Xiaomi Can Silently Install Any App On your Device

A Computer Science student and security enthusiast from Netherlands who own a Xiaomi Mi4 smartphone started an investigation to know the purpose of a mysterious pre-installed app, dubbed AnalyticsCore.apk, that runs 24x7 in the background and reappeared even if you delete it.

Xiaomi is one of the world's largest smartphone manufacturers, which has previously been criticized for spreading malware, shipping handsets with pre-loaded spyware/adware and forked version of Android OS, and secretly stealing users' data from the device without their permission.

After asking about the purpose of AnalyticsCore app on company’s support forum and getting no response, Thijs Broenink reverse engineered the code and found that the app checks for a new update from the company's official server every 24 hours.

While making these requests, the app sends device identification information with it, including phone's IMEI, Model, MAC address, Nonce, Package name as well as signature.

If there is an updated app available on the server with the filename "Analytics.apk," it will automatically get downloaded and installed in the background without user interaction.

Broenink found that there is no validation at all to check which APK is getting installed to user's phone, which means there is a way for hackers to exploit this loophole.

This also means Xiaomi can remotely and silently install any application on your device just by renaming it to "Analytics.apk" and hosting it on the server.

Since the researcher didn't find the actual purpose of the AnalyticsCore app, neither on Googling nor on the company's website, it is hard to say why Xiaomi has kept this mysterious "backdoor" on its millions of devices.


Even on the Xiaomi discussion forum, multiple users have shown their concerns about the existence of this mysterious APK and its purpose.
 
What if hackers or any intelligence agency figure out how to exploit this backdoor to silently push malware onto millions of Xiaomi devices within just 24 hours?

Ironically, the device connects and receive updates over HTTP connection, exposing the whole process to Man-in-the-Middle attacks.

source: thijsbroenink.com

Read More

Xiaomi Redmi Note 4 is a 10-core smartphone with a 4,100mAh battery

Xiaomi has launched the newest addition to its Redmi Note line, and as expected, it's a large, powerful smartphone sold at a ridiculously low price.

The Xiaomi Redmi Note 4 is a 5.5-inch phone with a 10-core Helio X20 processor, 3GB of RAM, a full HD screen, 16/64GB of storage memory (expandable via microSD cards), a 13-megapixel back camera, a 5-megapixel selfie cam, a fingerprint scanner and a 4,100mAh battery. 

It has a metal, unibody design with slightly curved glass edges (Xiaomi, like several other companies, calls this 2.5D glass), and while it doesn't break any new ground, it looks just as good as any other flagship that came out this year. In fact, you'd have to look closely to find many differences between the Redmi Note 4 and the Redmi Pro that was launched in July.

The Redmi Note 4 has roughly the same set of specs as the Pro (sans the dual camera), it's much cheaper, priced at 899 RMB ($135) for the 16GB version and 1,199 RMB ($180) for the 64GB version. 

Software-wise, the Redmi Note 4 will run on Xiaomi's MIUI 8 Android Marshmallow-based firmware, which started rolling out to newer Xiaomi phones a few days ago.

The Xiaomi Redmi Note 4 comes in three colors: silver, gold and dark grey. It will become available in China, from Mi.com, Xiaomi's Mi Home stores and through China Mobile's retail channels, starting Aug. 26.

Read More

Xiaomi's announced the Redmi Pro featuring an OLED display plus a dual-camera

Today, the Chinese company announced the Redmi Pro which is the latest smartphone in its entry-level portfolio. As suggested by the name, this Android 6.0 device packs some surprising features that make it stand out from its predecessors: This is the first time that Xiaomi's featuring an OLED display plus a dual-camera setup on a device, which is a surprising move given that these are headed to the affordable Redmi line instead of the flagship Mi line. The price is From 1,499 yuan which is about $225.

The Redmi Pro comes in a gold- or silver-colored brushed metallic unibody -- a real bonus at this price point -- and packs a 5.5-inch 1080p OLED display (with full NTSC gamut), a fingerprint reader plus a 5-megapixel selfie camera on the front side. Flip it over and you'll find a Mi 5-like curved back sans glass, along with a dual camera featuring a 13-megapixel Sony IMX258 main sensor plus a 5-megapixel Samsung assistive sensor for bokeh effects. Like many earlier dual-camera phones, here you can change the focus point on the image even after capturing; and there's a dual-tone LED flash, too. There's also a generous 4,050mAh battery inside -- similar to the one in the very recent Redmi 3S -- with fast charging via the USB Type-C port. Likewise, the Redmi Pro has the same IR blaster as the Redmi 3S which lets you control your TV and home appliances.

Given the base price point, it's no surprise that the Redmi Pro is powered by a MediaTek chipset --MediaTek Helio X20 / X25 - the world's first mobile processor with Tri-Cluster CPU architecture and ten processing cores (Deca-core). 

The base spec starts comes with three variants :

• 10 Core Helio X20 32GB storage 3GB of RAM (1,499 yuan/about $225)
• 10 Core Helio X25 64GB storage 3GB of RAM (1,699 yuan/about $255)
• 10 Core Helio X25 28GB storage 4GB of RAM (1,999 yuan/about $300)

As with most Chinese and Indian smartphones these days, the Redmi Pro is a dual-SIM 4G+ device (VoLTE supported), though you can also use the second SIM slot to add a microSD card instead. 

There's no word on when to expect the Redmi Pro to hit the markets outside China, but we're pretty sure it'll eventually land in India plus other developing markets. Or you can just fly yourself to China for a quick shopping trip.

Source: Xiaomi

Read More

Xiaomi's first laptop looks like a MacBook and is named like a Macbook Air

Xiaomi just announcing one product. In addition to the new Redmi Pro smartphone, the Chinese company threw in a huge surprise by launching its first-ever laptop line, the Mi Notebook Air, running on Windows 10. 

It comes in two sizes -- the powerful 13.3-inch and the portable 12.5-inch -- and both feature a slim body, a 1080p display with slim under-glass bezels (while still managing to fit in a 1-megapixel webcam), a backlit keyboard, a USB Type-C charging port plus a minimalistic metallic design -- in gold or silver, naturally -- with no logo on the outside. The best part of all? The top-spec model costs just 4,999 yuan or about $750.

The flagship 13.3-inch model comes in at just 14.8mm thick and 1.28kg heavy, which is pretty good given that you get an Intel Core i5-6200U "Skylake-U" processor (dual core, base frequency at 2.3GHz, turbo up to 2.7GHz) plus an NVIDIA GeForce 940MX GPU (with 1GB GDDR5 RAM). Of course, Xiaomi just had to point out that this is thinner and lighter than the 13-inch MacBook Air, though it doesn't use a wedge design so it's still bulkier. You also get 8GB of DDR4 RAM, 256GB of SSD via PCIe and one free SATA slot for expansion (but only serviced by Xiaomi). The 40Wh battery should be good for up to 9.5 hours, and it can go from zero to 50 percent in just half an hour using the bundled USB-C charger.

The smaller 12.5-inch model is even slimmer and lighter at 12.9mm and 1.07kg, respectively, but you'll have to make do with an Intel Core M3 CPU, no dedicated GPU, just 4GB of RAM and just a 128GB SSD via SATA -- though there's one free PCIe slot if  Xiaomi do the upgrade for you later. And instead of two USB 3.0 ports, you only get one here; but you still have an HDMI port. The upside of this model is that you get two more hours of battery life. The price is 3,499 yuan or about $520.

While it doesn't run on MIUI (Xiaomi's customized Android ROM), it does come with "Mi Sync" software (tentative name translated from Chinese) which should somewhat boost Mi Cloud usage. The laptop can also be automatically unlocked when your Mi Band is within a close proximity.


The Mi Notebook Air is launching in China on August 2nd. Again, there's no info regarding global availability for it just yet, so stay tuned for future updates.

source: Xiaomi

Read More

Xiaomi introduces an affordable Redmi 2 phone that is thinner, lighter, and faster

Xiaomi has announced that its eagerly-awaited Redmi 2 smartphone will soon be available in the Philippines.  Priced at ₱5,999, the Redmi 2 will first go on sale on April 28 via www.lazada.com.ph/mi.

Feature-packed but still affordable, the Redmi 2 brings a powerful smartphone experience closer to more people.

Here are some of the amazing features Mi Fans can expect from the Redmi 2:

• ·         4.7” display similar to the Redmi 1S, but thinner at 9.4mm and lighter at 133g
• ·         4G dual SIM and dual standby capability
• ·         Fast and fluid performance even under heavy use, with a Quad-core 64-bit Snapdragon 410 processor, Adreno 306 GPU, 1GB RAM and 8GB Flash (expandable to 32GB)
• ·         Gorgeous 4.7” 1280 x 720 HD screen (312 PPI), protected by AGC Dragontrail glass
• ·         Sharp and clear 8MP BSI f/2.2 rear camera and a 2MP BSI front camera with 720p video recording
• ·         Long battery life made possible by a 2200mAh battery
• ·         OTG support to transfer files quickly and connect peripherals
• ·         A soft-touch matte back cover that is fingerprint and grease-resistant
• ·         MIUI 6  that enables new functions, shortcuts, customizations and animations 

Read More

Redmi 1S Available on September 4, 2014 on its retail partner, Lazada

If the Xiaomi Mi 3 was the first taste of what the Chinese mega-brand can do when it sets its mind on a market, the Redmi 1S is all about consolidation and building a solid user base for Xiaomi. User base sounds weird when talking about hardware, but buying into the Xiaomi way of life is a lot about embracing the ecosystem around its cloud services, messaging app and the multitude of customisation options, more so than just any other Android device.

The Redmi 1S is all about giving this Xiaomi experience to anyone who can afford a basic smartphone. It’s priced at an incredible ₱ 5,599 but boasts specs of phones priced around ₱ 5,599 15,000-₱25,000 by the big-name brands.  In terms of the specs, it’s not entry-level, but its price puts it in this segment. But what’s the whole experience like?

The devices' availability has not been disclosed either, but the information will probably be listed on its retail partner, Lazada Philippines, real soon.

Processor 1.6 GHz quad-core Qualcomm Snapdragon 400 with Cortex-A7 cores, making the battery performance to be outstanding.
processor with Adreno 305 images, you can explore the real 3D games or you can also enjoy your favorite shows in incredible HD display.

The beauty of dazzling
Display 4.7

1S Redmi 1280x720 display with 312 ppi presents clear text
and clear photos

Technology In-plane switching (IPS) presents a stunning color
from any viewing angle.

 

 

 

 

 

8GB flash memory

More capacity for apps, music, videos and photos 

Photo remarkable
8MP Camera

f / 2.2 aperture, 28mm wide angle lens,
and 1080p video recording

With an extra large 1.4 um sensor and plastic lens 5, you can take photos with accurate, clear images in low light.
With an aperture of f / 2.2 and 28mm wide angle lens enables you to capture objects focus in front with obscure objects behind your images with soft.
With 16 megapixel camera, it is perfect for HD video chat with 720 pixels

Clear sound

Mi Hi-Fi Sound System with voice technology Dirac

Redmi 1S uses the same features as voice technology used by BMW, Bentley, and Rolls Royce.

Audio output according to the various types of headphones do you use to ensure that you always get the best performance.

Xiaomi Redmi 1S detailed specifications

General

Release date	July 2014
Form factor	Touchscreen
Dimensions (mm)	137.00 x 69.00 x 9.90
Weight (g)	158.00
Battery capacity (mAh)	2000
Removable battery	Yes
SAR value	NA

Display

Screen size (inches)	4.70
Touchscreen	Yes
Touchscreen type	Capacitive
Resolution	720x1280 pixels
Pixels per inch (PPI)	312
Colours	16M

Hardware

Processor	1.6GHz  quad-core
Processor make	Qualcomm Snapdragon 400 MSM8228
RAM	1GB
Internal storage	8GB
Expandable storage	Yes
Expandable storage type	microSD
Expandable storage up to (GB)	64

Camera

Rear camera	8-megapixel
Flash	Yes
Front camera	1.6-megapixel

Software

Operating System	Android 4.3
Skin	MIUI version 5
Java support	Yes
Browser supports Flash	No

Connectivity

Wi-Fi	Yes
Wi-Fi standards supported	802.11 b/ g/ n
GPS	Yes
Bluetooth	Yes, v 4.00
NFC	No
Infrared	No
DLNA	No
Wi-Fi Direct	Yes
MHL Out	No
HDMI	No
Headphones	3.5mm
FM	Yes
USB	Micro-USB
Charging via Micro-USB	Yes
Proprietary charging connector	No
Proprietary data connector	No
Number of SIMs	2
SIM 1
SIM Type	Regular
GSM/ CDMA	GSM
3G	Yes
SIM 2
SIM Type	Regular
GSM/ CDMA	GSM
3G	No

Sensors

Compass/ Magnetometer	Yes
Proximity sensor	Yes
Accelerometer	Yes
Ambient light sensor	Yes
Gyroscope	Yes
Barometer	No
Temperature sensor	No

Read More

Xiaomi has been suspected of “secretly” stealing users’ information

Now, the latest claim against Chinese smartphone manufacturers is the allegation that the popular Chinese smartphone brand, Xiaomi has been suspected of “secretly” stealing users’ information — including SMS messages and photos —from the device without the user's permissions and sending it back to a server in Beijing, despite of turning off the data backup functions, according to Apple Insider.

China-based smartphone company Xiaomi recently marked a successful entry into the Philippines  market this month. Earlier this year, the company also announced its Redmi Note, which, just like Xiaomi’s other handsets, was an affordable with almost all features that an excellent smartphone provides. However, the handset might be doing more than what it has been advertised.

 

 

Kenny Li of Hong Kong forum, IMA Mobile, recently noticed something odd with its Redmi Note smartphone. He discovered that the device continued to make connections with IP addresses in Beijing, China. The device kept trying to make the connection, even after switching off the company's iCloud-like MiCloud service.

Although it was pointed out that the transmissions occur only over Wi-Fi, though the device does stay in contact with the servers via small "handshakes" while using cellular data. Li then tried erasing the version of Android and installed a new version of Android, But the problem still persisted.

 

Security Researchers from F-Secure Antivirus firm also confirmed that Xiaomi phones (RedMi 1S handset) send quite a lot of personal and sensitive data to "api.account.xiaomi.com"  server located in China, including following information:

• IMEI Number of your phone
• IMSI Number (through MI Cloud)
• Your contacts and their details
• Text Messages

Previously China has accused companies like Google, Facebook, Microsoft, and Apple for spying on countries. So, what China is doing? The same.

Xiaomi, which is also known as Apple of China, has yet to respond to the allegations that the Redmi Note secretly sends user data to a China-based server.

If the allegations on the Xiaomi handset come true, it wouldn't be the first time a Chinese smartphone was found spying on its users. It had happened before as well, China has been known for its Digital Spying and privacy invasion.

Later in mid-June, the breach on the Star N9500 could allow an attacker to record phone calls automatically, read emails and text messages, and remotely control the phone’s microphone and camera, in order to turn users’ smartphone into a bugging device that allows hackers to hear anything you are saying near by the phone. It could also be used for theft, including granting access to the user’s online banking service.

UPDATE
In a blogpost, Hugo Barra from Xiaomi company denies all the spying allegations made by F-Secure and other security experts.

"MIUI does not secretly upload photos and text messages. MIUI requests public data from Xiaomi servers from time to time. These include data such as preset greeting messages (thousands of jokes, holiday greetings and poems) in the Messaging app and MIUI OTA update notifications, i.e. all non-personal data that does not infringe on user privacy." he said.

Xiaomi's Mi Cloud service only able to backup and manage users' personal information in the cloud, as well as sync to other devices. But you can also turn it off manually from the device settings.

 

 

Read More

Xiaomi Mi4 Specs ,Features ,Release Date and Price

The Xiaomi company is expecting more sales from the newest Xiaomi Mi4 than Xiaomi Mi3. Because Xiaomi Mi4 phone is anticipated as the huge hit in the china phone industry, after Hugo Barra who was the top Android person in Google, joined Xiaomi as the vice president.

The Xiaomi Mi 4 comes as budget handset makers in China are competing more aggressively on price and generous features, with even high-end manufacturers feeling the pressure.Xiaomi launched its flagship Mi 4 smartphone at a glitzy event in Beijing, where the Chinese budget handset maker's chief executive sought to challenge larger U.S. rival Apple.

The Xiaomi Mi3 flagship model which is in the market currently was able to attract a lot of customers. 10,000 handsets of this model which is the predecessor of Xiaomi Mi4, got sold within few minutes of its launch. You can check out Xiaomi Mi3 Pricein US and Asian countries.  (Philippines)

Xiaomi had so far reached only the markets of China, Hong Kong and Singapore. But Apple co-founder, Steve Wozinak predicts that Xiaomi will reach the US markets as well with the new Xiaomi Mi4 smartphone.

Xiaomi Mi4 Specs, Release Date and Price Rumors Review Xiaomi Mi4 Specs details for an upcoming smartphone from fast growing Chinese phone maker, Xiaomi recently surfaced on the Antutu benchmark website. The Xiaomi Mi4 flagship phone features some top of the line hardware, making it a major contender on the Android device market.

Xiaomi Mi4 Specs and Features
With the features of Xiaomi Mi4, it can be predicted that the handset will be the best deal in the mobile phone industry in China.

According to recent rumors and news reports, the Xiaomi Mi4 smartphone will have a Qualcomm Snapdragon 800 SoC processor which will work at a clock speed of 2.46 GHz. Because of this, it can be said to be a powerful handset than the flagship mobile phones available in the market.

But the chipset of this new device will be same as the Samsung Galaxy S5 and the HTC One 2014. The Xiaomi Mi4 will have a screen of 5.5 inch which will have the resolution of 1920x1980 as as PhoneArena reports.

This device will have a RAM of 3 GB with the extension support where Samsung Galaxy S5 has only a 2 GB RAM. And also a 16 GB internal memory will be included in this coming handset, which is one of the best features it is going to have.

As AnTuTu benchmarks and online leaks say, the new Xiaomi will have a great chance of having Android 4.3 Jelly Bean in it. A 13MP rear facing camera and a 8MP front facing camera can be expected from this new product.

The Samsung Galaxy S5 Features has 16MP front facing camera and a 2 MP rear facing camera. Therefore the Xiaomi Mi4 can be told as a quite similar version of Samsung Galaxy S5. Moreover the Xiaomi Mi4 will provide 4G LTE connectivity.

The Xiaomi Mi 4 has a metallic frame, which explains its launch tag line of "a journey of a piece of steel metal".

Xiaomi Mi4 mini
The are also rumors about Xiaomi Mi4 Mini which states that say that Xiaomi Mi4 Mini will be almost the Sony Xperia Z1 Compact. Xiaomi Mi4 mini phone will obviously have a smaller screen and lower specs but also a lower price tag.

Xiaomi Mi4 Release Date
The Xiaomi Mi4 Release Date is expected in the mid November 2014.

Xiaomi Mi4 Price
The price of the device will vary from the previously said price and it is said that the selling price will increase. So this new flagship handset is expected to be a new revolution in the mobile phone industry.

Xiaomi launched its first Android based smartphone in 2011 called the Mi-One, followed by the Mi2 in 2012 and the 2013 Mi3. The company expects to sell 40 million smartphones this year, which would be double the amount it sold last year. With models like the Xiaomi Mi4, you can see why the company expects to be so prosperous in 2014.

Mi4 BACK COVER

Final Specs :

Specs of the Xiaomi Mi 4 (Prices: 16GB - roughly $320 or P13,800; 64GB - about $400 or P17,000:

The Xiaomi Mi 4 supports 4G LTE connectivity.
IR blaster
2.5GHz quad-core Qualcomm Snapdragon 801 chipset
Adreno 330 GPU
3GB RAM
16GB/64GB internal storage
5-inch IPS OGS display (1,080 x 1,920 resolution)
13-megapixel rear camera with LED flash
8-megapixel front camera
3,080mAh non-removable battery
MIUI v6 based on Android KitKat.

Read More