隐私安全:国行机和国产应用软件安全隐患

(泡泡报道) 据官方数据,截至2014年6月,中国网民规模达6.32亿,其中,手机网民规模5.27 亿,互联网普及率达到46.9%。在网民上网设备中,手机使用率达83.4%,超越传统PC整体80.9%的使用率,移动终端已经成为一种重要的媒介。国产应用软件劣迹俯拾皆是。国行版智能手机基本都有经过深度改装,预装了很多国产APP,且无法卸载,仅此就足以丢失隐私权了,在这样的监控状态下如果翻墙浏览便是加倍危险。如果条件所限只能购买国行产品,建议卸载原有系统重装,且不支持下载任何一款国产APP。

国产应用软件劣迹

有用户发现,在百度上搜索软件,会得到一个“百度软件中心”的下载链接,如果用它来下载苹果的iTunes,会发现其签名用的是百度证书,且一运行程序就要权限(真正的安装包是苹果公司签名的,且要安装的时候才会要权限),普通用户根本不会发觉。安装包的签名就如手机上“撕毁保修无效”的贴标:贴标的完整代表内部元件没有被改动过,签名的正确保证了分发的软件内容不被篡改。带苹果签名的安装包表示这个安装包是由苹果做的,带百度签名的安装包表示百度往这里面加了某些东西,最终经手的是百度。

 

该用户称,在安装的过程中没有关掉“安装百度杀毒确保软件安全”那个选项,经测试,关掉即可下载到苹果签名的软件。但该选项是预置的,一般用户不小心就会略过。另有用户反映,用平板下载cpuz被自动安装上了百度安全卫士的进程。据悉,百度将其安全软件打包并设置后台安装,且不出现在程序卸载列表中,非专业人士难以删除。因为GFW的存在,苹果官网上的iTunes下载页面在大陆不能顺利打开,使用大陆应用商店的用户不在少数,虚拟机也并不普及,无端遭遇流氓软件侵害的用户群体是很大的。

百度的杀毒软件还会像病毒一样攻击漏洞,在用户不知情的状态下挂马,系统会莫名其妙的出现故障甚至崩溃。北京新宇科技的负责人称,自己“在一个名叫“80影档网”的百度影音联盟网站看片,结果电脑被自动装上了百度杀毒、百度卫士、百度输入法、百度浏览器一大包软件。分析结果发现是百度影音联盟网站利用IE的漏洞挂马,偷偷在电脑下载运行了一个144MB的百度一键安装程序(数字签名和服务器地址都是百度)” 。该博主称,此消息公开后遭到水军滋扰,言其造谣要其删帖,他表示如百度不给合理解释就坚决不删除。同时还有其他用户在反应类似情况,称从未安装过任何百度应用,“最多使用谷歌浏览器登陆一下百度搜索和网盘”,不清楚如何安装上的。

10月底有网友在 Sony 官方论坛 Xperia Care 上提问:为什么Sony Xperia 手机更新后,出现神秘百度资料夾?用户称,是在没有下载过任何百度应用的情况下,自动出现的百度资料夹,且不论怎么砍都会再次出现,即使將手机恢复原厂设置也无法解決问题,更严重的是资料夹直接连接到中国的伺服器上,信息安全令人担忧。

追查发现,这个资料夹与 Sony的“My Xperia”服务有联动关系,致使用户无法将其删除,且从装置管理员中都无法取消百度选项。索尼公司对此的做出的回应是:Sony My Xperia 这个应用程式需在 Google 和百度的架构下才能提供完整服务(如手机遗失时的定位或锁定),因此当 MyXperia 启动时便会出现百度资料夾,Sony 称“可保证使用者的资料不会因此储存在百度的伺服器里”。据悉,Asus手机也有类似情况出现。谷歌和百度应该可以掌握世界上很多人的行踪,但对大陆用户来说,资料落在美国政府手中还是中国政府手中,用户的担忧程度可能非常不同。

奇虎360的劣迹更为严重。如360安全浏览器,会把用户访问的网址、对应的 cookie、用户在地址栏输入的内容等等信息上传到奇虎的服务器上;360安全卫士被曝有设置木马或后门程序,来获得一些商业上的信息,以及和政府部门合作,网络监控部门可能会通过杀毒软件公司提供的信息找到发布敏感文字的人。其他国产杀毒软件如瑞星、金山、天网等都已多次被发现有后门或者是其它不可告人的代码存在。

此外,据报道,拼音加加2004v3.02、新华五笔,这两个输入法软件也被发现有后门和敏感词汇汇报功能,会在不知不觉中泄漏隐私。QQ更甚,建议尽量不要在翻墙状态下和进行敏感谈话时开启QQ。群内聊天是最危险的,基本所有敏感词语都会被记录下来。

国产手机不可靠

国产手机的安全性能也令人堪忧。本年七月,一位红米Note手机用户测试发现,在关闭小米账号和小米云服务等需要连接小米服务器的功能之后,手机仍然在悄悄连接北京服务器。这位用户删除了所有的小米内置应用,加装了防火墙,结果仍然如此,暗示小米的网络访问功能藏在底层固件内,用户无法禁止。这位用户还发现,用Download Manager在Google Play应用商店下载应用或在Gmail应用内下载附件都要经过北京的IP地址。另据东周刊报道,小米盒子也被发现有恶意程序,而大陆流行的手机播放应用PTV、PPS影音、优酷和风行视频都被发现包含有Android.Spy.origin.83木马。

两年前中兴手机就被发现留有后门。一位匿名人士在Pastebin披露,中兴公司一款在美国销售的Android手机的安全隐患,随后得到了安全研究人员的证实。这款手机是中兴和美国移动运营商MetroPCS联合推出的入门级智能手机ZTE Score M,运行Android2.3.4(Gingerbread)系统,4GB储存空间,600 MHz处理器,3.5英寸显示屏,以及名叫sync_agent的内置root shell后门的应用程序。另一款在英国销售的ZTE Skate证实也有同样的问题。但并不清楚它是否能远程激活。

对国行机来说,表面的应用权限管理似乎起不到任何作用。测试显示,国内应用软件在已经明确被拒绝使用某项功能的情况下仍然在不断请求,在没有任何操作的情况下权限请求数量还在持续增加。

以微博为例,在关闭了所有应用权限的情况下,其仍可以读出用户手机信息。

APP安装时识别的是系统版本而不是手机机型,除非授权,比如授权给Google play。微博等应用却有能力知道是哪台手机登录了微博,也就相当于是谁登录的,并且与用户名相对应,此外它们还获取了什么就不得而知了。这或许能够解释为什么有些“敏感”用户即使更换了账号、不发言,也一样会被屏蔽。     

网络犯罪中国最严重

据网络安全公司诺顿发布的一份研究报告显示,2013年网络犯罪给中国企业和个人造成了370亿美元的损失,仅次于美国的380亿美元。安全分析人士对此给出的核心解释是:新网民还太不成熟,以及政府在互联网行业方面的政策强调“增长高于一切”。政府一直在严格控制网络信息的传播,并且密切跟踪不少用户的活动,但不太关注如何阻止网络犯罪,以及惩罚允许或鼓励攻击活动的公司。

纽约时报中文网的报道,中国企业往往将吸引用户当做首要任务,“互联网企业默认大家都会使用肮脏的手段,这就是他们的态度”,调研公司迈博瑞咨询的执行董事Mark Natkin说。“傻乎乎照章办事的会死得很难看,所以他们不去设法整治,而是全都变得好斗起来。”随着新一代用户开始利用智能手机上网,情况可能会变得更糟。 “中国无法访问Google Play,所以人们会去一些不具备‘谷歌官方应用商店所有的’安全功能的应用商店,”英特尔安全全球首席技术官Michael Sentonas说。

报道显示,中国75%的智能手机用户在过去12个月中遭遇过手机网络犯罪,而全球平均水平仅为38%。2013年的一项研究表明,在中国最受欢迎的1400个应用中,有35%都会追踪与应用的功能无关的用户数据。

国内流行范围广的许多应用软件都有被曝光过“流氓”特征,如腾讯QQ、搜狗输入法、360安全卫士等很多国内软件,都出现过窃取和上传用户信息及操作记录、扫描硬盘、留有后门等行为。相比PC端,移动端暴露个人信息的危险性更大。比如用户的通讯记录、联系人、地理坐标、客户端网银等重要私人信息的泄露都是在移动端上较为常见。据悉,很多APP都会在用户不知情的状态下自动读取关键信息,然后发送到远程服务器上,如果用户自行限制,很多APP就会罢工,尤其是国产APP。即时通讯软件、输入法、杀毒软件、下载工具、浏览器、播放器等应用最好都不要选择国产产品,至少在移动端上不推荐使用,因为基站很容易对智能手机定位。相比下PC较安全些,在PC上使用国产应用时建议放在虚拟机上,或者两个浏览器,一个用来翻墙,一个用来浏览国内网站,下线前擦除浏览痕迹。

评论

I am glad to be one of the visitors on this
outstanding website (:, appreciate it for putting up.

Feel free to visit my blog: luxury house sitting miami (<a href="Http://Www.Twitter7.com/space.php?uid=4116&do=blog&id=8431">Tyrell</a>)

I used to be able to find good advice from your articles.

My blog post ... id pro - http://idpro.shotblogs.com/id-pro-web-situs-judi-online-terbaik-terperca...

Aw, this was a really good post. Finding the time and actual effort to make a superb article?
but what can I say? I procrastinate a lot and don't seem to get anything
done.

Feel free tto visit my weblog: eye vision improvement exercises (<a href="http://www.eleonorajuglair.it/index.php/component/k2/itemlist/user/63302...)

Wonderful blog youu have here but I was curious if you knew of any message boards
that cover the same topics discussed here?
I'd really like to be a part of community whdre I can get
feed-back from othrr knowledgeable people that
share the same interest. If you have any recommendations, please let me know.
Kudos!

Here is my blog post - reallifecam, rwal life cam, reallife cam, reallifecam com - https://onlyprivatecams.com/

LG G2 D802 Silikon Cüzdan Kapaklı Kılıf - ALBENITAK telefon kiliflari

Also visit my webpage <a href="https://www.hepsiburada.com/teleplus">iphone kılıfları</a>

Hi! This post could not bbe written any better! Reading thiss post reminds me of my good old room mate!
He always keot talking about this. I will forwqard this article to
him. Pretty sure he will have a good read.
Thanks for sharing!

Alsoo visit my web site; wpengine review - http://sevgidolu.biz/user/DinahXnu19420941/

Hey! I just wanted to ask if you ever have
any issues with hackers? My last blog (wordpress) was hacked and I ended up losing a few monnths of
hard work due to no data backup. Do you have any solutions to prevent hackers?

Here is mmy web page: reverbnation bot free - <a href="http://pvl-online.kz/user/DarrinMcDowall6/">http://pvl-online.kz</a>,

So not build hen party in an elegance center? But now i am able to see if it is indeed my dominant motivation and
to permit my center guide everybody. Look kept own the room, where you go. http://fpvmonkey.com/__media__/js/netsoltrademark.php?d=918.credit%2Fdow...

I will give you 6 tips to take you pointed in the right direction. But the Meta Description tag still holds reasonable.
Without an effective page, you will find that it is
hard to make quick money online. http://www.sharmaraco.com/blog/5-steps-win-casino-slot-machine

What's up, afterr reading this remarkable article i am
also glad to share my familiarity here with friends.

My homepage; <a href="https://networkokulu.net/">Saadet zinciri</a>

Thanks for ones marvelous posting! I truloy enjoyed reading it, you happen to be a great author.
I will make certain too bookmark your blog and will come bazck very soon. I want to encourage you to
definitely continue your gredat writing, hhave a nice afternoon!

My wweb blog :: <a href="https://hizliesyasat.com/">ikinci el eşya alanlar avrupa yakası</a>

As I site possessor I believe thhe content mattger hewre is rattling magnificent , appreciate it for your hard
work. You should keep it up forever! Best of luck.

Also visit my web ssite <a href="http://Ucityfesta.Or.kr/tidings_press/143835">Sentiment In The Forex Market Jamie Saettele Pdf</a>

Fastidious response in return of this question with genuine arguments aand describing all regarding
that.

Herre is my website; reallifecam, real life cam, reallife cam, reallifecam com
- https://voyeurfreecams.com/

Faço confiança todos o ideias tem ofereceu em seu postar.

Eles são muito convincente e pode definitivamente funcionar.
Ainda , os posts são muito curta para arrancadores. Você poderia
alongar-los um pouco de subsequentes tempo? Obrigado para o post.

Aqui é meu blog net ... <a href="http://secretmumsstuff.com/make-handmade-christmas-decoration/">Creme efeito cinderela</a>

Thank you for the auspicdious writeup. It in fact was a amusement
account it. Loook advanced to more added agreeable from
you! However, how ould we communicate?

Feel free to visit my web site dermefface fx7 buy australia - http://www.civilservantsacco.co.zm/index.php/component/k2/itemlist/user/...

Wow, that's what I was exploring for, what a material! existing here at this website, thanks admin of
this web site.

Feel free to surf to my site - Agen Sbobet - http://www.royalbola888.com/

It's impressive that you are getting ideas from this post as well as from
our discussion made at this time.

My web-site :: judi online (<a href="http://18Taboo.com/comment/html/?195402.html">18Taboo.com</a>)

Do you mind if I quote a couple of your posts as long as I provide crwdit and sources
back to yur site? My blog is iin the very same niche as yours and
my visitors would definitely benefit from a lot of the
information you present here. Please let me know if this okay with you.
Thanks a lot!

Also visit my weblog ... <a href="http://www.zaizhuli.com/space.php?uid=4280&do=blog&id=21118">dog constipation home remedy dogs</a>

Awesome! Its actually amazing post, I have got much clear
idea regarding from this post.

my webpage: weight loss tips ( vod13.com
- http://vod13.com/comment/html/?134649.html )

Why viewers still use to read news papers when in this technological globe all iss existing on web?

Review my webpage - 5 stwps tto take control of your
life now - http://Home.Stu.Taip.cn/space.php?uid=13318&do=blog&id=11755

Appreciate this post. Let me try it out.

my web blog: <a href="https://profiles.wordpress.org/waylenporcher/">restoration brothers hartford</a>

This piece of writing is genuinely a pleasant one it assists
new the web visitors, who are wishing for blogging.

My site: bookie raider x ( driversed.tv - http://driversed.tv/blog/archives/19131 )

I relish, result in I found exactly what I was having a look for.
You've ended my 4 day lengthy hunt! God Bless you man. Have a great day.
Bye

Also visit my web page :: <a href="https://www.Wellinghomeopathy.com/treatment-of-fibromyalgia">fibromyalgi...

Hello, after reading this awesome article i am too cheerful to share
my familiarity here with colleagues.

My web-site: pastry bard - https://www.amazon.com/dp/B07NLDF7QR

Useful information. Fortunate me I found your website by accident, and I am stunned why this twist of fate didn't came about earlier!
I bookmarked it.

Also visit my site; <a href="https://www.hoodiesformen.co.uk/product/2019-mens-rick-and-morty-cartoon... hoodie mens</a>

I am no longer positive the place you're getting your information, however
great topic. I needs to spend a while learning more or working out more.
Thanks for wonderful info I was on the lookout for this information for my
mission.

my blog post; poker online - https://hoki125.com/

I think that what you posted made a bunch of sense.
But, what about this? suppose you composed a catchier post title?
I mean, I don't wish to tell you how to run your website, but what if you added a headline
to possibly grab a person's attention? I mean 冒个泡吧! | 泡泡 is kinda plain. You might peek at Yahoo's home page and see how they create news titles to grab people to click.
You might add a video or a picture or two to grab people excited about everything've written.
In my opinion, it might make your website a little
livelier.

my webpage xhamster.sx - https://xhamster.sx

I constantly spent my half an hour to read this blog's articles
all the time along with a mug of coffee.

My page :: <a href="https://www.amazondiscountcode.co.uk/prime-student/amazon-prime-student-... video movies</a>

Howdy! This is my first visit to your blog! We are a team of volunteers
and starting a new project in a community in the same niche.
Your blog provided us useful information to work on. You have done a wonderful job!

Here is my web page - 대구출장마사지 - https://www.mintvipanma.com/

It's in fact very complex in this active life to listen news on TV,
therefore I just use world wide web for that purpose, and
get the most recent information.

My web page: <a href="http://news.ezyget.com/885-rollex11/profile">rollex11 download</a>

Hello, this weekend is fzstidious designed for me, as this moment i am reading this
great informative article here at my residence.

My web site <a href="https://seyyarlezzetler.com/">popcorn Arabası Kiralama</a>

Hello, I enjoy гeading through youг post. Ӏ wɑnted to write a little
comment to supⲣort you.

Here is my site - my blog - http://google.com.pk/url?q=https://thethaovn365.com

Công ty In Thủ Đô luôn là đơn vị hàng đầu và chuyên nghiệp nhất trong việc gia công in hộp giấy,
túi giấy bao bì, in ấn tờ rơi với mẫu mã phong phú
và giá cả rẻ nhất. Thông điệp tờ
rơi quảng cáo phải nổi bật: Thông điệp
in tờ rơi phải ở vị trí khách hàng dễ nhìn thấy nhất và sử dụng font chữ,
màu chữ mạnh mẽ để kêu gọi khách hàng hành động.

Tóm lại để viết quảng cáo hay và hiệu quả
thì bạn phải biết cách viết từ mở đầu đến dàn ý,
sử dụng những thủ thuật ở phần II để lôi cuốn thú hút người đọc.
Thiết kế ấn phẩm quảng cáo là một trong
những yếu tố quan trọng để xây dựng hình ảnh thương hiệu.
Phần mềm thiết kế ấn phẩm quảng cáo: sử dụng các
phần mềm chuyên dành để thiết kế đồ họa, như:
Adobe Photoshop, Adobe InDesign, Microsoft PowerPoint hay Microsoft Publisher.

Quảng cáo, Ấn Phẩm Quảng Cáo Tại Sân Bay, Quảng cáo sân bay,
Tại đây, Website, Công ty quảng cáo, Dịch vụ quảng cáo
sân bay - https://unghoangphucvn2020.wixsite.com/anphamquangcaosanbay , https://unghoangphucvn2020.wixsite.com/anphamquangcaosanbay, Ấn phẩm tại
sân bay, Dịch Vụ In Ấn Quảng Cáo Giá Rẻ Chuyên Nghiệp

Good information. Lucky me I recently found your website
by chance (stumbleupon). I have saved it for later!

Feel free to visi my website: <a href="https://freeprivatecamera.com/">reallifecam, real life cam, reallife cam, reallifecam com</a>

Excellent post. I was checking constantly this blog and I amm impressed!
Extremely useful information particularly thee last part
:) I care for such innfo a lot. I was looking for this particular information for a
loong time. Thank you and goo luck.

Feel free to visit myy web-site - KadıN SağLığı - https://beklentiler.com/

For most up-to-date news you have to pay a visit world-wide-web and on world-wide-web
I found this web site as a finest web site for latest updates.

Also visit my blog; forex mastery 2 market scanner for dayy
trading, Cristna - http://methador.com/index.php/component/k2/itemlist/user/1203620 ,

Helpful info. Lucky me I discovered your site accidentally,
and I am surprised why this twist of fate did not came about
earlier! I bookmarked it.

Feel free to surf to my blog post; <a href="http://www.izwc.com/space.php?uid=86093&do=blog&id=143462">power of conversational hypnosis filetype pdf</a>

Wonderful blog! I found it while surfing around on Yahio News.

Do yoou have any suggestions on hoow to get listed
in Yahoo News? I've been trying for a while but I never seem to get
there! Many thanks

Check out my homepage reallifecam, real life cam, reallife cam, reallifecam comm - https://amateurspycams.com/

Heya i am for the first time here. I found this board and I find
It really useful & it helped me out a lot. I hope to give something back and aid
others like you aided me.

Feel free to visit my page :: <a href="https://callgirlvn.net/forums/call-girl-da-nang/">zalo gai gọi da nang</a>

Yesterday, while I was at work, my cousin stole my iphone
and tested to see if it can survive a 30 foot drop, just so she
can be a youtube sensation. My apple ipad is now destroyed and she has 83 views.
I know this is totally off topic but I had to share
it with someone!

My page :: forex trading software - https://www.upfx.co.uk/transfer-money-to-spain

This is very attention-grabbing, You are an overly skilled blogger.
I have joined your rss feed and look ahead to looking for more of your excellent post.

Also, I've shared your site in my social networks! https://www.cca365.net

Some truly wondrous work on behalf of the owner of this internet
site, absolutely great content. https://www.csite88.com

Hello! Do you use Twitter? I'd like to follow you if that would bee okay.
I'm absolutely enjoying your blog and look forward to new updates.

My web page <a href="https://istanbulikincielesyaalanlar.com/">ikinci el eşya alanlar</a>

Hi, this weekend is fastidious in support of me, for the reason that this time
i am reading this wonderful informative paragraph here at my residence.

my page ... <a href="https://qqhbo.com/">Slot Online</a>

Pretty nice post. I just stumbled upon your blog and wanted to say that I've really enjoyed surfing around your blog
posts. After all I'll be subscribing to your feed and I
hope you write again soon!

my webpage ... minecraft - http://t.co/L3eaTwZrdR

Thankfulness to my father who stated to me regarding this website, this webpage is in fact awesome.

Feel free to visit my website ... <a href="https://www.myhotelexperience.co.uk/listing-category/devon/">cheap hotels colchester</a>

What a stuff off un-ambiguity and preserveness of valuable experience about unexpected emotions.

my web blog :: <a href="https://robotercih.com/">elektrik elektronik taban puanları</a>

I neeed to to thank you for this fantastic read!! I certainly loved every little bit of
it. I've got you book-marked to check outt new stuff you post...

Allso visit my homepage ... do myy paper for cheap
( Mariannbe - https://linkspider.directory/groupware/profile/FlorenceTh )

I like this site because so much useful material on here :
D. https://woori88.com

页面

冒个泡吧!

Plain text

  • 不允许HTML标记。
  • 自动将网址与电子邮件地址转变为链接。
  • 自动断行和分段。