<story><title>Second Chinese Firm in a Week Found Hiding Backdoor in Android Devices</title><url>http://www.bleepingcomputer.com/news/security/second-chinese-firm-in-a-week-found-hiding-backdoor-in-firmware-of-android-devices/</url></story><parent_chain></parent_chain><comment><author>ryao</author><text>I am not surprised. Just about every consumer electronic device in China can be assumed to be backdoored. Laptops are backdoored too:&lt;p&gt;&lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;www.techworm.net&amp;#x2F;2015&amp;#x2F;08&amp;#x2F;lenovo-pcs-and-laptops-seem-to-have-a-bios-level-backdoor.html&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;www.techworm.net&amp;#x2F;2015&amp;#x2F;08&amp;#x2F;lenovo-pcs-and-laptops-seem-...&lt;/a&gt;&lt;p&gt;Even the ISP provided routers are backdoored:&lt;p&gt;&lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;www.computersolutions.cn&amp;#x2F;blog&amp;#x2F;2014&amp;#x2F;09&amp;#x2F;hacking-shanghai-telecoms-e8-wifiepon-fibre-modem&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;www.computersolutions.cn&amp;#x2F;blog&amp;#x2F;2014&amp;#x2F;09&amp;#x2F;hacking-shangha...&lt;/a&gt;&lt;p&gt;Some of the obvious backdoors are easy to circumvent. e.g. If a Linux distribution is your operating system of choice, you automatically bypass that Lenovo backdoor.</text></comment>
<story><title>Second Chinese Firm in a Week Found Hiding Backdoor in Android Devices</title><url>http://www.bleepingcomputer.com/news/security/second-chinese-firm-in-a-week-found-hiding-backdoor-in-firmware-of-android-devices/</url></story><parent_chain></parent_chain><comment><author>huhtenberg</author><text>Details are missing.&lt;p&gt;If a device downloads updates over a non-secured channel, it doesn&amp;#x27;t automatically mean that it will &lt;i&gt;execute&lt;/i&gt; the update unconditionally. For example, a package might be signed with vendor&amp;#x27;s key, the public part of which is shipped with the device. If the sig is missing or invalid, the device will discard the package.</text></comment>