TriniTuner.com | Latest Event:
Moderator: 3ne2nr Mods
N3M3SIS wrote:shaneelal wrote:Not sure how true it is, but Android fans take note..BUSTED! Secret app on millions of phones logs key taps
Researcher says seeing is believing
By Dan Goodin in San Francisco • Get more from this author
Posted in Security, 30th November 2011 02:34 GMT
Free whitepaper – 2011 Lippis Report
An Android app developer has published what he says is conclusive proof that millions of smartphones are secretly monitoring the key presses, geographic locations, and received messages of its users.
In a YouTube video posted on Monday, Trevor Eckhart showed how software from a Silicon Valley company known as Carrier IQ recorded in real time the keys he pressed into a stock EVO handset, which he had reset to factory settings just prior to the demonstration. Using a packet sniffer while his device was in airplane mode, he demonstrated how each numeric tap and every received text message is logged by the software.
Ironically, he says, the Carrier IQ software recorded the “hello world” dispatch even before it was displayed on his handset.
Eckhart then connected the device to a Wi-Fi network and pointed his browser at Google. Even though he denied the search giant's request that he share his physical location, the Carrier IQ software recorded it. The secret app then recorded the precise input of his search query – again, “hello world” – even though he typed it into a page that uses the SSL, or secure sockets layer, protocol to encrypt data sent between the device and the servers.
“We can see that Carrier IQ is querying these strings over my wireless network [with] no 3G connectivity and it is reading HTTPS,” the 25-year-old Eckhart says.
The video was posted four days after Carrier IQ withdrew legal threats against Eckhart for calling its software a “rootkit.” The Connecticut-based programmer said the characterization is accurate because the software is designed to obscure its presence by bypassing typical operating-system functions.
In an interview last week, Carrier IQ VP of Marketing Andrew Coward rejected claims the software posed a privacy threat because it never captured key presses.
“Our technology is not real time,” he said at the time. "It's not constantly reporting back. It's gathering information up and is usually transmitted in small doses.”
Coward went on to say that Carrier IQ was a diagnostic tool designed to give network carriers and device manufacturers detailed information about the causes of dropped calls and other performance issues.
Eckhart said he chose the HTC phone purely for demonstration purposes. Blackberrys, other Android-powered handsets, and smartphones from Nokia contain the same snooping software, he claims.
The 17-minute video concluded with questions, including: “Why does SMSNotify get called and show to be dispatching text messages to [Carrier IQ]?” and “Why is my browser data being read, especially HTTPS on my Wi-Fi?”
The Register has put the same questions to Carrier IQ, and will update this post if the company responds. ®
Update
More than 19 hours after this post was first published, Carrier IQ representatives have yet to respond to a request for comment. Meanwhile, computer scientists have uncovered an unrelated Android glitch that could also invade smartphone users' privacy.
http://www.theregister.co.uk/2011/11/30/smartphone_spying_app/
meh that's what pretty much every phone OS does...RIM, apple, etc. Nothing new.
N3M3SIS wrote:
meh that's what pretty much every phone OS does...RIM, apple, etc. Nothing new.
Swisha wrote:N3M3SIS wrote:shaneelal wrote:Not sure how true it is, but Android fans take note..BUSTED! Secret app on millions of phones logs key taps
Researcher says seeing is believing
By Dan Goodin in San Francisco • Get more from this author
Posted in Security, 30th November 2011 02:34 GMT
Free whitepaper – 2011 Lippis Report
An Android app developer has published what he says is conclusive proof that millions of smartphones are secretly monitoring the key presses, geographic locations, and received messages of its users.
In a YouTube video posted on Monday, Trevor Eckhart showed how software from a Silicon Valley company known as Carrier IQ recorded in real time the keys he pressed into a stock EVO handset, which he had reset to factory settings just prior to the demonstration. Using a packet sniffer while his device was in airplane mode, he demonstrated how each numeric tap and every received text message is logged by the software.
Ironically, he says, the Carrier IQ software recorded the “hello world” dispatch even before it was displayed on his handset.
Eckhart then connected the device to a Wi-Fi network and pointed his browser at Google. Even though he denied the search giant's request that he share his physical location, the Carrier IQ software recorded it. The secret app then recorded the precise input of his search query – again, “hello world” – even though he typed it into a page that uses the SSL, or secure sockets layer, protocol to encrypt data sent between the device and the servers.
“We can see that Carrier IQ is querying these strings over my wireless network [with] no 3G connectivity and it is reading HTTPS,” the 25-year-old Eckhart says.
The video was posted four days after Carrier IQ withdrew legal threats against Eckhart for calling its software a “rootkit.” The Connecticut-based programmer said the characterization is accurate because the software is designed to obscure its presence by bypassing typical operating-system functions.
In an interview last week, Carrier IQ VP of Marketing Andrew Coward rejected claims the software posed a privacy threat because it never captured key presses.
“Our technology is not real time,” he said at the time. "It's not constantly reporting back. It's gathering information up and is usually transmitted in small doses.”
Coward went on to say that Carrier IQ was a diagnostic tool designed to give network carriers and device manufacturers detailed information about the causes of dropped calls and other performance issues.
Eckhart said he chose the HTC phone purely for demonstration purposes. Blackberrys, other Android-powered handsets, and smartphones from Nokia contain the same snooping software, he claims.
The 17-minute video concluded with questions, including: “Why does SMSNotify get called and show to be dispatching text messages to [Carrier IQ]?” and “Why is my browser data being read, especially HTTPS on my Wi-Fi?”
The Register has put the same questions to Carrier IQ, and will update this post if the company responds. ®
Update
More than 19 hours after this post was first published, Carrier IQ representatives have yet to respond to a request for comment. Meanwhile, computer scientists have uncovered an unrelated Android glitch that could also invade smartphone users' privacy.
http://www.theregister.co.uk/2011/11/30/smartphone_spying_app/
meh that's what pretty much every phone OS does...RIM, apple, etc. Nothing new.
Carrier IQ references discovered in Apple's iOS
To date, the user tracking controversy surrounding Carrier IQ has focused primarily on Android, but today details are surfacing that the company also may have hooks into Apple's iOS. Well-known iPhone hacker Chpwn tweeted today that versions at least as recent as iPhone OS 3.1.3 contained references to Carrier IQ.
We were able to independently verify that at the very least, references to Carrier IQ's servers do exist within iPhoneOS 3.1.3 in a file located at /usr/bin/IQAgent. What exactly that binary is able to access or how it may communicate with either carriers or Carrier IQ is not yet known, though there are references to an IQAgent log on the device as well as references to collector.sky.carrieriq.com.
For versions 4.0 and up, Intell on MacRumors' forums has found similar references to the http://collector.sky.carrieriq.com location within /usr/bin/awd_ice2, although we have not independently verified that yet. Again, no clear word on just what is or is not being tracked or collected.
The story is developing, with chpwn promising a post providing as many details as he's been able to uncover thus far, including the possibility that the code wasn't enabled by default in iOS. We should emphasize that all we can say for sure at the moment is that iOS definitely contained references to Carrier IQ — but given how the story has progressed thus far, we expect there will be more to report on soon.
The Verge
If you argue that Ice Cream Sandwich isn't the largest incremental update to the Android platform since its birth, you're probably going to lose the fight. Not even counting the number of features added to 4.0, the changes in UI alone are enough to take your breath away. It's modern and refreshing, and the user experience is more polished than its predecessors, but we believe that newcomers to Google's mobile ecosystem won't find it quite as intuitive as competing operating systems as the tech-savvy and power-hungry crowd that has grown accustomed to Android in the past. Regardless of previous knowledge, this will probably be water under the bridge soon enough, as manufacturers push out devices with customized skins.
The interface isn't perfect, and several of its new features still have a beta feel (we're looking at you, Face Unlock), but Android 4.0 appears to do exactly what it set out to do: merge the best of two worlds into an attractive package. It's a gorgeous OS that offers great performance and -- for the most part -- doesn't feel like a half-baked effort. Factoring the new functionality, ICS effectively throws a one-two punch of mobile wonderment in our face. Ice Cream Sandwich feels like a natural evolution for Android, and we have a feeling Matias Duarte & Co. are just getting started.
We do not have an affiliation with CarrierIQ. Android is an open source effort and we do not control how carriers or OEMs customize their devices.
Samsung:
Samsung welcomes today's ruling denying Apple's request for a preliminary injunction. This ruling confirms our long-held view that Apple's arguments lack merit. In particular, the court has recognized that Samsung has raised substantial questions about the validity of certain Apple design patents. We are confident that we can demonstrate the distinctiveness of Samsung's mobile devices when the case goes to trial next year. We will continue to assert our intellectual property rights and defend against Apple's claims to ensure our continued ability to provide innovative mobile products to consumers.
dr_wildman wrote:tuners i thinking of buying a ANDROID tablet or a iPod touch which 1 you guys would suggest? that is better?
vrampersad14 wrote:Anyone in here has or had experience with a Motorola Charm?
Any recommended apps?
vrampersad14 wrote:vrampersad14 wrote:Anyone in here has or had experience with a Motorola Charm?
Any recommended apps?
Return to “Ole talk and more Ole talk”
Users browsing this forum: No registered users and 63 guests
