Hacker News new | ask | show | jobs
by D9u 4735 days ago
To beat a dead horse, regardless of the opinions of the mindless:

[from the article]

    *" I was quickly able to determine that the connections to Motorola were triggered every time I updated the ActiveSync configuration on my phone, and that the unencrypted HTTP traffic contained the following data:

    The DNS name of the ActiveSync server (only sent when the configuration is first created).
    The domain name and user ID I specified for authentication.
    The full email address of the account.
    The name of the connection.

    As I looked through more of the proxy history, I could see less-frequent connections in which larger chunks of data were sent - for example, a list of all the application shortcuts and widgets on my phone's home screen(s)."*

Would someone please illuminate me as to why my reference to ActiveSync is alleged to be irrelevant to this conversation?
1 comments

The author originally noticed the snooping because he happened to be examining the phone's traffic when the ActiveSync credentials were sent. If you actually read the entire article, you'll notice that credentials were sent for Exchange, Facebook, Twitter, Photobucket, Picasa, YouTube, IMAP, POP, Yahoo Mail, and Flickr. Of those, the Microsoft and Yahoo services are the only ones where passwords are NOT sent, meaning you leak less data using ActiveSync than you do using IMAP.
So what is the name of the software which is sending the information, if it's not ActiveSync?
Motoblur.