While Xiaomi rapidly expanding it’s coverage it seems to have some major bugs to fix before going global. With a little over 6 percent market share Xiaomi has now become inevitable in the smartphone industry. With the release of MIUI 9 the Chinese firm has once again proved it’s reliability among the customers.
The MIUI, Xiaomi’s custom ROM for its devices is being used by millions of users and has become an integral part in their tech life. Now, it is reported that MIUI has several major security threats which needs to be fixed as soon as possible before a massive breakout. The threat has been discovered by an India-based security firm eScan Antivirus, one of the vulnerabilities centers around the Mi Mover app, which lets you transfer settings and other data from an Android device to a Xiaomi phone.
‘The threat has been discovered by an India-based security firm eScan Antivirus’
The app overrides Android’s sandbox protection, however, when that transfer takes place between two Xiaomi devices, since system data like and confidential information like payment information get moved over. To protect that information from being transferred willy-nilly, you must provide a password before using the Mi Mover app.
This becomes a serious issue if someone gains access to your unlocked Xiaomi device, since they can clone your system and app data without too much hassle. Also, without Android’s built-in sandbox protection, there is no fallback protection from the system itself.
The other notable security issues is with device-administrator apps. Generally, security apps use Android’s administrator permission to wipe your device if it ever falls in the wrong hands. By do so usually requires a password, a requirement that did not pop up when the Cerberus anti-theft app was uninstalled from the Mi Max 2.
The Chinese smartphone makers completely disagreed with the report, and the company says, “takes all the possible steps to ensure our devices and services adhere to our privacy policy.” Xiaomi also urged folks to use a PIN, pattern lock, or fingerprint sensor to minimize the risk of someone getting into your device.
Stay updated with latest happenings of tech world on the go with Technobugg App, on Android and Windows.
Source: Guiding Tech
