PDA

View Full Version : Carrier IQ - Smartphone rootkit/tracking/keylogger



toad
1st December 2011, 22:51
http://a57.foxnews.com/static/managed/img/Scitech/660/371/spyphone.jpg

Over 100 million smartphones are tracking their owners’ every step, Android developer Trevor Eckhart claims, thanks to software that comes preinstalled on phones from most major carriers.

During a security demonstration revealed on Monday, Eckhart showed how software developed by Carrier IQ tracks virtually everything a user does -- going as far as logging individual keystrokes and button presses. The company claims it helps its customers improve quality and performance “by counting and measuring operational information in mobile devices.” Security experts call it spyware.

Here's what YOU need to know:

What exactly is it watching?

Eckhart found evidence that Carrier IQ was doing much more than simply helping improve network quality; he said the company's software detects every button pressed, every text message sent, every website browsed to. His findings have not been confirmed, however, and at least one researcher suggested that, despite receiving such activity, there was no evidence that Carrier IQ was recording it.

What's a 'rootkit'?

Eckhardt described the Carrier IQ software a "rootkit," a word with negative connotations in the tech world. A rootkit is software buried deep within a computer (or smartphone) that has "root" or administrator-level access. While such software can be used for reasonable purposes -- total access to a device or computer would certainly be useful for quality assurance purposes -- it has gained notoriety through an associate with malware.

So isn't what Carrier IQ is doing illegal?

If the software is doing what the company claims, there shouldn't be any issue. If Eckhardt's findings are correct, however, and Carrier IQ is monitoring smartphones without informing their owners, that may be grounds for a class-action lawsuit based on a federal wiretapping law.

“If CarrierIQ has gotten the handset manufactures to install secret software that records keystrokes intended for text messaging and the Internet and are sending some of that information back somewhere, this is very [like] a federal wiretap,” Paul Ohm, a former Justice Department prosecutor and law professor at the University of Colorado Law School, told Forbes.

So why is it there in the first place?

Carrier IQ claims its software is intended to help carriers monitor and evaluate network quality. It's a mobile analytics platform, used to improve the quality and the user experience, they claim, helping with issues such as dropped calls and battery drain.

Which carriers use the software?
Wireless carriers AT&T and Sprint have confirmed that their smartphones do come with the Carrier IQ software preinstalled on them. Verizon, on the other hand, has distanced itself from the software, insisting that its phones don’t carry Carrier IQ.

Which handset manufacturers have it?

Blackberry-maker RIM and Nokia announced Thursday that their smartphones don't come with Carrier IQ . But Eckhart said phones from many major manufacturers does include it, such as HTC and Samsung. Apple has not said whether its phones come with Carrier IQ, though some reports indicate they may as well.

What's going to happen?

On Thursday, Minnesota Senator Al Franken wrote a letter to Carrier IQ CEO Larry Lenhart, asking him to spell out exactly what sort of data his software is collecting. "Consumers need to know that their safety and privacy are being protected by the companies they trust with their sensitive information," Franken said in a statement. "The revelation that the locations and other sensitive data of millions of Americans are being secretly recorded and possibly transmitted is deeply troubling." Carrier IQ promises a complete investigation by independent security analysts -- but until then, the company won't comment further.

Read more: http://www.foxnews.com/scitech/2011/12/01/carrier-iq-spyware-or-handy-tool-what-need-to-know/#ixzz1fKGyjoZM



Carrier IQ, the carrier-sanctioned keylogger and activity monitor that has been confirmed to exist on Android devices, on AT&T and Sprint networks, has been found in iOS. In our post yesterday, we wrongly assumed that Carrier IQ was something that carriers added to smartphones — but now it’s clear that Apple bakes Carrier IQ into its closed-source iOS for use by carriers.

At this point it isn’t clear if Carrier IQ is snooping on your everyday iPhone use. It sounds like it’s only active when “Diagnostics & Usage” is turned on, and that should only be enabled if you clicked “Submit Logs to Apple” during the iOS 5 setup process. There’s also no proof that this data is actually transmitted across the internet to Carrier IQ servers — but to be honest, if Apple has gone to the trouble of installing multiple third-party daemons on its infallible fondleslab, it’s fairly safe to assume that it’s being used.

In other news, Nokia has confirmed that none of its devices have ever used Carrier IQ, and Verizon has also gone on the record to say that it doesn’t use the software. Google, too, has confirmed that none of its flagship Nexus devices (or the Xoom tablet) have Carrier IQ installed. As we reported yesterday, CyanogenMod is safe as well. Over on The Verge, someone who appears to be an employee of RIM says that RIM has never used, or allowed, Carrier IQ to be installed on its BlackBerry devices.

There are also very few reports of Carrier IQ being found on European phones, from carriers like Vodafone, Three, and Orange. For now, it seems like CIQ is mostly contained to AT&T and Sprint devices in the US.
How to detect and remove Carrier IQ

CIQ Check for AndroidIf you’re using an Android phone or tablet, install Trevor Eckhart’s Logging Test App from XDA-Developers (version 7 at the time of publishing; scroll all the way down). Unfortunately, as this is an off-market app (an APK installer), you will need to push it to your device manually. The easiest way to do this is to email the APK to yourself, then download the attachment on your phone. If that doesn’t work, you need to install the Android SDK and use ADB. Your phone needs to be rooted, too (yes, carriers do not make this easy — to root your phone, Google “how to root PHONE_MODEL_HERE_”).

Hit “CIQ Checks” (see right) and the app will tell you if it’s installed. Pay $1 and the app will try to remove it for you (this doesn’t always work, though). Sadly, there doesn’t seem to be any other way to disable CIQ on Android devices. Carriers like AT&T and Sprint will almost certainly provide some kind of workaround in the next few days, though; the clamoring crowd is impossible to ignore at this point.

iOS Diagnostics & Usage disabledIf you’re using an iPhone or iPad, head into Settings > General > About > Diagnostics & Usage, and click “Don’t Send.”

Update: This route is only available if you’re using iOS 5. If you’re stuck using iOS 3 or 4, and you have a jailbroken device, you can follow Chpwn’s instructions to disable CIQ.
Preventative measures

Ultimately, the safest solution is use a phone that doesn’t have Carrier IQ installed, and a carrier that has resisted the sweet temptation of keylogged telematics. If you currently use an infected Android phone on AT&T, switch to the Galaxy Nexus on Verizon. If your contract isn’t up yet, install CyanogenMod on your phone.

If you’re stuck with your iPhone, either pray that disabling Diagnostics & Usage is enough, or perhaps switch to Windows Phone 7 — so far, it seems like Microsoft’s nippy, tile-based wonder might be the only smartphone OS without Carrier IQ installed.
http://www.extremetech.com/computing/107427-carrier-iq-which-phones-are-infected-and-how-to-remove-it


This just dropped in the past few days, and the internet is swarming. The company who created CarrierIQ has claimed quite vigurously that it doesnt do what it claims, but the man who found it on accident shows quite clearly that it is doing other then they say. What you guys think?

here is the original video from Eckhart;

T17XQI_AYNo

RMorgan
1st December 2011, 22:54
Coincidentally, Wikileaks just released hundreds of new files just about communication spies:

http://projectavalon.net/forum4/showthread.php?35951-The-Spy-Files-New-Wikileaks-released-files

Cheers,

Raf.

Cjay
2nd December 2011, 02:37
I'm not surprised at all but I am outraged.

Governments and corporations are systematically breaking the law and they have proved yet again that they don't care at all about our privacy rights.

atlantianferret
2nd December 2011, 03:25
http://www.pcworld.com/businesscenter/article/245315/verizon_says_it_doesnt_use_carrier_iq_software.html

Verizon sent out a statement this morning stating that they don't use Carrier IQ.

Laurel
2nd December 2011, 05:33
If you’re stuck with your iPhone, either pray that disabling Diagnostics & Usage is enough, or perhaps switch to Windows Phone 7 — so far, it seems like Microsoft’s nippy, tile-based wonder might be the only smartphone OS without Carrier IQ installed.

I wonder if Microsoft leaked that news.
This is the second time in 2 days that I've seen Microsoft trying to force business away from Apple.
Yesterday at work I started getting documents from my customers in a XPS format. I use an iMac at work and couldn't find a way to open it. Turns out it is Microsoft's new version of a PDF, and is not compatible with any Mac software including Microsoft Office for Mac.

jackovesk
3rd December 2011, 01:17
How to Block Cell Phone Tracking


Many cell phone users don't know that their phones are inherently traceable due to advances in GPS and cellular technology.To many this is a welcome safety feature for emergencies, but there is also a growing concern among those who value privacy in everyday life. Your best bet is to be educated about how you can be traced and to be very familiar with the capabilities and features of your phone.


Instructions
Things You'll Need
Cell phone owner's manual
Suggest Edits

1
Choose "E911" in the "location" menu on your phone. On some phones you may need to enable privacy mode instead. These settings will allow GPS tracking only in response to a 911 call, which is required by law. Menus are different on all phones so you may need to consult the owner's manual if you cannot find location settings.

2
Check for physical GPS tracking devices that may be attached to your phone. Look under the battery, in the battery compartment, and on the outside of the phone. Remove anything that did not come in the original sealed box or that you did not attach yourself.

3
Remove any tracking software that is installed on your handset. If anyone has ever had your phone for even a few minutes, he may have installed a third-party application that allows your phone to be tracked. Research any programs that you cannot identify.

4
Contact your cellular phone company and inquire about any tracking or monitoring features that have been enabled on your account. Remove those features if there are any and set a new password to prevent unauthorized access.

5
Remove the battery from your phone. This is the only way to guarantee the phone is untraceable. Cell phone towers can still triangulate your position to some degree when the phone is on, and "roving bug" software can make your phone a surveillance device even when the power is off.

http://www.ehow.com/how_5506664_block-cell-phone-tracking.html

HOW TO STOP GPS TRACKING ON YOUR PHONE


Apple and Google both admitted they were recording your GPS data to their servers this week. Not much is known about how to avoid this collection of data, so we went out and researched some sure fire ways to make sure your phone is not giving away all your secrets to big brother


http://www.youtube.com/watch?v=1K9MWOQefnY&feature=player_embedded

How to stop the Government from tracking your Phone


Stop the Government from tracking your location while your phone is off and even enabling your Mic to listen to your Private conversations


http://www.youtube.com/watch?v=3fMXA2Ur2LM&feature=player_embedded

PS - I hope this helps...

Rgs

Jack

toad
3rd December 2011, 01:58
you should check under your car bumper aswell for GPS devices. :O

Cartomancer
3rd December 2011, 02:04
Let's also not forget that if you leave your phone or computer unattended then it is very easy for someone to plant spyware and tracking software on either. You can be tracked, heard, passwords stolen yadda. For example look on ebay and search "cell phone tracking" and "gps tracking." There are now thumb drive sized GPS tracking devices. devices are available that enable the user to hear and track your cell phone from just having your phone number. It is relatively cheap and easy for anyone to do.

Cjay
3rd December 2011, 14:22
Yup, big brother IS watching - and recording – EVERYTHING.

I don’t know about you but I am very VERY pi**ed off - and I don’t even own a smart phone. Lucky me.
Nope, they track everything I do too. Always have.

What if you turn your phone OFF? Problem fixed?
NOPE. They can turn your phone on remotely, any time they please.
Ever heard of phone-hacking software? No? Do a Google search and prepare to be gobsmacked.

These recently released WikiLeaks “Spy Files” are just the tip of the very huge Sneaky Bastards Inc. iceberg of sleazy, dirty tricks. How paranoid and obsessed are they? How informed are you?

The scariest part - are we going to sit there and take this sh*t? Yes we are.
Why? Because short of going back to pre-World War II technology, we have no alternatives to turn to.

Sure, we can jump up and down and complain very loudly. Maybe a few people will resign and others will be sacked.
Maybe five years from now, the corporate criminals will be fined squillions of dollars and ordered by the courts to disable all this crap – but all that will do is make them infinitely more sneaky in future.

Words of Joy
3rd December 2011, 14:34
Different responses of phone manufacturers in the media:
http://www.engadget.com/update/carrier-iq-which-companies-have-the-smarts/

toad
16th December 2011, 22:51
FBI denies FOIA request about its alleged use of Carrier IQ

Carrier IQ is once again making headlines, this time over reports that it is giving information to law enforcement. Complicating matters more, the FBI denied a Freedom of Information Act (FOIA) request last week asking about its own use of Carrier IQ technology, saying the release of such documents "could reasonably be expected to interfere with law enforcement proceedings".

The FBI's admission in the letter that documents do exist raises concerns that Carrier IQ is using its technologies more than just for customer experience purposes, but actual spying as it is being accused of by many pundits. The company is moving quickly to quell this latest round of criticism.

"Just to clarify all of the media frenzy around the FBI, Carrier IQ has never provided any data to the FBI", the company says in a statement.

While some may want to jump on the Carrier IQ bashing bandwagon quickly, the company may actually be telling the truth. Are some reading too much into the FBI's denial? Here's a possible explanation.

Sen. Al Franken (D-Minn.) has already launched a Congressional inquiry into the activities of Carrier IQ, asking the Federal Trade Commission to get involved. This may be the reason for the denial over "law enforcement proceedings", rather than actual use of the technology by the FBI.

The actual answer may be more convoluted, though. A Carrier IQ source told VentureBeat that any request by law enforcement is forwarded to the carriers, since they own the data and not the company. Thus, Carrier IQ may have had contact with the FBI and others, but does not deal with them directly.

"Carrier IQ’s data is not designed to address the special needs of law enforcement", the source tells VentureBeat's Jolie O'Dell. So we're essentially back at square one, still unsure if law enforcement is actually spying on us thanks to Carrier IQ.

Amid all this, the company is attempting to get on offense by publishing a 19-page document on its website detailing its technology. The document lists the metrics that Carrier IQ shares with its clients, and stresses its purpose as a network management tool.

"Carrier IQ has built software that allows Network Operators to better understand how mobile devices interact with and perform on their network", it reads in part. "Today our technology is used in two specific ways: network management and customer care".

It repeatedly points out -- often in bold text -- that the information captured are actions and not content. It states further than the log file shown by Trevor Eckhart "is a result of debug settings remaining in production devices and should be classified as vulnerability".

Carrier IQ at the beginning of the report even goes as far as to thank Eckhart for his work, someone it sent a cease-and-desist letter threatening legal action to just a few short weeks ago.

http://betanews.com/2011/12/13/fbi-denies-foia-request-on-its-alleged-use-of-carrier-iq/

Mad Hatter
17th December 2011, 15:58
Don't forget that removal of the battery does not solve the problem like it used too. Quite a lot of charge is held and available for quite some time thanks to advances in capacitor storage technology...

Also keep in mind all those claiming not to be using this platform are quite probably using another instead.

Of course, if you can be bothered, you can have fun with it also by behaving like the average drug dealer. Multiple phones multiple sim cards changed with monotonous regularity.

Simple fix is throw the bloody thing in the nearest bin...

toad
17th December 2011, 22:45
Don't forget that removal of the battery does not solve the problem like it used too. Quite a lot of charge is held and available for quite some time thanks to advances in capacitor storage technology...

Also keep in mind all those claiming not to be using this platform are quite probably using another instead.

Of course, if you can be bothered, you can have fun with it also by behaving like the average drug dealer. Multiple phones multiple sim cards changed with monotonous regularity.

Simple fix is throw the bloody thing in the nearest bin...

I accidentally ran my phone over with a lawn mower, and since then I have gotten by just fine without one.