Citat:
Allt ovanstående är konfirmerat att det skickas till Motorolas servrar. Varför all denna data skickas genom Motorolas servrar är oklart.
Information that is definitely being collected
- The IMEI and IMSI of the phone. These are referred to as MEID and MIN in the phone's UI and on the label in the battery compartment, but IMEI and IMSI in the logs. I believe these two values are all that's needed to clone a phone, if someone were to intercept the traffic.
- The phone number of the phone, and carrier information (e.g. Verizon).
- The barcode from inside the battery compartment.
- Applications included with the device as well as installed by the user.
- Statistics about how those applications are used (e.g. how much data each one has sent and received).
- Phone call and text message statistics. For example, how many calls have been received or missed.
- Bluetooth device pairing and unpairing, including detailed information about those devices.
- Email addresses/usernames for accounts configured on the device.
- Contact statistics (e.g. how many contacts are synced from Google, how many Facebook users are friends of the account I've configured on the device).
- Device-level event logs (these are sent to Google as well by a Google-developed checkin mechanism).
- Debugging/troubleshooting information about most activities the phone engages in.
- Signal strengths statistics and data use for each type of radio included in the device. For example, bytes sent/received via 3G versus wifi.
- Stack memory and register dumps related to applications which have crashed.
- For Exchange ActiveSync setup, the server name and email address, as well as the details of the security policy enforced by that EAS server.
Twitter-poster, Facebook-inlägg, EXIF-data, lösenord, epost, kontakter och massa annan statistik skickas till Motorola. Googles tjänst misstänker även intrång (http://www.beneaththewaves.net/Proje...1-Warning.JPG).
Motorola är ett stort företag som alltså samlar in massor med data och den används är oklart. Jag personligen tycker detta är pinsamt att företaget använder så pass dålig säkerhet och inskränker på sina kunder. Vad händer om all data läcks ut?
Citat:
How secure is Motorola's Blur web service against attack? I'd be really interested to test this myself, but made no attempt to do so because I don't have permission and Motorola doesn't appear to have a "white hat"/"bug bounty" programme. It would be a tempting target for technically-skilled criminals, due to the large volume of Facebook, Twitter, and Google usernames and passwords stored in it.
Så vad tycker ni om detta? Är detta okej för ett företag att samla in så pass mycket information utav sina kunder som enkelt kan användas emot dem i fråga om brott?
--
Finns mycket mer att läsa här(källa): http://www.beneaththewaves.net/Proje...Listening.html
