Android Century
  • Home
  • Android Zone
    • Android Apps
    • Android Games
    • Apps APk Files
    • Games Apk Files
    • Apps Hack Tricks
  • Reviews
  • Fantasy Zone
    • Entertainment
    • Quotes and Status
    • Life Style
    • Home Made Tips
    • Hair Care
    • Skin Care
    • Fantasy Tips
  • Tricks
    • Free Recharge
    • Free Internet
    • shopping Cashback
    • Recharge Cashback
  • Tech
  • Mobiles
  • Gadgets
  • News
  • How To's
  • Software
Breaking
Loading...

Featured post

How to Take Great Photos With Apple's iPhone X

Recent Posts

Labels

  • Android Apk Files
  • Android Apps
  • Android Games
  • Apps Apk Files
  • Entertainment
  • Fantasy Tips
  • Gadgets
  • Hair Care
  • HomeMade Tips
  • How To's
  • News
  • Quotes
  • Quotes & Status
  • Recharge Cashback
  • Recharge Promo Codes
  • Shopping Cashback
  • Technology
  • skin care
Home / Mobiles / News / eScan report says MIUI has security flaws

eScan report says MIUI has security flaws

Latest Govt. Jobs 21:40:00 Mobiles , News Edit
Image result for eScan report says MIUI has security flawseScan report claims Xiaomi’s MIUI has multiple security issues, but the company has denied this is true.
According to eScan, there are some key problems with Xiaomi’s MIUI. For instance, the report says MIUI’s system app poses a threat to ‘Security app’s like anti-virus, etc, because when it comes to the un-installation, the system doesn’t ask for a password. The report says, “From a security point of view, the process of un-install implemented in MIUI poses a significant security threat since the authentication process implemented by the app is bypassed.” It also claims all security apps on Xiaomi phones are affected by this design flaw.A new report by security firm eScan has claimed Xiaomi’s MIUI has multiple security vulnerabilities and flaws. The report says MIUI poses a significant threat for apps and user data on the phones. Xiaomi on its part has denied this is true and is disputing the eScan report. Interestingly the report doesn’t just stop at Xiaomi, but also blames app developers for ignoring security concerns.
The report adds Xiaomi’s MIUI is not ideal of handling work-related profiles, and says that MIUI doesn’t “properly label” these. The report also raises security concerns over the Mi Mover app, which allows for complete data transfer from Xiaomi to Xiaomi smartphones, and also Xiaomi to other branded smartphones. According to the report, Mi Mover app copies all the data, including logged-in credentials for apps, which poses a significant security threat.
According to eScan, the problem is the Xiaomi Mi-Mover “can access App-System-Data which allows cloning of the End-User apps.” Even in the new Xiaomi phone, “all the applications allowed the user to log into the app and allowed access to all the history, wallets and conducted operations as if both the devices are same,” notes the report. IRCTC app was the only exception to this, and asked for registration again.
The point eScan is making is that on the new Xiaomi phone, apps have to ask for re-authentication, which doesn’t happen if these are being set-up via Mi Mover.  It is also asking Xiaomi users not to enable the “Smart-Lock,” option which can automatically unlock devices.
But the report admits that in some cases the bugs are theoretical and that device would have to be stolen, along with the pin/password/pattern for the account to get accessed. It reads, “Facebook Theoretical bug, the end-user has to protect the phone from getting stolen and has to implement pattern/Passcode on the device.” eScan’s report adds in the end that Xiaomi will be “issuing a patch as per the schedule,” though the date is not confirmed. The report says “app developers are also equally responsible” for some of these flaws.
Xiaomi has disagreed with this report. A statement from the company spokesperson states, “Escan earlier today shared a report which list downs few concerns in MIUI. We strongly disagree with the allegations made by Escan in their report. As a global Internet company, Xiaomi takes all possible steps to ensure our devices and services adhere to our privacy policy.” 
The statement adds, “Any perpetrator who gains physical access to an unlocked phone, is capable of malicious activity and an unlocked phone is greatly at risk of user data being stolen.  This is why, we at Xiaomi encourage our users to be more aware of guarding their private data using PIN, Pattern locks, or the onboard fingerprint sensor available on most of our smartphones. In fact, prompting users to enable fingerprint lock is a standard step when setting up a Xiaomi smartphone for first use.”  
Mi Mover is designed to be a convenient tool for our users to move their data from an old smartphone to a new phone. In order for Mi Mover to initiate this process, a password is required. More importantly, in order to use Mi Mover, the smartphone has to be unlocked. Thus, there are two layers of protection for the user – phone lock and a Mi Mover password that are necessary.
Further, as per the Escan report, a vendor’s Security Team replied, “As part of exploiting the issue you describe, someone needs to take control of a user’s mobile phone and get that phone in an unlocked state. This is a very high barrier to entry and seems unlikely to happen commonly, making this more of a theoretical attack. The protection, in this case, is to not allow someone to steal and unlock your phone.”
Share on Facebook Share on Twitter Share on Google Plus

RELATED POSTS


Oppo F7 India launch confirmed

Alcatel 1x with Android Oreo (Go ed...

Huawei P20, P20 Pro, P20 Lite price
eScan report says MIUI has security flaws eScan report says MIUI has security flaws Reviewed by Latest Govt. Jobs on 21:40:00 Rating: 5

0 comments:

Post a Comment

Newer Post Older Post Home
Subscribe to: Post Comments ( Atom )

Search This Blog

TEST BOOK FOR GOVT ENTRANCE TEST

TEST BOOK FOR GOVT ENTRANCE TEST
Find All Latest book for preparation of SSC,RAILWAYBANK PO,RBI,BANK CLERK,GATE ME,GATE CE are available here in less prices, to check out the books click here

Translate

  • Popular Post
  • Random posts
  • Category

Popular Posts

  • Teen Patti Offer 2018: Refer and Earn Flipkart Vouchers Free
    Teen Patti Offer 2018: Refer and Earn Flipkart Vouchers Free
    Teen Patti Refer & Earn Offer:  Hey Guys! Today I make an article about Teen Patti Referral ...
  • Hands-on with the home windows 10 Creators update for the Xbox One: Beam recreation streaming arrives
    The Windows 10 Creators Update is here, now—yes,  now —but not (officially) on the PC. The ...
  • Taotronics TT-BH22 Headphones Review
    We make it a addiction to now not look up pricing of a product sooner than reviewing and if ...
  • Pentagon strongly condemns North Korea missile test
    The Pentagon on Monday strongly condemned North Korea’s latest missile test, adding that the ...
  • Jio effect: Telcos may have to cut data rates 2017
    India's big  telecom  companies,  Bharti Airtel ,  Vodafone India  and  Idea Cellular , will be ...
  • Bank wallets growing faster than e-wallets
    In the  bank  versus  e-wallets  sweepstakes,  lenders  have now gained lost ground. As of ...

Random Posts

  • Google’s rise helps
    Google’s rise helps
    02.02.2018 - 0 Comments
    After eliminating costs for traffic acquisitions, Google’s revenue alone was estimated at .87 billion.…
  • Apple iPhone X production
    Apple iPhone X production
    30.01.2018 - 0 Comments
    Apple iPhone X production target halved for the first quarter to around 20 million units, Nikkei reported on…
  • Paytm GET 70 – Get Rs 10 Cashback On Rs 30 Recharge [7 times] latest feb 2016
    Paytm GET 70 – Get Rs 10 Cashback On Rs 30 Recharge [7 times] latest feb 2016
    20.02.2016 - 0 Comments
    Paytm has come up with a new offer. Now get Rs 10 cashback on Rs 30 recharge. This offer is valid for…
  • iBall launches 7-inch Slide Enzo V8 tablet
    iBall launches 7-inch Slide Enzo V8 tablet
    22.02.2018 - 0 Comments
    The iBall Slide Enzo V8 comes with a 7-inch Full capacitative multi-touch IPS display, having a screen…
  • Microsoft quietly teases new Creators update internal windows 10's settings
    Microsoft quietly teases new Creators update internal windows 10's settings
    24.03.2017 - 0 Comments
    Microsoft this week began a low-key promotion for the next Microsoft Windows 10 feature upgrade after…

Labels

Android Apk Files Android Apps Android Games Apps Apk Files Apps Hack Tricks Entertainment Free Internet Freecharge Gadgets Games Apk Files How To's Laptops Guide Mobiles Reviews Technology Viral's android zone free recharge

Entertainment

Tricks

Popular Posts

  • Reliance Jio set to charge subscribers from April 1,2017
    India's mobile-telephony companies are headed for a fresh round of price wars after the country's ...
  • Steam Now Supports PS4's DualShock 4 Controller
    HIGHLIGHTS ...
  • Hands-on: HP's Lap Dock helps your Windows Phone feel more like a real PC
    HP’s Lap Dock ...
  • Boston Dynamics Handle robot can rock and roll your world
    ...
  • Jio effect: Telcos may have to cut data rates 2017
    India's big  ...
  • WhatsApp, Telegram patch flaws in instant messaging applications
    WhatsApp and ...
  • Upcoming new Nokia 8 with Snapdragon 835 processor to launch in June,2017
    The present day ...

Random Posts

  • Chat smart! 12 tips that will make you WhatsApp expert
    Chat smart! 12 tips that will make you WhatsApp expert
    14.02.2017 - 0 Comments
    WatsApp has become a lifeline for almost smartphone user since its launch in year 2009. It is the most…
  • Sony Xperia XZs with 960 FPS exquisite sluggish movement camera released at Rs 49,990
    Sony Xperia XZs with 960 FPS exquisite sluggish movement camera released at Rs 49,990
    03.04.2017 - 0 Comments
    Sony India today unveiled the next iteration of company’s last year’s…
  • Paytm METRO Card Offer – Get Rs 10% Cashback On Mumbai Metro Card Recharge
    Paytm METRO Card Offer – Get Rs 10% Cashback On Mumbai Metro Card Recharge
    01.04.2016 - 0 Comments
    Paytm METRO Card Offer – Paytm is offering 10% cashback on Metro card recharge. This is an amazing…
  • Google to display Getty Images content
    Google to display Getty Images content
    10.02.2018 - 0 Comments
    SAN FRANCISCO: Getty Images and Google have announced a partnership according to which, the tech giant…
  • OnePlus 3 and Android Nougat: in case you cannot wait, get it manually in clean steps
    OnePlus 3 and Android Nougat: in case you cannot wait, get it manually in clean steps
    25.04.2017 - 0 Comments
    Android Nougat for the OnePlus 3 and the OnePlus 3T is here. It is still the same old -- and the same…

Most Popular

  • Teen Patti Offer 2018: Refer and Earn Flipkart Vouchers Free
    Teen Patti Offer 2018: Refer and Earn Flipkart Vouchers Free
    Teen Patti Refer & ...
  • SAMSUNG GALAXY J7 (2016) REVIEWS
    SAMSUNG GALAXY J7 (2016) REVIEWS
    SAMSUNG GALAXY J ...
  • Top 5 Best SmartPhones under 7000 Rs (March 2017)
    Looking for the ...
  • Apple, IBM, Cisco are huge because of Indians, do not deny them H-1B visa: RBI Governor Urjit Patel
    ...
  • SAMSUNG GALAXY J7 (2016) Specifications
    SAMSUNG GALAXY J ...
  • BlackBerry Teases Marshmallow Beta Testing for Priv by Next Week
    Blackberry ...
  • LG Q6 Review
    LG Q6 Review
    2017 is ...

Contact Form

Name

Email *

Message *

Offers Zone

Created By Android Century Distributed by Android Century
  • Home
  • About us
  • Contact us
  • Privacy policy
  • Terms of use
  • Advertise here
Subscribe Via Email Subscribe To Android Century By Email And Get Free Updates. ;-)


Your email address is safe with us!