[liberationtech] Carrier IQ

Fran Parker lilbambi at gmail.com
Fri Dec 2 07:38:07 PST 2011


Did you all see the video and read this article here from Trevor Eckhart:

http://androidsecuritytest.com/features/logs-and-services/loggers/carrieriq/carrieriq-part2/

The article continues beyond the notations for the video and the site 
has been hit very hard so don't be surprised if you can't get there 
right away. I had to wait about 1/2 hr to get to the site successfully 
due to the /. effect.

It also addresses people's concerns regarding the rootkit claims.

Fran

On 12/2/11 4:59 AM, Alec Muffett wrote:
>> They said that it is not in real time (although technically it could be) but depending on the service, they usually get around 200kb of data including 'aggregated key presses' (their words) once a week. More is sent if a call is dropped, or they want to drill down to a specific user etc.
>
> It's only the matter of aggregation and off-siting the data that
> worries me, and maybe the browser integration and what can happen if
> the history is accessible or shared.
>
> If anyone wants to see a very similar tool on OSX, open a terminal
> window and type "xev" - requires X-windows - which is a X-window GUI
> event-debugging tool useful for tracking down issues with keymaps,
> etc.
>
> It'll look very familiar to anyone who's seen the CiQ YouTube videos.
>
> The difference is that "xev" is not running by default, not running
> 24x7, not unkillable, and not uploading the events it captures to a
> website, in the manner that CiQ apparently is?
>
> -a
> _______________________________________________
> liberationtech mailing list
> liberationtech at lists.stanford.edu
>
> Should you need to change your subscription options, please go to:
>
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>
> If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?"
>
> You will need the user name and password you receive from the list moderator in monthly reminders.
>
> Should you need immediate assistance, please contact the list moderator.
>
> Please don't forget to follow us on http://twitter.com/#!/Liberationtech
>



More information about the liberationtech mailing list