2011-12-02 08:07 PM
This is exactly why I would like to see companies like SE reducing the dependency on Google services, not increasing it as they are doing.
e.g. Phone offers an option to auto-backup to Google servers - I don't want Google to have this data, so there should also be the option for me to do this to my own cloud server in the same menu.
I also regard the Android Market as being a security/privacy risk, given the control over your phone that Google can gain to install whatever it wants.
Sony's Music/Video Unlimited doesn't shound very impressive either with regards to privacy if you read their T&Cs.
2011-12-03 10:04 AM
what would be the difference if you compare iOS Android WinMobile and RIM, who has more security issues, who keeps track of you every movement etc? is it Google, Apple, Microsoft, or RIM or irrelevant nonsmart phones?
I agree on having an option to include any cloud service we want to be added, similar on how they added twitter and fb integration but another option to be open to anything
but then again, cloud services aren't 100% safe, they do open security risks and tracing issues just like the good old Goog but it'll be great to have an option unlike apple products who either you agree to give away your soul or you can't use their phone
2011-12-03 08:34 PM
Does SE add Carrier IQ to ALL phones sold in the US or just sold to carriers? which carriers? SIM free for the US market come with Carrier IQ?
According to Coward, Carrier IQ only retains text messages or keystroke patterns that carry proprietary tags. These tags identify all transmissions that could be used to populate analytic data, including some that may be considered sensitive. If a user drops a call, for instance, the system will note his or her location, and the numbers of each party. In other cases, the company may receive a special SMS (or "control message," as Coward describes it), which provides Carrier IQ with important diagnostic information (e.g., data on failed SMS transmissions). The company collects data on the number of successfully delivered texts and the phone numbers of users who send these texts, but the contents of an SMS, Coward insists, are "never stored and never transmitted."
Key taps, meanwhile, are monitored because certain sequences can trigger responses from the software. If a user is on the line with technical support, for example, he or she may be prompted to type in a code in order to upload diagnostic data to Carrier IQ's system. As with text messages, though, only earmarked keystroke sequences are copied. All the others -- including the keystroke patterns displayed in Eckhart's demo video -- are filtered out. According to the Register, Coward's claims have been corroborated by Android security researcher Dan Rosenberg, who reverse engineered Carrier IQ's software.
Detailed as Coward's arguments may be, the thrust of his defense rests upon Carrier IQ's earlier assertions that service providers retain ultimate control over consumer information. "The data that's being gathered is commissioned by the operators to be gathered," Coward explained. "It's under their control, albeit sometimes in our data center, sometimes in their data center. We have no rights to that data."
2011-12-03 08:45 PM
Lawmaker calls for FTC probe into Carrier IQ
U.S. Representative Edward Markey on Friday asked the Federal Trade Commission to investigate whether software maker Carrier IQ violated millions of mobile phone users' privacy rights.
2011-12-03 08:56 PM
Voodoo Carrier IQ app
This app's goal is to let you find out as easily as possible if your Android device hosts CarrierIQ rootkit or not.
2011-12-04 05:05 AM
"The interesting thing is because we are able to see this happening in logcat, anything with the right permissions can see the same thing. It means programs other than CIQ, such as crash reporting software or any app that can read logs, will also be able to see the same exact logs."
"Whatever your opinion of the data CIQ is collecting on behalf of the carriers, having that data available to other apps on the device is a serious security issue. However, Coward argues that it is not a CIQ security issue."
2011-12-04 06:43 AM
well i just read it in the newspaper
San Francisco: Technology bloggers are asking if our cellphones are spying on us after a security researcher said a piece of software hidden on millions of phones was recording almost everything people do with them.
Amid a broad outcry, Senator Al Franken is calling for an investigation.
A class-action lawsuit has been filed against the software’s maker, Carrier IQ Inc of Mountain View, California. The software, which Carrier IQ says is used on some 150 million mobile devices, appears relatively innocuous. It does watch what owners of Sprint Nextel Corp and AT&T Inc. smartphones do with them, including what people type and the numbers they dial.
But it doesn’t seem to transmit every key stroke to the company. Instead, it kicks into action when there’s a problem, like a call that doesn’t go through, and it lets the phone company know.
“It is software that is developed in partnership with carriers with the intent to improve network performance. As far as we can tell, it meets this description in execution,” said Tim Wyatt, principal engineer at Lookout, a cellphone security company.