Posted on 11/30/2011 10:51:57 AM PST by ShadowAce
An Android app developer has published what he says is conclusive proof that millions of smartphones are secretly monitoring the key presses, geographic locations, and received messages of its users.
In a YouTube video posted on Monday, Trevor Eckhart showed how software from a Silicon Valley company known as Carrier IQ recorded in real time the keys he pressed into a stock EVO handset, which he had reset to factory settings just prior to the demonstration. Using a packet sniffer while his device was in airplane mode, he demonstrated how each numeric tap and every received text message is logged by the software.
Ironically, he says, the Carrier IQ software recorded the “hello world” dispatch even before it was displayed on his handset.
Eckhart then connected the device to a Wi-Fi network and pointed his browser at Google. Even though he denied the search giant's request that he share his physical location, the Carrier IQ software recorded it. The secret app then recorded the precise input of his search query – again, “hello world” – even though he typed it into a page that uses the SSL, or secure sockets layer, protocol to encrypt data sent between the device and the servers.
“We can see that Carrier IQ is querying these strings over my wireless network [with] no 3G connectivity and it is reading HTTPS,” the 25-year-old Eckhart says.
The video was posted four days after Carrier IQ withdrew legal threats against Eckhart for calling its software a “rootkit.” The Connecticut-based programmer said the characterization is accurate because the software is designed to obscure its presence by bypassing typical operating-system functions.
In an interview last week, Carrier IQ VP of Marketing Andrew Coward rejected claims the software posed a privacy threat because it never captured key presses.
“Our technology is not real time,” he said at the time. "It's not constantly reporting back. It's gathering information up and is usually transmitted in small doses.”
Coward went on to say that Carrier IQ was a diagnostic tool designed to give network carriers and device manufacturers detailed information about the causes of dropped calls and other performance issues.
Eckhart said he chose the HTC phone purely for demonstration purposes. Blackberrys, other Android-powered handsets, and smartphones from Nokia contain the same snooping software, he claims.
The 17-minute video concluded with questions, including: “Why does SMSNotify get called and show to be dispatching text messages to [Carrier IQ]?” and “Why is my browser data being read, especially HTTPS on my Wi-Fi?”
The Register has put the same questions to Carrier IQ, and will update this post if the company responds. ®
How many of you DO NOT USE CELL PHONES?
Just wondering if there was anyone left besides me.
Boom beyotches! bump
I rarely have a minute to myself as it is, so I don’t have one either.
So who is monitoring this flow of information and where in the h*ll are the memory banks? They must be the size of small towns.
Probably the same people who are looting the treasury.
...Try to limit them to emergencies only. I will be hung by the IFG or by some FReepers for my replies on FR Threads.
Things like this make me consider going back :\
Then again, I doubt landline phones are any better.
I only use mine occasionally for outgoing calls only.
I got rid of mine. Service is way too expensive. Between that and the satellite tv service I got rid of, I probably save at least $150 a month. Besides, my company gave me a cell phone, but I don’t use it. It usually sits uncharged in my backpack.
So what exactly does this mean?
Tempest in a teapot.
Thanks!
11.
They are everywhere. Look for intersections of power and transportation networks (optical fiber is installed on both power lines and RR rights of way). The data centers need huge amounts of power. They are the nondescript but huge buildings with no windows or signs on them and high security surrounding them. They are everywhere.
You don’t have to save all of it, depending on the value of the information. Where I’ve been and my passwords aren’t of much value...but for specific other people, the value could be very high. The point is that they’re getting this information without any permission or knowledge of the user, and that is an invitation to “be evil”.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.