News for hackers. Stuff that matters.
Re:Xiaomi Recording ‘Private’ Web and Phone Use by mbdesign on Thursday April 30, 2020 @05:51PM (#23036588)
On a Xiaomi device myself. Recently I've setup Nextdns.io to resolve all the DNS requests through it. Very frequent callbacks to Xiaomi servers for tracking. Blocked a bunch of them now, but it's half a solution.
Re:Xiaomi Recording ‘Private’ Web and Phone Use by xiii1408 on Thursday April 30, 2020 @05:53PM (#23036615)
Other than the tracking, would you recommend it? Is LineageOS available? I've been curious about trying a Chinese phone for a while, but would only do it if Lineage is available, since I'm annoyed by anything more busy than stock Android.
Re:Xiaomi Recording ‘Private’ Web and Phone Use by yorwba on Thursday April 30, 2020 @06:22PM (#23036920)
LineageOS supports a lot of different Xiaomi devices: https://wiki.lineageos.org/devices/#xiaomi

I have a tissot with LineageOS 16.0, not sure yet whether it will get 17 ported to it as well. The hardware is great for the price (bought it a year after launch, heavily discounted). I bought it specifically to run LineageOS on it, so I have no idea what the stock experience is like.

Re:Xiaomi Recording ‘Private’ Web and Phone Use by tiii on Friday May 01, 2020 @12:11AM (#23039060)
Official tissot support was dropped this month. No more security updates. https://forum.xda-developers.com/showpost.php?p=82234015&pos...
Re:Xiaomi Recording ‘Private’ Web and Phone Use by yorwba on Friday May 01, 2020 @06:16AM (#23040660)
Thanks for the heads-up. I guess I'll have to flee to a different ROM, then.
Re:Xiaomi Recording ‘Private’ Web and Phone Use by IIAOPSW on Thursday April 30, 2020 @07:07PM (#23037318)
I have lineage on my xiaomi.

The bootloader is locked by default but if you ask for it to be unlocked they will do it. The process is intentionally manual to prevent hacking, but ultimately smooth.

Re:Xiaomi Recording ‘Private’ Web and Phone Use by Arkanosis on Thursday April 30, 2020 @07:31PM (#23037507)
Things might have changed since last year, but it hasn't been smooth at all for me.

Not only you need a Windows computer to unlock, but then it takes literally months to proceed and if you happen to do something that you're not told you should not do (like logging out or re-trying to unlock), the counter is reset and you have to wait even more. Plus the unlocking program on Windows randomly doesn't work and error messages are not helpful at all.

My Xiaomi is an impressive, nice and powerful phone that hasn't cost much. But it was so much pain to root that I won't probably ever buy a phone from them in the future.

Re:Xiaomi Recording ‘Private’ Web and Phone Use by floatboth on Friday May 01, 2020 @06:52AM (#23040824)
On the Android One models, the unlock is just via settings + fastboot, like on Nexuses/Pixels
Re:Xiaomi Recording ‘Private’ Web and Phone Use by searchableguy on Thursday April 30, 2020 @06:23PM (#23036925)
Yeah. I am using cdroid android v10(based on lineage). Last update was this month.

Running it for 2 years now.

Re:Xiaomi Recording ‘Private’ Web and Phone Use by livre on Thursday April 30, 2020 @10:45PM (#23038593)
I use this[1] hosts list that's designed to block almost all useless domains Xiaomi tries to contact. In addition to that list I manually blocked this domain[2] that Xiaomi only connects to on certain countries.

I'm using a Xiaomi with Android One and despite having opted out of analytics the phone still tries to connect to Xiaomi servers.

I've been considering installing LineageOS on it for some time but unlocking the bootloader unfortunately deletes everything I have installed or downloaded. I've never used the stock browser though, always Firefox.

[1] https://raw.githubusercontent.com/jerryn70/GoodbyeAds/master...

[2] app.chat.global.xiaomi.net

Re:Xiaomi Recording ‘Private’ Web and Phone Use by monksy on Thursday April 30, 2020 @06:02PM (#23036729)
You should be using a custom rom.
Re:Xiaomi Recording ‘Private’ Web and Phone Use by jotm on Thursday April 30, 2020 @06:13PM (#23036842)
Do they allow it? I was surprised the Huawei Mate 20 Pro, at the time a flagship phone on par with the Note 9 and others, actually had a locked bootloader.

It would've been a good opportunity to allow people to install whatever they want, to show that they're different than Samsung and other competitors, but no, they went and locked that down because of "safety". Mhmmm.

Re:Xiaomi Recording ‘Private’ Web and Phone Use by bentpins on Thursday April 30, 2020 @06:20PM (#23036900)
It's a little bit of an ordeal - you have to request a bootloader unlock and then wait two weeks. But doable.
Re:Xiaomi Recording ‘Private’ Web and Phone Use by jddj on Thursday April 30, 2020 @06:01PM (#23036718)
Yeah, my pihole would usually block something like 70% of what was a good number of requests from my Xiaomi overnight.

It's gross.

Re:Xiaomi Recording ‘Private’ Web and Phone Use by andrepd on Thursday April 30, 2020 @07:51PM (#23037642)
I would never dream of using a Xiaomi phone without Lineage. Or Huawei. Or Samsung. Or any phone, actually.
Re:Xiaomi Recording ‘Private’ Web and Phone Use by the_resistence on Thursday April 30, 2020 @07:06PM (#23037306)
I have a xiaomi rednote 8, how to block more privacy leaks?