Carrier IQ is not as scary as it looks, suggests study

posted by Nick T. / Dec 06, 2011, 9:14 AM

Carrier IQ is not as scary as it looks, suggests study

While many are accusing Carrier IQ of all kinds of mischief, including logging the text messages, call information, and browsing history of unsuspecting subscribers, others claim that the controversial software is much more harmless than it is being portrayed. Dan Rosenberg, who is a security expert at VSR, shares in his blog that Carrier IQ is actually unable to read the contents of text messages, e-mails, and other types of sensitive data. In other words, the carrier cannot use the software to eavesdrop on you even if it wanted to.

That is the conclusion Rosenberg arrived at after extensively analyzing the software's inner workings on a Samsung Epic 4G Touch. He does point out, however, that Carrier IQ is capable of sending tracking information on some occasions, such as a device's GPS coordinates. The report has also found that keystrokes can indeed be logged, but that cannot be done outside of the dialer application. And since the carrier knows who you are calling anyway, that cannot be viewed as a potential threat to a user's privacy.

What may seem somewhat disturbing is that website URLs are being sent as well, including secured ones, but on the bright side, the actual web page content cannot be viewed by using Carrier IQ. The list of applications that are running on a smartphone is also accessible by the carrier, but that is likely used for detecting unauthorized tethering rather for anything more elaborate.

So, what do you guys think? Is Carrier IQ really that much of a privacy threat, or is it just a victim of exaggerated claims? Feel free to drop a comment below and let us know.

source: Dan Rosenberg via MobileBurn

Options

10 Comments

1. arcq12

Posts: 733; Member since: Oct 13, 2011

i think people just exaggerates.. as i have said before its for CIA to track down criminals and terrorists.. lol

posted on Dec 06, 2011, 9:26 AM 6

6. buggerrer

Posts: 306; Member since: Sep 21, 2011

Perhaps it is exaggerated or perhaps it isn't. I'm personally still uncertain. However, I would not consider the ideal intended application of this information collecting to justify such power (if it is as serious as it seems). Employees who work for the CIA (or Cyber IQ) are people too. People who are there for our security are not immune to this kind of consideration (security leaking pictures of peoplehttp://j.mp/vnDl75). While videos on the internet show the ugly side of people, they also show you the ugly side of people in various outfits (e.g. police uniform). Lastly, I hope that legitimate investigative journalism continues in whatever form it needs to so we don't forget this fundamental truth.

posted on Dec 06, 2011, 10:32 AM 6

2. GALAXY-S

Posts: 701; Member since: Jun 07, 2011

its a lil exaggerated, carriers need this type of information to better there network and monitor the usage... why would a carrier care of what you do in your personal time ?? really ?? lol oh by the way my device doesnt have carrier IQ (htc sensation 4g)

posted on Dec 06, 2011, 9:42 AM 0

3. arcq12

howcome your name is GALAXY-S and you own a HTC Sensation 4G? lol

posted on Dec 06, 2011, 9:48 AM 3

4. jacko unregistered

what does mine say :)

posted on Dec 06, 2011, 10:01 AM 2

5. GALAXY-S

i used to own the galaxy-s when i first registered but that was like 4 phones ago lol , i kept the name though no need to change

posted on Dec 06, 2011, 10:23 AM 0

7. clevername

Posts: 1436; Member since: Jul 11, 2008

The only Tong I wood be concerned about is the collection of website URla. I invite it said they can't be read by carrieriq but if they're collected does that mean someone can access them? this question needs to be answered. The possibility of secured pages being accessible is though only uncomfortable one here...for me

posted on Dec 06, 2011, 11:44 AM 0

8. supadave

Posts: 12; Member since: Mar 26, 2010

What I find funny is that the majority of the top comments are from people who do not value their own privacy probably due to the Desensitization the Media & Gov. has been pushing real hard for the past decade, with the false threats of terrorism etc. . I for one am not willing to sacrifice my freedom/privacy for false threats of terrorism, So for that reason I am greatful that my carrier (Verizon Wirless) doesn't use this product.