But now what I am to do with this pitchfork?! :)
On Dec 1, 2011 10:04 PM, "Kurt Buff" <[email protected]> wrote: > > -----Original Message----- > From: Declan McCullagh <[email protected]> > To: [email protected] > Cc: Dave Farber <[email protected]>, ip <[email protected]>, > [email protected], [email protected] > Sent: Thu, 01 Dec 2011 5:45 PM > Subject: Re: [IP] Carrier IQ May Have Violated Wiretap Law In Millions Of Cases > > On the other hand, Carrier IQ may *not* have violated wiretap law in > millions of cases. > > Dan Rosenberg, who I've copied on this message, said that he has > reverse-engineered Carrier IQ and found "no evidence that they are > collecting anything more than what they've publicly claimed: anonymized > metrics data." He found "no code in CarrierIQ that actually records > keystrokes for data collection purposes." See: > http://pastebin.com/aiYNmYVz > > John Graham-Cumming also is unconvinced: > http://blog.jgc.org/2011/11/getting-little-tired-of-security.html > "If you watch the 'security researcher's' video you'll find that nowhere > does he make the claim that content that the application sees is leaving > the device... At no point does he enter a debugger and look inside the > CarrierIQ application, and at no point does he run a network sniffer and > look at what data is being transmitted to CarrierIQ." > > Sprint said today that "we do not and cannot look at the contents of > messages, photos, videos, etc., using this tool," which is a pretty > broad denial: > http://news.cnet.com/8301-31921_3-57335110-281 > > I hope that IPers remember the panic earlier this year when Samsung was > falsely accused of installing key loggers on laptops. Network World, > which ran the article, ended up deleting it and saying, in a lovely > passive voice, that "an apology has been issued": > http://news.cnet.com/8301-31921_3-20049259-281.html > > If Carrier IQ is transmitting keystrokes or the contents of > communications, I'll be the first to call them on it. But, as far as I > know after watching the video, nobody has demonstrated that's what the > software actually does. > > -Declan > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
