[Privacy] HOLY CRAP!!! Carrier IQ knows about your porn site visits!!

[Purge]

http://gizmodo.com/5863849/your-android-phone-is-secretly-recording-everything-you-do

Apparently Blackberries and Nokia phones are in the same boat - I don't know if this applies to the new WP7 phones though.
Perhaps this may be an influence on the phones being heavily marketed - carriers want to know how you use your phone.

I'm surprised there isn't already a very active thread here.. I used search, but found no results on either CIQ, Carrier IQ, or My Smartphone Is A Goddamned Snitch.

Even if all the information isn't being broadcast out, the fact that all keystrokes are able to be logged, https is unsecure (to the IQ app) and being logged, it means that were your phone grabbed by law enforcement they could effectively hunt through your past uses and find whatever evidence they want to incriminate you.

"Name your accomplice, Bullwinkle, and how much C4 is she packing?"
"What are you talking about? When do I get to talk to my lawyer?"
"Answer the damned question punk. Who is she, and why is she the BOMB??!!"

[hepcat]

I take great pride in my choice of porn.  I can't help but feel good that someone out there is going to see just what a discerning porn viewer I am!

[gellar]

And also this happened today: http://wraltechwire.com/business/tech_wire/news/blogpost/10440344/

But none of this is really new.  There was the Apple GPS data and then the HTC Logger issue about two months ago as well.

[Purge]

No, but the more revealing video was just released.

[TK-421]

I always just figured that was the case so never went to any porn sites from my phone.

Also, since the company pays for my phone I figured that would be prudent.

[PR_GMR]

I always just figured that was the case so never went to any porn sites from my phone.

Also, since the company pays for my phone I figured that would be prudent.

Screw it. My Iphone is loaded with delicious porn pictures. It was a lifesaver when I was away on vacation last week with the folks and needed... heh, some stimulation.

[Purge]

And also this happened today: http://wraltechwire.com/business/tech_wire/news/blogpost/10440344/

But none of this is really new.  There was the Apple GPS data and then the HTC Logger issue about two months ago as well.

Key logging, HTTPS cleartext logging. Even if the data isn't being transferred, if someone steals your phone you now have to change EVERYTHING, period.

That's a pretty crappy situation, all in the name of "getting carriers better usage info".

If someone wants to analyze my poop, go right the f*** ahead. Could you wait till I'm done with it FIRST though?

[leo8877]

I always just figured that was the case so never went to any porn sites from my phone.

Also, since the company pays for my phone I figured that would be prudent.

Screw it. My Iphone is loaded with delicious porn pictures. It was a lifesaver when I was away on vacation last week with the folks and needed... heh, some stimulation.

You're in luck, I believe this is android only. Why are no senators freaking out over this???

[Harkonis]

I always just figured that was the case so never went to any porn sites from my phone.

Also, since the company pays for my phone I figured that would be prudent.

Screw it. My Iphone is loaded with delicious porn pictures. It was a lifesaver when I was away on vacation last week with the folks and needed... heh, some stimulation.

You're in luck, I believe this is android only. Why are no senators freaking out over this???

because they use iphones 

[gellar]

And also this happened today: http://wraltechwire.com/business/tech_wire/news/blogpost/10440344/

But none of this is really new.  There was the Apple GPS data and then the HTC Logger issue about two months ago as well.

Key logging, HTTPS cleartext logging. Even if the data isn't being transferred, if someone steals your phone you now have to change EVERYTHING, period.

That's a pretty crappy situation, all in the name of "getting carriers better usage info".

If someone wants to analyze my poop, go right the f*** ahead. Could you wait till I'm done with it FIRST though?

Yeah like I said, this isn't new:

http://www.androidpolice.com/2011/10/01/massive-security-vulnerability-in-htc-android-devices-evo-3d-4g-thunderbolt-others-exposes-phone-numbers-gps-sms-emails-addresses-much-more/

[JayDee]

I feel compelled to look up the weirdest, most disgusting and obscure shit (but totally legal, don't want to get arrested) just to see how horrified I can make my cell phone carrier.

Although this looks like it's US only at the moment, so maybe I'll just look for my own benefit.

[Scuzz]

I always use someone else's phone for my porn viewing.

[Purge]

And also this happened today: http://wraltechwire.com/business/tech_wire/news/blogpost/10440344/

But none of this is really new.  There was the Apple GPS data and then the HTC Logger issue about two months ago as well.

Key logging, HTTPS cleartext logging. Even if the data isn't being transferred, if someone steals your phone you now have to change EVERYTHING, period.

That's a pretty crappy situation, all in the name of "getting carriers better usage info".

If someone wants to analyze my poop, go right the f*** ahead. Could you wait till I'm done with it FIRST though?

Yeah like I said, this isn't new:

http://www.androidpolice.com/2011/10/01/massive-security-vulnerability-in-htc-android-devices-evo-3d-4g-thunderbolt-others-exposes-phone-numbers-gps-sms-emails-addresses-much-more/

That doesn't invalidate the thread, bub. Even the article I linked to mentioned that the news of this isn't new, but that the actions against the developer have had some noteworthy twists.

There is no discussion on it whatsoever, and that kind of bothers me. I think both carriers, Carrier IQ, and the freakin' phone manufacturers who have a hand in any of this need to be held accountable for the invasion of privacy.

I wouldn't doubt that Canadian carriers are pulling the same crap, so as far as I'm concerned, until this is fixed, it's news.

[Purge]

I always use someone else's phone for my porn viewing.

... and that signals the last time I lend you my phone.

[gellar]

And also this happened today: http://wraltechwire.com/business/tech_wire/news/blogpost/10440344/

But none of this is really new.  There was the Apple GPS data and then the HTC Logger issue about two months ago as well.

Key logging, HTTPS cleartext logging. Even if the data isn't being transferred, if someone steals your phone you now have to change EVERYTHING, period.

That's a pretty crappy situation, all in the name of "getting carriers better usage info".

If someone wants to analyze my poop, go right the f*** ahead. Could you wait till I'm done with it FIRST though?

Yeah like I said, this isn't new:

http://www.androidpolice.com/2011/10/01/massive-security-vulnerability-in-htc-android-devices-evo-3d-4g-thunderbolt-others-exposes-phone-numbers-gps-sms-emails-addresses-much-more/

That doesn't invalidate the thread, bub. Even the article I linked to mentioned that the news of this isn't new, but that the actions against the developer have had some noteworthy twists.

There is no discussion on it whatsoever, and that kind of bothers me. I think both carriers, Carrier IQ, and the freakin' phone manufacturers who have a hand in any of this need to be held accountable for the invasion of privacy.

I wouldn't doubt that Canadian carriers are pulling the same crap, so as far as I'm concerned, until this is fixed, it's news.

Yeah I honestly just think that most people don't know/care.

[leo8877]

http://www.macrumors.com/2011/12/01/apple-stopped-supporting-carrier-iq-in-ios-5-complete-removal-coming-in-future/

Also, Senate is involved now!

http://www.appleinsider.com/articles/11/12/01/carrier_iq_data_logging_controversy_prompts_scrutiny_from_us_senate.html

[ericb]

Just another reason I'm glad I switched to a custom rom with all of this crap taken out and disabled (besides the days of extra battery life and faster speed).

[gellar]

Shockingly, much ado about nothing (or very little, in any case):

http://news.cnet.com/8301-31921_3-57335715-281/how-carrier-iq-was-wrongly-accused-of-keylogging/

[Purge]

Very little?

Really?

My point, oh I dunno, perhaps in the OP:

Even if all the information isn't being broadcast out, the fact that all keystrokes are able to be logged, https is unsecure (to the IQ app) and being logged, it means that were your phone grabbed by law enforcement they could effectively hunt through your past uses and find whatever evidence they want to incriminate you.

I use law enforcement an example, but what about identity theft?

Having anything that logs keystrokes is bad, regardless of whether it's being harvested. Also, forcing your clients to submit data that they aren't aware of, nor have any option of saying no to, is also wrong.

That isn't nothing, man. It's rape. I didn't direct my comments towards Carrier IQ, it was to the implementation and the parties involved.

Clearly the Carrier IQ knew at what layer they were entering into the Android device. They also knew what information COULD be accessed by carriers, and should have some accountability to that. When it comes to the "smoking gun" however, the privacy of millions is far more important than the lame excuse given where "wah! we need help supporting our clients!"

Consider for a moment that your webcam was running all the time to record when you spill your drink so they could better support you.

Cuz you know, they need to know if it was milk or coke.

[Punisher]

Very little?

Really?

My point, oh I dunno, perhaps in the OP:

Even if all the information isn't being broadcast out, the fact that all keystrokes are able to be logged, https is unsecure (to the IQ app) and being logged, it means that were your phone grabbed by law enforcement they could effectively hunt through your past uses and find whatever evidence they want to incriminate you.

I use law enforcement an example, but what about identity theft?

Having anything that logs keystrokes is bad, regardless of whether it's being harvested. Also, forcing your clients to submit data that they aren't aware of, nor have any option of saying no to, is also wrong.

That isn't nothing, man. It's rape. I didn't direct my comments towards Carrier IQ, it was to the implementation and the parties involved.

Clearly the Carrier IQ knew at what layer they were entering into the Android device. They also knew what information COULD be accessed by carriers, and should have some accountability to that. When it comes to the "smoking gun" however, the privacy of millions is far more important than the lame excuse given where "wah! we need help supporting our clients!"

Consider for a moment that your webcam was running all the time to record when you spill your drink so they could better support you.

Cuz you know, they need to know if it was milk or coke.

Of course they do... There is a big difference between liquid and powder damage! 

[Harpua3]

I take great pride in my choice of porn.  I can't help but feel good that someone out there is going to see just what a discerning porn viewer I am!

You go girl! Rock out with your cock out! The statement made me throw up in my mouth, But just a little. The porn,I am fine with though. I'm going to bed now.

[ericb]

That expert on CNET is wrong too...there's videos out there illustrating that the software does in fact capture keystrokes and other information even if it's not transmitted which means the potential for tracking by any carrier who wanted the info is there.  It also bypasses the preferences you set on your device (like location, gps, etc). 

[gellar]

That expert on CNET is wrong too...there's videos out there illustrating that the software does in fact capture keystrokes and other information even if it's not transmitted which means the potential for tracking by any carrier who wanted the info is there.  It also bypasses the preferences you set on your device (like location, gps, etc). 

I believe the article is pointing out that if those tracking parameters are enabled, it's because the carriers did so.

[corruptrelic]

There's an app in the android marketplace called "Carrier IQ Detector" by lookout labs if anyone is curious whether you have it on your phone or not.

Ran it on my T-Mobile Sidekick 4G and said I didn't have it.