And it is done by the Muricunt

https://www.nitrokey.com/news/2023/smartpho...n-us-chip-maker



Smartphones With Popular Qualcomm Chip Secretly Share Private Information With US Chip-Maker

Summary
During our security research we found that smart phones with Qualcomm chip secretly send personal data to Qualcomm. This data is sent without user consent, unencrypted, and even when using a Google-free Android distribution. This is possible because of proprietary Qualcomm software which provides hardware support also sends the data. Affected smart phones are Sony Xperia XA2 and likely the Fairphone and many more Android phones which use popular Qualcomm chips.


Introduction
The smartphone is a device we entrust with practically all of our secrets. After all, this is the most ubiquitous device we carry with us 24 hours per day. Both Apple and Android with their App Store and Google Play Store are spying on its paying customers. As a private alternative some tech-savy people install a Google-free version of Android on their ordinary smartphone. As an example we analyzed such setup with a Sony Xperia XA2 and found that this may not protect sufficiently because proprietary vendor software, different from the (open source) operating system, sends private information to the chip maker Qualcomm. This finding also applies to other smartphone with a Qualcomm chip such as the Fairphone.

What is a de-Googled Android phone?
A deGoogled Android phone is one that has been modified to not include any of Google’s proprietary (closed-source) apps or services. This usually involves installing a custom ROM that replaces the standard Android software with an open source Android that doesn’t come with any of Google’s apps. You can either install such an Android yourself or buy a phone that already has this done for you (e.g. NitroPhone).

Google surveillance & tracking tools are everywhere but most of this ‘evil’ is located inside the Google Play Services, which is closed-source. Millions of lines of code that include things like constantly scanning your surroundings for Bluetooth and WiFi devices, using WiFi signal triangulation, then matching the visible WiFi antennas with Google’s database of all geographic locations of all WiFi access points they collect in order to know your precise location at all times. This all works without connecting to the detected WiFi networks and even when your GPS is turned off. This method is similar to how the CIA tracked down Pablo Escobar in the 1990s but is now used on a massive scale to track every citizen around the globe.

To get rid of the almighty powerful Google and Apple and its 24 hour tracking & surveillance tools one approach is to use a de-Googled Android phone. As a result, your deGoogled phone will not have the Google Play Services and Google Play Store but will instead use an alternative open-source store app that offers the same apps. You can also avoid the use of a store altogether by downloading your apps (with the APK file extension) directly from the software vendor's website. This is just as you would when downloading a program to install on your PC.

Analyzing a DeGoogled Phone
Sony Xperia XA2

In this test, we decided to try /e/OS, a de-Googled open-source version of Android that is privacy-focused and designed to give you control over your data. /e/OS claims that they do not track you and don't sell your data. Let's find out.

We installed /e/OS on a Sony Xperia XA2 smartphone. After installation, the phone boots into the /e/OS setup wizard. It requested us to turn on GPS location service, but we purposely left it off because we do not need it now.

We also didn't place a SIM-card in the phone either so it could only send and receive data over the WIFI network which we are monitoring with Wireshark. Wireshark is a professional software tool which allows us to monitor and analyze all traffic being sent over the network.

After we provided our WiFi password in the setup wizard, the router assigned our /e/OS de-Googled phone a local IP address and it started generating traffic.

The first DNS requests we see:

[2022-05-12 22:36:34] android.clients.google.com
[2022-05-12 22:36:34] connectivity.ecloud.global
Surprisingly, the deGoogled phone's first connection is to google.com. According to Google, the host android.clients.google.com serves the Google Play Store for periodical device registration, location, search for apps and many other functions. This is strange because we have a deGoogled phone without the Google Play Store. Later we found out that this request originates from microG, an open source re-implementation of Google's proprietary core libraries and applications.

Then it connects to connectivity.ecloud.global which, according to /e/OS, replaces Android's Google server connectivity check connectivitycheck.gstatic.com.

Two seconds later the phone started communicating with:

[2022-05-12 22:36:36] izatcloud.net
[2022-05-12 22:36:37] izatcloud.net
We are not aware of any company or service with the name izatcloud.net. Therefore we started searching through the /e/OS legal notice and privacy policy but found no mention of data sharing with the Izat Cloud. The /e/OS privacy policy clearly states "We do not share any individual information with anybody". We then searched through the /e/OS source-code they make available on Gitlab and we were unable to find any references to the Izat Cloud.

A quick WHOIS lookup shows us that the izatcloud.net domain belongs to a company called Qualcomm Technologies, Inc. This is interesting. Qualcomm chips are currently being used in ca. 30% of all Android devices, including Samsung and also Apple smartphones. Our test device for the /e/OS deGoogled version of Android is a Sony Xperia XA2 with a Qualcomm Snapdragon 630 processor. So there we have a lead.

Is Qualcomm spying on us?
Investigating this further we can see that the packages are sent via the HTTP protocol and are not encrypted using HTTPS, SSL or TLS. That means that anyone else on the network, including hackers, government agencies, network administrators, telecom operators, local and foreign can easily spy on us by collecting this data, store them, and establish a record history using the phone’s unique ID and serial number Qualcomm is sending over to their mysteriously called Izat Cloud.

The data sharing with Qualcomm is not being mentioned in the terms of service from Sony (the device vendor) or Android or /e/OS either. Qualcomm does this without user consent.

We believe this is against the General Data Protection Regulation (GDPR) to collect user data without their consent and contacted Qualcomm's legal counsel about the matter. A few days later they answered and informed us that this data collection was in accordance with the Qualcomm Xtra privacy policy and they shared us a link to their XTRA Service Privacy Policy. So it appears to be that this Izat Cloud we never heard of is part of the XTRA Service we’ve never heard of either. We have the impression that Qualcomm likes to keep things mysterious, hence the name Izat Cloud and the XTRA Service.

Looking at the link Qualcomm sent us, the ‘XTRA Service’ privacy policy states:

“Through these software applications, we may collect location data, unique identifiers (such as a chipset serial number or international subscriber ID), data about the applications installed and/or running on the device, configuration data such as the make, model, and wireless carrier, the operating system and version data, software build data, and data about the performance of the device such as performance of the chipset, battery use, and thermal data.

We may also obtain personal data from third party sources such as data brokers, social networks, other partners, or public sources.”

They do not mention IP address but we assume they collect that as well. After our research was completed they’ve updated the privacy policy and now added that they do also collect the device's IP address. They also added the information that they store this data for 90 days for ‘quality purposes’.

To clarify, here a list of the data Qualcomm may collect from your phone according to their privacy policy:

Unique ID
Chipset name
Chipset serial number
XTRA software version
Mobile country code
Mobile network code (allowing identification of country and wireless operator)
Type of operating system and version
Device make and model
Time since the last boot of the application processor and modem
List of the software on the device
IP address
Digging a little deeper we’ll find out that the ‘XTRA Service’ from Qualcomm provides Assisted GPS (A-GPS) and helps provide accurate satellite positions to a mobile device.

What is Assisted GPS (A-GPS), and why do I need it?
GPS was initially developed exclusively for military usage, guiding planes, personnel, and bombs. Receivers were typically positioned in open regions with line-of-sight access to satellites. Since GPS became available for commercial usage, however, new applications have increased the system's requirements.

These new uses required GPS signals to penetrate overhead obstructions, such as trees and roofs. Thus, the “assisted GPS” or A-GPS solution was born. With A-GPS the phone downloads various files containing orbits and statuses of satellites with the approximate GPS satellite locations for the next 7 days to help quickly determine phone’s location.

Proprietary device drivers are problematic
The largest part of Android is published as open source and can therefore be analysed regarding potential security and privacy issues. But usually smart phone vendors include additional proprietary software such as device drivers, firmware blobs, system services and apps. The apps are directly visible by the user and can change the system to such an extend that it reminds of a PC of the 90s shipped with Windows 95 and a lot of so called bloat ware.

Obviously also Google-free Android distributions require device drivers to support a given hardware. These drivers are usually proprietary software which gets executed by the operating system and can not only provide the required hardware support but also perform undesired behaviour. The consequences are that even with a deGoogled device we still have no full control on our privacy and which personal identifiable information (PII) is being shared because of this closed-source vendor software that is sharing our private data.

This is why Nitrokey in general is dedicated to open source which is inevitable in order to achieve a secure system. Open source software (and hardware) is the only way to allow verifying a system's behaviour and guarantee its security.

Are other smartphones affected?
Another popular option which is frequently chosen for its privacy is the Fairphone. The Dutch company produces excellent phones allowing users to maintain the phone and replace parts themselves when broken. In spite of its reputation for bolstering users' privacy, all Fairphone models contain a Qualcomm chip probably execute Qualcomm's software. The Fairphone has therefore the same issue with sharing of personal data with the Qualcomm XTRA Service. Although not tested, we suspect that the same privacy issues affect many other choices of smartphone brands that use Qualcomm processors, including so called encrypted phones or crypto phones.

NitroPhone is secure
NitroPhone 3 ProNitrokey’s NitroPhone does not contain the Qualcomm chipset and our tests confirm that when GPS is turned-off, no requests for A-GPS are being made. When GPS is turned-on, to prevent Google from obtaining and storing your IP address, the NitroPhone's GrapheneOS contacts and downloads the A-GPS files from google.psds.grapheneos.org, a proxy server supplied by GrapheneOS to protect users’ privacy. And unlike Qualcomm, GrapheneOS does not share any personal information with the GrapheneOS proxy servers, nor with Google or Qualcomm.

Furthermore, GrapheneOS allows you to disable the feature to request A-GPS files (opt-out) or, if you prefer, to use Android’s standard servers agnss.goog. At the moment, neither /e/OS, Lineage, or Sailfish OS nor any other phone we could find, supports this feature or provides this level of freedom.

Conclusion
Qualcomm’s proprietary software is not only downloading some files to our phone to help establish the GPS location faster, but also uploads our personal data, such as the devices’ unique ID, our country code (Germany in this case), our cellphone operator code (allowing identification of country and mobile operator), our operating system and version and a list of software on the device. This creates a completely unique signature of us enabling behavioral tracking and decreasing user’s privacy significantly. No matter if we have GPS turned-off.

The fact that Qualcomm collects a large amount of sensitive data and transmits it via the insecure and outdated HTTP protocol shows us that they do not care about users’ privacy and security. This doesn’t require to speculate of Qualcomm collaborating with various government spy agencies, but also creates a risk when the traffic is potentially intercepted also by dictators and other suppressive governments not even requiring a collaboration with Qualcomm. Not only drones make frequent use of location information to target people. There are cases where people’s kidnappings and/or assassinations have been facilitated by the use of the victims location information. A most recent example is Iran where protesters get arrested because of their smartphone location tracking. This even doesn’t require tapping the phone. The cleartext traffic is also hotbed for data brokers which sell people’s data (e.g. shopping centers).

Affected users could try blocking the Qualcomm XTRA Service using a DNS-over-TLS cloud-based block service, or re-route this traffic yourself to the proxy server from GrapheneOS, but this requires technical expertise and does not provide the same level of security as the NitroPhone.


Update, 4/27/2023
The text has been corrected to state that the responsible software is not executed as firmware but in the operating system. Also requests to android.clients.google.com originate from microG.

Author
Paul Privacy is an independent security researcher with a focus on privacy and helping others to obtain privacy on their phones and computers. Because privacy is cool. And being spied on is NOT cool. Be private. Be Cool. For a free consult you can contact me at: paulprivacy@posteo.ch or follow me on Twitter at @PaulPrivacyCool

Hi yo why bother when you can buy the whole Malaysia population personal data for just 10k.
No need so troublesome.
Every yrs got personal data leaks so very much updated.

Everyone and everything is on the (dark) web now.

whole malaysian? that's rookie level.
besides, personal data IS NOTHING if compared to collecting data on smartphone

since when merehsia kesah privacy

asalkan can stream prawn thats all matter

omfg data collection without consent, this is outrageous, this is not acceptable, i will totally ban and boikot... wait...

hey whats for breakfast on this nice 1st day of May. hopefully the weather is gonna be good cos gonna go outside do stuff.

time to switch to huawei phone

in Merehsia, privacy is alrdy dead... with the number of data leaks happened few years ago..

Developer need to update the degoogled phone to include dequalcomm phone feature too

After watching LTT video on CCP android box, I'm scared to own one.

By now personal data is a joke. Just pray and hope that your deepest, darkest secrets inside you brain can’t go out!

All countries also want to claim that their religion is the correct religion with their own evidences and proof. Who is correct?

hahhahahah ...
seem like u know all data

Dunno why every week got Huawei Core update

Bush was the one sign off making backdoor legal if not mistaken. Amdk semua suci murni.

Kek nobody is trustworthy nowadays. Its why I refuse to keep very personal info online or anything cloud.

national security of usa ma

usa is bumiputera of the world

National security secrets act is the same as telling you to believe their own version of God.

National security and secrets act is to protect the interests of the country. You believe? Someone became a billionaire out of the information not made to the public.

yearly subscription cheaper?

Typical tech and intelligence gathering combo, it's just a question of which one you choose to be spied and monitored, the democracy west backdoor or the commies world backdoor...😅

This post has been edited by yongku99: May 1 2023, 09:29 AM

Operation Paperclip already sent the Commies to take over America last time.

bunch of Nazi scientist on that operation, actually it's a genius opportunity anyway for the US tech scene for years to come, staying loyal with the fallen Hitler camp is no longer a wise choice, rather than all the Nazi camp scientist and genius executed or died in war, better to use their brilliant mind elsewhere, but the west camp did win the nuke bomb race anyway compared to the Nazi camp research team....

Not really Nazis a large number of Germans who were sent over were actually Commies from the Frankfurt School of Social Studies which its real name was Marxist School of Communism.

Please don't read Wikipedia.

Read books like this:



You can download it from somewhere on the internet.

custom ROM,.. blame Google and Qualcomm,..

The Nazi is the gov, so everyone including the university etc is under the Nazi, they work for the facist Nazi.

This post has been edited by yongku99: May 1 2023, 10:00 AM

You made it sound like the Communists were saints. Read the book I recommended. It won't disappoint.

Then you will know what America is failing today.

Not making them a saint, but they are under the Nazi gov regardless of their commies ideology, they work for the Nazi.

the reason why US wanna ban hualawei bcuz they cannot find back door on huawei device.

ask cia they pissed off or not when iran saudi and china made deal behind them and they dont get to eavesdroop them?

bcuz they pakai hualawei ma.

The Nazis began to rise in Germany because they weren't too comfortable with the Communists which predates them in WW1.

When the Communists won the Russian elections and took over the government in 1917, you know what they declared?
Read the recommended book. It won't disappoint.

Amercunt chips ...americunt spy.. Halal

Doesn't matter anymore, the Nazi is in power at that time, even commies need to bow down or else, same thing when the Nazi scientist choosing US side, once in US, you need to bow down to the new boss...

If you insists that the Nazis are the enemies, then you're already deceived. Today most major Us corporations no longer under Nazis. Once you read the book you will get a clearer picture.

So I guess either way NSA or da ge already has access to my phone

what else to say about the Nazis?bad ass fascist German gov, it's just a question of some of their brilliant minds choosing US coz the Nazi is on the way down, an opportunity for US, shoot the soldier but save the intellectual....

This post has been edited by yongku99: May 1 2023, 10:24 AM

Intel's Spectre & Meltdown vulnerability few years ago did not teach anyone anything? All processors have a backdoor whether you like it or not. AMD/ Intel/ ARM all have backdoors built into them. Because the processor is so complex it take a long time to find them. It does not mean it is not there.

And about all these degoogling hoo ha. Look.... all the phones even the most un custom rom like Pixel phones does send tons of user data back to google and chip makers. Whether you like it or not.

Ya'all say its wrong its bad its invasion of privacy, blah blah blah. But ya'all still needs those services to get on with your lives. Whatsapp/ Waze/ E Wallets.... all these owns your data at the time you up signed with your phone number.

We've already lost our freedom when we allowed governments to grow too big.

Why need to spy on us when our financial institution bocor here and there.

What so privacy when tiktoker share their life regularly.in TikTok

Keke

i not believe privacy still exist.

.
The other side of the story, .......

https://www.theregister.com/2023/04/27/qual...g_system_claim/ - 2023/04/27 - The truth about those claims of Qualcomm chips secretly snooping on you
Snapdragon giant and others insist alleged data gathering is overblown
.

Also, this has been an open secret since the advent of computers in the late 1980s, .......

https://www.zdnet.com/article/windows-10-se...ivacy-settings/ - 2015/08/13 - Windows 10 sends data to Microsoft, despite privacy settings
Some of the information sent back to Microsoft can identify the user's machine.

OP is spreading FUD.???

.
P S - Remember, when you subscribe for an ISP plan (fixed fiber or mobile) or apply for a bank card/loan, these services companies will regularly have some of your private data with them, eg they know when you defaulted on your monthly payments, are doing P2P, illegal stuffs, etc, defaulted to other banks and services, etc. Are they also spying on you.?
.

This post has been edited by lurkingaround: May 1 2023, 12:57 PM

NitroKey disappoints me
A look at NitroKeys latest article

There's an article making the rounds from NitroKey named "Smartphones With Popular Qualcomm Chip Secretly Share Private Information With US Chip-Maker".

This article is a marketing piece for selling their rebadged Pixel phones by picking a random phone and pointing at network traffic. It takes a look at a Sony Xperia XA2 and for some reason calls out Fairphone in particular.

The brand of the device should not really matter if this is a chipset issue as the article claims but it goes even further than just calling out other brands, it also additionally uses a custom rom to check these things instead of software supplied by those brands.

The second thing the article does is point out that WiFi geolocation exists and is done by Google and Apple by showing a screenshot from the Wiggle service that has nothing to do with that. Phones use Cell network, WiFi and network geolocation to get a rough location of a device, not for evil but for saving power. This prevents the need to run the GPS receiver 24/7 since most features don't need an exact location. There's no claims being made by NitroKey that their phone doesn't provide any of this.

After this we get to the main claim in the title of the article. The Qualcomm 630 chipset supposedly sharing private information with the manufacturer. The author of the article has found that the device connects to izatcloud.net and instead of doing the logical thing and opening izatcloud.net in a browser they do a whois request and then figure out it's from Qualcomm, They also proceed to contact Qualcomm lawyers instead of following the link on this page. The webpage hosted on this domain does conveniently explain who owns the domain and what it's purpose is and it's associated privacy policy. But that doesn't sound nearly as spooky.

The next section makes the claim that this traffic is HTTP traffic and is not encrypted. It proceeds to not show the contents of this HTTP request because it would show that it's not at all interesting. It does not contain any private data. It's just downloading an GPS almanac from Qualcomm for A-GPS.

The A-GPS data is only there to make getting a GPS fix quicker and more reliable. GPS signals are pretty weak and getting a lock indoors from a cold start (the device has been off for some time) is hard. Inside the GPS signal sent by the satellites there's occasional almanac data that compensates for things like atmospheric distortions, without the almanac your GPS position wouldn't even get within a few hundred meters of your actual position. Since this signal is only occasionally broadcast and you need to listen to a GPS sattelite for an extended amount of time (the broadcast takes around 10 minutes) it's easier for these modern devices to just fetch this information from the internet. Qualcomm provides this as a static file for their modems.

This feature isn't even only in the Qualcomm 630 chipset, it's in practically all Qualcomm devices. Some third party Android roms go as far as to obscure the IP address of your phone by proxying this http request with another server. The rom they have tested obviously didn't.

This feature is not even limited to Qualcomm devices, this practice happens in practically all devices that have both GPS and internet because people don't like waiting very long for their position when launching their navigation software. The NitroPhone has their GPS provided by Broadcom chips instead of Qualcomm ones so obviously it won't make the same HTTP requests, doesn't make it any more or less secure though.

Now the main issue, is this personal data? The thing that gets leaked is your IP address which is required because that's how you connect to things on the internet. This system does not actually send any of your private information like the title of the article claims.

I'm disappointed

The reason for articles like this is pretty obvious. They want to sell more of their phones for a massive profit margin. The sad thing about making these "Oh no all your data is leaking!!!" articles is that when there's actual leaks it won't stand out between all the marketing bullshit. The painful part is that it's actually working. See the outrage about companies not having ethics and not following laws.

This feature is not breaking laws, it's not unethical, it's not even made for eeeevill.


Source: https://blog.brixit.nl/nitrokey-dissapoints-me/

IPhone > android spyware

All semakphone same one la.

All spy on users through semakphone and apps.

Everyone spies. The only saving point is that most of us are too small fry to be of note.

Lel, once you have GPS you are no longer a private person.

The police have a very easy job nowadays, which is why they make it difficult for people to join.
1)When a crime is committed, the first thing police do is contact the telcos, ask which phone numbers in the area
2)Check each phone number, any one of those broke the law before?
3)Found a criminal, accuse them of the crime
(Remember, just like Japan with its 100% guilty rate, Malaysia does not have a prisoner innocence project)
4)Case closed, on to the next crime

... however, this also means that criminals that didn't carry their personal phones with them, are unlikely to ever be caught after a crime (and see #3, did they catch the right person?)

Enjoy your properly solved crimes and efficient police force