華為 P30 PRO 傳與中國政府網站連線？ - 手機討論

後續原討論者在 github 的更新：
https://github.com/pe3zx/huawei-block-list

reddit 在 1 小時前發了後續文：
www.reddit.com/r/netsec/comments/bgeevn/analysis_of_false_positive_on_beiangovcn_requests/
縮：http://bit.ly/2KVMcY7

文章報導：
onties.com/thailand/against-the-huawei-p30-pro-without-link-to-china-the-point-is-a-misunderstanding-in-testing/
縮：https://onties.com/?p=370969

看來華為泰國跟就他很快聯繫。


以下是 github 的部份內容

Statement

As a solely maintainer for this project, please accept my deepest apologies for mistakes which cause misunderstadning for Huawei brand and customers. The fact that Huawei P30 Pro initated connections to beian.gov.cn is not true.

I still maintain this project for my own benefits. Please use it at your own risk. Please see more info in next section, on an anaylsis of beian.gov.cn

Explanation for An Existing of beian.gov.cn

Please see my statement above

Due to my responsibility for this hobby research to prevent distributing misleading or misunderstanding information, and suggestions made by other researchers to discover more findings or correct me if I did something wrong. As an intention for this research I told everyone in Thai, we couldn't and shouldn't make a conclusion in this moment until we can see everything clearly.

The requests to beian.gov.cn were happened during testing, originate from baidu.com. Please see this analysis report for more info

Timeline

April 22, 2019: Received a message from Huawei Thailand for supporting. They will try to coordinate with Huawei HQ.
April 23, 2019:
Sent more information about an analysis of www.beian.gov.cn to Huawei Thailand
Updated code and lists to support whitelist domain names and exclude false positive domain names
Updated posts to 2600 Thailand, /r/netsec on the thread and other media
Huawei Thailand ackownledged new update on false positive

Description

Domain names on master.txt are captured DNS requests from Huawei P30 Pro purchased in Thailand. All domains located in China and/or has an IP address within China's ASN. The device hasn't configured with Huawei services, including Huawei ID or any Hi services.

Please note that:

The block list may includes test domain names, baidu.com and qq.com.
By relying on techniques in update.py to verify location domain names. Some domain names such as tencent-cloud.net and hwcdn.net are not flagged. I will find a way to fix this issue later.

--