CarrierIQ: Should you care?

Viruses, hackers and crackers
Post Reply
Anakha56
Forum Administrator
Posts: 22136
Joined: 14 Jun 2004, 02:00
Processor: Ryzen 1700K
Motherboard: Asus X370
Graphics card: Asus 1060 Strix
Memory: 16GB RAM
Location: Where Google says

CarrierIQ: Should you care?

Post by Anakha56 »

Right so a new controversy has popped up all over the Interwebs and I have been following this very closely purely because I find this sort of thing interesting. So lets go get some background reading for everyone...

http://www.engadget.com/2011/12/01/carr ... u-need-to/
Carrier IQ: What it is, what it isn't, and what you need to know

Carrier IQ has recently found itself swimming in controversy. The analytics company and its eponymous software have come under fire from security researchers, privacy advocates and legal critics not only for the data it gathers, but also for its lack of transparency regarding the use of said information. Carrier IQ claims its software is installed on over 140 million devices with partners including Sprint, HTC and allegedly, Apple and Samsung. Nokia, RIM and Verizon Wireless have been alleged as partners, too, although each company denies such claims. Ostensibly, the software's meant to improve the customer experience, though in nearly every case, Carrier IQ users are unaware of the software's existence, as it runs hidden in the background and doesn't require authorized consent to function. From a permissions standpoint -- with respect to Android -- the software is capable of logging user keystrokes, recording telephone calls, storing text messages, tracking location and more. It is often difficult or impossible to disable.

How Carrier IQ uses your behavior data remains unclear, and its lack of transparency brings us to where we are today. Like you, we want to know more. We'll certainly continue to pursue this story, but until further developments are uncovered, here's what you need to know.

What is Carrier IQ, anyway?

...
Follow the link for further reading. If you want even more reading below is a host of links from xda:

http://www.xda-developers.com/android/t ... -evil-ciq/
http://www.xda-developers.com/android/m ... arrier-iq/
http://www.xda-developers.com/android/c ... ues-treve/
http://www.xda-developers.com/android/t ... about-ciq/

In summary this software is installed onto your phone and see's everything. The developer Treve finds this, exposes it and promptly gets a cease and desist letter from CIQ. The EFF comes to Trev's aid and CIQ drop the case but the damage is done. On the Engadget link there is a 17 minute video showing just how in depth this software goes, it can even read what you are doing over a https web link on your Wifi while your phone is in airplane mode. While HTC & others claim that the software is benign and not collecting any data the mere fact that it is reading your https searches silently is very alarming. Thankfully the same Engadget link has information on removing this root-kit however you must be rooted.

So, for those who bothered to read it all, who is concerned? who has phones that are infected? I know my phone does not have CIQ software but I am concerned that software like this could easily find its way onto any phone without my knowledge.

/makes a tin foil hat...

#CIQ
JUSTICE, n A commodity which is a more or less adulterated condition the State sells to the citizen as a reward for his allegiance, taxes and personal service.
Anakha56
Forum Administrator
Posts: 22136
Joined: 14 Jun 2004, 02:00
Processor: Ryzen 1700K
Motherboard: Asus X370
Graphics card: Asus 1060 Strix
Memory: 16GB RAM
Location: Where Google says

Re: CarrierIQ: Should you care?

Post by Anakha56 »

http://www.engadget.com/update/carrier- ... he-smarts/

Responses by companies about CarrierIQ.
JUSTICE, n A commodity which is a more or less adulterated condition the State sells to the citizen as a reward for his allegiance, taxes and personal service.
Anakha56
Forum Administrator
Posts: 22136
Joined: 14 Jun 2004, 02:00
Processor: Ryzen 1700K
Motherboard: Asus X370
Graphics card: Asus 1060 Strix
Memory: 16GB RAM
Location: Where Google says

Re: CarrierIQ: Should you care?

Post by Anakha56 »

Nearly all our service providers dont know of CarrierIQ:

http://mybroadband.co.za/news/cellular/ ... tware.html

MTN & CellC have not yet responded...
JUSTICE, n A commodity which is a more or less adulterated condition the State sells to the citizen as a reward for his allegiance, taxes and personal service.
DeathStrike
Registered User
Posts: 2663
Joined: 29 Jul 2004, 02:00
Location: hidden deep in the depths of the underworld is my home.
Contact:

Re: CarrierIQ: Should you care?

Post by DeathStrike »

No i don't care... i have rooted my phone and installed cyanogenmod 7.

even if i get a new phone i will root and convert it. i had the experience with stock roms and the bad update times.

on the other hand i let google track me all the time... doesn't bother me at all.
Spoiler: (show)
Image
SIG by HMAN 8)
Member of The Pride Of Darkness
DeathStrike on Twitter
About me
Spoiler: (show)
Asus P5KPL-CM motherboard, 4 GIG RAM, Q6600 @ 2.88GHz (Thanks Anthro), GeForce 8600GT, Samsung 2333 23" + CRT 17" Monitors. 500GB + 1.5TB HDD, Compro TV tuner, 350 WATT PSU
Anakha56
Forum Administrator
Posts: 22136
Joined: 14 Jun 2004, 02:00
Processor: Ryzen 1700K
Motherboard: Asus X370
Graphics card: Asus 1060 Strix
Memory: 16GB RAM
Location: Where Google says

Re: CarrierIQ: Should you care?

Post by Anakha56 »

DeathStrike wrote: on the other hand i let google track me all the time... doesn't bother me at all.
Does it bother you that you could be doing online banking through a HTTPS page and all your data is being sent ou your phone in plain text? Location is one thing but intercepting what is meant to be secure browsing and transmitting the data in plain text is friggin scary...
JUSTICE, n A commodity which is a more or less adulterated condition the State sells to the citizen as a reward for his allegiance, taxes and personal service.
KALSTER
Forum Moderator
Posts: 5439
Joined: 12 Oct 2008, 02:08

Re: CarrierIQ: Should you care?

Post by KALSTER »

Symbian FTW!
"It is the mark of an educated mind to be able to entertain a thought without accepting it." - Aristotle
Intel i5 2500; AsRock Z77 Extreme 4; Asus GTX580; 4x 2GB DDR3 1333; Intel 520 240GB SSD + 2x WD 3TB + 2TB Samsung; Samsung 22X DVD/RW; 23" LG W2343T-PF; Huntkey 700W
User avatar
Tribble
Registered User
Posts: 88465
Joined: 08 Feb 2007, 02:00
Processor: Intel Core i7-4770K CPU@3.50GHz
Motherboard: ACPI x64-based PC
Graphics card: GeForce GTX 780 Ti
Memory: 16GB
Location: Not here
Contact:

Re: CarrierIQ: Should you care?

Post by Tribble »

I still have not rooted my phone - I am too darn scared I will "mess" it up.

Tell me - so they read our texts and see what http sites we visit. I am nobody - who would actually care what I did on my phone?! I agree that if I was a terrorist or someone important, then it might concern me. But for now - it would just be useless data they would have to sift through.
Image
Post Reply