they are encrypting your data before storing it, all the services need the same permissions...Dropbox, iCloud, etc...
http://www.theverge.com/2012/4/25/2973849/google-drive-terms-privacy-data-skydrive-dropbox-icloud
Everyone can make their own choice, but I'm not concerned. I wouldn't keep truly sensitive materials in ANY unencrypted repository. For everything else, these solutions are mighty convenient and secure enough for me.
Unprompted install, exfiltration route
So Drive is now on my device although I never asked to install and never even heard of it until I saw it as an active task. com.google.android.apps.docs
Now we have an unprompted install that provides a direct connection to Google docs without prompting for login credentials. (It is apparently using the login for gmail as a universal login).
So without any action on their part or any notice, a user's entire Google Docs can exfiltrated by compromising their phone. Nice.
It is so easy for a user to get taken by accident. Many don't know that when they preview attachments in gmail they can go to Google Docs and they certainly won't know about Google Drive on their Android as it doesn't even drop an icon during an unprompted install.
Drama much in here?
You're already using an Android device, which is linked with your Google account. Google recently updated their Privacy Policies so that it is now the same across the board. Your Gmail account has the same Policy as your Google+ account, your Youtube account, your Google Voice account, your Google Reader account, and (wait for it....) your Google Drive account. If you're okay with the policy as it applies to the content stored in your email, why is the policy as it relates to file and document storage an issue?
And, as has been mentioned in posts referencing the Verge article, the file storage policies are pretty much the same with the other major cloud storage providers - iCloud, Windows SkyDrive, Dropbox, etc. Your data remains your data, and nothing will be done to disclose it.
As for an "unprompted install", I'm going to guess that you previously had Google Docs installed. When Drive went public, it was also announced that it was essentially a continuation of Docs - an update, if you will. When you installed the Docs update from the Play Store, you automatically got Drive. Congratulations.
If your phone gets compromised, the bad guy would have access to a lot of juicy data in addition to just your Google Docs. Your Dropbox, for instance, would be unprotected. As would your Gmail, Calendar, Contacts, work email, Latitude history, Google+ posts, stored passwords in your Browser, etc. Let's look at this realistically and not just panic over a sensationalized story.
Hi, i'm in Italy and i speak quite well english, i have to say I'm using google drive from 6 days ago and I've never had any problem with my files so i Trust and if u saw the last internet privacy policy of google in the begin of 2012 we should have saw they don't computing or manipulate our file, simple check the integrity of the sequence of bit stored in the cloud... sorry for my totaly bad english, I hope I was helpful... thanks for consider my post...

QuickPic app is not showing any cloud data (photos)

Hi there,
I am not able to find any photos in QuickPic Gallery cloud app which I have backed app. There is almost 50GB+ and I am unable to view it. I am also trying to access from Web view but there is also nothing showing. I read one XDA thread saying that CM Cloud is taking down their server in April 2017 (but photos were backing up till last week i.e. 28th December 2018) and they informed users to restore their data. but last week I came to know about it and I also didn't get notification in QuickPic Gallery app about the same.
Is there any solution? that will be a big relief. Thanks!!!
I'm facing the same problem. I have around 43GB of photos in there. Now I cannot access too, I didnt know about them terminating their service, else I would have back up first. No notifications or email.
Same here, it's backing up the pictures, but I can't view any of the backed up folders.
My Solution:
1: Go from your Windows PC to https://cloud.cmcm.com and login with your CM Cloud login from QuickPic
2. On top click on the link "How to download photos from QuickPic"
3. Follow the instructions
4. Rename the downloaded fotos with an exif-tool
5. done!
hi fehrcomp, thank you so much for sharing. i did login and didnt able to restore from quickpic. it shows : {"ret":-1,"data":{"message":"wrong token","error":5}}
what did i do wrong?
I lost about 3000 pics using Quick Pick and CM Cloud... I log in to the CM Cloud and the pics are not there. If you have a chance, get your pics out of there, quickly!
I'm just downloading my photos as we speak from that **** of a cloud service, as I have recieved notice about CM shutting it down (and it should).
Note that in order to see your pictures, you have to login into https://cloud.cmcm.com/p/disk/ and look for a folder called CM Qickpic, and in that folder theres a folder called "Original Photos". All my photos are there, and I'm using their even more **** of a tool to download it...
Hope you guys get your precious stuff and get the hell out of there ASAP!
P.S.- Anyone already using a similar (prefferably more stable and trusted) service? I'm syncing my stuff on Google Photo at this moment...
Best of luck!
@fehrcomp
4. Rename the downloaded fotos with an exif-tool
How did you do this? my exif seems to be deleted/incorrect for some pics
Already done,all my pics was downloaded followed these guide above.... thanks guys.
@tintumat
I had correct exif data. Otherwhise you could not use a exif tool.
@keeekeee
You tried an other browser?
Awesome, glad to hear!
Can anyone help in this ?
i have 10 years of photos there 134gb cannot access them, the only way that worked for me but still suffering was installing bluestack on my PC and then install older version of quickpic, login and then i see everything i started to download the pictures and now im stuck because bluestack allows only 65gb of storage and im still half way restoring, no luck through their ****ty website!
If anyone can help in this will be appreciated.
I can't even login, when I use the link provided to login from a computer I get "You have logged out, please log in again". The pw is correct because when I am using a bogus pw (for testing) it actually shows me that the email or pw is incorrect. How can I login? I even reset my pw 2 times, but I can't login. On the phone it works, I see the pictures, but I cannot download them (restore failed).
I have a total of 4.9 TB of storage at cm cloud, whereas the used space is about 5 GB, but In cloud there are only 19 photos remaining.
I backed up all the data from the cloud before the service shut down but I was curious if they deleted our data, and they didn't, and also there is no option to delete your photos.

Categories

Resources