3 15 exposure krypton technology SDK plug-in How did krypton respond?

Krypton Technology issued a statement saying that CCTV's 3. 15 party attached great importance to the risk that mobile apps may retain users' privacy due to the use of SDK technology, and an investigation team has been set up to investigate the impact of this issue. SDK technology is a common technology on the Internet, but after the internal evaluation of Krypton technology, we think that this technology is at risk of being abused. So krypton technology has completely stopped using this technology before the end of 20 19. As a high-tech service company based on artificial intelligence technology, we have always resolutely adopted the highest standards to ensure the safety of customers and users, and never intentionally kept users' data. We will double our investment to prevent unknown risks that may exist in new technologies. Welcome and thank the regulators, the media and the public for their supervision.

Although Krypton said that SDK technology has been disabled, it does not rule out that customers who used SDK before are still using it. Krypton mainly provides artificial intelligence related technologies for financial customers, including ICBC, China Construction Bank, Bank of Communications, China Merchants Bank and Shanghai Pudong Development Bank. , mainly in the fields of risk control, marketing and customer service.

The inspector said: It will read the IMEI, IMSI, operator information, phone number, SMS record, address book, application installation list and sensor information of this device. And collect the user's contact information, SMS, location, equipment information and so on. ? The SDK in these apps is only the first step to read user privacy information. After reading, the data will be quietly transferred to the designated server for storage. ? Testers said that because SDK can collect users' short messages and application installation information, once users have the verification code of online transactions, it is very likely to cause serious economic losses. Both plug-ins secretly steal users' privacy without their knowledge, involving IMEI, IMSI, operator information, phone number, SMS record, address book, application installation list, sensor information and so on. After obtaining the user's private information, these SDKs will quietly transfer the data to the designated server for storage. The SDK of Beijing Cai Zhao Want Want Information Technology Co., Ltd. is even suspected of stealing more private information from users through recipes, parents' help, dynamic wallpaper and other software.