Carrier IQ (CIQ)

Forums › Mobile handsets › Carrier IQ (CIQ)

tecnam2003

64 posts

Master Geek
+1 received by user: 36
Inactive user

#93878 1-Dec-2011 08:24

I read some disturbing articles concerning Carrier IQ and their attempt to silence an app developer.

It makes interesting reading and viewing and I wonder what the Data collection and usage legislation here in New Zealand would make of it.

cheers

http://www.wired.com/threatlevel/2011/11/rootkit-brouhaha/

http://www.theregister.co.uk/2011/11/30/smartphone_spying_app/

http://www.xda-developers.com/android/the-rootkit-of-all-evil-ciq/

1 | 2 | 3

1433 posts

Uber Geek
+1 received by user: 316

Trusted

Subscriber

#552180 1-Dec-2011 11:28

From reading the coverage on Wired

http://www.wired.com/threatlevel/2011/11/secret-software-logging-video/

My question is whether you need to root the phone and install a custom rom to disable it?

This should be massive news, some commenters have speculated that it is funded through the NSA.

Time to buy a tinfoil hat.

Jon

xpd

Geek of Coastguard
14115 posts

Uber Geek
+1 received by user: 4574

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#552183 1-Dec-2011 11:33

http://www.carrieriq.com/Media_Alert_User_Experience_Matters_11_16_11.pdf

Love it... the guy who found CIQ shows clearly in his videos that it is logging key strokes etc.

XPD / Gavin

LinkTree

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#552187 1-Dec-2011 11:42

But, but... Apart from the obvious "it was not disclosed and I didn't opt in", how is this different from the telemetry data other companies collect, such as Microsoft that collects from their Windows users and Windows Phone users? They monitor everything, from which functions are being used, how many keys are being typed, where people click, etc.

Obviously all non-identifiable, and used to decide where to improve features, etc...

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

Poll

346 posts

Ultimate Geek
+1 received by user: 59

#552192 1-Dec-2011 11:50

Lifehacker have an article on how to remove the software, one is root your phone and install a new rom, the other is a for pay app that can remove it, hopefully a free version shall appear at some stage.

karit

84 posts

Master Geek
+1 received by user: 2

#552196 1-Dec-2011 11:52

Does MS log keystrokes? There is a video showing the logging and there are log statements with the callee of carrieriq and is logging the keys.

Also MS asks you before sending plus it leaves via tcp/ip so can proxy or firewall it. I'm guessing that Carrier IQ leaves via baseband so no way to see what is going or when etc.

I have asked VF, 2D, Telecom and TC if they have ever shipped Carrier IQ and TC is only reply thus far and said they haven't shipped any rootkits on phones.

Come on NZ Cellcos step up and answer the Question have you in the past, present or future shipped Carrier IQ or similar on any of your phones?

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#552202 1-Dec-2011 11:57

Microsoft software don't log keystrokes. They log utilisation. Different things.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

Dell

Shop now for Dell laptops and other devices (affiliate link).

kiwitrc

4123 posts

Uber Geek
+1 received by user: 833
Inactive user

#552206 1-Dec-2011 12:06

I would be interested if anyone finds it on their phones. I just ran the apk and there is nothing on my phone. I am rooted, with custom ROM.

codyc1515

1598 posts

Uber Geek
Inactive user

#552232 1-Dec-2011 12:42

freitasm: But, but... Apart from the obvious "it was not disclosed and I didn't opt in", how is this different from the telemetry data other companies collect, such as Microsoft that collects from their Windows users and Windows Phone users? They monitor everything, from which functions are being used, how many keys are being typed, where people click, etc.

Obviously all non-identifiable, and used to decide where to improve features, etc...

I'm sorry, what? "where people click" (aka. keys pressed) != "non-identifiable"

kiwitrc

4123 posts

Uber Geek
+1 received by user: 833
Inactive user

#552237 1-Dec-2011 12:47

codyc1515:
freitasm: But, but... Apart from the obvious "it was not disclosed and I didn't opt in", how is this different from the telemetry data other companies collect, such as Microsoft that collects from their Windows users and Windows Phone users? They monitor everything, from which functions are being used, how many keys are being typed, where people click, etc.

Obviously all non-identifiable, and used to decide where to improve features, etc...

I'm sorry, what? "where people click" (aka. keys pressed) != "non-identifiable"

Not sure what you are asking but you can click with a mouse, so no keys used.

Poll

346 posts

Ultimate Geek
+1 received by user: 59

#552250 1-Dec-2011 13:14

kiwitrc: I would be interested if anyone finds it on their phones. I just ran the apk and there is nothing on my phone. I am rooted, with custom ROM.

I've just run this on my Lg Optimus 2x, import from Hong Kong running the stock gingerbread update from Lg, not rooted and it has come up clean.

karit

84 posts

Master Geek
+1 received by user: 2

#552253 1-Dec-2011 13:16

Has anyone seen any reports outside the US?

HP

Shop now for HP laptops and other devices (affiliate link).

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#552265 1-Dec-2011 13:37

codyc1515:
freitasm: But, but... Apart from the obvious "it was not disclosed and I didn't opt in", how is this different from the telemetry data other companies collect, such as Microsoft that collects from their Windows users and Windows Phone users? They monitor everything, from which functions are being used, how many keys are being typed, where people click, etc.

Obviously all non-identifiable, and used to decide where to improve features, etc...

I'm sorry, what? "where people click" (aka. keys pressed) != "non-identifiable"

Keys pressed are mainly those related to features, such as ALT-F4, or ALT-F S (for file save, etc). They need to know what features people use, how they get there, etc. It's all about improving usability.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

karit

84 posts

Master Geek
+1 received by user: 2

#552325 1-Dec-2011 16:44

http://techliberty.org.nz/is-your-mobile-company-spying-on-you/

VF, TC and Telecom phones look clear and still waiting on 2D to response.

Dratsab

3964 posts

Uber Geek
+1 received by user: 1728

Trusted

Lifetime subscriber

#552412 1-Dec-2011 21:13

Running a vanilla SGS II (Android 2.3.3) and had a good search through it earlier today after reading about CIQ. Appears to be nothing on my phone. I'm suspecting it's an issue in the US.

oxnsox

1923 posts

Uber Geek
+1 received by user: 138

#552432 1-Dec-2011 22:19

OK... soo lets say this isn't implemented thru Telcos here.
What chance is there of this happening when you roam to the USA via either a SIM update or by inserting a local pre-pay SIM????

1 | 2 | 3