Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

BUSTED! Secret app on millions of phones logs key taps
The Register ^ | 30 November 2011 | Dan Goodin

Posted on 11/30/2011 10:51:57 AM PST by ShadowAce

An Android app developer has published what he says is conclusive proof that millions of smartphones are secretly monitoring the key presses, geographic locations, and received messages of its users.

In a YouTube video posted on Monday, Trevor Eckhart showed how software from a Silicon Valley company known as Carrier IQ recorded in real time the keys he pressed into a stock EVO handset, which he had reset to factory settings just prior to the demonstration. Using a packet sniffer while his device was in airplane mode, he demonstrated how each numeric tap and every received text message is logged by the software.

Ironically, he says, the Carrier IQ software recorded the “hello world” dispatch even before it was displayed on his handset.

Eckhart then connected the device to a Wi-Fi network and pointed his browser at Google. Even though he denied the search giant's request that he share his physical location, the Carrier IQ software recorded it. The secret app then recorded the precise input of his search query – again, “hello world” – even though he typed it into a page that uses the SSL, or secure sockets layer, protocol to encrypt data sent between the device and the servers.

“We can see that Carrier IQ is querying these strings over my wireless network [with] no 3G connectivity and it is reading HTTPS,” the 25-year-old Eckhart says.

The video was posted four days after Carrier IQ withdrew legal threats against Eckhart for calling its software a “rootkit.” The Connecticut-based programmer said the characterization is accurate because the software is designed to obscure its presence by bypassing typical operating-system functions.

In an interview last week, Carrier IQ VP of Marketing Andrew Coward rejected claims the software posed a privacy threat because it never captured key presses.

“Our technology is not real time,” he said at the time. "It's not constantly reporting back. It's gathering information up and is usually transmitted in small doses.”

Coward went on to say that Carrier IQ was a diagnostic tool designed to give network carriers and device manufacturers detailed information about the causes of dropped calls and other performance issues.

Eckhart said he chose the HTC phone purely for demonstration purposes. Blackberrys, other Android-powered handsets, and smartphones from Nokia contain the same snooping software, he claims.

The 17-minute video concluded with questions, including: “Why does SMSNotify get called and show to be dispatching text messages to [Carrier IQ]?” and “Why is my browser data being read, especially HTTPS on my Wi-Fi?”

The Register has put the same questions to Carrier IQ, and will update this post if the company responds. ®


TOPICS: Business/Economy; Technical
KEYWORDS: 1984; atlasshrugged; bigbrother; cellphone; cellphonespyware; rootkit; smartphone; smartphones; smartphonespyware; spyware
Navigation: use the links below to view more comments.
first previous 1-2021-4041 next last
To: Delta 21

I have a regular cell phone connected by bluetooth in my car and that’s it.


21 posted on 11/30/2011 12:06:16 PM PST by DB
[ Post Reply | Private Reply | To 3 | View Replies]

To: bigbob
Exactly. They don't tell people they are doing this, and then they deny it when caught. The issue is, who is getting the information? I think there is a concerted effort by the government to place backdoors into every communications medium out there, and then to store it in a database. This has been a concern at least since the Echelon program came to light in the 90s under Clinton, but then it was undoubtedly expanded during the WOT under Bush. Carriers and mobile phone makers have to go along or they will suffer. So they do.

If they were up front about what they track, and people didn't mind, that's fine. People like some on this thread who say they have nothing to hide will just accept that someone out there has every text, call and payment they make. But it should be disclosed to people so they can decide for themselves. Otherwise, it is a constitutional violation if collected by the government, and a civil invasion of privacy if done by a commercial entity.

I'd be fine with a huge suit against the companies involved in this.

22 posted on 11/30/2011 12:07:00 PM PST by Defiant (President Odinga is setting the stage for chaos in the streets. Obey!)
[ Post Reply | Private Reply | To 19 | View Replies]

To: Defiant

You imply the fed gov is pushing the comms companies for this, but then you want to sue the companies?

Why not sue the fed gov? Why kill companies?

If the fed gov is pushing them, suing them will do no good.


23 posted on 11/30/2011 12:11:28 PM PST by AlmaKing
[ Post Reply | Private Reply | To 22 | View Replies]

To: Delta 21
Just wondering if there was anyone left besides me.

No, you are the only one. And now we know who you are and how to find you.

jk

24 posted on 11/30/2011 12:42:18 PM PST by BipolarBob (Of all the gin joints in all the towns in all the world and she walks into mine.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Delta 21

No cell phone except for emergencies while travelling. Not a smart phone, whatever they are.


25 posted on 11/30/2011 1:14:53 PM PST by little jeremiah (We will have to go through hell to get out of hell.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Defiant; All
Don't anyone recall the outrage a few years ago when they found that Apple was doing all this too with iPhones? Apple just brushed it off as “common practice”.
26 posted on 11/30/2011 1:43:05 PM PST by JSteff ((((It was ALL about SCOTUS. Most forget about that and HAVE DOOMED us for a generation or more.))))
[ Post Reply | Private Reply | To 20 | View Replies]

To: ShadowAce

here is there number, I called to ask if there software was on my phone, she said she would have someone call me back, here is the phone number if you wish to do the same;
CARRIER IQ, Inc.
1200 Villa Street, Suite 200
Mountain View, CA 94041 USA
Phone: +1 650 625 5400


27 posted on 11/30/2011 2:05:18 PM PST by big bad easter bunny (Cain 2012)
[ Post Reply | Private Reply | To 1 | View Replies]

To: AlmaKing
And here it is:

Violation of Wiretap Law

You are right, if the government is the problem, then I would sympathize with the companies, and they might have a defense. Only a lawsuit would allow such information to come to light, though. If they are doing this on their own, they are in big trouble. A lawsuit against the feds would not be likely to succeed. You need civil discovery to get the facts out first.

28 posted on 11/30/2011 3:02:43 PM PST by Defiant (President Odinga is setting the stage for chaos in the streets. Obey!)
[ Post Reply | Private Reply | To 23 | View Replies]

To: ShadowAce; All

how does one block or remove it?

(people please save the smart alec remarks)


29 posted on 11/30/2011 3:09:04 PM PST by longtermmemmory (VOTE! http://www.senate.gov and http://www.house.gov)
[ Post Reply | Private Reply | To 1 | View Replies]

To: LucyT; BP2; rxsid; null and void; Candor7; melancholy

passing it along fyi


30 posted on 11/30/2011 4:18:40 PM PST by tutstar (Want pings to Aaron Klein articles and OWS nonsense?)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Delta 21

I would have to include myself because, even though I have a cell phone, it’s a Motorola and very, very old (e.g., has a pull-out antenna). A guy at the car wash saw me using it and laughed like a loon.


31 posted on 11/30/2011 4:26:55 PM PST by Czar (NRA Life Member)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Delta 21

In two years I am dumping mine for a land line. I am tired of cell phones.


32 posted on 11/30/2011 4:36:32 PM PST by Chickensoup (In the 20th century 200 million people were killed by their own governments.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Czar; little jeremiah; BipolarBob; DB; Revolting cat!; shorty_harris; JamesP81; gargoyle; ...

As long as the call quality stays the same or gets worse, I cant see me needing one too bad. The Motorola bag phones worked great but looked like a Samsonite carry on.

All the tin foil paranoia aside, I just hate the damn things. Very low quality pieces of equipment, why aren’t they waterproof by now? I need insurance for the thing? All the folks that live on the things have been turned into the rudest people I know.

Is anyone that doesn’t cary one or use it very little under the age of 45? .....40?


33 posted on 11/30/2011 4:44:52 PM PST by Delta 21 (Make your choice ! There are NO civilians.)
[ Post Reply | Private Reply | To 31 | View Replies]

To: Delta 21

“As long as the call quality stays the same or gets worse, I cant see me needing one too bad.”

Same here, the quality is horrible. I sometimes borrow my mom’s when I’ve let the house phone go dead. Besides poor sound [an echo down in a drum sound] if I have to stay on it for any length of time, it burns my ear. And it’s supposed to be one of the best.


34 posted on 11/30/2011 5:13:47 PM PST by Heart of Georgia
[ Post Reply | Private Reply | To 33 | View Replies]

To: Heart of Georgia

University town. Driving through the city I sometimes play a game with myself (no, not pocket billiards) betting myself $5 for each young woman I see walking who’s not as I pass her leashed to a cellphone. I seldom lose.


35 posted on 11/30/2011 5:32:55 PM PST by Revolting cat! (Let us prey!)
[ Post Reply | Private Reply | To 34 | View Replies]

To: Revolting cat!

It would probably be more of a game to count the ones who don’t have phones.

But I’ve done that myself and it’s a pretty good mix of men, women, lots of teens around here. They seem oblivious to everything around them.


36 posted on 11/30/2011 7:50:32 PM PST by Heart of Georgia
[ Post Reply | Private Reply | To 35 | View Replies]

To: ShadowAce

Most of my FReeping is done on a smartphone.


37 posted on 11/30/2011 8:38:00 PM PST by Incorrigible (If I lead, follow me; If I pause, push me; If I retreat, kill me.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Delta 21
"...How many of you DO NOT USE CELL PHONES?..."

I don't use mine. After knowing-for-sure, when I was a kid, that someday, we would all be able to have portable phones that we could carry in our pockets, it came true!

Now, I always forget to pick the damned thing up and take it with me when I leave the house ................................. FRegards

38 posted on 11/30/2011 8:52:53 PM PST by gonzo ( Buy more ammo, dammit! You should already have the firearms ... FRegards)
[ Post Reply | Private Reply | To 3 | View Replies]

To: gonzo
Give me a Dick Tracy two-way wrist radio any day !!
39 posted on 11/30/2011 9:00:12 PM PST by Delta 21 (Make your choice ! There are NO civilians.)
[ Post Reply | Private Reply | To 38 | View Replies]

To: Zuben Elgenubi
So who is monitoring this flow of information and where in the h*ll are the memory banks?

No Such Agency ;)

Ft. Meade, MD and San Antonio, TX

40 posted on 12/01/2011 8:57:52 PM PST by anymouse (God didn't write this sitcom we call life, he's just the critic.)
[ Post Reply | Private Reply | To 7 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-4041 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson