It has been found on Android, iPhone, and RIM.  I dunno about Windows, but
I *really* wouldnt doubt there its on there or there is an equivalent
product.

Its pretty clear that that carriers want this functionality on smartphones.

--
Espi





On Thu, Dec 1, 2011 at 2:59 PM, Jon Harris <[email protected]> wrote:

> It seems no one has yet found it on either the iPhone or the Windows
> phones.  It has so far only been on the Android, RIM, and Nokia based
> phones that have it.  I believe the article says that both Apple and
> Microsoft retain more control (or implies they do) of the OS post sale to
> manufactures than the other vendors are.
>
> Jon
>
> On Wed, Nov 30, 2011 at 8:56 PM, Micheal Espinola Jr <
> [email protected]> wrote:
>
>> I dont see how this is a Google failure.  Its installed and tracked by
>> the carrier.  Its not inherent in any OS - its an installed component found
>> in *many* mobile devices across just about all modern platforms.
>>
>> Or am I mistaken?
>>
>> --
>> Espi
>>
>>
>>
>>
>>
>> On Wed, Nov 30, 2011 at 2:14 PM, Stu Sjouwerman <
>> [email protected]> wrote:
>>
>>> Google, What Happened To 'Do No Evil'?
>>>
>>> Google: #FAIL! There is a process installed on most recent Android phones
>>> called Carrier IQ. You cannot stop this process. It looks at what is
>>> happening on the phone and sends every button you press to the IQ app.
>>> From there, the data — including the content of text messages — is sent
>>> to Carrier IQ’s servers, in secret. I checked it out on my own HTC
>>> Android phone from Sprint and sure enough, it's there.
>>>
>>> It cannot be turned off without rooting the phone and then replacing the
>>> whole OS. Moreover, even if you stop paying for service from your
>>> carrier and just use Wi-Fi, your phone still reports to Carrier IQ. Dang!
>>>
>>> Worse, if you use Google search, and type in a search term, this is
>>> supposed to be https, so it should be encrypted. However, the Carrier
>>> IQ software sends it over Wi-Fi in cleartext: #DOUBLEFAIL.
>>>
>>> This particular software is installed on 142 million handsets, including
>>> modern BlackBerry and Nokia phones, but no one knew about it until
>>> Android developer Trevor Eckhart analyzed how it works.
>>>
>>> The software secretly logs pretty much anything that happens on a phone,
>>> supposedly for the reason that carriers and phone manufacturers 'can do
>>> quality control'. Yeah right, maybe so, but Carrier IQ can be served with
>>> subpoenas as well, and then all traffic is right there for Big Brother to
>>> be perused. Me no like. And think about compliance for a moment !!!
>>>
>>> Wow, what a privacy and security hole, unbelievable. Here is the 17-min
>>> video where he clearly shows what is going on. Eckhart calls it a
>>> rootkit,
>>> but that is a bit much, though it clearly qualifies as a Backdoor Trojan
>>> in my book.
>>>
>>> Probably CIQ started out with the laudable idea to measure carrier and
>>> handset performance. But that is where it went off the rails in a hurry.
>>> Using code that acts like a backdoor Trojan is totally the wrong way to
>>> do that. I wonder if they heard of the Sony rootkit debacle of 2005?
>>>
>>> It's not clear yet how this went down, did Google cave to the carriers'
>>> demands to have this running without being able to stop it, to get their
>>> contracts? Did the carriers put it on there without them knowing? Why did
>>> they not scream bloody murder when they found out? Who is behind this?
>>>
>>> I would have expected more from Google, and am disappointed. See the
>>> video for yourself. Not that I have anything to hide, but I'm going
>>> to root my phone now. Video on WIRED:
>>> http://www.wired.com/threatlevel/2011/11/secret-software-logging-video/
>>>
>>> Warm regards
>>>
>>> Stu Sjouwerman
>>>
>>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>>>
>>> ---
>>> To manage subscriptions click here:
>>> http://lyris.sunbelt-software.com/read/my_forums/
>>> or send an email to [email protected]
>>> with the body: unsubscribe ntsysadmin
>>>
>>
>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>>
>> ---
>> To manage subscriptions click here:
>> http://lyris.sunbelt-software.com/read/my_forums/
>> or send an email to [email protected]
>> with the body: unsubscribe ntsysadmin
>>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to [email protected]
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to