[liberationtech] The saga (so far) of Carrier IQ spyware, installed on millions of phones

[John Graham-Cumming]

That saga conveniently overlooks the fact that the claims about logging and
transmitting private data to CarrierIQ have simply not even been
demonstrated, let alone proved.  There are many things to worry about with
software like this (e.g. the fact that it was installed without the user
knowing), but until there's technical information that keystrokes, URLs
etc. are being sent to CarrierIQ these news articles are getting out of
hand.

John.


On Wed, Nov 30, 2011 at 16:51, Yosem Companys <companys at stanford.edu> wrote:

> -----Original Message-----
> From: Rich Kulawiec <rsk at gsp.org>
> Sent: Wed, 30 Nov 2011 6:40 AM
> Subject: The saga (so far) of Carrier IQ spyware, installed on millions of
> phones
>
> November 16: initial reports of Carrier IQ spyware surface:
>
> CarrierIQ: Most Phones Ship With "Rootkit"
>
> http://yro.slashdot.org/story/11/11/16/1517248/carrieriq-most-phones-ship-with-rootkit
>
> The Rookit of All Evil
> http://www.xda-developers.com/android/the-rootkit-of-all-evil-ciq/
>
> More on CarrierIQ
> http://www.xda-developers.com/android/more-on-carrier-iq/
>
> both of which reference the research presented here:
>
> Carrier IQ
>
> http://androidsecuritytest.com/features/logs-and-services/loggers/carrieriq/
>
>
> November 22: Carrier IQ threatens security researcher Trevor Eckhart:
>
> CarrierIQ Tries To Silence Security Researcher
>
> http://mobile.slashdot.org/story/11/11/23/0032233/carrieriq-tries-to-silence-security-researcher
>
> Mobile Rootkit Maker Tries to Silence Critical Android Dev
> http://www.wired.com/threatlevel/2011/11/rootkit-brouhaha/
>
>
> November 24: Carrier IQ backs off its threats, says that it doesn't track
> Android users
>
> Carrier IQ Relents, Apologizes
>
> http://yro.slashdot.org/story/11/11/24/1852213/carrier-iq-relents-apologizes
>
> Carrier IQ retracts cease and desist letter sent to security researcher,
> says it doesn't track Android users
>
> http://www.theverge.com/2011/11/23/2583862/carrier-iq-retracts-cease-and-desist-letter-sent-to-xda-developers
>
>
> November 29: Further research by Trevor Eckhart shows Carrier IQ spyware
> logs ALL keystrokes
>
> Android Dev Demonstrates CarrierIQ Phone Logging Software On Video
>
> http://yro.slashdot.org/story/11/11/30/0423256/android-dev-demonstrates-carrieriq-phone-logging-software-on-video
>
> Researcher's Video Shows Secret Software on Millions of Phones Logging
> Everything
> http://www.wired.com/threatlevel/2011/11/secret-software-logging-video
>
> both of which reference this research:
>
> Carrier IQ Part 2
>
> http://androidsecuritytest.com/features/logs-and-services/loggers/carrieriq/carrieriq-part2/
>
> ---rsk
>
> _______________________________________________
> liberationtech mailing list
> liberationtech at lists.stanford.edu
>
> Should you need to change your subscription options, please go to:
>
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>
> If you would like to receive a daily digest, click "yes" (once you click
> above) next to "would you like to receive list mail batched in a daily
> digest?"
>
> You will need the user name and password you receive from the list
> moderator in monthly reminders.
>
> Should you need immediate assistance, please contact the list moderator.
>
> Please don't forget to follow us on http://twitter.com/#!/Liberationtech
>



-- 
My book: The Geek Atlas, 128 Places Where Science and Technology Come Alive
http://geekatlas.com/  Signed copies: http://bit.ly/eSvmsV
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20111130/235c1806/attachment.html>