[liberationtech] The saga (so far) of Carrier IQ spyware, installed on millions of phones

[Yosem Companys]

-----Original Message-----
From: Rich Kulawiec <rsk at gsp.org>
Sent: Wed, 30 Nov 2011 6:40 AM
Subject: The saga (so far) of Carrier IQ spyware, installed on millions of
phones

November 16: initial reports of Carrier IQ spyware surface:

CarrierIQ: Most Phones Ship With "Rootkit"
http://yro.slashdot.org/story/11/11/16/1517248/carrieriq-most-phones-ship-with-rootkit

The Rookit of All Evil
http://www.xda-developers.com/android/the-rootkit-of-all-evil-ciq/

More on CarrierIQ
http://www.xda-developers.com/android/more-on-carrier-iq/

both of which reference the research presented here:

Carrier IQ
http://androidsecuritytest.com/features/logs-and-services/loggers/carrieriq/


November 22: Carrier IQ threatens security researcher Trevor Eckhart:

CarrierIQ Tries To Silence Security Researcher
http://mobile.slashdot.org/story/11/11/23/0032233/carrieriq-tries-to-silence-security-researcher

Mobile Rootkit Maker Tries to Silence Critical Android Dev
http://www.wired.com/threatlevel/2011/11/rootkit-brouhaha/


November 24: Carrier IQ backs off its threats, says that it doesn't track
Android users

Carrier IQ Relents, Apologizes
http://yro.slashdot.org/story/11/11/24/1852213/carrier-iq-relents-apologizes

Carrier IQ retracts cease and desist letter sent to security researcher,
says it doesn't track Android users
http://www.theverge.com/2011/11/23/2583862/carrier-iq-retracts-cease-and-desist-letter-sent-to-xda-developers


November 29: Further research by Trevor Eckhart shows Carrier IQ spyware
logs ALL keystrokes

Android Dev Demonstrates CarrierIQ Phone Logging Software On Video
http://yro.slashdot.org/story/11/11/30/0423256/android-dev-demonstrates-carrieriq-phone-logging-software-on-video

Researcher's Video Shows Secret Software on Millions of Phones Logging
Everything
http://www.wired.com/threatlevel/2011/11/secret-software-logging-video

both of which reference this research:

Carrier IQ Part 2
http://androidsecuritytest.com/features/logs-and-services/loggers/carrieriq/carrieriq-part2/

---rsk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20111130/b45c0998/attachment.html>