<story><title>UC Browser for Android, Desktop Exposes 500M Users to MiTM Attacks</title><url>https://www.bleepingcomputer.com/news/security/uc-browser-for-android-desktop-exposes-500-million-users-to-mitm-attacks/</url></story><parent_chain></parent_chain><comment><author>zoom6628</author><text>FWIW UC Browser is prob the most popular web browser used on Android phones in China. Every device ive seen, or owned, has it pre-loaded or is top choice for getting loaded. I have also tried it out myself, but as other posters has written already, its awful.&lt;p&gt;Wondering out loud i would ask if the vulnerability to MiTM is actually required.  From reports here in HN 2-3 years ago MiTM is basically what the GFW achieves, and it inserts its own headers to route away from intended(and blocked) servers and to benign local China servers(such as baidu). Perhaps this vulnerability exists in their need to be compliant to local Chinese law which basically prevents one bypassing&amp;#x2F;nullifying the GFW without permission?&lt;p&gt;This is an open and honest question, not an opinion. Hope someone can answer with facts. I lived in China past 12 years and have had enough hearsay, rumour, and opinion to last me multiple lifetimes :-)</text></comment>
<story><title>UC Browser for Android, Desktop Exposes 500M Users to MiTM Attacks</title><url>https://www.bleepingcomputer.com/news/security/uc-browser-for-android-desktop-exposes-500-million-users-to-mitm-attacks/</url></story><parent_chain></parent_chain><comment><author>plibither8</author><text>I really hope this substantially reduces the number of users, or Google takes the app down completely. The browser is ridiculously terrible: both from the user and the developer point of view.&lt;p&gt;The browser constantly spams the phone with irrelevant, clickbait news articles&amp;#x2F;ads (and yet it&amp;#x27;s so popular). The developers (especially in India) cannot ignore the browser because of its large userbase, and then that&amp;#x27;s one more browser you have to look after.</text></comment>