Though the license file in this package's GitHub repository states
copyright by Foxconn, the binary's help section indicates copyright by a
Fanice Luo. Additionally, "foxconn-pc" owns no repositories except
"fii_linux" and has a completely blank GitHub profile picture. There
doesn't seem to be anything linking this GitHub organisation, or the
committers Slark Xiao and Fanice Luo (both of whom have @163.com email
addresses) to Foxconn the company, which is concerning.

I may just be being pedantic, but I feel like this warrants further
investigation, given there is clear intentional obfuscation in parts of
the code (the .dat files are xor-encrypted). I couldn't find any
malicious code on a cursory inspection, but I'm also not well-versed in
disassembly. medicalwei, can you vouch for the authenticity of these
binaries?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2085203

Title:
  [needs-packaging] foxconn-pc-services: Support for Foxconn WWAN
  modules

To manage notifications about this bug go to:
https://bugs.launchpad.net/oem-priority/+bug/2085203/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to