28 réflexions au sujet de “Les propriétaires de Nokia 7 Plus peuvent ont envoyé des informations sensibles sur un serveur…”

  1. HDM Global’s statement from the NRK article:
    >Statement from HMD Global

    >We have analyzed the case and can confirm that there has been an error in the packing process of software in a single batch of a telephone model, which by mistake attempted to send activation data to a foreign server. The data was never processed and no personal information was shared with third parties or authorities.

    >This has now been fixed and almost any device affected by this error has now installed the update. HMD Global takes the safety and privacy of our customers seriously.

    >Furthermore, we will point out that information is personal information, about context and what other types of data are available. This has been settled in the case of Breyer vs. Germany , and has been confirmed by regulatory authorities several times.

    >We often discuss the matter with relevant Finnish authorities, and also the Norwegian Data Protection Authority if they are interested.

    What I think happened is that software which was intended to be only on phones sold on the Chinese market (because such software is required by Chinese law I’d assume) ended up on the global market Nokia 7 Plus by mistake. HMD Global is a Finnish company so they operate under EU law, I don’t see them purposefully risking receiving a big fine by sendind customer data to China for no apparent reason (especially since anyone with a packet analyzer would find it out). And if it was purposeful and the aim was to collect customer data then surely the same software would be on every HMD/Nokia phone?

  2. List of evenwell crap on the Nokia 7 plus.

    Could be any one of them.

    [https://imgur.com/hkQws8e](https://imgur.com/hkQws8e)

    ​

    Edit:

    List of non Google system apps in the Nokia 7 plus

    Most of the evenwell apps are not listed on the phone (Settings-Apps-Show System apps).

    This list is obtained from adb shell.

    ————-

    evenwell apps

    ————-

    com.evenwell.AprUploadService

    com.evenwell.AprUploadService.data.overlay.base.s600ww

    com.evenwell.autoregistration

    com.evenwell.batteryprotect

    com.evenwell.batteryprotect.overlay.base.s600ww

    com.evenwell.bboxsbox

    com.evenwell.bboxsbox.app

    com.evenwell.bokeheditor

    com.evenwell.bokeheditor.overlay.base.s600ww

    com.evenwell.CPClient

    com.evenwell.CPClient.overlay.base.s600ww

    com.evenwell.custmanager

    com.evenwell.custmanager.data.overlay.base.s600ww

    com.evenwell.customerfeedback.overlay.base.s600ww

    com.evenwell.dataagent

    com.evenwell.dataagent.overlay.base.s600ww

    com.evenwell.DbgCfgTool

    com.evenwell.DbgCfgTool.overlay.base.s600ww

    com.evenwell.DeviceMonitorControl

    com.evenwell.DeviceMonitorControl.data.overlay.base.s600ww

    com.evenwell.factorywizard

    com.evenwell.factorywizard.overlay.base.s600ww

    com.evenwell.foxlauncher.partner

    com.evenwell.fqc

    com.evenwell.legalterm

    com.evenwell.legalterm.overlay.base.s600ww

    com.evenwell.managedprovisioning.overlay.base.s600ww

    com.evenwell.mappartner

    com.evenwell.nps

    com.evenwell.nps.overlay.base.s600ww

    com.evenwell.OTAUpdate.overlay.base.s600ww

    com.evenwell.partnerbrowsercustomizations.overlay.base.s600ww

    com.evenwell.permissiondetection

    com.evenwell.permissiondetection.overlay.base.s600ww

    com.evenwell.phone.overlay.base.s600ww

    com.evenwell.PowerMonitor

    com.evenwell.PowerMonitor.overlay.base.s600ww

    com.evenwell.powersaving.g3

    com.evenwell.powersaving.g3.overlay.base.s600ww

    com.evenwell.providers.partnerbookmarks.overlay.base.s600ww

    com.evenwell.providers.weather.overlay.base.s600ww

    com.evenwell.pushagent

    com.evenwell.pushagent.overlay.base.s600ww

    com.evenwell.retaildemoapp

    com.evenwell.retaildemoapp.overlay.base.s600ww

    com.evenwell.round

    com.evenwell.settings.data.overlay.base.s600ww

    com.evenwell.SetupWizard

    com.evenwell.SetupWizard.overlay.base.s600ww

    com.evenwell.stbmonitor

    com.evenwell.stbmonitor.data.overlay.base.s600ww

    com.evenwell.telecom.data.overlay.base.s600ww

    com.evenwell.UsageStatsLogReceiver.data.overlay.base.s600ww

    com.evenwell.weatherservice.overlay.base.s600ww

    ——–

    fih apps

    ——–

    com.fih.infodisplay

    com.fih.StatsdLogger

    ————–

    hmdglobal apps

    ————–

    com.hmdglobal.appstore.overlay.base.s600ww

    com.hmdglobal.camera2

    com.hmdglobal.camera2.overlay.base.s600ww

    com.hmdglobal.datago

    com.hmdglobal.datago.overlay.base.s600ww

    com.hmdglobal.support

    —————–

    qti/qualcomm apps

    —————–

    com.qti.confuridialer

    com.qti.dpmserviceapp

    com.qti.qualcomm.datastatusnotification

    com.qti.qualcomm.deviceinfo

    com.qti.xdivert

    com.qualcomm.embms

    com.qualcomm.location

    com.qualcomm.qcrilmsgtunnel

    com.qualcomm.qti.auth.fidocryptoservice

    com.qualcomm.qti.callfeaturessetting

    com.qualcomm.qti.confdialer

    com.qualcomm.qti.dynamicddsservice

    com.qualcomm.qti.ims

    com.qualcomm.qti.lpa

    com.qualcomm.qti.optinoverlay

    com.qualcomm.qti.perfdump

    com.qualcomm.qti.qmmi

    com.qualcomm.qti.qms.service.connectionsecurity

    com.qualcomm.qti.qms.service.telemetry

    com.qualcomm.qti.qms.service.trustzoneaccess

    com.qualcomm.qti.qtisystemservice

    com.qualcomm.qti.seccamservice

    com.qualcomm.qti.simsettings

    com.qualcomm.qti.smcinvokepkgmgr

    com.qualcomm.qti.telephonyservice

    com.qualcomm.qti.uceShimService

    com.qualcomm.qti.uim

    com.qualcomm.timeservice

    com.qualcomm.wfd.service

  3. At this point I’m less annoyed about the untimely violent death of my 7 plus, I’ve went from someone that would recommend Nokia phones to everyone to someone that is starting to hate the brand. The 7 Plus is still riddled with annoying bugs months after Pie was released, how hard is to fix the date not displaying in the light mode? Now this ?!?! Fuck them.

  4. Oh very well done Nokia. I been advocating your products over the chinese ones, and ofc the backlash due to sub par quality and poor after sales was not enough that you had to pull this stunt as well.

    And I still kept believing that you guys will pull through and take the mantle from xz1 compact. Sigh.

  5. Now I’m (even more) happy my 7 plus is dead. The headphone jack issue, the screen that fell off, the charge port which *will* fail, the wifi issues, the so called « stock » android with dozens of Evenwell telemetry apps, the awful stock camera experience, the poor audio quality, the lack of support from HMD and now this, all contributes to me never buying another Nokia.

  6. Could the use of Blokada have in some way prevented that? I’ve had nothing but good things to say about my 7+ …. up to today, none of the issues that many have reported. Fuck

  7. this is what happens when you buy product which it’s RESEARCHED, DEVELOPED and MANUFACTURED by Foxconn and HMD it’s just fucking reseller with rights to put Nokia sticker on these Foxconn products, so much for naive believers in Nokia legacy just because they have similar address and few former employees

  8. I don’t think this is malicious. A lot of Nokia phones are just re-branded Chinese phones. Their software probably wasn’t updated to remove localization. It’s not always a conspiracy.

  9. Thank you HMD. You healed me from believing in any company ever.

    I loved flashing custom ROMs on my phones but due to having little time I stopped and wanted to go for a solid phone with clean Android so I wouldn’t have to.

    I bought a Nokia 7 Plus.

    There were other issues, but the whole Evenwell fiasco and now this have made on thing abundantly clear to me: I will never ever run a phone without LineageOS again.

    I’m gonna wipe the 7 Plus and probably sell it. A Pocofone is already on the way and I’ve requested the unlock code.

    Fuck these data-hungry companies.

  10. Did everyone read this and skip over the part the code doing this is listed for China Telecom *from* qualcomm? This doesn’t seem malicious. More that China does this for their phones, and someone pulled the wrong branch to compile. Still bad, but I would gather this kind of code exists for anything sold in China.

Les commentaires sont fermés.