site Search:


 
   
story category
FTC Investigating CarrierIQ
After Their Rather Unpleasant Bad PR Month
by Karl Bode Friday 16-Dec-2011 tags: business · wireless · privacy · wireless
After a month of being raked over the coals for their stealthy wireless device rootkit, CarrierIQ is officially being investigated by the government. The company this week met with FTC officials, who are exploring the fact that the company deployed a rootkit on roughly 150 million phones capable of tracking all user behavior -- without informing consumers. While there's no evidence the data is being stored or used nefariously, it's the fact that carriers and CarrierIQ didn't think informing consumers was a good idea that has gotten the company in trouble. “We are complying with all investigations at this time as we have nothing to hide,” said Mira Woods, of Carrier IQ's marketing communications department. Meanwhile Sprint and AT&T are also being forced to clarify their use of the rootkit.

view: topics flat text 
Post a:
jvanbrecht

join:2007-01-08
Bowie, MD

I still maintain

That CIQ is not really the evil party in all this.

They make software, they sell the software. They advertise the capabilities, and a customer buys it and installs it.

In this case, the customer is the handset manufacturers at the carriers request. We know this because only US handsets have CIQ, the rest of the worlds versions of the same handsets do not.

I personally have tested the Samsung Captivate and Skyrocket (Galaxy S and Galaxy II S LTE), and neither of them capture the same data that the HTC devices capture, because HTC are idiots, or someone involved in quality control is an idiot, and let production retail devices ship with debug enabled.

Guess what, that is what debug is for.

Where CIQ went wrong, was the whole cease and desist/legal route to shut up the researchers.

Romney2012
Defeat Obama 2012-Chg we can believe in
Premium
join:2002-03-03
USA
kudos:4

Re: I still maintain

said by jvanbrecht:

That CIQ is not really the evil party in all this.

Given all the accusations that CarrierIQ is spying for the government, why then is the government investigating them? Investigating someone supposedly working for you doesn't make any sense.

vpoko
Premium
join:2003-07-03
Boston, MA

1 edit

Re: I still maintain

CarrierIQ is also spying for the carriers. I guess the government feels jilted.

FutureMon
Keep your Mitts off RMoney
Premium,ExMod 2002-05
join:2000-10-05
Seaside, CA
Left hand, meet Right hand.

or they have to "Investigate" to give the impression that they were not aware of it already, even if they were. Otherwise people would be screaming that the government knew about it and was compliant.

- FM
--
I bid 50 quatloos that the newcomers will fail...

fatness
subtle
Janitor
join:2000-11-17
fishing
kudos:13
Host:
Bright House Netwo..
Earthlink DSL
TekSavvy
Forum Feature Requ..
Need Site Help
said by Romney2012:

said by jvanbrecht:

That CIQ is not really the evil party in all this.

Given all the accusations that CarrierIQ is spying for the government, why then is the government investigating them? Investigating someone supposedly working for you doesn't make any sense.

The government may be miffed that they asked to use CarrierIQ and were rebuffed.
»www.washingtonpost.com/business/···ory.html
quote:
A senior executive at a technology company that makes monitoring software secretly installed on 141 million cellphones said Thursday that the FBI approached the company about using its technology but was rebuffed.
--
their dreams a tattered sail in the wind

firephoto
KDE
Premium
join:2003-03-18
Brewster, WA
Reviews:
·Frontier Communi..
Where they went wrong was making their software being able to attach itself to any event created by an input device or incoming data stream with content.

There is absolutely no reason to debug issues by knowing the CONTENT of user activity. This thing is a rootkit and keylogger from the ground up and it just happens that some oems are not hiding this behavior as good as others.
--
Say no to JAMS!

grydlok

join:2004-01-06
Richmond, VA

Streisand effect


never should have sent the C&D letter. The genius behind that move should be fired
Mr Matt

join:2008-01-29
Eustis, FL
kudos:1

I ask again, did CarrierIQ create the phantom data charges?

Did Verizon charge customers $1.99 when CarrierIQ phoned home or was the charges simply caused by the carriers deficient billing system.
jvanbrecht

join:2007-01-08
Bowie, MD

Re: I ask again, did CarrierIQ create the phantom data charges?

Verizon stated they do not use CIQ in any way, and it seems people checking their phones confirms that statement... so for once.. verizon did not suck.

VerizonSad

@transedge.com

Re: I ask again, did CarrierIQ create the phantom data charges?

..... stop the presses!!!!! Verizon didn't suck!!!!! someone check hell, take your winter coat.

NoFool

@comcast.net

You have to be kidding.

I like how they said "no evidence the data is being stored or used". Ok, then why is it there. Someone moron had to have had a bright idea about the use of such software so it's not there just to make my phone's experience a better one. So, not only do these turdbrains think they did nothing wrong by not informing the customer but taking us as a fool for thinking the data isn't "used".

I gotta wonder though, why are we so ticked at the company itself. Why are we not burning down Sprint, or Samsung (and others who use this) for even ASKING for such software in the first place. Seems Carrier IQ's the scapgoat in all this. Or is it just me?
InfinityDev

join:2005-06-30
USA

Gibson

As Steve Gibson recently explained on the SecurityNow podcast, software isn't a rootkit because you don't like it. A rootkit is software that is extremely difficult or impossible for a host operating system to detect or stop installed by a malicious third party using an exploit or other hole in a device or system.

This is software installed deliberately, by design, under contract even when you read Senator Franken's statements collected from HTC and Samsung. It's just something people are angry about because they weren't asked or informed clearly or at all about what is going on.

I'm not defending CarrierIQ, but really we shouldn't call it a rootkit.

Now could it be used by other malware or rootkits to transmit user data off of your device? Sure! Woo! *grumble*

anon7

@comcast.net

CarrierIQ

Sounds to me like 1984 is already here, and its not the government spying on its people, its corporations.

Juggernaut
Irreverent or irrelevant?
Premium
join:2006-09-05
Everywhere
kudos:1

Re: CarrierIQ

It's been here for years. People are just finally waking up to that fact over the last while. And, it started long before the Patriot Act(s) I, II, and III.

ctceo
Premium
join:2001-04-26
South Bend, IN
Reviews:
·magicjack.com
·AT&T U-Verse
·AT&T Midwest

Not suprising

I still find it appauling that sooo many people find this surprising. I guess I wasn't the only one wearing a tinfoil hat and blinders.

The whole "investigation" thingy is just a matter of public face. CarrierIQ is likely a secretly owned "world-power type" company anyway so any investigation or arguments to the contrary are moot.

Juggernaut
Irreverent or irrelevant?
Premium
join:2006-09-05
Everywhere
kudos:1

Re: Not suprising

Hell, it may be just a US Gov thing. If this quietly dies, you'll know who the players are.

ctceo
Premium
join:2001-04-26
South Bend, IN

Re: Not suprising

"US Government" is only the name they use in public. Cant have people thinking they're part of some larger scheme of things. Heads might explode.

Romney2012
Defeat Obama 2012-Chg we can believe in
Premium
join:2002-03-03
USA
kudos:4

Sprint caves and CarrierIQ being deleted from Sprint phones

»www.mobileburn.com/17957/news/sp···-devices

A recent rumor has hit the internet stating that Sprint has asked its manufacturer partners to remove Carrier IQ's software from all of the devices that it carries. We reached out to Sprint for a comment on the matter, and while the carrier said that it does not comment on rumors, it did confirm for us that it is disabling the Carrier IQ software on its phones and it is no longer collecting data from it.

"We have weighed customer concerns and we have disabled use of the tool so that diagnostic information and data is no longer being collected," said Sprint in an email to Mobile Burn. "We are further evaluating options regarding this diagnostic software as well as Sprint's diagnostic needs."

If other carriers follow Sprint's actions, CarrierIQ is toast as a company. They are done.
--
The nine most terrifying words in the English language are, I'm from the government and I'm here to help.
»www.politico.com/rss/2012-election-blog.xml


whatabout12

@centurytel.net

What about data usage...

If this software is collecting usage data and sending it to whoever, how does this count against your monthly allotment (if at all) if you're not on a truly unlimited plan? I would imagine they could differentiate software the carrier has pushing data versus user-initiated data, but doubt they deduct that from monthly usage.

Thoughts?

Monday, 04-Jun 06:23:58 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 12.5 years online © 1999-2012 dslreports.com.