前情提要 /t/1016375
倒腾光猫 Telnet 时,发现虽然默认账户一大堆文件没权限写,但是少部分目录是给了读取权限的,比如光猫 saf 的插件目录 /opt/upt/apps
快速遍历了一下这个目录,发现有个 json 文件,用 cat
命令看了看,发现里面有连到过光猫的所有设备名和 MAC
上网查了下,这个插件貌似和小翼助手有关,猜测是光猫会上报所有连到光猫的 MAC 地址给小翼助手的服务器,然后服务器根据 MAC 地址得到设备类型和设备 ID
感觉这么做有点过度收集用户隐私了,准备单独买个非运营商的公版猫了
文件路径是 /opt/upt/apps/apps/opt/preinstall/b01odmv3/data/conf_init.json
,下面是内容,隐私已经处理
[{
"action": "write",
"subtype": "appuse",
"policies": {},
"addr": "message.189cube.com:9890"
}, {
"action": "write",
"subtype": "appctrl",
"policies": {},
"addr": "message.189cube.com:9890"
}, {
"subtype": "osinfo",
"period": 0,
"action": "write",
"pdev_conf": {
"devices": [{
"osid": 40105,
"mac": "XX:XX:XX:XX:XX:XX",
"desc": {
"id": 40105,
"devtype": 1,
"elinktype": 0,
"groupid": 1,
"model": "三星 Galaxy S",
"brand": "三星",
"ostype": 1
}
}, {
"osid": 13444,
"mac": "XX:XX:XX:XX:XX:XX",
"desc": {
"id": 13444,
"devtype": 1,
"elinktype": 0,
"groupid": 4,
"model": "华为 P40",
"brand": "华为",
"ostype": 1
}
}, {
"osid": 45000,
"mac": "XX:XX:XX:XX:XX:XX",
"desc": {
"id": 45000,
"devtype": 1,
"elinktype": 0,
"groupid": 12,
"model": "vivo Y3",
"brand": "vivo",
"ostype": 1
}
}, {
"osid": 65507,
"mac": "XX:XX:XX:XX:XX:XX",
"desc": {
"id": 65507,
"devtype": 7,
"elinktype": 0,
"groupid": 352,
"model": "电脑",
"brand": "其它",
"ostype": 3
}
}, {
"desc": {
"os": "",
"elinktype": 1,
"dev_type": "elink",
"model": "PSDN-TC30",
"brand": "HUAWEI",
"devtypeint": 5
},
"mac": "XX:XX:XX:XX:XX:XX"
}, {
"osid": 42054,
"mac": "XX:XX:XX:XX:XX:XX",
"desc": {
"id": 42054,
"devtype": 5,
"elinktype": 0,
"groupid": 7,
"model": "新路由路由器",
"brand": "联想",
"ostype": 4
}
}, {
"osid": 40000,
"mac": "XX:XX:XX:XX:XX:XX",
"desc": {
"id": 40000,
"devtype": 0,
"elinktype": 0,
"groupid": 352,
"model": "安卓设备",
"brand": "其它",
"ostype": 1
}
}]
},
"type": "lua_cmd"
}, {
"action_type": "0xff12",
"subtype": "appmlp",
"action": "write",
"policies": {},
"addr": "message.189cube.com:9890"
}, {
"period": 1800,
"type": "__svr_data",
"seed": "1702450915619",
"addr": ["b01-data-reported.189cube.com:7890"]
}, {
"max_asterisk": 128,
"type": "__http_rule",
"max_simple": 10240,
"seed": ""
}, {
"type": "sys",
"sw_def_enabled": true,
"action": "write"
}, {
"type": "sigcollect",
"action": "write",
"send_brshowerr": false
}, {
"subtype": "postmsg",
"write": {},
"action": "write"
}, {
"subtype": "pktpolicy",
"policies": {},
"action": "write"
}]
这是一个专为移动设备优化的页面(即为了让你能够在 Google 搜索结果里秒开这个页面),如果你希望参与 V2EX 社区的讨论,你可以继续到 V2EX 上打开本讨论主题的完整版本。
V2EX 是创意工作者们的社区,是一个分享自己正在做的有趣事物、交流想法,可以遇见新朋友甚至新机会的地方。
V2EX is a community of developers, designers and creative people.