[Mi 3 General] zelendel:
Xiaomi Security issues.	Xiaomi firmware has multiple backdoors	So I've basically got myself in this sh*t because lack of care.. Until it pop'd and hit the highlights.

And now straight to the point. It doesn't f*ckin matters if you had a fw or not. As the backdoors are embedded in ROOT system processes.

And those where obviously white-listed as i didn't think of a nasty Chinese guy sitting in it calling back home. My friend who got the same phone found the article as i was having my vacation for a bit, so when i found out i did a bit a research of course on my device. After finding all this i e-mail'd him it and he posted it on the Xiaomi European forums. Guess what happened, it got deleted. So they know damn good what they're doing.

Quote:

When you purchase Xiaomi products or services, we’ll collect relevant personal information, including but not limited: delivery information, bank account, credit card information, bill address, credit check and other financial information, contact or communication records.

Quote:

Originally Posted by OP

Music app(?) connects to:

202.173.255.152

2012-12-01 lrc.aspxp.net

2012-12-01 lrc.feiyes.net

2012-12-01 w.w.w.616hk.com

2012-12-01 w.w.w.hk238.com

2012-12-01 w.w.w.lrc123.com

123.125.114.145

2013-11-27 tinglog.baidu.com

1/53 2014-07-02 12:51:01 hxxp://tinglog.baidu.com

Latest detected files that communicate with this IP address

Latest files submitted to VirusTotal that are detected by one or more antivirus solutions and communicate with the IP address provided when executed in a sandboxed environment.

3/43 2014-07-08 07:39:24 facb146de47229b56bdc4481ce22fb5ec9e702dfbd7e70e82e 4e4316ac1e7cbd

47/51 2014-04-28 09:25:27 091457f59fc87f5ca230c6d955407303fb5f5ba364508401a7 564fb32d9a24fa

24/47 2014-01-08 08:19:43 3cf0a98570e522af692cb5f19b43085c706aa7d2f63d05469b 6ac8db5c20cdcd

21/48 2013-12-02 15:15:45 7e34cb88fc82b69322f7935157922cdb17cb6c69d868a88946 8e297257ee9072

19/48 2013-12-01 20:02:32 bce4bd44d3373b2670a7d68e058c7ce0fa510912275d452d36 3777f640aa4c70

Latest URLs hosted in this IP address detected by at least one URL scanner or malicious URL dataset.

1/53 2014-07-02 12:47:57 hxxp://dev.baidu.com/

Android-system ANT HAL Service(Framework_ext.apk/jar) connect to:

42.62.48.207

VirusTotal's passive DNS only stores address records. The following domains resolved to the given IP address.

2014-04-28 app.migc.wali.com

2014-07-12 app.migc.xiaomi.com

2014-05-30 gamevip.wali.com

2014-05-30 log.wlimg.cn

2014-04-21 mitunes.game.xiaomi.com

2014-04-30 oss.wali.com

2014-05-17 p.tongji.wali.com

2014-07-13 policy.app.xiaomi.com

Latest detected URLs

Latest URLs hosted in this IP address detected by at least one URL scanner or malicious URL dataset.

1/58 2014-08-13 07:10:49 hxxp://policy.app.xiaomi.com/cms/interface/v1/checkpackages.php

1/58 2014-08-10 00:46:35 hxxp://policy.app.xiaomi.com/

1/53 2014-07-02 12:49:59 hxxtp://oss.wali.com

Messages(Mms.apk) connect to (it literary calls back home)

54.179.146.166

2014-08-12 api.account.xiaomi.com

2014-07-26 w.w.w.asani.com.pk

What it does? It sends phone numbers you call to, send messages to, add etc to a Resin/4.0.13 java application running on a nginx webserver to collect data. Checkpackages, embedded system process/app posts all installed apps to a Tengine a/k/a nginx webserver cms.

URL: hxxtp://api.account.xiaomi.com:81/pass/v3

Server: sgpaws-ac-web01.mias

Software: Tengine/2.0.1 | Resin/4.0.13

URL:	hxxp://policy.app.xiaomi.com:8080/cms/interface/v1/

Server:	lg-g-com-ngx02.bj

Software: Tengine | Resin

Bottom line

They don't give a single damn about your data.. All sent in plain text.

For messages APK (Mms.apk)

I don't believe it needs those permissions for normal functionalities, this is only for the extra feature let's call it bug.

android.permission.SEND_SMS_NO_CONFIRMATION

android.permission.GET_ACCOUNTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.INTERNET

miui.permission.SHELL

android.permission.GET_TASKS

android.permission.CAMERA

Some code ... i also attached java classes and smali dalvik jvm bytecode..

Code:

RELATED

http://apkscan.nviso.be/report/show/...0b623da712918f

http://lists.clean-mx.com/pipermail/...14/072661.html

OTHER SOURCES

http://www.newmobilelife.com/2014/08...-china-server/

http://www.htcmania.com/showthread.php?p=14730859

Main post and more info. All credits go to the OP

http://xdaforums.com/gene...oords-t2847069