Sunday, December 11, 2011

Carrier IQ and your privacy

I tend to agree with Trend Micro in the Carrier IQ ruckus. Trend Micro doesn't look at Carrier IQ as malware, but does agree informed consent should be required to ensure privacy concerns are met. If we started jailing someone when they break privacy laws or don't give consumers to opt-out of any privacy invasions, our private information would be much safer. 


However, the threats to our privacy from multiple sources are very real and we should all be vigilant in protecting our rights to privacy. 


The Real Issues About Carrier IQ | Malware Blog | Trend Micro:


Here are some other posts and information on privacy and Carrier IQ, which is actually a company, not simply an application. 






From Wikipedia:

Rootkit discovery and media attention

On November 12, 2011, researcher Trevor Eckhart stated in a post on androidsecuritytest.com[15] that Carrier IQ was logging information such as location without notifying users or allowing them to opt-out,[16] and that the information tracked included detailed keystroke logs,[17] potentially violating US Federal law.[18] Carrier IQ on November 16, 2011, sent Eckhart a cease and desist letter claiming that he was in copyright infringement by posting Carrier IQ training documents on his website and also making "false allegations."[19][20] Eckhart sought and received the backing of user rights advocacy group Electronic Frontier Foundation (EFF).
On November 23, 2011, Carrier IQ backed down and apologized.[21] In the statement of apology, Carrier IQ denied allegations of keystroke logging and other forms of tracking, and offered to work with the EFF.[22]
On November 28, 2011, Eckhart published a YouTube video that he claims shows Carrier IQ software in the act of logging, as plain text, a variety of keystrokes. Included in the demonstration were clear-text captures of passwords to otherwise secure websites, and activities performed when the cellular network was disabled.[23] The video of the demonstration showed Carrier IQ's software processing keystrokes, browser data, and text messages' contents, but there was no indication that the information processed was recorded or transmitted. Carrier IQ responded with the statement, "The metrics and tools we derive are not designed to deliver such information, nor do we have any intention of developing such tools."[24][25] A datasheet for a product called Experience Manager on Carrier IQ's public website clearly states carriers can "Capture a vast array of experience data including screen transitions, button presses, service interactions and anomalies".[26]
If the claims by Eckhart are true, the process of sending usage data is in conflict with Carrier IQ's own privacy policy which states: "When Carrier IQ's products are deployed, data gathering is done in a way where the end user is informed or involved


Visit On-Site Technical Solutions for information on how you can move to Google Apps or other Cloud Computing applications. Call us for all of your network computing and business IT needs. We can also help with your data security and mobile computing. Follow us online below. Call or text me at 1-949-212-2168.

Follow us on Twitter
Find us on Facebook
View our profile on LinkedIn

 

Technorati Tags

No comments:

Add to Technorati favorites

Add to Technorati Favorites