Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC: App "telemetry" - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
App "telemetry"

ISC reader James had just installed "Foxit Reader" on his iPhone, and had answered "NO" to the "In order to help us improve Foxit Mobile PDF, we would like to collect anonymous usage data..." question, when he noticed his phone talking to China anyway. The connected-to site was alog.umeng.com, 211.151.151.7. Umeng is an "application telemetry" and online advertising company. Below is what was sent (some of the ids are masked or have been obfuscated)

I particularly like the "is_pirated: No". It goes well with "is_snooping: Yes" that is though missing from the exchange...

 

Daniel

367 Posts
ISC Handler
I like "is_jailbroke"...
John

88 Posts
What apps for an IPhone would you suggest for seeing what your phone is currently connecting ("talking") to? Thx in advance
David

6 Posts
It actually says "is_jailbroken":"yes" - it's just word wrapped and looks odd at first glance.

Knowing the phone is jail broken, I'd like to know if this copy of Foxit Reader came from the Apple app store or not.
David
1 Posts
Yes. PCAP&logs show the app came from a1644.phobos.apple.com
Daniel

367 Posts
ISC Handler
I don't want this comment to be seen as xenophobic, but:

Eugene Xiong – Founder and Chairman of the Board
Eugene founded Foxit Corporation in 2001 and has been the company's president and CEO. Under Eugene's leadership, the company is growing rapidly, employs hundreds of employees worldwide, and has become a worldwide leader in PDF and electronic document technology and solutions. Before founding Foxit, Eugene worked at Bexcom Corporation and at China's National Astronomical Observatory, where he participated in building one of the first Internet nodes in China. Eugene earned his BS in Computer Science at the University of Science and Technology of China.

George Z. Gao – President, Foxit Corporation
George leads the world-wide sales and marketing team as well as business development at Foxit Corporation. George has more than 20 years of experience in the software industry in marketing and sales in addition to software development and project management. Before joining Foxit, George worked for Nortel Networks and Lite-on Communications. George earned his degree of Bachelor of Science in Astrophysics from Nanjing University and his Ph.D of Science in Astro Technology from Chinese Academy of Sciences in China.
Anonymous
I posted a link to this article on the FoxitSoftware forum for Foxit reader mobile, and asked if they had any comment.
The post was deleted. Imagine that.
Anonymous
Somebody needs to contact Apple. They take privacy seriously, and would probably warn foxit to fix it in next versio.

As for log. Set up your phone to use a proxy server. Then look there.
Povl H.

71 Posts

Sign Up for Free or Log In to start participating in the conversation!