[liberationtech] Carrier IQ

[Katrin Verclas]

In which case you better throw away your phone since the carrier log it all in real time and have no problem sending it over to law enforcement via easy-peasy dashboards for a small fee.

Let me say it again - evidence would be good. Paranoia, hype, and flip statements are not.

Katrin 




 

Sent via mobile. Hence, short.

-----Original Message-----
From: Eugen Leitl <eugen at leitl.org>
Sender: liberationtech-bounces at lists.stanford.edu
Date: Wed, 30 Nov 2011 14:19:54 
To: <liberationtech at lists.stanford.edu>
Subject: Re: [liberationtech] Carrier IQ

On Wed, Nov 30, 2011 at 01:05:03PM +0000, Katrin Verclas wrote:
> I am trying to find out more as well and it seems some of the Wired et al claims are overblown - see, for instance, this today http://blog.jgc.org/2011/11/getting-little-tired-of-security.html?m=1
> 
> Also, CarrierIQ does not seem to be logging anything that the carriers don't already log in real time (CarrierIQ does not) other than possibly battery life/device performance, according to Eric King at privacy.org. 
> 
> It's unclear why there is such a hoopla about this now and focused on CarrierIQ aong (plenty of competitors in that space). 
> 
> CarrierIQ incidentally also runs on ATM machines etc - so if you really want to dig into pw sniffing etc, that would be the place given that CarrierIQ seems to log info in a much less timely manner thn your friendly operator does (such content of sms, logs, IMSI/IMEI etc)    

Does anyone know whether the ATM logs the serial number
of the bills issued to a particular person? (I know that
the bank itself does log it).
 
> We should actually get some EVIDENCE as Graham suggest. Anyone game?

Presence of the rootkit is all the evidence you need.
Past experience has shown that everything which can be
used eventually will.
_______________________________________________
liberationtech mailing list
liberationtech at lists.stanford.edu

Should you need to change your subscription options, please go to:

https://mailman.stanford.edu/mailman/listinfo/liberationtech

If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?"

You will need the user name and password you receive from the list moderator in monthly reminders.

Should you need immediate assistance, please contact the list moderator.

Please don't forget to follow us on http://twitter.com/#!/Liberationtech