maemo.org - Talk - View Single Post - Phones with preinstalled spyware CarrierIQ

HeadLess	2011-12-09 , 11:18
Posts: 4 \| Thanked: 6 times \| Joined on Mar 2010	#65

Can we focus people?
This is how Android app finds Carrier IQ.
One is checking installed java packages, but other simply finds

Code:

/dev/sdio_tty_ciq.*

files.
Add to that socket check:

Code:

/dev/socket/iqbrd

and dmesg search of strings:

Code:

"iq.logging",
"iq.service",
"iq.cadet",
"iq.bridge",
"SDIO_CIQ",
"ttyCIQ",
"iqagent"

search for system binaries:

Code:

"iqmsd",
"libiq_.*",
"iqbridged"

running processes ( checked by ps ):

Code:

"iqmsd",
"iqbridged",
"iqd"

There is some more logs checks, I do not know differences between Android and Maemo/Meego systems to verify more.

But simple script should be trivial.

Any takers?

Quote & Reply |

The Following 3 Users Say Thank You to HeadLess For This Useful Post:
cheve, IsaacDFP, lma