The National Communications Commission (NCC) is planning to establish a certification system for mobile phone security following reports that Chinese smartphone vendor Xiaomi automatically sends personal information to its servers in Bejing without first securing the consent of users.
A story published in a blog post of Finnish security company F-Secure Corp indicated that Xiaomi smatphones’ built-in text-messaging application, MIUI, can send users’ information to the company’s servers in Beijing without their approval.
Because of the loophole, the report said that the Chinese vendor can access users’ mobile phone number, the international mobile equipment identity (IMEI) code as well as the SIM card number.
The international mobile subscriber identity code would be exposed too if the user signs on to Xiaomi’s cloud service, the report said.
Similar to Apple Inc’s iMessage service, MIUI allows users to send text messages through the Internet rather than through telecoms’ networks.
The story was subsequently picked up by Taiwanese media outlets, with Xiaomi users in Taiwan reportedly topping 400,000. The Beijing-based smartphone vendor first denied the reports, but later apologized for the unauthorized data collection.
It added that the messaging system would only be activated on an “opt-in” basis and personal information would be encrypted and would not be stored on its servers.
The commission said it told the Chinese company to inspect all types of phones — not only the two mentioned in the F-Secure blog — that it sells in Taiwan and determine if they have the same issue.
“We have notified them that they should provide a written explanation of how they plan to address the issue,” said Lo Chin-hsien (羅金賢), director of the commission’s Resources and Technologies Department. “We will ask them to come in and answer questions if necessary.”
The commission is to meet with other mobile phone manufacturers soon to discuss how they address information security issues, Lo said.
He added that the Executive Yuan has determined that the applications built into mobile phones will be tested by the commission, while applications downloaded via mobile phones will be supervised by the Industrial Development Bureau.
While the commission has a certification system for mobile phone interfaces, batteries and other specifications, it does not have one yet for information security.
It is aiming to establish an information security mechanism by the end of next year, he said.
“Currently, there is no country in the world that demands that mobile phone manufacturers have national certifications for information security. We can only encourage mobile phone manufacturers to take such certification when it becomes available,” he said.
Lo said the mechanism would not only target mobile phones produced in China, but it would apply to other manufacturers as well.
The Executive Yuan yesterday approved a southwestern extension of the Sanying MRT Line from New Taipei to Bade District (八德) in Taoyuan, with a goal of starting construction by late 2026. The 4.03-kilometer extension, featuring three new stations, will run from the current terminus at Yingtao Fude Station (LB12) in New Taipei City to Dannan Station (LB14), where it will connect with Taoyuan’s Green Line, New Taipei City Metro Corp said in a statement. This extension will follow the completion of core Sanying Line, a 14.29-kilometer medium-capacity system linking Tucheng (土城), Sansia (三峽)
CARGO LOSS: About 50 containers at the stern of the ‘Ever Lunar’ cargo ship went overboard, prompting the temporary closure of the port and disrupting operations Evergreen Marine Corp, Taiwan’s largest container shipper, yesterday said that all crew members aboard the Ever Lunar (長月) were safe after dozens of containers fell overboard off the coast of Peru the previous day. The incident occurred at 9:40am on Friday as the Ever Lunar was anchored and waiting to enter the Port of Callao when it suddenly experienced severe rolling, Evergreen said in a statement. The rolling, which caused the containers to fall, might have been caused by factors including a tsunami triggered by an earthquake in Russia, poor winter sea conditions in South America or a sudden influx of waves,
The Ministry of Culture yesterday officially launched the “We TAIWAN” cultural program on Osaka’s Nakanoshima sandbank, with the program’s mascot receiving overwhelming popularity. The cultural program, which runs from Aug. 2 to 20, was designed to partner with and capitalize on the 2025 World Expo that is being held in Osaka, Japan, from April 13 to Oct. 13, the ministry said. On the first day of the cultural program, its mascot, a green creature named “a-We,” proved to be extremely popular, as its merch was immediately in high demand. Long lines formed yesterday for the opening
The Taipei Summer Festival is to begin tomorrow at Dadaocheng Wharf (大稻埕), featuring four themed firework shows and five live music performances throughout the month, the Taipei Department of Information and Tourism said today. The festival in the city’s Datong District (大同) is to run until Aug. 30, holding firework displays on Wednesdays and the final Saturday of the event. The first show is scheduled for tomorrow, followed by Aug. 13, 20 and 30. To celebrate the 30th anniversary of Disney Pixar's movie Toy Story, the festival has partnered with Walt Disney Co (Taiwan) to host a special themed area on