They probably roll their own. On Wed, Nov 30, 2011 at 7:02 PM, David <[email protected]> wrote:
> Found a source saying that Verizon phones do not. Hope they're right, > 'cuz I sure can't find it (Goodthing™). > > > > > On Wed, Nov 30, 2011 at 3:46 PM, Steven Peck <[email protected]> wrote: > >> Evidently it can hide itself. >> >> >> http://androidsecuritytest.com/features/logs-and-services/loggers/carrieriq/ >> ironic link as the source link is busted >> >> http://webcache.googleusercontent.com/search?q=cache:GIxQjEZuxRwJ:androidsecuritytest.com/features/logs-and-services/loggers/carrieriq/+&cd=1&hl=en&ct=clnk&gl=us >> >> At the present times there does not appear to be an equivelent on Windows >> Phone 7 and I suspect the iPhone (but do not know for sure) due to the >> control both Apple and Microsoft exercise over their platforms. >> >> http://www.wpcentral.com/software-recording-data-keystrokes-millions-smartphones-windows-phone-exempt >> >> Steven Peck >> http://www.blkmtn.org >> >> >> >> On Wed, Nov 30, 2011 at 2:22 PM, David <[email protected]> wrote: >> >>> Running a Verizon Droid X, I can't find any trace of CarrierIQ -- and >>> this is the 2nd time I've searched for it. Good news, I reckon...But I >>> agree with your assessment. What can be misused, assuredly will be. >>> >>> David >>> >>> >>> >>> On Wed, Nov 30, 2011 at 2:14 PM, Stu Sjouwerman < >>> [email protected]> wrote: >>> >>>> Google, What Happened To 'Do No Evil'? >>>> >>>> Google: #FAIL! There is a process installed on most recent Android >>>> phones >>>> called Carrier IQ. You cannot stop this process. It looks at what is >>>> happening on the phone and sends every button you press to the IQ app. >>>> From there, the data — including the content of text messages — is sent >>>> to Carrier IQ’s servers, in secret. I checked it out on my own HTC >>>> Android phone from Sprint and sure enough, it's there. >>>> >>>> It cannot be turned off without rooting the phone and then replacing the >>>> whole OS. Moreover, even if you stop paying for service from your >>>> carrier and just use Wi-Fi, your phone still reports to Carrier IQ. >>>> Dang! >>>> >>>> Worse, if you use Google search, and type in a search term, this is >>>> supposed to be https, so it should be encrypted. However, the Carrier >>>> IQ software sends it over Wi-Fi in cleartext: #DOUBLEFAIL. >>>> >>>> This particular software is installed on 142 million handsets, including >>>> modern BlackBerry and Nokia phones, but no one knew about it until >>>> Android developer Trevor Eckhart analyzed how it works. >>>> >>>> The software secretly logs pretty much anything that happens on a phone, >>>> supposedly for the reason that carriers and phone manufacturers 'can do >>>> quality control'. Yeah right, maybe so, but Carrier IQ can be served >>>> with >>>> subpoenas as well, and then all traffic is right there for Big Brother >>>> to >>>> be perused. Me no like. And think about compliance for a moment !!! >>>> >>>> Wow, what a privacy and security hole, unbelievable. Here is the 17-min >>>> video where he clearly shows what is going on. Eckhart calls it a >>>> rootkit, >>>> but that is a bit much, though it clearly qualifies as a Backdoor Trojan >>>> in my book. >>>> >>>> Probably CIQ started out with the laudable idea to measure carrier and >>>> handset performance. But that is where it went off the rails in a hurry. >>>> Using code that acts like a backdoor Trojan is totally the wrong way to >>>> do that. I wonder if they heard of the Sony rootkit debacle of 2005? >>>> >>>> It's not clear yet how this went down, did Google cave to the carriers' >>>> demands to have this running without being able to stop it, to get their >>>> contracts? Did the carriers put it on there without them knowing? Why >>>> did >>>> they not scream bloody murder when they found out? Who is behind this? >>>> >>>> I would have expected more from Google, and am disappointed. See the >>>> video for yourself. Not that I have anything to hide, but I'm going >>>> to root my phone now. Video on WIRED: >>>> http://www.wired.com/threatlevel/2011/11/secret-software-logging-video/ >>>> >>>> Warm regards >>>> >>>> Stu Sjouwerman >>>> >>>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >>>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >>>> >>>> --- >>>> To manage subscriptions click here: >>>> http://lyris.sunbelt-software.com/read/my_forums/ >>>> or send an email to [email protected] >>>> with the body: unsubscribe ntsysadmin >>> >>> >>> >>> >>> -- >>> David >>> >>> _____________________ >>> * >>> * >>> *Under the heading of, "we wish"... >>> >>> *"But ambitious encroachments of the federal government, on the >>> authority of the State governments, would not excite the opposition of a >>> single State, or of a few States only. They would be signals of general >>> alarm. ... But what degree of madness could ever drive the federal >>> government to such an extremity." >>> >>> --James Madison, Federalist No. 46, 1788 >>> >>> ** >>> >>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >>> >>> --- >>> To manage subscriptions click here: >>> http://lyris.sunbelt-software.com/read/my_forums/ >>> or send an email to [email protected] >>> with the body: unsubscribe ntsysadmin >>> >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >> --- >> To manage subscriptions click here: >> http://lyris.sunbelt-software.com/read/my_forums/ >> or send an email to [email protected] >> with the body: unsubscribe ntsysadmin >> > > > > -- > David > > _____________________ > * > * > *Under the heading of, "we wish"... > > *"But ambitious encroachments of the federal government, on the authority > of the State governments, would not excite the opposition of a single > State, or of a few States only. They would be signals of general alarm. ... > But what degree of madness could ever drive the federal government to such > an extremity." > > --James Madison, Federalist No. 46, 1788 > > ** > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
