Discover Yahoo! With Your Friends

Explore news, videos, and much more based on what your friends are reading and watching. Publish your own activity and retain full control.

To get started, first

YOUR FRIENDS' ACTIVITY

    Is Your Smartphone Being Spied on with the Carrier IQ Rootkit?

    This story comes from the Yahoo! Contributor Network, where individuals publish their unique perspectives on some of the world’s most popular websites.
    Do you have a story to tell? Become a Yahoo! contributor

    Carrier IQ is the name of an app that was secretly installed on millions of Android, BlackBerry, and Nokia smartphones as a rootkit -- a piece of software that has root access to all of the smartphone's systems, and can't be removed or detected by conventional means. The Carrier IQ software was bundled with these phones when they were sold, by either the manufacturer or the carrier, and most owners of smartphones with Carrier IQ installed do not know they have it.

    Carrier IQ was discovered by Android security researcher Trevor Eckhart, and has been the subject of ongoing research by the experts at XDA-Developers. The company that makes Carrier IQ sent Eckhart a cease-and-desist letter after he published his research, but withdrew it after the Electronic Frontier Foundation's team of legal defenders challenged the letter.

    Carrier IQ's website says that over 140 million smartphones have the app installed. Is your phone among them? Here's a partial list of which devices may be affected:

    Apple iPhone

    Erica Sadun of The Unofficial Apple Weblog has compiled information found by iPhone jailbreak programmers, which shows "Carrier IQ references" in the latest version of iOS. The "probably benign" references, however, may not be enabled unless a flag called DiagnosticsAllowed is set, and they don't seem to do anything more than monitor call signal strength -- one of the main features that Carrier IQ advertises its software for.

    Samsung Android smartphones

    Eckhart has posted screenshots of the Carrier IQ software, which show what it looks like before it is modified: An actual app, which lets you choose what you want to give feedback on.

    Android expert k0nane on the XDA-Developers forum posted screenshots of what the app looks like on Samsung phones, as well as technical background. It's been heavily modified, with an array of switches to control which of your activities are logged. You can turn it off, but it requires advanced skill to access the app to begin with.

    HTC Android smartphones

    Unlike the Samsung phones, HTC phones' version of Carrier IQ has had its menu stripped down to the point where it's impossible to tell what each option does from looking at it. This prevents HTC smartphones' owners from disabling the app from inside it, even if they can find it to start with.

    Smartphones on Sprint's network

    According to Eckhart, "Sprint is known to collect carrier IQ data because users have the application running reporting to them, but have no privacy policy, retention policy, or public information on what they use the data for." Even a Sprint phone purchased second-hand and used only on Wi-Fi will still report in to Sprint.

    Smartphones on Verizon's network

    Verizon has publicly acknowledged what data it collects, and that it uses the data it collects to help it serve ads (among other things). It has given its customers the choice to opt out of having their data used for these purposes, but not to opt out of having it collected to begin with.

    Jared Spurbeck is an open-source software enthusiast, who uses an Android phone and an Ubuntu laptop PC. He has been writing about technology and electronics since 2008.

     

    3 comments

    • sinecureseeker  •  5 mths ago
      oh to be a fly on the wall when they download our muslim in chief's keystrokes... then the truth about him would finally be believed.
    • Andre  •  Pleasanton, United States  •  5 mths ago
      It's not my job to provide the carriers or this stupid company (Carrier IQ) feedback! If they want my feedback and data, they should have to request that, and then pay for it. #$&*@ them!
    • kenalexruss  •  5 mths ago
      Hackers will be all over this since the "data mining" is already done for them by Carrier IQ! Just intercept the CIQ data stream and voila! Not hard at all. Took me 10 minutes to capture it live in the air waves! That means with a scanner tuned in I can capture 1000s of users with CIQ employed. Yes, it's that easy. Imagine a hacker focusing on particular users - potentially devastating results! One email, one app, one wrong click is all it takes!

      Hackers will be all over this! Now it gets worse!
      Several of the company's employees and directors have links to para governmental agencies in both China and Iran! Yes, simple materials found by googling employees, from their own [CIQ] web site and seeing where they used to work or trained or went to school reveals lots more than imagined! Amazing! I shudder to think what a full audit of the books will reveal - as in "follow the money"!

      Finally, carriers, manufacturers and Carrier IQ are in violation of wiretap laws, espionage laws and a host of other legal violations that could effectively put most involved in jail for 20 yrs or more!

      Amazing!
    [ [ [['Connery is an experienced stuntman', 2]], 'http://yhoo.it/KeQd0p', '[Slideshow: See photos taken on the way down]', ' ', '630', ' ', ' ', ], [ [['Connery is an experienced stuntman', 7]], ' http://yhoo.it/KpUoHO', '[Slideshow: Death-defying daredevils]', ' ', '630', ' ', ' ', ], [ [['know that we have confidence in', 3]], 'http://yhoo.it/LqYjAX ', '[Related: The Secret Service guide to Cartagena]', ' ', '630', ' ', ' ', ], [ [['We picked up this other dog and', 5]], 'http://yhoo.it/JUSxvi', '[Related: 8 common dog fears, how to calm them]', ' ', '630', ' ', ' ', ], [ [['accused of running a fake hepatitis B', 5]], 'http://bit.ly/JnoJYN', '[Related: Did WH share raid details with filmmakers?]', ' ', '630', ' ', ' ', ], [ [['accused of running a fake hepatitis B', 3]], 'http://bit.ly/KoKiqJ', '[Factbox: AQAP, al-Qaeda in Yemen]', ' ', '630', ' ', ' ', ], [ [['have my contacts on or glasses', 3]], 'http://abcn.ws/KTE5AZ', '[Related: Should the murder charge be dropped?]', ' ', '630', ' ', ' ', ], [ [['have made this nation great as Sarah Palin', 5]], 'http://yhoo.it/JD7nlD', '[Related: Bristol Palin reality show debuts June 19]', ' ', '630', ' ', ' ', ], [ [['have made this nation great as Sarah Palin', 1]], 'http://bit.ly/JRPFRO', '[Related: McCain adviser who vetted Palin weighs in on VP race]', ' ', '630', ' ', ' ', ], [ [['A JetBlue flight from New York to Las Vegas', 3]], 'http://yhoo.it/GV9zpj', '[Related: View photos of the JetBlue plane in Amarillo]', ' ', '630', ' ', ' ', ], [ [['the 28-year-old neighborhood watchman who shot and killed', 15]], 'http://news.yahoo.com/photos/white-house-stays-out-of-teen-s-killing-slideshow/', 'Click image to see more photos', 'http://l.yimg.com/cv/ip/ap/default/120411/martinzimmermen.jpg', '630', ' ', 'AP', ], [ [['Titanic', 7]], 'http://news.yahoo.com/titanic-anniversary/', ' ', 'http://l.yimg.com/a/p/us/news/editorial/b/4e/b4e5ad9f00b5dfeeec2226d53e173569.jpeg', '550', ' ', ' ', ], [ [['He was in shock and still strapped to his seat', 6]], 'http://news.yahoo.com/photos/navy-jet-crashes-in-virginia-slideshow/', 'Click image to see more photos', 'http://l.yimg.com/cv/ip/ap/default/120406/jet_ap.jpg', '630', ' ', 'AP', ], [ [['xxxxxxxxxxxx', 11]], 'http://news.yahoo.com/photos/russian-grannies-win-bid-to-sing-at-eurovision-1331223625-slideshow/', 'Click image to see more photos', 'http://l.yimg.com/a/p/us/news/editorial/1/56/156d92f2760dcd3e75bcd649a8b85fcf.jpeg', '500', ' ', 'AP', ] ]
    [ [ [['did not go as far his colleague', 8]], '29438204', '0' ], [ [[' the 28-year-old neighborhood watchman who shot and killed', 4]], '28924649', '0' ], [ [['because I know God protects me', 14], ['Brian Snow was at a nearby credit union', 5]], '28811216', '0' ], [ [['The state news agency RIA-Novosti quoted Rosaviatsiya', 6]], '28805461', '0' ], [ [['measure all but certain to fail in the face of bipartisan', 4]], '28771014', '0' ], [ [['matter what you do in this case', 5]], '28759848', '0' ], [ [['presume laws are constitutional', 7]], '28747556', '0' ], [ [['has destroyed 15 to 25 houses', 7]], '28744868', '0' ], [ [['short answer is yes', 7]], '28746030', '0' ], [ [['opportunity to tell the real story', 7]], '28731764', '0' ], [ [['entirely respectable way to put off the searing constitutional controversy', 7]], '28723797', '0' ], [ [['point of my campaign is that big ideas matter', 9]], '28712293', '0' ], [ [['As the standoff dragged into a second day', 7]], '28687424', '0' ], [ [['French police stepped up the search', 17]], '28667224', '0' ], [ [['Seeking to elevate his candidacy back to a general', 8]], '28660934', '0' ], [ [['The tragic story of Trayvon Martin', 4]], '28647343', '0' ], [ [['Karzai will get a chance soon to express', 8]], '28630306', '0' ], [ [['powerful storms stretching', 8]], '28493546', '0' ], [ [['basic norm that death is private', 6]], '28413590', '0' ], [ [['songwriter also saw a surge in sales for her debut album', 6]], '28413590', '1', 'Watch music videos from Whitney Houston ', 'on Yahoo! Music', 'http://music.yahoo.com' ], [ [['keyword', 99999999999999999999999]], 'videoID', '1', 'overwrite-pre-description', 'overwrite-link-string', 'overwrite-link-url' ] ]
    Loading...
    • USS Iowa passes under the Golden Gate Bridge en route from Richmond, California to Los Angeles

      SAN FRANCISCO (Reuters) - The Golden Gate Bridge was a larger than life engineering project undertaken against dangerous odds and it opened 75 years ago on Sunday against vehement protest, at the cost of 11 lives. One of the most astonishing and admired man-made wonders of the world, gracing millions of postcards, featured …

    • NEW ORLEANS (Reuters) - The Gulf Coast is a hot destination again two years after the massive BP Plc oil spill made the region a tourist dead zone, with the petroleum giant pumping more than $150 million into promotions to help the region recover. In New Orleans, about 150 miles northeast of where BP's well blew up on April …

    • Retired military vessel USS Iowa prepares for departure from Richmond, CA en route to Los Angeles

      RICHMOND, California (Reuters) - The battleship USS Iowa, which served the United States through victory and tragedy during six decades at sea, set off on its final voyage on Saturday, a trip to Los Angeles to become a museum. With a cheer, volunteers in hard hats cast off the last of a dozen thick lines that had moored …

    • ATLANTA (Reuters) - Tropical Storm Beryl closed in on the southeastern U.S. coast on Sunday, dumping rain and whipping up heavy surf from northeastern Florida to South Carolina. The second named storm of the 2012 Atlantic hurricane season is expected to make landfall later on Sunday with possible wind gusts to hurricane …

    • Handout photo of smoke billowing from the site of wildfires at the Whitewater-Baldy Complex in southwestern New Mexico in the Gila National Forest

      SANTA FE, New Mexico (Reuters) - Calmer winds and cooler temperatures promised relief on Sunday to fire crews battling blazes in New Mexico and Colorado, where wildfires sweeping across miles of forest, brush and grass have forced evacuations and disrupted holiday weekend travel plans. New Mexico's wildfires - which are …

     
    With significant physical rehabilitation, these wounded warriors perform inspiring acts of athleticism. Join the conversation.
    Meet the six families who are relying on your suggestions to confront real challenges this election year.
    Should Bill and Donna take on more risk to boost their business?