FYI: Secret software tracks phone users

dman597 · Nov 30, 2011

see link for video:
http://technolog.msnbc.msn.com/_new...researcher-secret-software-tracks-phone-users

A security researcher and systems analyst says a company's software is secretly logging the keystrokes of Android phone users, as well as those on some BlackBerrys and Nokia devices, although the company that makes the software denies the claims.
The matter has grown so contentious that the company, Carrier IQ, threatened researcher Trevor Eckhart of Connecticut with legal action, but then backed off and apologized after the Electronic Frontier Foundation recently intervened.
David Kravets of Wired's Threat Level has been writing about Eckhart's finding that Carrier IQ software "secretly chronicles a user’s phone experience, from its apps, battery life and texts. Some carriers prevent users who actually find the software from controlling what information is sent."
Other articles have appeared on the issue, but it's Eckhart's video (above) that many find chilling.
"Cringe as the video shows the software logging each number as Eckhart fingers the dialer," Kravets wrote.
Watching all of it may be too much tech for many, but at between 11:30 and 13:30 minutes into the video, you get the picture, as the keystrokes made on the phone screen, including text messages, are logged and shown on another screen.
Eckhart says Carrier IQ's software is a "rootkit," spying on unsuspecting users. Carrier IQ says it is not.
"While we look at many aspects of a device’s performance, we are counting and summarizing performance, not recording keystrokes or providing tracking tools," the company says in a statement.
In its Nov. 23 letter apologizing to Eckhart, shared on the company's site, Carrier IQ said it wanted to make clear what its software does do:

Our software makes your phone work better by identifying dropped calls and poor service. Our software identifies problems that impede a phone’s battery life. Our software makes customer service quicker, more accurate, and more efficient. Our software helps quickly identify trending problems to help mobile networks prevent them from becoming more widespread.

Related stories:

Android malware problems continue to grow

Android apps leakers when it comes to security?

Developers: Android is risky business

Check out Technolog, Gadgetbox, Digital Life and In-Game on , and on Twitter, follow Suzanne Choney.

wmdpowell · Nov 30, 2011

Little expectation for privacy in a digital world.

asphaltpilot · Dec 1, 2011

I was reading this in Gizmodo. It's ridiculous. Of course, it's only found (so far) on BB's and Androids, but I bet deep in the bowls of iOS the same shit is going on. Of course, WP is susceptible too.

http://www.youtube.com/watch?feature=player_embedded&v=T17XQI_AYNo#!

asphaltpilot · Dec 1, 2011

10 Important Updates

BattleStatic · Dec 1, 2011

Gonna make sure my phone does not have this after today. Funny how Sprint is the only one openly admitting to using this.

asphaltpilot · Dec 1, 2011

The thing is, ok, a few companies/carriers have come out to say they don't use Carrier IQ, but do they use any similar tracking software? I want that question answered.

asphaltpilot · Oct 19, 2012

Again, more statements that Verizon (and other carriers) use tracking / information gathering even after stating months ago they don't do it.

From http://www.webpronews.com/verizon-might-cancel-its-entire-windows-phone-8-line-rumor-2012-10

AT&T is poised to be the number one carrier for Windows Phone 8 this holiday season. Many Verizon customers, who also happen to be Windows Phone fans, were distraught to find that the Lumia 920 was exclusive to AT&T. Now it looks like Verizon might not even carry a single Windows Phone because Microsoft cares too much about your privacy.

Wait, what?

You see, a recent privacy policy update allows Verizon to spy on and share users’ location data and Web usage habits. According to International Digital Times, Verizon is using this newfound power to share information with advertisers. The carrier gets ad dollars and advertisers get valuable tracking data to further target their ads.

Microsoft is having none of it. They won’t let Verizon install spyware on Windows Phone 8, and Verizon won’t carry the devices for that reason. Daily Mobile reports that both parties are working towards an agreement, but Microsoft seems unwilling to give any leeway to Verizon on the matter.

Where have I heard all of this before? Oh right, this is just like Microsoft’s current fight with advertisers over the “Do Not Track” button being set on by default in Internet Explorer 10. Microsoft has come out in defense of privacy, and advertisers don’t like it one bit. They even went as far as saying that advertisers could just ignore any DNT signals being sent by IE10.

So where does this leave Windows Phone 8 if this rumored situation ends up being true? Verizon is a major carrier and very popular among the populace. Windows Phone 8 can’t afford to lose such an important carrier, but Microsoft is wanting to be the good guy here. Will it be morality or cold hard cash that wins out in the end? My bet is on the latter.

We’ve reached out to Verizon and Microsoft on the issue and will update when he hear back.
Click to expand...

asphaltpilot · Oct 19, 2012

More.

http://news.yahoo.com/verizon-draws-fire-for-monitoring-app-usage--browsing-habits.html

Verizon Wireless has begun selling information about its customers' geographical locations, app usage, and Web browsing activities, a move that raises privacy questions and could brush up against federal wiretapping law.

The company this month began offering reports to marketers showing what Verizon subscribers are doing on their phones and other mobile devices, including what iOS and Android apps are in use in which locations. Verizon says it may link the data to third-party databases with information about customers' gender, age, and even details such as "sports enthusiast, frequent diner or pet owner."

"We're able to view just everything that they do," Bill Diggins, U.S. chief for the Verizon Wireless marketing initiative, told an industry conference earlier this year. "And that's really where data is going today. Data is the new oil."

Verizon Wireless says that its initiative, called Precision Market Insights, is legal because the information is aggregated and doesn't reveal customers' identities. Also, the company says, its customers can opt out at any time.

But hyper-detailed monitoring of customers' activity looks a lot like the deep packet inspection techniques that landed NebuAd in hot water -- including a congressional investigation -- four years ago. NebuAd's chief executive, Robert Dykes, claimed he had created "anonymous profiles that cannot be hacked or reverse-engineered," but the controversy led to the company's demise.

Hanni Fakhoury, a staff attorney at the Electronic Frontier Foundation in San Francisco, said a wireless carrier that discloses information about which URLs a customer visits could run afoul of the Wiretap Act. In general, the law says, carriers may not "divulge the contents of any communication."

"I don't see any substantive difference between collecting content from one person and turning it over to someone, and collecting it from multiple people, aggregating that information and then turning the aggregated data over to someone else," Fakhoury says. "In the end, there is still a capturing of content from the user at some point -- and that's what the potential (Wiretap Act) problem is."

Paul Ohm, a professor at the University of Colorado Law School currently working at the Federal Trade Commission, concluded in a law review article that federal privacy law "likely forbids many invasive forms of ISP monitoring."

"We're able to view just everything that they do," Bill Diggins, U.S. chief for Verizon Wireless' marketing initiative, says at PricewaterhouseCoopers' Data to Dollars event.

In a video that was posted of the industry event sponsored by PricewaterhouseCoopers in Los Angeles, Verizon's Diggins touted the carrier's extensive monitoring abilities: "We're able to analyze what people are viewing on their handsets. If you're at an MLB game, we can tell if you're viewing ESPN, we can tell if you're viewing MLB, we can tell what social networking sites you're activating, if you're sending out mobile usage content that's user-generated on video."

Verizon Wireless declined to answer questions that CNET posed last week about how its technology works, but it did provide this statement:

Verizon is committed to customer privacy and takes the issue seriously. The Precision program complies with the law and protects the privacy of our customers. The reports available through the program will not disclose the content of specific customer communications because each report will contain aggregate data from a large number of customers to protect privacy. Customers who do not want their data used as part of the program can opt-out at any time.

"Deep" vs. "shallow" packet inspection

It's true, of course, that any company selling Internet connectivity needs to know the destination of packets so it can route them properly, a practice sometimes referred to as shallow packet inspection.

But monitoring which mobile apps customers are using and which URLs are visited typically means engaging in deep packet inspection, which is controversial because it's more intrusive.

Verizon Wireless' marketing literature acknowledges that it sells "mobile-usage data that offers insights on the mobile-device habits of an audience, including URL visits, app downloads and usage." (Not all carriers do: Google guarantees that its proof-of-concept Google Fiber project "will not engage in deep packet inspection" except when necessary to fend off network attacks.)

Ryan Radia, associate director of technology studies at the Competitive Enterprise Institute think tank, agrees with the EFF's Fakhoury that disclosing aggregated URLs visited can be legally risky. "If Verizon Wireless discloses the URLs you've accessed without your consent, it has violated (the Wiretap Act) -- even if Verizon Wireless doesn't disclose any other identifying information," Radia said.

But, Radia argues, Verizon has obtained consent for its Precision Market Insights program by updating its privacy policy and allowing customers to opt out. That's sufficient to satisfy the Wiretap Act by putting the company's subscribers on notice, he says, and notes that a lawsuit that arose out of NebuAd's monitoring was dismissed last year (PDF).

The 2003 In Re Pharmatrak decision from the U.S. Court of Appeals for the 1st Circuit offers a glimpse of how judges view whether customers truly consented. The court ruled in a case involving Web tracking "that it makes more sense to place the burden of showing consent on the party seeking the benefit of the exception." The judges approvingly cited a second case, which said "consent can only be implied when the surrounding circumstances convincingly show that the party knew about and consented to the interception."

In addition, a Florida appeals court has ruled that a state law closely resembling the Wiretap Act is violated when information about "websites visited by the user" is intercepted without consent. Wiretap Act violations can be punished by damages of $100 per victim per day or $10,000 per victim, whichever is greater.

Verizon's Diggins said the carrier had created "a very sophisticated system" so advanced it can predict what customers will want: "We're able to identify what that customer likes not by filling out a form, but by analyzing what they do on a day-to-day basis. We're able to serve them products that we know they like because we've seen that they've gone through and downloaded products like it." One potential customer for the Precision program, he said, is a sports arena that wants to know more about who's attending a game.

There is an irony here: as the online advertising market is shifting toward behavioral targeting, sometimes called interest-based ads, companies like Facebook, Yahoo, Google, and Microsoft are able to compile detailed profiles on their users. But because of legal twists -- and, perhaps, an old-fashioned cultural norm skeptical of the telephone company listening in on calls -- broadband and wireless providers are being left behind.

However, ads make Facebook and Google free to use. Says Christopher Soghoian, principal technologist with the ACLU's Speech, Privacy and Technology Project: "When you pay a company $80 a month, they have no business monetizing the data they're collecting."
Click to expand...

Log in or Sign up

Welcome to Tacoma World!

FYI: Secret software tracks phone users

#1
dman597 [OP] Well-Known Member

#2
wmdpowell Well-Known Member

#3
asphaltpilot CAPS CAPS CAPS!

#4
asphaltpilot CAPS CAPS CAPS!

#5
BattleStatic Gluten Free

#6
asphaltpilot CAPS CAPS CAPS!

#7
asphaltpilot CAPS CAPS CAPS!

#8
asphaltpilot CAPS CAPS CAPS!

Products Discussed in

Log in or Sign up

Useful Searches

Welcome to Tacoma World!

FYI: Secret software tracks phone users

#1 dman597 [OP] Well-Known Member

#2 wmdpowell Well-Known Member

#3 asphaltpilot CAPS CAPS CAPS!

#4 asphaltpilot CAPS CAPS CAPS!

#5 BattleStatic Gluten Free

#6 asphaltpilot CAPS CAPS CAPS!

#7 asphaltpilot CAPS CAPS CAPS!

#8 asphaltpilot CAPS CAPS CAPS!

Products Discussed in Entire Site Forum: Technology

#1
dman597 [OP] Well-Known Member

#2
wmdpowell Well-Known Member

#3
asphaltpilot CAPS CAPS CAPS!

#4
asphaltpilot CAPS CAPS CAPS!

#5
BattleStatic Gluten Free

#6
asphaltpilot CAPS CAPS CAPS!

#7
asphaltpilot CAPS CAPS CAPS!

#8
asphaltpilot CAPS CAPS CAPS!

Products Discussed in