@Verlintas: I just had Big Fat Fish scan my Xiaomi 17 Pro Max, and you won't believe what it found...
Summary
A user ran the Big Fat Fish tool on their Xiaomi 17 Pro Max and cited warnings that domestic Android phones may report their app lists, advising against using Chinese phones for circumventing the firewall or installing foreign apps.
View Cached Full Text
Cached at: 11/01/26, 03:39 AM
Just had 大肥鱼 check out my Xiaomi 17 Pro Max.
Guess what… https://t.co/WS6fviVasn
MeT (@MeTerminator666): 【I urge everyone not to use domestically-made phones for circumventing censorship, and not to install overseas apps on domestic phones.】 Some of my friends use domestic Android phones. Not long ago, they got a call from the local public security bureau asking them to uninstall X and Telegram. Since one of my friends’ Xiaomi 14 is rooted, I think the chance of DNS leakage due to a misconfigured VPN (ladder) or other reasons is unlikely, so I focused my investigation on apps on the phone that report the installed app list.
Similar Articles
@Lee_points: Please listen to some advice — I told you long ago not to use a Chinese Android phone for circumventing the firewall. Scan your phone with adb and see how it's leaking your privacy. https://github.com/Verlintas/NOIR
An introduction to the open-source tool NOIR: an Android privacy auditing tool that runs on your computer, scanning connected devices via adb for app permissions, APK network endpoints, and manifest information, then generating risk scores, data-flow correlations, and reversible remediation suggestions.
@geekbb: I always tell you not to use domestic phones, but you don't take it seriously. Now let's find out who's actually sending your location and contacts outbound. Plug in via USB, run an adb scan, and you'll get a list of domains along with rollback commands. https://github.com/Verlintas/NOIR
The NOIR tool on GitHub can scan domestic phones via adb over USB, generating a list of domains that exfiltrate data such as location and contacts, along with rollback commands, for checking a phone's privacy leaks.
@wquguru: After statically reverse-engineering Claude, I found eight major pitfalls that even 100 Mac Minis can’t save you from: 1. Putting a mainland Chinese SIM card in your phone: Sift records it, and if it doesn’t match the country of your exit IP, you’re toast 2. Clearing app data and switching to a new account: Basically useless, Sift’s installat…
Through static reverse engineering of Claude’s Android client, Mac app, and CLI, the author identifies eight major risk-control pitfalls, explaining how services such as Sift and Sentry use hardware-level device fingerprints, SIM card country information, and IP address histories to identify and restrict accounts.
@math_fournity: https://x.com/math_fournity/status/2107493047319802364
The author shares a dual-phone, dual-VPN architecture (a Pixel flashed with LineageOS + ProtonVPN + a commercial VPN relay + Cloudflare WARP) for reliably accessing AI services like Claude from within China while avoiding account bans, along with suggestions for fixing DNS pollution.
@Xiaomi: The box is open. Titan power now in your hands. Say hello to the REDMI Note 17 Pro Max 5G.
Xiaomi announces the new REDMI Note 17 Pro Max 5G smartphone, highlighting its Titan power capabilities.