Active Topics

 


Page 1 of 10 1 23 Last »
Reply
Thread Tools
nephridium is offline nephridium
2011-11-17 , 05:14
Posts: 118 | Thanked: 202 times | Joined on Aug 2010
#1
Just saw this post up on slashdot that claims "many" Android, Nokia and Blackberry phones come loaded with "rootkit" like spyware capable of logging and uploading user info such as key strokes, detailed app usage, web pages visited, location info etc. - all sorts of info certain people and organisations would pay a lot of money for.

Apparently it's all based on a tool called CarrierIQ, their website is very frank about their mission (emphasis mine):

CarrierIQ is the leading provider of Mobile Service Intelligence Solutions to the Wireless Industry. As the only embedded analytics company to support millions of devices simultaneously, we give Wireless Carriers unprecedented insight into customer's mobile experience.
Is this a bad joke? this seems to have been going on for quite some time without most people noticing. it's sad that there is no really free option for handset users. Sure, we could compile our own Cyanogenmod for Android or choose our own firmware for our Maemo devices, but as long as there are binary blobs there's no way to know for sure nothing fishy is happening in the background.

Has anyone here found this software on their device(s)?
 

The Following 8 Users Say Thank You to nephridium For This Useful Post:
pusak gaoq's Avatar
pusak gaoq is offline pusak gaoq
2011-11-17 , 05:48
Posts: 723 | Thanked: 519 times | Joined on Nov 2010 @ Kuching:Malaysia
#2
you forget to add Apple on your list cause i believe apple were the one who started implant carrierIQ on all of they devices....

the truth is the is no software in our device that can give full detail what we are using in our devices but the program so called carrierIQ is implanted in our SIMS....its our SIMS that connected us with our carrier...that is how carrierIQ really works...all carrier got all details from our SIMS...

Using A Postpaid (contracts) with some carriers are most likely been monitor 24/7....
__________________
My Phone Evolution : Nokia 3650-Nokia 6600-Nokia 6630-Motorola Rizr-Sony P1i-Nokia E63-Nokia X3-Samsung E980-Iphone 2G-Sony W595-Nokia E71-Nokia 5800-Nokia N900-HTC Hero-Xperia Mini Pro
Last edited by pusak gaoq; 2011-11-17 at 05:52.
 

The Following 3 Users Say Thank You to pusak gaoq For This Useful Post:
Estel's Avatar
Estel is offline Estel
2011-11-17 , 05:53
Posts: 5,028 | Thanked: 8,613 times | Joined on Mar 2011
#3
http://www.xda-developers.com/androi...on-carrier-iq/

No comment... I wonder how legal is that, in countries that regulate who and why can gather information (like Poland). Seriously, I'm going to investigate this legal-wise.
__________________
N900's aluminum backcover / body replacement
-
N900's HDMI-Out
-
Camera cover MOD
-
Measure battery's real capacity on-device
-
TrueCrypt 7.1 | ereswap | bnf
-
Hardware's mods research is costly. To support my work, please consider donating. Thank You!
Last edited by Estel; 2011-11-18 at 21:09.
 

The Following 3 Users Say Thank You to Estel For This Useful Post:
sulu is offline sulu
2011-11-17 , 07:12
Posts: 915 | Thanked: 3,209 times | Joined on Jan 2011 @ Germany
#4
Wireshark (respectively the CLI variant tshark [1]) might be useful to examine the network traffic for unusual activity. Maybe somebody is interested to port it to some of our mobile pltforms. ;-)

[1] http://packages.debian.org/wheezy/tshark
 

The Following 4 Users Say Thank You to sulu For This Useful Post:
reinob is offline reinob
2011-11-17 , 09:54
Posts: 1,808 | Thanked: 4,272 times | Joined on Feb 2011 @ Germany
#5
Originally Posted by Estel View Post
http://www.xda-developers.com/androi...on-carrier-iq/

No comment... I wonder how leag is that, in countries that regulate who and why can gather informations (like Poland). Seriously, I'm going to investigate this legal-wise.
Don't know for sure, but this looks like your typical US carrier thing, combined with Android's "openness" (my a**) and HTC/Samsung saying "me too" to everything they see.

Funny the articles always say "but also Blackberry and Nokia, etc." but at least after a cursory search I haven't found anything besides Android-related details.

Don't want to sound fan-boyish, but I'd bet that no unlocked Nokia (at least Symbian and Maemo) comes with that crap.
 

The Following 3 Users Say Thank You to reinob For This Useful Post:
vi_ is offline vi_
2011-11-17 , 09:58
Posts: 1,680 | Thanked: 3,685 times | Joined on Jan 2011
#6
Originally Posted by reinob View Post
Don't know for sure, but this looks like your typical US carrier thing, combined with Android's "openness" (my a**) and HTC/Samsung saying "me too" to everything they see.

Funny the articles always say "but also Blackberry and Nokia, etc." but at least after a cursory search I haven't found anything besides Android-related details.

Don't want to sound fan-boyish, but I'd bet that no unlocked Nokia (at least Symbian and Maemo) comes with that crap.
Yup, up to at least the E72 (my last symbian) there was no spyware on a 'stock' Nokia.


Wireshark (respectively the CLI variant tshark [1]) might be useful to examine the network traffic for unusual activity. Maybe somebody is interested to port it to some of our mobile pltforms. ;-)
Bro! Wireshark AND tshark are ALREADY available for the n900!

Also,

OSS FTW!
__________________
N900: One of God's own prototypes. A high-powered mutant of some kind never even considered for mass production. Too weird to live, and too rare to die.
 

The Following 10 Users Say Thank You to vi_ For This Useful Post:
sulu is offline sulu
2011-11-17 , 10:13
Posts: 915 | Thanked: 3,209 times | Joined on Jan 2011 @ Germany
#7
Originally Posted by vi_ View Post
Also,

OSS FTW!
 
chris_r is offline chris_r
2011-11-17 , 15:52
Posts: 20 | Thanked: 17 times | Joined on Jan 2011 @ Antarctica
#8
Originally Posted by pusak gaoq View Post
the truth is the is no software in our device that can give full detail what we are using in our devices but the program so called carrierIQ is implanted in our SIMS....its our SIMS that connected us with our carrier...that is how carrierIQ really works...all carrier got all details from our SIMS...
The program is too big to fit on a SIM card. It's embedded in the device's firmware. One way to get around this (on Android anyway) is to use a custom mod such as Cyanogenmod that neglects to include the CarrierIQ software.

See: http://androidsecuritytest.com/featu...ers/carrieriq/
 

The Following 6 Users Say Thank You to chris_r For This Useful Post:
anonymous is offline anonymous
2011-11-18 , 16:56
Posts: 86 | Thanked: 164 times | Joined on Oct 2010
#9
I wonder if Cherry has anything to do with it.

http://maemo.org/packages/view/cherry/
http://wiki.maemo.org/PR1.2_compulso...a_subscription

Weird little program that no one understands, sends SMS.

http://talk.maemo.org/showthread.php?t=57214
http://talk.maemo.org/showthread.php?t=56243

And yes, it still exists in the N9.
http://talk.maemo.org/showthread.php?t=73264
 

The Following 2 Users Say Thank You to anonymous For This Useful Post:
reinob is offline reinob
2011-11-18 , 18:56
Posts: 1,808 | Thanked: 4,272 times | Joined on Feb 2011 @ Germany
#10
@anonymous,

AFAIK Cherry is like "My Nokia" for Symbian. You register (by sending an SMS, with PR1.2 it happened automatically..) and then you receive Nokia "spam" from time to time.

In short: nothing to do with the IQ thing!
 

The Following 3 Users Say Thank You to reinob For This Useful Post:
Reply
Page 1 of 10 1 23 Last »

« Previous Thread | Next Thread »

 
Forum Jump


All times are GMT. The time now is 02:08.

Contact Us - Home - Archive - Top