Tech Your Android (and other phones) Is Spying On You

[Echoes]

In one part of the clip, he shows how an entire SMS message--"hello world"--was recorded by Carrier IQ's software. In another example, he demonstrates how a Google search, his location, and other key information is recorded by Carrier IQ's application, even though he was on Wi-Fi and a page secured by HTTPS. "The Carrier IQ application is receiving not only HTTP strings directly from browser, but also HTTPs strings," Eckhart wrote in a blog post. "HTTPs data is the only thing protecting much of the 'secure' Internet. Queries of what you search, HTTPs plain text login strings (yuck, but yes), even exact details of objects on page are shown in the JS/CSS/GIF files above--and can be seen going into the Carrier IQ application."

"The Carrier IQ application is embedded so deeply in the device that it can't be fully removed without rebuilding the phone from source code," he says. "This is only possible for a user with advanced skills and a fully unlocked device. Even where a device is out of contract, there is no off switch to stop the application from gathering data."
Although Eckhart's data comes from Android devices, it's worth noting that Carrier IQ's software is running on over 130 million mobile devices worldwide, including those made by Nokia and Research In Motion.

http://news.cnet.com/8301-13506_3-5...ets-secretly-logging-keystrokes-sms-messages/


http://www.theatlanticwire.com/technology/2011/11/your-smartphone-spying-you/45575/


Two of many articles hitting the web today, some more technical than others. Some are saying this could be criminal wiretapping.

 

[Charles]

I don't see how it wouldn't be criminal, unless there's some "agreement" buried in fine print. Transmitting your text messages without your express approval is not cool.

 

[Echoes]

An article in Forbes mentions a discussion with a former Federal prosecutor who feels it violates Federal wiretap laws.

 

[Charles]

I just read that Carrier IQ was found on iPhones too.

http://mashable.com/2011/12/02/iphone-diagnostic-data/

 

[michie]

I don't doubt every phone does this some way or another.

 

[Vendrazi]

Every phone manufacturer and carrier needs diagnostic information.

One huge difference between CarrierIQ on the iPhone and on the HTC phones is that on the iPhone it was gathering purely diagnostic information and did NOT have access to the UI layer -- it had no access to anything typed on the phone or any data stored on it. Also, the iPhone has a setting the user controls about whether or not any diagnostic information gets sent back to Apple.

On the HTC phone, however, CarrierIQ had access to much more information (inc. anything typed on the phone or stored on it). It also stored information in plain text. While no one has found any indication that CarrierIQ transmitted anyone's information, the fact that they had access to it and stored info that other apps could get access to has lots of people concerned.

So NO, how CarrierIQ was used on various phones is NOT the same.

 

[Vendrazi]

This is the original "ZOMG WTH?" post about Carrier IQ (which seems to concentrate specifically on HTC phones).

This is a post by a hacker analyzing Carrier IQ on iOS.

And this is a post by a researcher analyzing what Carrier IQ does on a Samsung, which seems to confirm what Carrier IQ claims to do.

 

[Aslan]

Every phone manufacturer and carrier needs diagnostic information.

One huge difference between CarrierIQ on the iPhone and on the HTC phones is that on the iPhone it was gathering purely diagnostic information and did NOT have access to the UI layer -- it had no access to anything typed on the phone or any data stored on it. Also, the iPhone has a setting the user controls about whether or not any diagnostic information gets sent back to Apple.

On the HTC phone, however, CarrierIQ had access to much more information (inc. anything typed on the phone or stored on it). It also stored information in plain text. While no one has found any indication that CarrierIQ transmitted anyone's information, the fact that they had access to it and stored info that other apps could get access to has lots of people concerned.

So NO, how CarrierIQ was used on various phones is NOT the same.

Interesting. Thanks for this information.

 

[bykritstiina]

Not most reliable source, yet this show is actually the one you get information you dont get elsewhere.

Source: TheAlyonaShow

"You may be one of the 140 million mobile phone users that have the tracking software Carrier IQ on your phone that's tracking your every mobile move, without notification or permission and you can't even find that it is running on your phone, or turn it off. It's all to keep cell phone providers in the know about their costumers every move so they make business decisions and improve products. Sprint announced last week that it would be dropping carrier IQ, as did Apple. T Mobile and AT&T have yet to make such an announcement, and Verizon doesn't use it."
Video here:
http://www.youtube.com/watch?v=QytMZVGI7tI

BUT theres more (some information http://www.youtube.com/watch?v=Yirt3sxbfzI )

The worst thing is Facebook. The data it collects, uses and stores.. well.. RUN. But.. besides of everything else, who has been a FB user knows how difficult is to actually delete your account. And wait, you have to wait 1-2 weeks (dont remember anymore) for it and there is also lot more to it.

 

[Kansashalo]

Interesting info everyone.