亚马逊终于停售60美元Blu安卓机，因为该公司仍然秘密的将用户数据发送到中国 [英国媒体]

-------------译者：奔走的兔子-审核者：龙腾翻译总管------------


 
Ultra-cheap Chinese-made Android phones which sell for as little as $60 have been banned from Amazon after they were found to be sending data about users to a Chinese server.

亚马逊已停售价格仅为60美元的超廉价中国制造的安卓手机，原因是他们发现这些手机会将用户数据发送至位于中国的服务器上。

The handsets branded Blu were pulled by Amazon due to a 'potential security issue.'

因“潜在的安全问题”，亚马逊下架了这款名为BLU的品牌手机。

Last week security firm Kryptowire discovered the software that comes pre-installed on the devices has been automatically sending user data to China without alxing users.

上周，安全公司Kryptowire发现，预装在手机上的软件会在用户不知情的情况下自动将用户数据发送到中国。

The feature was discovered by Virginia-based security firm Kryptowire.

BLU手机的这项功能是由总部位于弗吉尼亚的安全公司Kryptowire发现的。

-------------译者：lanrlt-审核者：龙腾翻译总管------------

The software forces the affected phones to send all the device's text messages to a server in China every 72 hours the analysts said.

分析员解释，每隔72小时，软件会强制将手机中的文本信息发往位于中国的服务器.

The core of the monitoring activities took place using a commercial Firmware Over The Air (FOTA) upxe software system that was shipped with the affected Android devices.

这个监控行为的核心是通过安卓设备附带的空中升级(FOTA)实现的

The devices actively transmitted user and device information including 'the full-body of text messages contact lists call history with full telephone numbers' and identifiers Kryptowire said. 

设备会频繁地发送用户和设备信息，这些信息包括文本信息全文，联系人列表，包含手机号码的通话记录和设备标识符， Kryptowire说

'Because security and privacy of our customers is of the utmost importance all Bluphone models have been made unavailable for purchase on Amazon.com until the issue is resolved' Amazon said in a statement.

"我们将客户的安全隐私放在很重要的位置上，因此在问题解决之前，所有在亚马逊出售的Blu手机将全部下架"，亚马逊在一份声明中说道

-------------译者：lanrlt-审核者：龙腾翻译总管------------

Blu denied any wrongdoing and defended the software which was created by a Chinese company called Shanghai Adups Technology.

Blu否认有任何不法行为，并为自己的软件辩护。该软件是中国的一家名为上海Adups技术的公司开发的。

A spokesperson told CNET it isn't spyware and the company 'has several policies in place which take customer privacy and security seriously.' 

发言人告诉CNET这不是一个间谍软件，公司"严肃对待客户的安全和隐私问题，并制定了多项政策".

Yet only last November this exact same concern was an issue when it was found that the same Chinese manufacturer had installed a 'backdoor' on at least 700 million phones including 120000 Blu phones.

然而，就在去年11月份，Blu公司因为一个问题引发了同样的关切，中国制造商在至少7亿部手机上安装了后门软件，其中包括12万部Blu手机

The software was monitoring where users went and who they called and texted then forcing the phones to send all the data to a server in China every 72 hours
软件监控用户出行，通话和短信记录，并每隔72小时强制将这些数据发往位于中国的服务器

-------------译者：ddr80000-审核者：龙腾翻译总管------------

'Kryptowire has identified several models of Android mobile devices that contained firmware that collected sensitive personal data about their users and transmitted this sensitive data to third-party servers without disclosure or the users' consent' a statement' the firm said in a statement last year. 

该公司去年的声明中说：“Kryptowire已经确定了几种型号的安卓移动设备包含该固件，用于收集有关用户的敏感个人数据，并将此敏感数据传输到第三方服务器，而未经公开提示或者提前取得用户明确同意。”

A lawyer representing Adups said it was designed for a Chinese client monitor user behavior and said it was never intended for use on phones elsewhere. 

代表Adups的律师表示，这是针对中国客户监控用户行为而设计的，并表示它不会用于其他地方的手机。

At the time the company called it a mistake and soon after said the issue was resolved.

当时该公司称之为一个错误，不久之后，宣称这个问题解决了。

Yet last week Kryptowire found that the same 'mistake' is still being made and observed that Adups is secretly collecting data on at least three phone models.

然而，上周Kryptowire发现，同样的“错误”仍然存在，Adups正在通过至少三个型号的手机秘密地收集数据。

（Adups是上海广升信息技术有限公司 -- 译者注）

-------------译者：ddr80000-审核者：龙腾翻译总管------------

Except now the firm is being even more secretive about it.

只不过该公司现在做的更加隐蔽了。

'They replaced them with nicer versions' Ryan Johnson a research engineer and co-founder at Kryptowire said last week at the Black Hat security conference in Las Vegas.

上周在拉斯维加斯举行的黑帽安全大会上，研究工程师和Kryptowire联合创始人瑞恩·约翰逊说：“他们只是用更好的版本取而代之。”。

'I have captured the network traffic of them using the command and control channel when they did it.' 

当他们使用他们的通路调用命令和申请控制系统时我抓取到这些操作产生的网络流量。

Having access to a command and control is an especially dangerous type of breach in that it allows the the unauthorized party to execute commands like its the user.

获取命令调用和系统控制的权限是一种特别危险的越权操作，因为它允许未授权方像用户那样执行命令。

This makes it possible to do everything from record the screen make calls install or uninstall software or even wipe the device. 

这使得记录屏幕，拨打电话，安装或卸载软件，甚至擦除设备信息等一切操作成为可能。

-------------译者：ddr80000-审核者：龙腾翻译总管------------

'It does seem like a huge invasion of privacy' Johnson said. 

约翰逊说：“这就是一个巨大的隐私侵犯。

Adups' spying intensity varies based on the phone but the affected devices are primarily the cheaper ones such as the $60 Blu Grand M to more expensive models.

Adups的间谍行为强度根据手机而异，受影响的设备主要是较便宜的设备，如售价$ 60 的 Blu Grand M到更贵些的型号。

The spyware hasn't been found on any phones that cost more than $300. 

在任何超过300美元的手机上都没有找到该间谍软件。

Krypotowire discovered the Blu Advance 5.0 - which is the third best selling phone on Amazon - is especially vulnerable because it doesn't have a firmware upxe available to prevent the exploit. 

Krypotowire发现Blu Advance 5.0 - 这是亚马逊销量第三高的手机 - 特别容易受到攻击，因为它没有固件升级以防漏洞利用。


​-------------译者：lanrlt-审核者：yuswi815------------

martin
All 'Smart' phones will send your data somewhere or other - in the interconnected 21st Century it's all valuable marketting information that they can sell. Well you don't REALLY think the Apple iCloud is only there for YOUR benefit do you?

所有的"智能"手机都会发送你的数据到这里或那里 - 在这个互联的21世纪，市场信息是可出售的有价信息，你不会真的以为苹果云纯粹是为了方便你才有的

DWalla
Android = Spyware.... why do you think the single largest and most successful datamining company would want to create an OS for a device that has all of your contacts phone conversations notes web surfing shopping apps and a built-in GPS? And why do you think they require you to have a gmail account on their phones?

安卓=间谍软件 ......你以为为什么世界唯一的最大最成功的数据挖掘公司要致力于创建一个移动操作系统，并且这个系统能够拥有你全部的联系人信息，手机短息，备忘录，网页缓存，购物应用，以及内置GPS? 你以为为什么他们要求在他们的手机上登录你的GMail账户?

-------------译者：ddr80000-审核者：龙腾翻译总管------------

DivineFury -> DWalla
good comment. however if you have ANY smart device including apple devices your moves are being recorded. its ingenious tbh. a device that records and knows everything you like... who you know... your dark secrets... where you are... where youve been... what you want to buy. weve unnoticingly branded ourselves with barcodes. 

好评论。然而，如果您有任何智能设备，包括苹果设备，您的移动将被记录。 老实说它们很聪明的。 一个记录和知道你喜欢的一切的设备...你认识谁...你黑暗的小秘密...你在哪里...你取过哪里...你想买什么 我们不自觉地用条形码给自己打上各种标签。

DWalla -> DWalla
Except Apple doesn't keep data specific to its users. It's one of the key reasons that they have struggled with making Siri more useful. Since they don't maintain data on the user it cannot aid the Siri in finding answers contextually to the your interests and activities.

除了苹果不保留其用户的数据。 这是他们为使Siri更加有用而奋斗的关键原因之一。 由于他们不保留用户的数据，所以无法帮助Siri根据上下文在您的兴趣和活动中找到答案。

-------------译者：lanrlt-审核者：龙腾翻译总管------------

lmutley3
Do not buy chinese phones or pc. They are all at it 

不要购买中国手机或者电脑，他们都在干这破事

Ricardo -> lmutley3
Remind me where iphones are made

大声告诉我，iphone是在哪里制造的?

Ryant Freeman -> lmutley3
Come on. Apple has stolen your personal information for many years.

算了吧，苹果已经偷了你的个人信息很多年了

Epi Lep
Lenovo computers do the same thing. They've been busted installing spyware on their business computers. That is why I refuse to ever buy a pc of that brand. 

联想电脑在做同样的事，他们被发现在商务电脑上安装间谍软件，这就是为什么那个牌子的PC我一台也不会买.

Tatty ratty -> Epi Lep
Every time Lenovo try and force an upxe I reject as it always breaks something

每次联想试图强制升级我都会拒绝，因为它一直在搞破坏

Elnoria Farquhar -> Epi Lep
Oh crap I just bought a Lenovo phone 

哦天哪，我刚买了一个联想手机