[Crypto-chi] Anyone use Baidu browser? Don't!

[joe fuentes]

hello all
Baidu browser, from China Inc. Well actually Peoples Republic of China. It is said to be full of security holes and encryption problems that it's not be trusted.  Sensitive information such as IMEI (for Android version) or MAC address and HD serial number is sent back to China either unencrypted or poorly encrypted.  Is that by design or sloppiness? You can decide. Since this group's focus is cryptography and keeping things secure I thought you might find it interesting.  If anything it's a good primer on some basic encryption techniques. 
I know I had Baidu on one of my phones but that phone right now is taking a breather, acting as a spare. 
>From our like minded folks at Monk School of Global Affairs at the U of Toronto, see here: https://citizenlab.org/2016/02/privacy-security-issues-baidu-browser/
fyi. Thoughts anyone? 
-Joe
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://groups.sshchicago.org/pipermail/cryptoparty-chi/attachments/20160223/6559d496/attachment.html>