The National Communications Commission (NCC) is planning to establish a certification system for mobile phone security following reports that Chinese smartphone vendor Xiaomi automatically sends personal information to its servers in Bejing without first securing the consent of users.
A story published in a blog post of Finnish security company F-Secure Corp indicated that Xiaomi smatphones’ built-in text-messaging application, MIUI, can send users’ information to the company’s servers in Beijing without their approval.
Because of the loophole, the report said that the Chinese vendor can access users’ mobile phone number, the international mobile equipment identity (IMEI) code as well as the SIM card number.
The international mobile subscriber identity code would be exposed too if the user signs on to Xiaomi’s cloud service, the report said.
Similar to Apple Inc’s iMessage service, MIUI allows users to send text messages through the Internet rather than through telecoms’ networks.
The story was subsequently picked up by Taiwanese media outlets, with Xiaomi users in Taiwan reportedly topping 400,000. The Beijing-based smartphone vendor first denied the reports, but later apologized for the unauthorized data collection.
It added that the messaging system would only be activated on an “opt-in” basis and personal information would be encrypted and would not be stored on its servers.
The commission said it told the Chinese company to inspect all types of phones — not only the two mentioned in the F-Secure blog — that it sells in Taiwan and determine if they have the same issue.
“We have notified them that they should provide a written explanation of how they plan to address the issue,” said Lo Chin-hsien (羅金賢), director of the commission’s Resources and Technologies Department. “We will ask them to come in and answer questions if necessary.”
The commission is to meet with other mobile phone manufacturers soon to discuss how they address information security issues, Lo said.
He added that the Executive Yuan has determined that the applications built into mobile phones will be tested by the commission, while applications downloaded via mobile phones will be supervised by the Industrial Development Bureau.
While the commission has a certification system for mobile phone interfaces, batteries and other specifications, it does not have one yet for information security.
It is aiming to establish an information security mechanism by the end of next year, he said.
“Currently, there is no country in the world that demands that mobile phone manufacturers have national certifications for information security. We can only encourage mobile phone manufacturers to take such certification when it becomes available,” he said.
Lo said the mechanism would not only target mobile phones produced in China, but it would apply to other manufacturers as well.
Death row inmate Huang Lin-kai (黃麟凱), who was convicted for the double murder of his former girlfriend and her mother, is to be executed at the Taipei Detention Center tonight, the Ministry of Justice announced. Huang, who was a military conscript at the time, was convicted for the rape and murder of his ex-girlfriend, surnamed Wang (王), and the murder of her mother, after breaking into their home on Oct. 1, 2013. Prosecutors cited anger over the breakup and a dispute about money as the motives behind the double homicide. This is the first time that Minister of Justice Cheng Ming-chien (鄭銘謙) has
BITTERLY COLD: The inauguration ceremony for US president-elect Donald Trump has been moved indoors due to cold weather, with the new venue lacking capacity A delegation of cross-party lawmakers from Taiwan, led by Legislative Speaker Han Kuo-yu (韓國瑜), for the inauguration of US president-elect Donald Trump, would not be able to attend the ceremony, as it is being moved indoors due to forecasts of intense cold weather in Washington tomorrow. The inauguration ceremony for Trump and US vice president-elect JD Vance is to be held inside the Capitol Rotunda, which has a capacity of about 2,000 people. A person familiar with the issue yesterday said although the outdoor inauguration ceremony has been relocated, Taiwan’s legislative delegation has decided to head off to Washington as scheduled. The delegation
TRANSPORT CONVENIENCE: The new ticket gates would accept a variety of mobile payment methods, and buses would be installed with QR code readers for ease of use New ticketing gates for the Taipei metro system are expected to begin service in October, allowing users to swipe with cellphones and select credit cards partnered with Taipei Rapid Transit Corp (TRTC), the company said on Tuesday. TRTC said its gates in use are experiencing difficulty due to their age, as they were first installed in 2007. Maintenance is increasingly expensive and challenging as the manufacturing of components is halted or becoming harder to find, the company said. Currently, the gates only accept EasyCard, iPass and electronic icash tickets, or one-time-use tickets purchased at kiosks, the company said. Since 2023, the company said it
Another wave of cold air would affect Taiwan starting from Friday and could evolve into a continental cold mass, the Central Weather Administration (CWA) said yesterday. Temperatures could drop below 10°C across Taiwan on Monday and Tuesday next week, CWA forecaster Chang Chun-yao (張竣堯) said. Seasonal northeasterly winds could bring rain, he said. Meanwhile, due to the continental cold mass and radiative cooling, it would be cold in northern and northeastern Taiwan today and tomorrow, according to the CWA. From last night to this morning, temperatures could drop below 10°C in northern Taiwan, it said. A thin coat of snow