According to a security researcher working with Forbes, Xiaomi has been collecting browsing data from users who are using Xiaomi phones and the built-in browser. And the fun part is that the browser does so even in incognito mode or even when using the privacy-conscious DuckDuckGo web browser.

Gabriel Cirlig, the security researcher, is using a Redmi Note 8 as a daily driver and noticed that the device records pretty much everything he does on the phone and sends the data to servers in Russia and Singapore, although the domains are hosted in Beijing. We are talking screens, websites visited, folders opened, settings he changed, music played on the default app, etc.
The data itself is poorly encrypted using the base64 format, so it was very easy for him to transcribe the data into plain text.

Cirlig went even further and downloaded the ROMs for Xiaomi Mi 10, the Redmi K20 and the Mi Mix 3 and found the very same security vulnerability on all of them. Another security researcher, Andrew Tierney, found the suspicious behavior on the Mi Browser Pro and the Mint Browser too.

Xiaomi has responded to the allegations saying that Forbes findings are misleading and untrue. A spokesperson for the company said that Xiaomi complies with all local laws and regulations on user data privacy and the collected browsing data has been anonymized. As to why Xiaomi is collecting it, it's because the firm is trying to improve the user's browsing experience and it's a standard practice. More importantly, the data can't be traced back to a specific user. However, Gabriel Cirlig sent a video to Xiaomi showing how the browser sends its history to the said servers even in incognito mode.

Source: gsmarena

I happen to use a Xiaomi phone myself, but I know the Chinese are dodgy when it comes to privacy issues. One day, I'll couple my very own encrypted mobile device cos all these tech companies can't be trusted, even the American brands like Apple...

Guys between Infinix hot 8 and Redmi 8A which one should I go for

As long the reports is Coming from Usa, I won't believe it easily, they have been doing everything possible to bring down anything Chinese

Na to use chrome straight up

Every big company they collect those data cus of ads, or u think say na randomly dem dey show those ads.

sunshineV:
Na to use chrome straight up

Chrome is worst, use duckduckgo browser.

Kingscee:
Guys between Infinix hot 8 and Redmi 8A which one should I go for

Redmi 8A, of course.

I observed this, anytime I use my chrome browser, to browse on any e-commerce site, immediately I leave the app and login into my Facebook I begin to see the site ad. As long as you use the internet, your private data has been compromised. Google knows everything about you, your voice, your address, your dob, your favorite things etc.

Karex81:

Chrome is worst, use duckduckgo browser.

Re read this place again

Fear any software from China

Idiotmod:
Re read this place again

ok, no browser perfect but duckduckgo is more secured than chrome for sure.

But on a serious note, should somebody that is using freebasic care about privacy

Iamundisputed:
I happen to use a Xiaomi phone myself, but I know the Chinese are dodgy when it comes to privacy issues. One day, I'll couple my very own encrypted mobile device cos all these tech companies can't be trusted, even the American brands like Apple...

They will still contact you for the backdoor or decryption logic which you will gladly Give

Bahat:



They will still contact you for the backdoor or decryption logic which you will gladly Give

Well, the aim is to reduce breach of privacy, nothing is 100% secure over the internet, but you can at least reduce intrusion.

Why should this be a loud news? Google and Facebook have been collecting our data for decades.

Hope this is not a paid propaganda because of Xiaomi recent successes ...

Anyway, here's Xiaomi notice disputing the allegations

Even Google collects users data
Why do you think that if you search for a product on either Jumia/Amazon and co you see ads of them even after leaving the site

All of them collect data including vpns
No one is totally safe

Iamundisputed:


Well, the aim is to reduce breach of privacy, nothing is 100% secure over the internet, but you can at least reduce intrusion.

Oh yeah with security protocols in place there are library to aid data privacy but doing a brand new crypto algorithm will aid learning process and possibly strengthen secret communication channel. I don't know much about cryptography though

Bahat:


Oh yeah with security protocols in place there are library to aid data privacy but doing a brand new crypto algorithm will aid learning process and possibly strengthen secret communication channel. I don't know much about cryptography though

Yup... It'd be a nice project and wonderful learning experience.

Kingscee:
Guys between Infinix hot 8 and Redmi 8A which one should I go for

Don't even think about hot 8, Redmi for life