Qualcomm Chips Found Collecting User Information

April 30, 2023 19:22

Snapdragon processors automatically transmit device identification data regardless of the operating system installed on the device.


Snapdragon processor. Photo: Qualcomm

German security firm Nitrokey said it had discovered an unannounced feature on Qualcomm's processor lines, in which Snapdragon processors can collect and transmit user information directly to Qualcomm servers.

Testing shows that this feature does not work through the operating system available on the device. Nitrokey installed a version of Android without Google services on a Sony Xperia XA2 equipped with a Snapdragon 630 chip, and the device then transmitted some data to Qualcomm's izatcloud.net server.

The information transmitted includes the phone's identification code, chip name, chip serial number, XTRA software version, country code, mobile network, device manufacturer, model, list of applications on the device, IP address... The data is even transmitted over the insecure HTTP protocol and without any additional encryption. This allows anyone to read the device identification data sent to Izat Cloud if it is leaked.

Nitrokey claims the feature affects 30% of phones worldwide, including Android phones and iPhones that use Qualcomm communication modules.

Responding to the report, the US chipmaker said the data transmission was in compliance with the XTRA service's privacy policy. However, experts said the fact that the data was transmitted over the insecure HTTP protocol raised concerns about user privacy and information security.

According to Gizchina, Nitrokey's report highlights the importance of ensuring that user data is transmitted securely and in compliance with privacy policies. It also calls for more transparency from tech companies about the data they collect and how it is used. Users need to know how their information is being used and whether they have control over it.

Following Apple, Google has recently tightened its privacy policy. All Android apps now require user permission before collecting data. In addition, phone owners have the right to delete all data and accounts, showing that technology companies are increasingly improving user privacy.

According to VnExpress

(0) Comments
Latest News
Qualcomm Chips Found Collecting User Information