CarrierIQ: Should you care?
Posted: 01 Dec 2011, 23:24
Right so a new controversy has popped up all over the Interwebs and I have been following this very closely purely because I find this sort of thing interesting. So lets go get some background reading for everyone...
http://www.engadget.com/2011/12/01/carr ... u-need-to/
http://www.xda-developers.com/android/t ... -evil-ciq/
http://www.xda-developers.com/android/m ... arrier-iq/
http://www.xda-developers.com/android/c ... ues-treve/
http://www.xda-developers.com/android/t ... about-ciq/
In summary this software is installed onto your phone and see's everything. The developer Treve finds this, exposes it and promptly gets a cease and desist letter from CIQ. The EFF comes to Trev's aid and CIQ drop the case but the damage is done. On the Engadget link there is a 17 minute video showing just how in depth this software goes, it can even read what you are doing over a https web link on your Wifi while your phone is in airplane mode. While HTC & others claim that the software is benign and not collecting any data the mere fact that it is reading your https searches silently is very alarming. Thankfully the same Engadget link has information on removing this root-kit however you must be rooted.
So, for those who bothered to read it all, who is concerned? who has phones that are infected? I know my phone does not have CIQ software but I am concerned that software like this could easily find its way onto any phone without my knowledge.
/makes a tin foil hat...
#CIQ
http://www.engadget.com/2011/12/01/carr ... u-need-to/
Follow the link for further reading. If you want even more reading below is a host of links from xda:Carrier IQ: What it is, what it isn't, and what you need to know
Carrier IQ has recently found itself swimming in controversy. The analytics company and its eponymous software have come under fire from security researchers, privacy advocates and legal critics not only for the data it gathers, but also for its lack of transparency regarding the use of said information. Carrier IQ claims its software is installed on over 140 million devices with partners including Sprint, HTC and allegedly, Apple and Samsung. Nokia, RIM and Verizon Wireless have been alleged as partners, too, although each company denies such claims. Ostensibly, the software's meant to improve the customer experience, though in nearly every case, Carrier IQ users are unaware of the software's existence, as it runs hidden in the background and doesn't require authorized consent to function. From a permissions standpoint -- with respect to Android -- the software is capable of logging user keystrokes, recording telephone calls, storing text messages, tracking location and more. It is often difficult or impossible to disable.
How Carrier IQ uses your behavior data remains unclear, and its lack of transparency brings us to where we are today. Like you, we want to know more. We'll certainly continue to pursue this story, but until further developments are uncovered, here's what you need to know.
What is Carrier IQ, anyway?
...
http://www.xda-developers.com/android/t ... -evil-ciq/
http://www.xda-developers.com/android/m ... arrier-iq/
http://www.xda-developers.com/android/c ... ues-treve/
http://www.xda-developers.com/android/t ... about-ciq/
In summary this software is installed onto your phone and see's everything. The developer Treve finds this, exposes it and promptly gets a cease and desist letter from CIQ. The EFF comes to Trev's aid and CIQ drop the case but the damage is done. On the Engadget link there is a 17 minute video showing just how in depth this software goes, it can even read what you are doing over a https web link on your Wifi while your phone is in airplane mode. While HTC & others claim that the software is benign and not collecting any data the mere fact that it is reading your https searches silently is very alarming. Thankfully the same Engadget link has information on removing this root-kit however you must be rooted.
So, for those who bothered to read it all, who is concerned? who has phones that are infected? I know my phone does not have CIQ software but I am concerned that software like this could easily find its way onto any phone without my knowledge.
/makes a tin foil hat...
#CIQ