search

KashaMalaga / XiaomiMiBand

Patches for Xiaomi Mi Band Android App (Smali Project)
134 stars 47 forks source link

Connected to Xiaomi? #37

Open 1337sup3rh4x0r opened 9 years ago

1337sup3rh4x0r commented 9 years ago

Does the data collected from the band stay on the phone, or does this app upload it to xiaomi servers?

CirKu17 commented 9 years ago

I recently wrote an article on MiFit App Data Collection. tl;dr it sends data to xiaomi servers and other third party companies, all unencrypted.

1337sup3rh4x0r commented 9 years ago

Thank you for the article! This doesn't look good. Have you tried what happens if you block communication with these three sites? Is the app still usable? Should be, as I can also use it in flight mode, no? Do you think it would be hard to suppress communication by modifying the app within this very project here?

CirKu17 commented 9 years ago

Yes, it is. I run the app under the Cyanogen PrivacyGuard and I blocked the domains in the hosts file. Maybe this can be removed within this project, but that's something the maintainer should consider.