Developer reveals hidden program called Carrier IQ that logs everything you do
Posted on Wednesday November, 30 2011 by tsowen |
16 Comments
A security researcher Trevor Eckhart has posted a video detailing hidden software installed on smart phones that logs numerous details about users' activities.
In a 17-minute video posted Monday on YouTube, Trevor Eckhart shows how the software – known as Carrier IQ – logs every text message, Google search and phone number typed on a wide variety of smart phones - including HTC, Blackberry, Nokia and others - and reports them to the mobile phone carrier.
Eckhart showed his findings off first in the XDA Developer Forums. Once his first findings were found by Carrier IQ (again, an app that runs in the background that you may never have known is on your device right this second), they threatened legal action against him. As it turns out thanks to the support from the EFF (Electronic Frontier Foundation), Carrier IQ has decided not pursue a lawsuit against TrevE, issuing a statement apologizing for their actions.
“Our action was misguided and we are deeply sorry for any concern or trouble that our letter may have caused Mr. Eckhart. We sincerely appreciate and respect EFF’s work on his behalf, and share their commitment to protecting free speech in a rapidly changing technological world.”
When they found that legal threats weren’t going to do them any good, they sent out word to the public that their software does not record keystrokes or other personal information. What we’re to understand today if Eckhard’s findings are true is that this claim was quite simply incorrect.
On its website, Carrier IQ, founded in 2005, describes itself as "the world's leading provider of Mobile Service Intelligence solutions." Carrie IQ has since issued the following press release:
MEDIA ALERT
Measuring Mobile User Experience Does Matter!
Mountain View, CA – November 16, 2011 – Carrier IQ would like to clarify some recent press on how our product is used and the information that is gathered from smartphones and mobile devices.
Carrier IQ delivers Mobile Intelligence on the performance of mobile devices and networks to assist operators and device manufacturers in delivering high quality products and services to their customers. We do this by counting and measuring operational information in mobile devices – feature phones, smartphones and tablets. This information is used by our customers as a mission critical tool to improve the quality of the network, understand device issues and ultimately improve the user experience. Our software is embedded by device manufacturers along with other diagnostic tools and software prior to shipment.
While we look at many aspects of a device’s performance, we are counting and summarizing performance, not recording keystrokes or providing tracking tools. The metrics and tools we derive are not designed to deliver such information, nor do we have any intention of developing such tools. The information gathered by Carrier IQ is done so for the exclusive use of that customer, and Carrier IQ does not sell personal subscriber information to 3rd parties. The information derived from devices is encrypted and secured within our customer’s network or in our audited and customer-approved facilities.
Our customers have stringent policies and obligations on data collection and retention. Each customer is different and our technology is customized to their exacting needs and legal requirements. Carrier IQ enables a measurable impact on improving the quality and experience of our customers’ mobile networks and devices. Our business model and technology aligns exclusively with this goal.
For media Commentary, contact:
Mira Woods
Phone: 617-513-7020
Email: mwoods@carrieriq.com
www.carrieriq.com
apple is doing this on the iphone settings/genral/about/diagnostics&usage
there is nothing but log files under there and when i found it it was sending to apple automaticly and i turned this future off
Is it actually part of the OS or is it part of the hardware/firmware programming? Are we certain it is not in there just as some other program perhaps? I can’t believe that a hardware manufacturer doesn’t have some kind of logging software installed to be able to “diagnose” any issues that may come up through tech support. Until the day comes when high tech becomes super cheap tech and eventually uber-disposable, there will always be some need for “diagnostic” software as far as the manufacturers are concerned. Hopefully someone will find it on our phones so a fix can be figured out on how to turn it off. I’ve never allowed the “feedback” option on any programs I’ve installed on any of my computers/phones other than ones that now require location collection in order to work. Even then, I’m very selective in what I install.
In HTC Android phones apparently it is tied into just about everything. TrevE’s previous video shows how it is tied into the subsystems and hidden from the user. The only solution is rooting and installing a custom ROM with it removed or using TrevE’s app to “clean” out the loggers.
I “think” they knew of it but not the extent of what it did and the story became hot when the come tried issue a law suite to the developer for his final publishings on it and also issues a cease and desist letter.
Apparently they are not looking at the information that they are gathering if it was getting this information to help improve the network and user experience because I have not seen any improvements in my network or phone experience in a long time. Believe it or not they don’t need this program to be able to listen to your conversation as they have other ways of doing that. I will definitely like to see something good come out of this and someone get their hand smacked for gathering this information without our permission.
You must register before you can use all of the features of the website.
Threads: 128,396 Posts: 2,078,579
Search Articles
About PPCGeeks
PPCGeeks is a site for smartphone owners (including Windows Phone 7, Windows Mobile, Android, Blackberry, WebOS, and iPhone) with discussions, reviews, news, links, downloads, and much much more.
Humm… That is concerning for sure. Thanks for the information tsowen!
What about WinMo?
apple is doing this on the iphone settings/genral/about/diagnostics&usage
there is nothing but log files under there and when i found it it was sending to apple automaticly and i turned this future off
sooooOoOo the big question is…. HOW DO YOU TURN IT OFF!?
Hey, everyone, guess what platform DOESN’T have CIQ on it? Windows Phone 7.x! Yeah. That’s right.
aedon Reply:
December 1st, 2011 at 12:27 am
@GoodThings2Life, ok sure, they may not have “CIQ”, but when ever someone finally finds it we will know what its actually called in WP7 lol
Is it actually part of the OS or is it part of the hardware/firmware programming? Are we certain it is not in there just as some other program perhaps? I can’t believe that a hardware manufacturer doesn’t have some kind of logging software installed to be able to “diagnose” any issues that may come up through tech support. Until the day comes when high tech becomes super cheap tech and eventually uber-disposable, there will always be some need for “diagnostic” software as far as the manufacturers are concerned. Hopefully someone will find it on our phones so a fix can be figured out on how to turn it off. I’ve never allowed the “feedback” option on any programs I’ve installed on any of my computers/phones other than ones that now require location collection in order to work. Even then, I’m very selective in what I install.
Big Brother is watching!!!!
In HTC Android phones apparently it is tied into just about everything. TrevE’s previous video shows how it is tied into the subsystems and hidden from the user. The only solution is rooting and installing a custom ROM with it removed or using TrevE’s app to “clean” out the loggers.
http://androidsecuritytest.com/features/logs-and-services/loggers/carrieriq/
Full details and how to remove
So…the people over at ACS have known about, and removed, CIQ from their roms for months now…why is this story just now breaking?
I “think” they knew of it but not the extent of what it did and the story became hot when the come tried issue a law suite to the developer for his final publishings on it and also issues a cease and desist letter.
nah, K0nane went into crazy detail months ago about CID on the epic.
Said at&t and sprint phones and a list of others so I wouldn’t doubt it just yet
Apparently they are not looking at the information that they are gathering if it was getting this information to help improve the network and user experience because I have not seen any improvements in my network or phone experience in a long time. Believe it or not they don’t need this program to be able to listen to your conversation as they have other ways of doing that. I will definitely like to see something good come out of this and someone get their hand smacked for gathering this information without our permission.
Whats the possibility of this happening on WinMo 6.1 phones? Has it been found on the WP7 devices yet?