Backdoor and security concern - Honor 8 Questions & Answers

I am thinking to buy honor 8. But the warning of not buying any Huawei phones for US government officials scare me off. Do any security experts show us proof security loophole or hardware backdoor ? In order word, is the concern legitimate? I may use my phone to visit China. And I don't want to be tracked.

Look if your looking to buy the phone go ahead. There has been many sales of this and other Huawei devices in the US.
I be more concerned about likes of Facebook, Snap chat etc etc...

Related

Huawei ID Transfer to Germany?

Anyone received the email about the Huawei ID Transfer from USA To Germany whats it exactly mean?
Dear Honor customer:
Honor is a global brand, and our philosophy is always to be customer centric. We believe in delivering the best service to our customers and adapting and evolving to embrace new innovations. Honor continues to build on its strength to develop and enhance our products, services and new inventions. Whenever challenges arise, we stay true to our passion and persist to achieve our dreams, continually striving for new accomplishments.
At Honor, we keep moving forward to discover the world, take risks and are always ready to be inspired from our experience. We pursue our mission guided by a belief that tomorrow can always be better as we are committed to staying true to ourselves and daring to be different!
The Honor Store, as the official platform of Huawei Device USA, focuses on the customer experience by providing a broad range of products, sales, logistic support, and after sales services. Thus, in order to serve you better, we plan to migrate your registered Huawei ID and any information associated with your ID on www.hihonor.com/us from the USA to Germany on April 6, 2017. After migration, the services on www.hihonor.com/us will remain the same as prior to migration. If you do not want your information migrated to Germany, please delete your Huawei ID prior to April 5, 2017.
Please note that if you delete you Huawei ID, you will not be able to access your Huawei ID or any of your information associated with Huawei services used or services received from third parties. This information may include, but is not limited to: personal information, records, uploaded files, transactions, coupons, and membership benefits. You will be unable to recover any or your data after you delete your Huawei ID.
If you wish to delete your Huawei ID, please click here: Link.
If you have any questions or concerns, please contact us at [email protected].
Huawei Device USA
Click to expand...
Click to collapse
From what I can gather your data would sit in Germany and follow the EU's data protection and privacy laws, which tend to be less invasive than US'. It could also be that it just makes more economical sense to do it, depending how their online operations are set up.
Sent from my MHA-L29 using XDA Labs
Dewaynelives said:
Anyone received the email about the Huawei ID Transfer from USA To Germany whats it exactly mean?
Click to expand...
Click to collapse
I got the same message
I got this also. Weird it's going to happen April 5th. Isn't honor launching a phone April 5th too?

PSA: USA Bootloader WILL be LOCKED!!!

My DM with a T-Mobile rep.
That was a waste since it was a known fact already. Wish you had asked them what bands the phone supports since they don't list them all anywhere. AT&T lists them all on the website and looks like the best choice if T-Mobile won't provide that info
lightninbug said:
My DM with a T-Mobile rep.
Click to expand...
Click to collapse
You said this...
I wouldn't be so sure until it's proven.
Finally, the Exynos 8895 also includes what Samsung is calling an “enhanced security sub-system with a separate security processing unit” for use with user authentication, mobile payments, and the like. Based on Samsung’s description this sounds a heck of a lot like Apple’s Secure Enclave, which would be a very welcome development, as in Apple’s case it has made their phones a lot harder to break into.
Click to expand...
Click to collapse
http://www.anandtech.com/show/11149/samsung-announces-exynos-8895-soc-10nm​
In reading your exchange with T-Mobile it came across fairly righteous - "it's my phone and I should be able to do what I want with it." Knowing T-Mobile's phones have locked bootloaders it's your choice whether to buy them or, like the CSR said in your exchange, find a phone that suits you and "bring your own." Trying to get them to reverse a security policy that helps far more people than it hurts seems like a pretty futile exercise.
The value of the modding community to a company with 52+M wireless subscribers is pretty low. There are 336K active (used the site in the past 30 days) XDA members. If every XDA member was on T-Mobile and moved to another carrier in protest that's less than 1/10 of 1% of T-Mobile's subscriber base. Samsung, the carriers, and even Google are far more interested in national and global corporate accounts and those accounts demand security. That's why Knox, locked bootloaders, and what's mentioned as coming in the above article exist. Companies like OnePlus, Oppo, and HTC aren't ever going to land big corporate and government contracts where Samsung can and does. That's why carriers and Samsung lock their bootloaders. The company I work for only allows iPhones to connect to Exchange. We Android users have to use some kludged containerized e-mail product that doesn't integrate with the rest of the phone and even then its only available on current model Samsung phones. It is what it is.
We'll get the engineering firmware leaked and have root anyways. Our little way of protesting.
ethanscooter said:
We'll get the engineering firmware leaked and have root anyways. Our little way of protesting.
Click to expand...
Click to collapse
Maybe I'll wait for the Pixel2 this fall. I know that will be unlocked, easily rootable, and supported by the dev community. There are few options for the S7 now and I expect much the same for the S8. My last Samsung phone was a Note 3 and the dev support was limited. I love my current Nexus 6 so I am in no rush.
almahix said:
Maybe I'll wait for the Pixel2 this fall. I know that will be unlocked, easily rootable, and supported by the dev community. There are few options for the S7 now and I expect much the same for the S8. My last Samsung phone was a Note 3 and the dev support was limited. I love my current Nexus 6 so I am in no rush.
Click to expand...
Click to collapse
This might be a good plan...How big is the screen supposed to be?
954wrecker said:
That was a waste since it was a known fact already. Wish you had asked them what bands the phone supports since they don't list them all anywhere. AT&T lists them all on the website and looks like the best choice if T-Mobile won't provide that info
Click to expand...
Click to collapse
Here you go. It's been listed a day after since preorders started.
http://www.samsung.com/us/support/owners/product/galaxy-s8-plus-t-mobile
2G GSM: GSM850,GSM900,DCS1800,PCS1900
3G UMTS: B1(2100),B2(1900),B4(AWS),B5(850)
3G TD-SCDMA: B34(2010),B39(1880)
4G FDD LTE: B1(2100),B2(1900),B3(1800),B4(AWS),B5(850),B7(2600),B8(900),B12(700),B13(700),B18(800),B19(800),B20(800),B25(1900),B26(800),B66(AWS-3)
4G TDD LTE: B38(2600),B39(1900),B40(2300),B41(2500)
BarryH_GEG said:
You said this...
I wouldn't be so sure until it's proven.
http://www.anandtech.com/show/11149/samsung-announces-exynos-8895-soc-10nm[/I]​
In reading your exchange with T-Mobile it came across fairly righteous - "it's my phone and I should be able to do what I want with it." Knowing T-Mobile's phones have locked bootloaders it's your choice whether to buy them or, like the CSR said in your exchange, find a phone that suits you and "bring your own." Trying to get them to reverse a security policy that helps far more people than it hurts seems like a pretty futile exercise.
The value of the modding community to a company with 52+M wireless subscribers is pretty low. There are 336K active (used the site in the past 30 days) XDA members. If every XDA member was on T-Mobile and moved to another carrier in protest that's less than 1/10 of 1% of T-Mobile's subscriber base. Samsung, the carriers, and even Google are far more interested in national and global corporate accounts and those accounts demand security. That's why Knox, locked bootloaders, and what's mentioned as coming in the above article exist. Companies like OnePlus, Oppo, and HTC aren't ever going to land big corporate and government contracts where Samsung can and does. That's why carriers and Samsung lock their bootloaders. The company I work for only allows iPhones to connect to Exchange. We Android users have to use some kludged containerized e-mail product that doesn't integrate with the rest of the phone and even then its only available on current model Samsung phones. It is what it is.
Click to expand...
Click to collapse
I really don't agree with this. There is no reason they couldn't design a phone to be secure and able to flash other operating systems. Windows for example can use bitlocker, but that doesn't stop you from formating the drive out and install linux. I agree if you're leasing that phone the leasing company has the right to protect its asset, but if you buy it outright, you should be able to do what you want with it. Even if you had to send the phone to Samsung, you should have some avenue to unlock a device you own.
YellowGTO said:
I really don't agree with this. There is no reason they couldn't design a phone to be secure and able to flash other operating systems. Windows for example can use bitlocker, but that doesn't stop you from formating the drive out and install linux. I agree if you're leasing that phone the leasing company has the right to protect its asset, but if you buy it outright, you should be able to do what you want with it. Even if you had to send the phone to Samsung, you should have some avenue to unlock a device you own.
Click to expand...
Click to collapse
That's the XDA spirit!
YellowGTO said:
I really don't agree with this. There is no reason they couldn't design a phone to be secure and able to flash other operating systems. Windows for example can use bitlocker, but that doesn't stop you from formating the drive out and install linux. I agree if you're leasing that phone the leasing company has the right to protect its asset, but if you buy it outright, you should be able to do what you want with it. Even if you had to send the phone to Samsung, you should have some avenue to unlock a device you own.
Click to expand...
Click to collapse
Kind of the tail (the single digit percentage of people wanting to root their phones regardless of the security implications) wagging the dog (everyone else concerned about security and 100% of companies wanting to protect their business data). Android security is so totally bankrupt that the company I work for won't allow Android devices to connect to Exchange. While iPhone users have full EAS access I'm stuck using OWA. I personally hope Samsung goes beyond KNOX to secure their phones so I and others like me can get real access to company assets rather than dealing with kluges and work-arounds. I'm sure that's why Samsung's doing more than Google to secure their phones. People who want unlocked bootloaders and root access have plenty of options other than Samsung so it's not like anyone's being harmed.
BarryH_GEG said:
Kind of the tail (the single digit percentage of people wanting to root their phones regardless of the security implications) wagging the dog (everyone else concerned about security and 100% of companies wanting to protect their business data). Android security is so totally bankrupt that the company I work for won't allow Android devices to connect to Exchange. While iPhone users have full EAS access I'm stuck using OWA. I personally hope Samsung goes beyond KNOX to secure their phones so I and others like me can get real access to company assets rather than dealing with kluges and work-arounds. I'm sure that's why Samsung's doing more than Google to secure their phones. People who want unlocked bootloaders and root access have plenty of options other than Samsung so it's not like anyone's being harmed.
Click to expand...
Click to collapse
Samsung can add anything they want to secure the phones. Doesn't change the fact that you should be able to unlock the phone via some service. Konx is already the highest rated mass produced enterprise software (http://www.informationweek.com/mobi...eats-ios-android-gartner-finds/d/d-id/1325145), and it does just fine being rooted. It's a very expensive device that pretty much becomes garbage after a few years. On the other hand, I still use my touch pro tablet that runs 7.1.2. Not to mention if it were illegal to lock phones, shops would pop up overnight to upgrade peoples dated phones to the latest and greatest.
YellowGTO said:
Samsung can add anything they want to secure the phones. Doesn't change the fact that you should be able to unlock the phone via some service. Konx is already the highest rated mass produced enterprise software (http://www.informationweek.com/mobi...eats-ios-android-gartner-finds/d/d-id/1325145), and it does just fine being rooted. It's a very expensive device that pretty much becomes garbage after a few years. On the other hand, I still use my touch pro tablet that runs 7.1.2. Not to mention if it were illegal to lock phones, shops would pop up overnight to upgrade peoples dated phones to the latest and greatest.
Click to expand...
Click to collapse
An analogy. You want a light weight performance oriented two seat convertible - a "true sports car." But you also want luxury appointments and an abundance of high-end optional equipment and a prestigious brand. Do you: A) buy something that meets your first set of requirements like a Mazda MX-5, or B) go to BMW forums and bash BMW and complain to fellow forum members that the Z4 isn't a "true sports car" because of its weight and price? Or worse, buy it and complain after the fact how horrible BMW is because of their product choices? It's an example of not being able to have your cake and eat it too. Mazda offers what they offer and BMW offers what they offer. You don't get to tell either to change their product strategy. You do get to vote with your wallet.
Samsung's got the most rigid Android security and seems to be ratcheting it up even further with a h/w security coprocessor in Exynos 8895. OnePlus, HTC, Huawei, Pixel/Nexus are the most liberal. It seems ludicrous to pick a Samsung phone for modding when clearly the product isn't the best choice. The other mentioned brands are a far better choice. You can't have your cake and eat it too. That's just the way life works.
If you believe an unlocked bootloader and rooting are a God given right since it's "your phone and you paid for it" the solutions simple. Don't buy a Samsung phone. And if you do, lamenting Samsung's security restrictions here after the fact just reinforce you shouldn't have bought the phone in the first place.
BarryH_GEG said:
An analogy. You want a light weight performance oriented two seat convertible - a "true sports car." But you also want luxury appointments and an abundance of high-end optional equipment and a prestigious brand. Do you: A) buy something that meets your first set of requirements like a Mazda MX-5, or B) go to BMW forums and bash BMW and complain to fellow forum members that the Z4 isn't a "true sports car" because of its weight and price? Or worse, buy it and complain after the fact how horrible BMW is because of their product choices? It's an example of not being able to have your cake and eat it too. Mazda offers what they offer and BMW offers what they offer. You don't get to tell either to change their product strategy. You do get to vote with your wallet.
Samsung's got the most rigid Android security and seems to be ratcheting it up even further with a h/w security coprocessor in Exynos 8895. OnePlus, HTC, Huawei, Pixel/Nexus are the most liberal. It seems ludicrous to pick a Samsung phone for modding when clearly the product isn't the best choice. The other mentioned brands are a far better choice. You can't have your cake and eat it too. That's just the way life works.
If you believe an unlocked bootloader and rooting are a God given right since it's "your phone and you paid for it" the solutions simple. Don't buy a Samsung phone. And if you do, lamenting Samsung's security restrictions here after the fact just reinforce you shouldn't have bought the phone in the first place.
Click to expand...
Click to collapse
Very well said and the exact reason after my note 3 and note 5 I left for OnePlus
BarryH_GEG said:
An analogy. You want a light weight performance oriented two seat convertible - a "true sports car." But you also want luxury appointments and an abundance of high-end optional equipment and a prestigious brand. Do you: A) buy something that meets your first set of requirements like a Mazda MX-5, or B) go to BMW forums and bash BMW and complain to fellow forum members that the Z4 isn't a "true sports car" because of its weight and price? Or worse, buy it and complain after the fact how horrible BMW is because of their product choices? It's an example of not being able to have your cake and eat it too. Mazda offers what they offer and BMW offers what they offer. You don't get to tell either to change their product strategy. You do get to vote with your wallet.
Samsung's got the most rigid Android security and seems to be ratcheting it up even further with a h/w security coprocessor in Exynos 8895. OnePlus, HTC, Huawei, Pixel/Nexus are the most liberal. It seems ludicrous to pick a Samsung phone for modding when clearly the product isn't the best choice. The other mentioned brands are a far better choice. You can't have your cake and eat it too. That's just the way life works.
If you believe an unlocked bootloader and rooting are a God given right since it's "your phone and you paid for it" the solutions simple. Don't buy a Samsung phone. And if you do, lamenting Samsung's security restrictions here after the fact just reinforce you shouldn't have bought the phone in the first place.
Click to expand...
Click to collapse
The analogy is terrible. And the reason I use Samsung is for Knox. I'm not looking for root myself (at this moment). A better and simpler analogy would be you buy a miata, later on in life you want to do an LS1 swap but Mazada has welded the engine bay shut. There just isn't a reason for it. being able to change the operating system has no bearing on the security of a device. If they want to stop you from rooting Samsungs version of android fine, encrypt the disk, whatever they want. I should still be able to wipe out the partition and install something like Ubuntu phone (I know dead).

[Notice] Your Huawei ID will be migrated from USA to Germany

I received this email a few days ago. I'm not sure why, exactly, as I live in Pennsylvania. Maybe the lack of software updates for a few months in the US is because Honor is getting rid of their US offices and having Europe handle it?
Dear Honor customer:
Honor is a global brand, and our philosophy is always to be customer centric. We believe in delivering the best service to our customers and adapting and evolving to embrace new innovations. Honor continues to build on its strength to develop and enhance our products, services and new inventions. Whenever challenges arise, we stay true to our passion and persist to achieve our dreams, continually striving for new accomplishments.
At Honor, we keep moving forward to discover the world, take risks and are always ready to be inspired from our experience. We pursue our mission guided by a belief that tomorrow can always be better as we are committed to staying true to ourselves and daring to be different!
The Honor Store, as the official platform of Huawei Device USA, focuses on the customer experience by providing a broad range of products, sales, logistic support, and after sales services. Thus, in order to serve you better, we plan to migrate your registered Huawei ID and any information associated with your ID on www.hihonor.com/us from the USA to Germany on April 6, 2017. After migration, the services on www.hihonor.com/us will remain the same as prior to migration. If you do not want your information migrated to Germany, please delete your Huawei ID prior to April 5, 2017.
Please note that if you delete you Huawei ID, you will not be able to access your Huawei ID or any of your information associated with Huawei services used or services received from third parties. This information may include, but is not limited to: personal information, records, uploaded files, transactions, coupons, and membership benefits. You will be unable to recover any or your data after you delete your Huawei ID.
If you wish to delete your Huawei ID, please click here: Link.
If you have any questions or concerns, please contact us at [email protected].
Huawei Device USA
Click to expand...
Click to collapse
Anyone else receive something similar? The Honor 8 Pro was just announced today or yesterday and with Honor's support for the phone having seem to have completely died in January, less than six months after release, I'm not seeing a compelling reason to upgrade even if I did have the cash at the moment. (It's also a bit bigger at 5.7" which might be too big for my tiny Trump-like hands. I'd have to try one out in a local store like I did with the Honor 8 to see how it feels.)
evilpaul13 said:
I received this email a few days ago. I'm not sure why, exactly, as I live in Pennsylvania. Maybe the lack of software updates for a few months in the US is because Honor is getting rid of their US offices and having Europe handle it?
Anyone else receive something similar? The Honor 8 Pro was just announced today or yesterday and with Honor's support for the phone having seem to have completely died in January, less than six months after release, I'm not seeing a compelling reason to upgrade even if I did have the cash at the moment. (It's also a bit bigger at 5.7" which might be too big for my tiny Trump-like hands. I'd have to try one out in a local store like I did with the Honor 8 to see how it feels.)
Click to expand...
Click to collapse
I received the same email. I'm not sure what the reasoning is behind it, or what effect (if any) it will have.

ZTE has halted operations because of US ban

From CNN:
"ZTE Corporation, one of China's largest tech companies, has halted "major operating activities" after a US ban against the company went into effect, according to a new public filing."
"Some of the company's products, which includes smartphones and telecommunications equipment, appeared to be taken offline Wednesday. "
And this is so stupid because not everyone lives in the US.........
Unfortunately ZTE have not kept up an agreement with the US and action has been taken .... makes me think thank god for tdm and his amazing work
stinka318 said:
And this is so stupid because not everyone lives in the US.........
Click to expand...
Click to collapse
The biggest part of the seven-year ban involves no buying any products from US based companies. So no Qualcomm chips, no Dolby, etc. That's what really is devastating to them.
That being said it still sucks. It seemed like they were heading in a good direction, but they violated terms of a legal settlement. I'll still be using my Axon 7 Mini as a "backup" phone, but unfortunately won't be able to get another ZTE...
Sent from my Robin using XDA Labs
Is there still a point to purchasing one and going through the trouble of rooting it so that I will work on Verizon?
igresham said:
Is there still a point to purchasing one and going through the trouble of rooting it so that I will work on Verizon?
Click to expand...
Click to collapse
If I were you I would maybe go with Huawei, they manufacture most of the parts themselves. Don't know if they will be also banned soon
ZTE should partner with Huawei and get the parts from them. Although I am unsure which supplier is being used for WiFi (if it would be Broadcom it would be funny)
TheSSJ said:
If I were you I would maybe go with Huawei, they manufacture most of the parts themselves. Don't know if they will be also banned soon
ZTE should partner with Huawei and get the parts from them. Although I am unsure which supplier is being used for WiFi (if it would be Broadcom it would be funny)
Click to expand...
Click to collapse
Partnering with Huawei might get past finding a supplier for the CPU/SoC - switch from Snapdragon to Kirin. Mediatek would be another option.
Still, they'd be stuck needing to roll out a whole new lineup of devices based on the new hardware.
In any event, would still have trouble purchasing a license for Google-certified Android software such as the Play Services, Play Store, etc.
However, it's starting to look like the USA strategy all along was to use this export ban as a bargaining tool to force China to make concessions in ongoing trade negotiations. There's nothing like going thermonuclear (figuratively speaking) to catch your adversary's (also known as "trading partner's") attention. Trump has recently tweeted that he's open to "working together" with the Chinese government to re-start ZTE's operations. (On the other hand, I've read in other news sources claiming that the most recent string of events with the USA backpedaling on the ZTE file is evidence of China preying on a naive USA trade strategy. Who knows: Maybe both opinions are true?)

Regarding Analytics

So do they collect your data and sell them like other vendor out there?
I'm expecting they don't as they don't want to ruin reputation.
But asking because they may, since the device is flagship at very cheap cost and they may need to raise additional fund through sharing logs or they start doing once you unlock bootloader in that case i will stick to custom-rom.
Security and Privacy is no joke. Not anymore.
amusing_ankesh said:
So do they collect your data and sell them like other vendor out there?
I'm expecting they don't as they don't want to ruin reputation.
But asking because they may, since the device is flagship at very cheap cost and they may need to raise additional fund through sharing logs or they start doing once you unlock bootloader in that case i will stick to custom-rom.
Security and Privacy is no joke. Not anymore.
Click to expand...
Click to collapse
The most security issues are with apps not the os.
But maybe those are suitable for you https://forum.xda-developers.com/oneplus-7-pro/how-to/script-disable-analytics-app-t3946178
https://forum.xda-developers.com/on...agisk-rom-xxx-nolimits-7-0-speed-ram-t3933927

Categories

Resources