[LINK] Carrier IQ

[Rick Welykochy]

Ivan Trundle wrote:

> So where's the outrage, the indignation, the calls for retribution?
> Now that developer Trevor Eckhart has discovered logging software installed on most Android, Blackberry and Nokia phones, and with far-reaching implications of what that data can be used for, I had anticipated an outcry.

It is outrageous. I watched Eckhart's video today. And then started googling for more info.
This seems to be a breaking story. With a lot of ramifications.

The EFF is already involved in "standing down" similar attempts to analyse and reveal what
big telco business is secretly gatheeing without consumer knowledge.

> Apple was almost crucified (Senate hearings, etc) over their location-caching data collection, but this is far more reaching. Even back then, Steve Jobs asserted that Android was tracking everyone.
> What have I missed? Is it a beat up?

I found Eckhart's analysis to be insightful and technically astute.

Of course, he could have constructed the entire scenario for the purposes of a
beat-up or conspiracy, but how paranoid does one need to be? Eckhard asks some
really simple questions that should have some simple answers, at then end of the
video, such as:

  * why is CIQ logging each keystroke?
  * why is CIQ capturing https: URLS before they are encrypted?
  * why is CIQ capturing SMS?
  * etc. etc. ( from memory )


References:


http://androidsecuritytest.com/features/logs-and-services/loggers/carrieriq/carrieriq-part2/

http://www.xda-developers.com/android/the-storm-is-not-over-yet-lets-talk-about-ciq/


cheers
rickw


-- 
_________________________________
Rick Welykochy || Praxis Services

Things are only impossible until they're not.
      -- Jean-Luc Picard