CarrierIq
Latest
CarrierIQ execs meet with FTC and FCC officials to address privacy concerns (update)
CarrierIQ is having a difficult time making friends. Nearly two weeks after Massachusetts congressman Edward Markey asked the FTC to open an investigation on the data collection company, it appears his wish may be granted. According to anonymous government officials close to the Washington Post -- and confirmed by CarrierIQ itself -- senior officials from the company visited the nation's capital yesterday to discuss the matter with representatives from the FTC and the FCC, as well as a few congressional staffers. The Federal Trade Commission itself hasn't confirmed that it's opening a probe into the situation; regardless, it's certainly evident that the government's beginning to look very close at the company's practices. It's great news for privacy advocates, but whether it amounts to any changes remains to be seen. Update: We just received a report from the New York Times that Carrier IQ claims it was misquoted in the Washington Post. In a statement released later, the company said: This week CarrierIQ sought meetings with the FTC and FCC to educate the two agencies about the functionality of its software and answer any and all questions. Although Congressman Edward J. Markey (D-Mass.), co-Chairman of the Bi-Partisan Congressional Privacy Caucus, has asked the Federal Trade Commission (FTC) to investigate the practices of Carrier IQ, we are not aware of an official investigation into Carrier IQ at this time.
Carrier IQ issues lengthy report on data collection practices, sticks to its guns
After having already tried to explain itself with metaphor, Carrier IQ is now taking its floundering PR campaign back to basics, with an ostensibly thorough primer on its practices and a slightly less convoluted defense of its privacy standards. This morning, the controversial analytics firm released a lengthy, 19-page document that attempts to explain "what Carrier IQ does and does not do." In the report, titled "Understanding Carrier IQ Technology," the company explains the benefit it offers to its clientele of network operators, many of whom rely upon Carrier IQ's diagnostic data to make sure their infrastructure is up to snuff. It also provides a breakdown of how it collects data, as well as a defense against Trevor Eckhart's findings, though, as you'll see, these arguments likely won't put this saga to bed anytime soon. Read more, after the break.
European regulators set sights on Carrier IQ, rootkit scandal goes international
Most of the bruhaha over Carrier IQ and its activity-tracking rootkit has been contained to the US so far. That's about to change though, and the software company could find itself at the center of an international privacy scandal. The British Information Commissioner's Office and the European Consumers' Organization have both started looking into the diagnostics software, while the Bavarian State Office for Data Protection has specifically engaged with Apple over its inclusion of parts of Carrier IQ's suite in iOS. This, of course, comes only days after US lawmakers requested their own government open an investigation. So far, all of the major British providers have denied using the tool on their handsets but, the drama is still unfolding and there's plenty of time for others to get caught up in this mess.
Apple, Samsung, others sued over Carrier IQ scandal
While the tech world was buzzing last week about Carrier IQ, one group of lawyers was busy preparing a class action complaint. The complaint was filed in Federal Court in Wilmington, Delaware by three local law firms: Sianni & Straite of Wilmington, DE; Eichen Crutchlow Zaslow & McElroy of Edison, NJ; and Keefe Bartels of Red Bank, NJ. The complaint asserts that several wireless companies and cell phone manufacturers violated wiretap and computer fraud laws when they included Carrier IQ software on their phones. The suit names wireless carriers T-Mobile, AT&T and Sprint as well as mobile phone manufacturers HTC, Samsung, Motorola and Apple. The Carrier IQ controversy hit the internet last week when 25-year-old Trevor Eckhart posted a video of Carrier IQ in action. Carrier IQ is diagnostic software that's present on a variety of phones (including at least some editions of the iPhone, though Apple says it has pretty much eliminated Carrier IQ in iOS 5). Several wireless carriers use it to troubleshoot network or device problems. Eckhart detailed in several blog posts and a video how the software allegedly logs and transmits keyboard input, website URLs and other potentially sensitive information. The company denied allegations that it violates wiretap laws, but that has not stopped the lawsuits. With the US Senate asking questions about Carrier IQ and now several lawsuits, we are going to hear a lot more about this controversy before it is all ironed out. Until then, iPhone owners can rest easy. Even though Carrier IQ is present in iOS 5, the software is turned off and should be inert. Apple also said it recently stopped using Carrier IQ and promises it will remove any remaining traces of the software in a future update. [Via The Loop]
AT&T's LG Nitro HD goes up for sale, LTE-enabled Gingerbread pep for $250
In case you forget that AT&T's latest LTE-equipped smartphone hit shelves today, consider this a friendly reminder from your mobile obsessed friends here at Engadget. We're talking about the LG's Nitro HD, the 4.5-inch device we lovingly handled last week -- loaded with a skinned version of Android 2.3.5 Gingerbread, running atop its peppy 1.5 GHz Qualcomm APQ8060 dual-core processor. If you'll recall, it's notably packing a 1280 x 720p screen resolution with an ultra-crisp looking 329ppi, an 8 megapixel rear camera (1.3 MP up front) and a healthy 4GB of internal storage supplemented by an included 16GB microSD card (expandable to 32GB). Thankfully, bloatware on the Nitro is at an all time low, but we'd be remiss if we didn't mention that's it's been confirmed to be loaded with the ickyness of Carrier IQ. Sure, it's not as tasty as an Ice Cream Sandwich, but if your hungering for LTE-enabled 4G speeds on Ma Bell, at least you now have a third option. It can be yours now for $250 with a two-year renewal of service, and you'll find more info at the source link below.
Carrier IQ VP says software poses no threat to user privacy, backs up his argument with metaphor
The final chapter of the Carrier IQ saga has yet to be written, but at this juncture, even the rosiest of rose-tinted observers would be hard pressed to find a silver lining. The specter of federal investigation looms larger by the day. Implicated carriers and manufacturers are washing their hands with Macbethian fury. Al Franken is on the verge of going Al Franken. And at the epicenter of all this sits Carrier IQ -- a California-based analytics company that has already gone to great lengths to defend its innocence. First, it sought to discredit Trevor Eckhart's ostensibly damning research with a cease-and-desist letter. Then, CEO Larry Lenhart flatly denied Eckhart's findings with an impassioned YouTube address. In recent days, the company has markedly softened its stance, arguing that its apps are only designed to meet operator demands and to "make your phones better." Now, Carrier IQ has elaborated upon these arguments with a more detailed breakdown of how its software functions, and a more substantive defense of its practices. Head past the break to read more.
German regulators seek details on Apple's use of Carrier IQ
Apple has already made a statement on the company's use of Carrier IQ, saying that "We stopped supporting Carrier IQ [a piece of software that tracks user activity] with iOS 5 in most of our products, and we're going to remove it completely in a future software update." Apparently that's not good enough for The Bavarian State Authority for Data Protection. The German data regulator requested today that Apple provide more information about the software and its use. Apple's statement yesterday noted that its use of Carrier IQ was limited to "diagnostic information" and was opt-in only. iOS users who have recently set up iOS 5 devices may remember the request to allow your device to send diagnostic and usage information to Apple. If you are currently sending data and wish to opt out, just go to General > About > Diagnostics & Usage on your iPhone and disable sending this information. Thomas Kranig, the head of the regulatory group, made the comment that "if Apple decided to cease the use [of Carrier IQ], all the better." He's not the only bureaucrat looking into Carrier IQ; Senator Al Franken (D-Minn) has called for Carrier IQ to disclose why the software tracks and stores the information that it does.
FTC asked to open an investigation into Carrier IQ
It was only a matter of time, we suppose, before this whole Carrier IQ thing started drawing the attention of lawmakers. The saga has quickly spiraled out of control, with carriers being forced to declare which side they're on and Senator Stuart Smalley Al Franken demanding the company provide details about what data it collects and how it's used. Well, Massachusetts congressman Edward Markey has even less patience than his esteemed colleague and has already asked the FTC to open an investigation into Carrier IQ. Markey wants the Federal Trade Commission to look into whether or not the rootkit and its creators have violated the privacy of millions of cellphone users and federal wiretap laws -- an accusation the company vehemently denies. We hope you're not tired of this epic tale yet, 'cause we're just getting started.
Daily Update for December 2, 2011
It's the TUAW Daily Update, your source for Apple news in a convenient audio format. You'll get all the top Apple stories of the day in three to five minutes for a quick review of what's happening in the Apple world. You can listen to today's Apple stories by clicking the inline player (requires Flash) or the non-Flash link below. To subscribe to the podcast for daily listening through iTunes, click here. No Flash? Click here to listen.
Supercurio brings Carrier IQ detection to the people, pitchfork optional
While the Carrier IQ saga continues to unfold, our eForensics ally, François Simond (supercurio) has cooked up an app for any Android device users wanting to check if the analytics company has its fingers in his or her privacy pie. Not only is the unfinished app available for download now, but the open source code is also up for anyone looking to improve on the developmental release. Wannabe Carrier IQ investigators can hit up both at the source links below.
Which companies are on the Carrier IQ bandwagon?
<div style="text-align:center;"> <a href="http://www.engadget.com/update/carrier-iq-which-companies-have-the-smarts/"><img src="http://www.blogcdn.com/www.engadget.com/media/2011/12/watchingtheskyrockiet93743878438.jpg" style="border-width:0px;border-style:solid;margin:4px;"/></a></div> If you have the feeling somebody's watching you, it's not a bad idea to keep a close eye on your phone -- after all, it may be keeping one on <em>you</em>. The <a href="http://www.engadget.com/2011/12/01/carrier-iq-what-it-is-what-it-isnt-and-what-you-need-to/">more we find out</a> about Carrier IQ, the mysterious Mountain View company recently brought into the spotlight for its smartphone tracking software, the more curious we become about which carriers and manufacturers are playing along. Below the break you'll find a continuously updated list of the major players as they come clean about their involvement in the matter -- or lack thereof. We're working on collecting official statements from as many companies as we can, so stay tuned if you don't see the one you're looking for.
Carrier IQ: What it is, what it isn't, and what you need to know
Carrier IQ has recently found itself swimming in controversy. The analytics company and its eponymous software have come under fire from security researchers, privacy advocates and legal critics not only for the data it gathers, but also for its lack of transparency regarding the use of said information. Carrier IQ claims its software is installed on over 140 million devices with partners including Sprint, HTC and allegedly, Apple and Samsung. Nokia, RIM and Verizon Wireless have been alleged as partners, too, although each company denies such claims. Ostensibly, the software's meant to improve the customer experience, though in nearly every case, Carrier IQ users are unaware of the software's existence, as it runs hidden in the background and doesn't require authorized consent to function. From a permissions standpoint -- with respect to Android -- the software is capable of logging user keystrokes, recording telephone calls, storing text messages, tracking location and more. It is often difficult or impossible to disable. How Carrier IQ uses your behavior data remains unclear, and its lack of transparency brings us to where we are today. Like you, we want to know more. We'll certainly continue to pursue this story, but until further developments are uncovered, here's what you need to know.
Carrier IQ references found in iOS 5, probably benign (updated with Apple statement)
The Interwebs have been abuzz over the last 24 hours about Carrier IQ on Android smart phones, allegedly logging user activity including keystrokes. TUAW can confirm that Carrier IQ appears to be included on iOS 5, but that its purpose is most likely benign. iOS virtuoso chpwn discovered Carrier IQ support in firmware as recent as iOS 3.x on Apple's devices. TUAW confirmed Carrier IQ references in iOS 5 after reading this post on the MacRumors forum and evaluating the /usr/bin/awd_ic3 file found in the installed OS. The firmware contains references to Carrier IQ such as this URL included in the binary. We have included a full set of matching strings at the end of this post. http://collector.sky.carrieriq.com:7001/collector/c?cm_sl=5 In TUAW's look through the binary calls, we found references to collecting carrier telemetry such as local cell tower, signal strength, and your phone number. We found no references to key logging. We did find remote diagnostic calls like CTServerConnectionEnableRemoteDiagnostics. What's more, the service may need to be specifically enabled. A property list in the "mobile" user library looks like it has to be overridden to allow diagnostic logging. iPhone # plutil com.apple.iqagent.plist { DiagnosticsAllowed = 0; } Further, the binary seems to be somewhat poorly maintained. The primary reference to the /var/wireless/Library/Logs/IQAgent/ folder has now been replaced by /var/wireless/Library/Logs/awd in actual use. Apple's inclusion of Carrier IQ does not, in our first estimation, appear to be a root kit or threaten privacy. We reserve the right to re-evaluate our judgement on that in the future, but for now we don't see much that bothers us. Given what it records, this sounds like the "help maintain network performance" claim made by Jason Gertzen of Sprint when he was asked about Carrier IQ on Android. But even this is cautiously implemented on iOS. If you want to stay on top of this story, follow chpwn's blog as he continues to investigate. Update: The Verge reports that in terms of Android, the Google Nexus One, Nexus S, Galaxy Nexus and original Xoom tablet don't have Carrier IQ. So it appears to be OEMs and carriers who are putting this on the phone. As for Apple and the iPhone, according to John Gruber you can basically opt-out of Carrier IQ by digging into Settings > General > About > Diagnostics & Usage and turn off the "Send Automatically" switch. Update 2: Apple has made a statement indicating they quit supporting Carrier IQ with iOS 5, and it has never used Carrier IQ to record personal info like keystroke logging, etc. Apparently it will be removed entirely in a future update.
