huawei-block-list

• huawei-block-list
  • Statement
  • Explanation for An Existing of beian.gov.cn
  • Timeline
  • Description
  • Setup Blocking
    • Setup Blocking with Algo VPN
    • Setup Blocking with OpenDNS
  • Details
    • Version of ROM
    • Pre-installed Appllications
    • Configuration of Huawei-related Applications
    • Network Configuration
    • Usage Behaviors

Statement

As a solely maintainer for this project, please accept my deepest apologies for mistakes which cause misunderstadning for Huawei brand and customers. The fact that Huawei P30 Pro initated connections to beian.gov.cn is not true.

I still maintain this project for my own benefits. Please use it at your own risk. Please see more info in next section, on an anaylsis of beian.gov.cn

Explanation for An Existing of beian.gov.cn

Please see my statement above

Due to my responsibility for this hobby research to prevent distributing misleading or misunderstanding information, and suggestions made by other researchers to discover more findings or correct me if I did something wrong. As an intention for this research I told everyone in Thai, we couldn't and shouldn't make a conclusion in this moment until we can see everything clearly.

The requests to beian.gov.cn were happened during testing, originate from baidu.com. Please see this analysis report for more info

I got a very useful information from @Sraw about beian.gov.cn, please see on issue #3.

Timeline

• April 22, 2019: Received a message from Huawei Thailand for supporting. They will try to coordinate with Huawei HQ.
• April 23, 2019:
  • Sent more information about an analysis of www.beian.gov.cn to Huawei Thailand
  • Updated code and lists to support whitelist domain names and exclude false positive domain names
  • Updated posts to 2600 Thailand, /r/netsec on the thread and other media
  • Huawei Thailand ackownledged new update on false positive
  • Apology statements both in Thai and English have been distributed

Description

Domain names on master.txt are captured DNS requests from Huawei P30 Pro purchased in Thailand. All domains located in China and/or has an IP address within China's ASN. The device hasn't configured with Huawei services, including Huawei ID or any Hi services.

Please note that:

• The block list may includes test domain names, baidu.com and qq.com.
• By relying on techniques in update.py to verify location domain names. Some domain names such as tencent-cloud.net and hwcdn.net are not flagged. I will find a way to fix this issue later.

Setup Blocking

Setup Blocking with Algo VPN

1. Setup Algo VPN and enable adblocking feature on both server and client-side
2. Update /usr/local/sbin/adblock.sh to include the raw version of block list. The block list should be appended to BLOCKLIST_URLS variable.

awk '{gsub(/"$/,"https://raw.githubusercontent.com/pe3zx/huawei-block-list/master/master.txt \"")}' /usr/local/sbin/adblock.sh

3. Execute /usr/local/sbin/adblock.sh to apply new block list to dnsmasq. The script will be automatically executed by cron to pull and apply any updates.

sh /usr/local/sbin/adblock.sh

Setup Blocking with OpenDNS

If you don't have your own server or don't want to mess with configuration stuff, you can get a free OpenDNS account which you can create up to 25 domains to block. However, OpenDNS doesn't support leading dot domain like .cn. I recommend to add each domain which has only ccTLD, and add something like gov.cn or com.cn to make you life easier.

Details

Version of ROM

• Android 9
• EMUI 9.1.0 (Build number 9.1.0.124)
• Vendor country info
  • Vendor: HW
  • Country: spcseas

Pre-installed Appllications

There are consumer applications already installed on the device, including Uber, Facebook and SwiftKey, but I can't remember all of it. System-related and utilities are listing below, except com.android.* and com.google.*.

• com.hicloud.android.clone
• com.hisi.mapcon
• com.huawei.HwMultiScreenShot
• com.huawei.KoBackup
• com.huawei.android.FloatTasks
• com.huawei.android.chr
• com.huawei.android.dsdscardmanager
• com.huawei.android.hsf
• com.huawei.android.hwaps
• com.huawei.android.hwouc
• com.huawei.android.instantonline
• com.huawei.android.instantshare
• com.huawei.android.internal.app
• com.huawei.android.karaoke
• com.huawei.android.launcher
• com.huawei.android.mirrorshare
• com.huawei.android.projectmenu
• com.huawei.android.pushagent
• com.huawei.android.remotecontroller
• com.huawei.android.thememanager
• com.huawei.android.wfdft
• com.huawei.androidx
• com.huawei.aod
• com.huawei.appmarket
• com.huawei.arengine.service
• com.huawei.autoinstallapkfrommcc
• com.huawei.bd
• com.huawei.bluetooth
• com.huawei.browser
• com.huawei.camera
• com.huawei.contacts.sync
• com.huawei.contactscamcard
• com.huawei.desktop.explorer
• com.huawei.desktop.systemui
• com.huawei.featurelayer.featureframework
• com.huawei.featurelayer.sharedfeature.map
• com.huawei.fido.uafclient
• com.huawei.gameassistant
• com.huawei.hiaction
• com.huawei.hiai
• com.huawei.hicard
• com.huawei.hidisk
• com.huawei.hifolder
• com.huawei.himovie.overseas
• com.huawei.hitouch
• com.huawei.hiview
• com.huawei.hiviewtunnel
• com.huawei.hwasm
• com.huawei.hwdetectrepair
• com.huawei.hwid
• com.huawei.hwstartupguide
• com.huawei.iaware
• com.huawei.iconnect
• com.huawei.imedia.dolby
• com.huawei.ims
• com.huawei.intelligent
• com.huawei.languagedownloader
• com.huawei.lbs
• com.huawei.livewallpaper.paradise
• com.huawei.mmitest
• com.huawei.motionservice
• com.huawei.msdp
• com.huawei.nb.service
• com.huawei.nearby
• com.huawei.numberidentity
• com.huawei.omacp
• com.huawei.parentcontrol
• com.huawei.pcassistant
• com.huawei.phoneservice
• com.huawei.powergenie
• com.huawei.printservice
• com.huawei.recsys
• com.huawei.scanner
• com.huawei.screenrecorder
• com.huawei.search
• com.huawei.securitymgr
• com.huawei.synergy
• com.huawei.systemmanager
• com.huawei.systemserver
• com.huawei.tips
• com.huawei.tmecustomize
• com.huawei.trustagent
• com.huawei.vassistant
• com.huawei.videoeditor
• com.huawei.wifieapsimplmn
• com.huawei.wifiprobqeservice
• com.ironsource.appcloud.oobe.huawei
• com.qeexo.smartshot
• com.swiftkey.swiftkeyconfigurator
• com.touchtype.swiftkey

Configuration of Huawei-related Applications

The following list are "Do not accept to share information" applications. These applications still showing a privacy notice to me or still need my permission to access system components:

• AppGallery
• AppAssistant
• HUAWEI Themes
• HUAWEI Browser
• HiCare
• Recorder
• Backup
• PhoneClone

The following features are disabled:

• Huawei Share
• HiTouch

Network Configuration

Cellular network from one of top three mobile operators in Thailand. Always connecting to personal VPN deployed on Amazon EC2 instance in Asia Pacific region. The VPN I used is Algo from trailofbits with a local DNS server (dnsmasq), connect via WireGuard.

Usage Behaviors

Mostly like every normal users do. Brought back to Songkran Festival to try one of the best camera phones in the world. Listening to Blackpink's new album. Reading articles. Tweeting.