Profile picture
Elliot Alderson @fs0c131y
, 16 tweets, 5 min read Read on Twitter
Reverse engineering of a Huawei P20 from China - Episode 2

Thread ⬇️
I intercepted the communications made by the Huawei P20 and this is not good...
The phone sends a request to all these websites. The 1st observation, we can do is that almost all communications are unencrypted.
This request to the subdomain track.uc.com to the endpoint collect seems interesting
In this request, the phone is sending
- your country
- your province
- your city
- phone locale
- the website you requested (here google.com)
They didn't enforce the strict transport security aka track.uc.com is working... 🤦‍♂️
This domain is the property of UCWeb Inc. the company behind the UC Browser
Well, this request is not shady at all :sarcasm:
It sending a lot of thing I cannot read for now, I need to find the corresponding code.
If you open myhwclouds.com with chrome, you will have a warning
This endpoint is part of the Huawei Cloud from the "Object Storage Service" family
Not shady at all...
Reminder: I didn't use the phone, these requests are done without any user interactions
According to virustotal, 8.37.232.1 is a subdomain of ucweb.com which the property of MILEWEB, INC
Wow this is the number of requests done when I did airplane mode on/off!
There is a lot of thing to find in this phone but now I need to sleep 😄. End of the episode 2, see you for the episode 3!
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Elliot Alderson
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

More from @fs0c131y see all

Profile picture
In 1981, the Primrose fails on a beach of the North Sentinel Island, pushed by a typhoon. You can still see the wreckage on Google Map, in a creek, in the northwest. The crew was saved only by a helicopter operated by the Indian Navy.
Exact coordinates on Google Maps. Open the link, this Island is wonderful! google.com/maps/place/Nor…
Awesome article in French about the North Sentinel Island from @lemondefr lemonde.fr/international/…
Read 3 tweets
Profile picture
I have a @Frida question: How to deal with a HashMap? I'm intercepting a Java method, "this" has a Hashmap in his attributes. I want to print the content of this HashMap cc @oleavr @enovella_
cc @NowSecureMobile 👋
cc @fridadotre
Read 3 tweets
Profile picture
.@Paytm, the most used banking app in #India, just sent a dummy notification to his users in the middle of the night. Imagine the reaction of the guy (hacker?) when he realised that he just sent a notification to millions of people
Paytm published a tweet regarding this notification
Read 3 tweets

Related threads

Profile picture
#Thread of responses from women in aerodynamics to the question, 'what would you like to see in order for women's career progression in your field to be sustained and better supported?'

Responses incl. career flexibility, mentoring and more women in leadership roles #WomeninSTEM
1. "I think young female engineers need to see more female role models and mentors in my field. Having a visible example of someone that looks like you and is succeeding in their field is important. Having an opportunity to meet with a mentor like that can be very powerful."
2. "I would like to see that any career promotion is based on own merits and value added to the company or the society independently of the gender. I want that women are measured with the same rules as men and are given equal opportunities."
Read 68 tweets
Profile picture
Here’s my 2018 testimony. Out of many, I’ll share this one.

#thread
In November 2017 I had an idea to produce a masterclass series that would be watched for free by all and paid for by brands that care about educating and enriching people’s lives. I didn’t know any brand that wanted to come on, I wasn’t even looking.
I just knew that if I concentrated on doing a world standard job, the work would speak for itself.

Listen, that was a bit Naive.

January 2018, I went on a limb and bought equipment for shoot: Cameras, lights, etc. I was ready but only two instructors had agreed to do it.
Read 17 tweets
Profile picture
#Thread #JNU #MeToo: ICC just made sure no woman will ever find the courage to report a sexual violation to them. They said the complaint "was frivolous" and hence not proven conclusively. The story doesn't clarify whether "malicious intent" was proven. indianexpress.com/article/india/…
#JNU #sexualharassment #MeToo: In that case, here's what the POSH Act states. Malicious intent has not been proven. And the mere inability to prove the case doe NOT merit punishment as harsh as being recommended by JNU ICC.
So what are the punishment suggested? For starters she's being treated like a common criminal. Please remember this is a student we are talking about.
Read 7 tweets
Profile picture
THREAD: @StarVancouver is reporting live from Wanzhou Meng’s bail hearing in B.C. Supreme Court. The #Huawei CFO was arrested in Vancouver Saturday. This story will be updated all day. thestar.com/vancouver/2018… Follow: @Mui24hours @jwints @Nuttallreports #MengWanzhou #Huaweiarrest
Dozens of journalists including many international media are waiting to enter Court 20 for #MengWanzhou bail hearing #Huaweiarrest #Huawei at B.C. Supreme Court.
Lawyer Richard Kurland tells us: It’ll be up to Meng and her legal team to prove she is not likely to flee Canada if she gets bail. Meng is being sought by the U.S. Attorney’s Eastern District of New York office (Brooklyn) to face unspecified charges. thestar.com/vancouver/2018…
Read 76 tweets
Profile picture
🚫HateSpeakBegetsViolence🚫

USA reality: a country saturated with guns & habituated to quotidian massacre, plagued by age-old racism & bigotry, which have lately been expertly inflamed & incited by the POTUS

There Is Still So Much Evil’: Growing Anti-Semitism Stuns Americans
🚫HateSpeakKills🚫

The violence that took place the Shabbat morning at the Tree of Life congregation in Pittsburgh is the fear of every synagogue, Hillel, day school & Jewish community center in this country. It is the ancient Jewish expectation of persecution—this IS Terrorism
🚫HateSpeakKills3🚫

When Rabbi Miller learned of the Squirrel Hill massacre, he ordered the doors of his synagogue locked.

Despite his congregants’ terror that they would be next, they recited the mi sheberach.

They prayed for the healing of others rather than themselves.
Read 83 tweets
Profile picture
#Khashoggi Case Thread: I am going to ‘pin’ this post to use it as an ‘Info Thread’ on the #Khashoggi Case. I am in #Turkey. I’ve been following the case closely and with access to sources & experts here. This is a very ‘sensitive’ criminal case due to ‘Diplomatic Booby Traps’!!!
The Evidence Obtained Outside Cameras will not show any evidence of ‘tempering’ but other than license plates of dozens of diplomatic cars (Many with tinted windows-large trunks) with related time stamp, drivers Info, model/year: Nothing.
#Turkish Intel-Investigative Bodies also have the list of all Diplomatic & Private Saudi & “other significant’ Planes in #Turkey for the period of ‘interest.’ Many of the Target airports have their own security cameras & related evidence.
Read 335 tweets

Trending hashtags

#Etoile #dépenses #BuildingBridges #MBS #FalseFlag #Germany #Media #Gulen #Saudi #GoLive #China #RightTime #Magabomber #Champs #BAC #Italie #TrumpLiesMatter #Saudis #fundraising #Reciprocity #science #BinLaden #Hindutva #Kuwait #EIC2MNC

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member and get exclusive features!

Premium member ($30.00/year)

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!