• Activity
  • Votes
  • Comments
  • New
  • All activity
  • Showing only topics in ~tech with the tag "phones". Back to normal view / Search all groups
    1. Hidden third party telemetry found in Nokia 6.2, 7.2 smartphones

      Update 12/03/2020: this is not a telemetry, but a kill switch from Colombian carrier - confirmed by HMD. Kill switch will be removed from most devices soon. I updated an article and posted it...

      Update 12/03/2020: this is not a telemetry, but a kill switch from Colombian carrier - confirmed by HMD. Kill switch will be removed from most devices soon. I updated an article and posted it here.

      Original article below:

      I have recently purchased Nokia 6.2 and wanted to check if it sends any data somewhere, considering what happened with previous models

      First, I noticed approx. daily connection to dapi.hmdglobal.net
      This is a Google Cloud that could belong to a company behind Nokia - HMD Global.
      But the Privacy policy in my phone only speaks of "activation" process, not of daily diagnostics data.
      So I used developer tools to remove the following packages (warning: this may break your device, I am not responsible for any consequences)

          com.hmdglobal.enterprise.api
          com.qualcomm.qti.qms.service.telemetry
          com.qualcomm.qti.qmmi
          com.qualcomm.qti.qdma
      

      Before removing them, I used APK Extractor to save APK files just in case it breaks my phone and I may be able to attempt reinstall. This part comes into play later.
      The first was my blind guess about what exactly connects to dapi.hmdglobal.net
      The next 3 I found mentioned in various forums for other devices as "safe to remove", however, I have not seen any telemetry sent to Qualcomm or anywhere else, except what I mention next.

      After removing these packages, I noticed that there are some remaining unknown connections my device attempts several times per day.
      They are all done in same order, one right after the other:

          www.pppefa.com
          www.ppmxfa.com
          www.forcis.claro.com.co
      

      After some investigation, I found that the first two domains point to some Microsoft Cloud servers rented in US.
      The last one most probably belongs to Colombian telecom company, and this is where it becomes interesting.
      After many hours of fruitless removing of different apps in my attempt so stop it, I suddenly remembered something.
      When I used APK Extractor previously, there was an empty first line with some generic icon where an app icon should have been.
      I went there again and indeed, this is a hidden system app, that you can not see in the list of all apps in Settings, normally. But it turns out, you can see it in Data usage (after it successfully sends some data using your mobile connection).
      The name of the app is deliberately left empty to hide it, but if you click it in Data usage, you can see that this app is co.sitic.pp , which can receive SMS, can make calls, and has access to internet.
      As with all Android apps, you can reverse read the name to guess what it is.
      Turns out, http://sitic.com.co is a Colombian company, who "are leaders in innovation and create mobile and WEB applications for new products and services." (credit goes to Google Translate)

      screenshot of the app with permissions

      In other words, this app is a 3rd party telemetry, hidden from user, not mentioned in the Privacy policy, that has access to SMS.
      This looks very bad and I really hope this is a malware injected by factory and not something knowingly distributed by Nokia, HMD Global, the EU company.

      After removing the co.sitic.pp app, requests to Microsoft Cloud and Columbia stopped.
      I was later pointed to a German forum, where (I believe) it was first found in a Nokia 7.2 device.
      So, we have it confirmed in 2 devices in 2 different countries.

      On German forum they contacted Nokia (I assume support) but got tired exchanging emails for weeks without any result.
      On 02/03/2020 I have requested an official reply from Nokia and HMD Global via press.services@nokia.com and press@hmdglobal.com and waiting for reply.
      Since I am not a journalist, I may never get one.

      TLDR: 3rd party telemetry is found in Nokia 6.2 and 7.2 devices, is hidden from user, has access to SMS, and sends data to Microsoft Cloud in US and a server in Columbia.
      It is probably supplied by SITIC S.A.S., a Colombian company, and looks more like a malware than a telemetry.

      28 votes
    2. Smartphones that make good use of physical buttons

      I miss buttons on devices. They are durable, reliable, repairable and nice to press. I can find their position without looking, and they work more consistently in different apps. I probably don't...

      I miss buttons on devices. They are durable, reliable, repairable and nice to press. I can find their position without looking, and they work more consistently in different apps.

      I probably don't need something with a physical QWERTY keyboard, since screen real state might be an issue. And it would have to be an actually viable smartphone, not something from a bygone era (I don't care about camera). But I want (a lot!) more buttons, preferably configurable, with support for custom keybindings, macros, etc.

      What are some good options?

      15 votes
    3. Anyone have any experience with eSIMs?

      I have ordered a phone with an eSim this week and I have been reading a bit into it. As far as I know so far, you just have to download an app and you can just book some extra data as needed - it...

      I have ordered a phone with an eSim this week and I have been reading a bit into it.
      As far as I know so far, you just have to download an app and you can just book some extra data as needed - it seems especially cool because you can just book a local plan when you're abroad instead of getting a local sim card. Which can be more or less a hassle - 2019 I went to South Africa where it was pretty easy to get a sim card at the airport, 2018 I went to India, where it was a hassle.
      I guess for people in the US this is not a problem? Some of my friends have global contracts, and I had that too when I was there via googles project fi. We don't really have an equivalent in Germany

      I found the following pages in case anyone also wants to look into it
      https://esimdb.com/ - this is an overview page about different esims
      https://www.airalo.com/ - this is one specific offer that seems to be the cheapest for Germany, which is where I would try it, since I live here haha

      6 votes
    4. Old mobile websites?

      Hey everyone, I'm currently looking for some web 1.0-esque websites, but with the twist of being designed for some ancient smartphones. An example of what I mean would be i.reddit.com , reddit's...

      Hey everyone, I'm currently looking for some web 1.0-esque websites, but with the twist of being designed for some ancient smartphones. An example of what I mean would be i.reddit.com , reddit's original (and still fully functional) mobile implementation, or Twitter's site when you access it without a modern version of Javascript (which reverts to a clone of itself from around ~2012). I understand this is a super niche category and there's hardly any of them left, but if you happen to know of any or stumble upon one, please let me know! Thank you! :)

      24 votes
    5. The PinePhone ($150 Linux smartphone) is now available for pre-order

      Some more info about the PinePhone Pre-order page on the Pine Store The early adopter edition of the PinePhone is now available for pre-order. This batch is 3000 units, from what I know ~1000 are...

      Some more info about the PinePhone

      Pre-order page on the Pine Store

      The early adopter edition of the PinePhone is now available for pre-order. This batch is 3000 units, from what I know ~1000 are already sold. These units are currently being produced, and are planned to ship in December/January. Mass production of the consumer edition of the phone is planned to begin in March 2020.

      I just pre-ordered mine, is anyone else getting one? Any thoughts on the state of Linux smartphones, whether it's the PinePhone, Librem 5, or something else?

      27 votes
    6. Tell me about your smartphone!

      Currently I have the Moto G5 Plus that I purchased a little over two years ago for $200. For the most part, it has been a good phone as the gestures to turn the flash light on, turn the camera on,...

      Currently I have the Moto G5 Plus that I purchased a little over two years ago for $200. For the most part, it has been a good phone as the gestures to turn the flash light on, turn the camera on, and use the finger print sensor as a swipeable button, has had me pretty satisfied. This was a lower middle range phone when I purchased it so it has lately started chugging even doing basic tasks like internet browsing. Couple that with the battery dying pretty quickly, and battery saver making the phone even slower, and now I am in the market to buy a new phone. Right now I am looking at the OnePlus 7t but the price looks pretty hefty to me at $599. I could make payments but in general I don't like going into debt for small purchases. I'm curious if anyone went from low-tier phone to mid-tier or higher and if you felt the purchase was worth it?

      Some other general questions:

      • What is your phone?
      • Did you finance it?
      • Are you looking to upgrade?
      • What features are the most important to you?
      29 votes