RT @r0h1n: F-Secure proves new Xiaomi phones upload your contacts/SMSes to its own servers sans permissions: http://www.f-secure.com/weblog... via @daamitt