Author Topic: $17 smartwatch sends something to random Chinese IP address  (Read 5781 times)

0 Members and 1 Guest are viewing this topic.

Offline made2hack

  • Frequent Contributor
  • **
  • Posts: 419
  • Country: 00
    • Made2Hack
$17 smartwatch sends something to random Chinese IP address
« on: March 03, 2016, 01:16:09 pm »
Hi all,

Because Dave got one in the mailbag, I thought sharing this was just too good.

Chinese Smart watch spying
« Last Edit: March 03, 2016, 01:19:42 pm by trs80 »
 

Offline Ian.M

  • Super Contributor
  • ***
  • Posts: 8597
Re: $17 smartwatch sends something to random Chinese IP address
« Reply #1 on: March 03, 2016, 01:31:32 pm »
Broken link.  extra '[' (%5B) needs removing. Fixed

Its the android app for the watch that sends something from your phone/tablet, not the watch.  No one is surprised that cheap Chinese s--t is dodgy. It comes with a piece of paper with an IP address, (not even a domain name) to get the app, and that's the software equivalent of buying goods at closing time in the pub carpark! 
« Last Edit: March 03, 2016, 08:12:59 pm by Ian.M »
 

Offline f4eru

  • Frequent Contributor
  • **
  • Posts: 580
  • Country: 00
    • Chargehanger
Re: $17 smartwatch sends something to random Chinese IP address
« Reply #2 on: March 03, 2016, 07:36:58 pm »
>>  Topic: $17 smartwatch sends something to random Chinese IP address

No worry. The 1000$ apple watch does exactly the same. Except it'S a random US IP, which is much worse for data privacy.

Offline metRo_

  • Regular Contributor
  • *
  • Posts: 88
  • Country: pt
Re: $17 smartwatch sends something to random Chinese IP address
« Reply #3 on: March 04, 2016, 06:05:48 pm »
>>  Topic: $17 smartwatch sends something to random Chinese IP address

No worry. The 1000$ apple watch does exactly the same. Except it'S a random US IP, which is much worse for data privacy.

The way people worry about china and dont mind for being spied every single day...
 

Offline sram

  • Newbie
  • Posts: 3
  • Country: us
Re: $17 smartwatch sends something to random Chinese IP address
« Reply #4 on: March 08, 2016, 11:53:59 pm »

>>  Topic: $17 smartwatch sends something to random Chinese IP address

No worry. The 1000$ apple watch does exactly the same. Except it'S a random US IP, which is much worse for data privacy.

Interesting. You have some proof?
 

Offline Barny

  • Frequent Contributor
  • **
  • Posts: 288
  • Country: at
  • I'm from Austria, not Australia ;)
Re: $17 smartwatch sends something to random Chinese IP address
« Reply #5 on: March 09, 2016, 06:51:11 am »
*The Apple gets through general terms and conditions full access to the device and do what they want with it.
*Apple admitted it themselve. (To ensure the wonderful user experience.)
 

Online Fungus

  • Super Contributor
  • ***
  • Posts: 10808
  • Country: 00
Re: $17 smartwatch sends something to random Chinese IP address
« Reply #6 on: March 09, 2016, 09:28:26 am »
>>  Topic: $17 smartwatch sends something to random Chinese IP address
No worry. The 1000$ apple watch does exactly the same. Except it'S a random US IP, which is much worse for data privacy.

Interesting. You have some proof?

Do a bit of googling... Apple is known to participate in the PRISM program.

 

Offline borjam

  • Supporter
  • ****
  • Posts: 803
  • Country: es
  • EA2EKH
Re: $17 smartwatch sends something to random Chinese IP address
« Reply #7 on: March 09, 2016, 09:35:08 am »
Broken link.  extra '[' (%5B) needs removing. Fixed

Its the android app for the watch that sends something from your phone/tablet, not the watch.  No one is surprised that cheap Chinese s--t is dodgy. It comes with a piece of paper with an IP address, (not even a domain name) to get the app, and that's the software equivalent of buying goods at closing time in the pub carpark!
For the record, I connected my Rigol DS1074Z to a fully monitored network for several hours, and the only packets it sent were the DHCP/BOOTP requests. Absolutely nothing else.

 

Offline sram

  • Newbie
  • Posts: 3
  • Country: us
Re: $17 smartwatch sends something to random Chinese IP address
« Reply #8 on: March 13, 2016, 01:43:52 am »

*The Apple gets through general terms and conditions full access to the device and do what they want with it.
*Apple admitted it themselve. (To ensure the wonderful user experience.)

I was just asking for proof.  Like a router log?

 

Offline cidcorp

  • Supporter
  • ****
  • Posts: 105
  • Country: ca
Re: $17 smartwatch sends something to random Chinese IP address
« Reply #9 on: March 13, 2016, 01:17:16 pm »
I order stuff from China all the time.  With that said you have to use a little common sense.  Low costs on items with are substantially more expensive here
in North America generally have a reason for the price difference.  You are sacrificing something for the low cost:

No Safety Standards
Low quality materials
Low QA/Testing
High failure rates
Infected Software
No warranty

You can buy some pretty good copies of things, but generally they always fall short on the quality of the software/firmware (or materials).
Even the simplest things like components purchased from China, terminal blocks for example, you can get great pricing on
them but the plastics used on the screw housings are brittle and cheap.  I learn everyday the things you CAN and CANNOT buy from
China  ;D

As for a $17 watch, a 'Smart' one, I'd say pass (other than wanting to mess around with it - possibly hack the firmware).
On a side note tho:  I've got some outrageously good deals on quartz analog watches that are copies of Breitling, etc
for $20-$40 range, that were made very well...

You win some you lose some, but I definitely don't trust Chinese gear not to have a back door/software hacks.

Interesting post tho - I considered buying one for fun last year, but never considered the risks of hooking it to my Smartphone.  :phew:
 

Offline HAL-42b

  • Frequent Contributor
  • **
  • Posts: 423
Re: $17 smartwatch sends something to random Chinese IP address
« Reply #10 on: March 13, 2016, 02:12:20 pm »

No Safety Standards
Low quality materials
Low QA/Testing
High failure rates
Infected Software
No warranty

Sounds like something with "Proudly made in the US of A" printed on it, perhaps except the safety standards thing.  ;D
 

Online Fungus

  • Super Contributor
  • ***
  • Posts: 10808
  • Country: 00
Re: $17 smartwatch sends something to random Chinese IP address
« Reply #11 on: March 13, 2016, 03:33:26 pm »
in North America generally have a reason for the price difference.

"Middle men"

"Dealer markup"

Or maybe you thought stuff sold in the USA is actually manufactured in the USA.

You are sacrificing something for the low cost:

No Safety Standards
Low quality materials
Low QA/Testing
High failure rates
Infected Software
No warranty

I'm pretty sure those aren't the reasons.

Not everything made in China is total garbage. Obviously if you pay $17 for a smart watch you're not going to get much (duh!)

Not everything made in China is total garbage. If you pay a few bucks more you can get the same stuff they sell in the USA but much cheaper. eg. Try paying $99 for a smart watch, see what you get then.

« Last Edit: March 13, 2016, 03:37:10 pm by Fungus »
 

Offline zapta

  • Super Contributor
  • ***
  • Posts: 6004
  • Country: us
Re: $17 smartwatch sends something to random Chinese IP address
« Reply #12 on: March 13, 2016, 04:25:47 pm »
>>  Topic: $17 smartwatch sends something to random Chinese IP address

No worry. The 1000$ apple watch does exactly the same. Except it'S a random US IP, which is much worse for data privacy.

There are valid reason for a device or app calling home. For example, registering an end point for user notification, checking for updates, fetching customized configuration, and so on. As usual the devil is in the details such as proper disclosure, granularity of opt out, dataset transferred, data retention policy and usage of the uploaded data.

We live in a very complex world and different people have different preference for the balance between user experience, cost and privacy. This product seems to target people that focus on low cost. Apple is subject to law suites and has deep pockets so probably more focus on privacy.

BTW, I doubt that the IP in this case is 'random'.

Drain the swamp.
 

Online tooki

  • Super Contributor
  • ***
  • Posts: 4995
  • Country: ch
Re: $17 smartwatch sends something to random Chinese IP address
« Reply #13 on: March 15, 2016, 09:27:49 am »
I'd assume it's something on the 17.x.x.x network, which is Apple's /24 network. (Apple has so many IPs that in the old days, when Apple only had 100 retail stores or so, they used the store number as the /8 octet, and every demo machine on the floor had its own static I address! I can only assume they had to abandon this once they had stores numbered higher than 254!)
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf