BlackBerry Forums Support Community

BlackBerry Forums Support Community (http://www.blackberryforums.com/index.php)
-   BlackBerry and Mobile Security (http://www.blackberryforums.com/forumdisplay.php?f=145)
-   -   Carrier IQ (Spyware) on Blackberry? (http://www.blackberryforums.com/showthread.php?t=255894)

Jadey 12-02-2011 03:58 PM

Re: Carrier IQ (Spyware) on Blackberry?
 
I just read the cease and desist letter that Suzi linked above

https://www.eff.org/sites/default/fi...d_redacted.pdf

Freaking hilarious.

daphne 12-02-2011 09:27 PM

Re: Carrier IQ (Spyware) on Blackberry?
 
Quote:

Originally Posted by TBOLTRAM (Post 1757808)
Actually it is a matter of principal. No one has the right to monitor you unless there is a court order.

Exactly, particularly not without your knowledge *and* consent.

One of the problems is that many of us are conditioned that being monitored is just how things are... and in many respects that's true. That that doesn't make it ok or right. So much monitoring is passive and opt out that we forget about it. Even things like store cards, there's a big database in the sky where all of our purchases made with store cards, credit cards, ATM/debit cards are stored. Websites too.

Anyone remember a once notorious female who had her Amazon purchase history supboenaed by prosecutor Kenneth Starr? :razz:

I think part of the big reaction to the news about Carrier IQ is because the American people are rightfully getting fed up with being surreptitiously monitored. And because it was mostly previously unknown, hidden, and there was no way to turn if off. It reminds me of the Sony rootkit debaucle.

Mobile spyware is becoming a scourge like computer spyware was 10 years ago. Gator or 1800Solutions anyone? People got sick of that and the FTC eventually cracked down on them, and folks are becoming sick of mobile monitoring now.

I don't disagree with NJB's statement that the sky fell long ago, but that doesn't make it ok or right, or mean that we should be passive about it. Reading that CIQ is not as pervasive as initially thought is good news, but it doesn't change the fact that it's wrong on many levels as Ian said.

daphne 12-02-2011 09:28 PM

Re: Carrier IQ (Spyware) on Blackberry?
 
Quote:

Originally Posted by Jadey (Post 1757824)
I just read the cease and desist letter that Suzi linked above

https://www.eff.org/sites/default/fi...d_redacted.pdf

Freaking hilarious.

Yep, and that response makes the company look all the more guilty.

daphne 12-04-2011 09:00 PM

Re: Carrier IQ (Spyware) on Blackberry?
 
Now T-Mobile says they install Carrier IQ on several BlackBerry models and other devices.
List Of Currently Sold T-Mobile Devices With Carrier IQ Software

tsac 12-04-2011 09:45 PM

Re: Carrier IQ (Spyware) on Blackberry?
 
Quote:

Originally Posted by TBOLTRAM (Post 1757808)
Actually it is a matter of principal. No one has the right to monitor you unless there is a court order.

Not wanting to keep the paranoia going, Just so everyone is very clear, the requirement to collect, hold and make available all email, all text, all incoming and out going calls is something the carriers are doing. Unless you have something to hide it generally means nothing to the average user. I do agree with daphne, it is a matter of privacy. None of which we have anymore.
also the Tmobile post stating they do not use Carrier IQ to track text and other email information is correct, they have other methods for this.

aiharkness 12-05-2011 06:27 AM

Quote:

Originally Posted by daphne (Post 1758080)
Now T-Mobile says they install Carrier IQ on several BlackBerry models and other devices.
List Of Currently Sold T-Mobile Devices With Carrier IQ Software

FYI for those who don't already know, the CIQ software is apparently in the My Account app (see the internal T-Mobile document posted at the tmonews link Daphne posted). So, if you didn't download and install the app (the icon on your BlackBerry out of the box is just a download link) then you don't have the My Account app installed; or you can deny it permissions; or, if you have installed it, you can delete the My Account app.
Posted via BlackBerryForums.com Mobile

jsconyers 12-05-2011 08:58 AM

Re: Carrier IQ (Spyware) on Blackberry?
 
Quote:

Originally Posted by tsac (Post 1758083)
Unless you have something to hide it generally means nothing to the average user.

I disagree, it records every keystroke made on the device. So if you enter your credit card information, passwords, account numbers, etc. It is recording those. Even if you have nothing to hide, this information should not be recorded or tracked in any way.

daphne 12-05-2011 11:35 AM

Re: Carrier IQ (Spyware) on Blackberry?
 
That's right. The video showed it recording keystrokes on https. Even if the carrier isn't using that information, there's still the possiblity they could use it or it could be subpoened.

Nico57 12-05-2011 09:25 PM

Re: Carrier IQ (Spyware) on Blackberry?
 
And unless I totally failed to understand how it works, one of the greatest selling points of the BB solution for enterprise customers is this secure channel between the BB phone and the BES.
Going like "uhh, by the way, there's this little app sitting in between that's logging everything you type in" is not likely to sound nice to the ears of big corps.

Preroll 12-06-2011 11:30 AM

Re: Carrier IQ (Spyware) on Blackberry?
 
Quote:

Originally Posted by jsconyers (Post 1758151)
I disagree, it records every keystroke made on the device. So if you enter your credit card information, passwords, account numbers, etc. It is recording those. Even if you have nothing to hide, this information should not be recorded or tracked in any way.

Thank you!

In addition to Carrier IQ's DB, it's something that could also be subjected to MITM (Man-In-The Middle) Attacks. People sued for invasion of privacy years ago. If people don't push back at some point, this crap is only going to get worse.

I understand NJBlackberry's comment on being tracked by almost everything electronic these days but there needs to be some resistance by the users to prevent this from getting worse. This information can lead to company theft (from stolen emails) and even identity theft. I personally don't think we can just say this sux and forget about it.

Anyway, just my two cents...

Preroll 12-14-2011 03:31 PM

Re: Carrier IQ (Spyware) on Blackberry?
 
This was the best line of the article (IMHO):

Carrier IQ has said its software is not designed to capture keystrokes or the content of messages, but in some cases that may have happened by accident.

Feds probing Carrier IQ - The Washington Post

Preroll 12-16-2011 02:47 PM

Re: Carrier IQ (Spyware) on Blackberry?
 
Sprint: Carrier IQ has been disabled on our devices

tsac 12-16-2011 09:04 PM

Re: Carrier IQ (Spyware) on Blackberry?
 
So now we have denials, confirms, maybe's and definitely not's We need a few somewhat's.

Preroll 12-28-2011 11:05 AM

Re: Carrier IQ (Spyware) on Blackberry?
 
The latest update to all this:

Carrier IQ takeaway: You don't control your phone - Dec. 28, 2011

I found this part of the article to be somewhat interesting however:

Carrier IQ and a security consultant, Dan Rosenberg of Virtual Security Research, determined that HTC had turned on a debug logger that should have been left off by default. As a result, the Carrier IQ app was temporarily storing everything a user did on the phone. The software maker said it is working with HTC to fix the issue.

jsconyers 01-18-2012 09:04 AM

Re: Carrier IQ (Spyware) on Blackberry?
 
Sprint is removing Carrier IQ. I received an update to my Evo 3D last night and I checked for CIQ and it is no longer there.

HTC And Sprint Working On Software Updates That Remove Carrier IQ | TechCrunch

Preroll 01-31-2012 01:19 PM

Re: Carrier IQ (Spyware) on Blackberry?
 
House Wants Cell Phone Owners Warned of Tracking Software

Markey Releases Discussion Draft of Mobile Device Privacy Act in Wake of Carrier IQ Software Concerns | Congressman Ed Markey, Massachusetts 7th District


All times are GMT -5. The time now is 10:06 AM.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.