Got an Android phone? it's logging everything

av8r · By: **av8r** On: Wed Nov 30, 2011 8:26 pm

Watch the whole video or at least the last 1/3.

The Android developer who raised the ire of a mobile-phone monitoring company last week is on the attack again, producing a video of how the Carrier IQ software secretly installed on millions of mobile phones reports most everything a user does on a phone.

http://www.wired.com/threatlevel/2011/1 ... ing-video/

SMITTY · By: **SMITTY** On: Wed Nov 30, 2011 8:30 pm

Wow creepy .... as soon as I clicked on this post Shepard Smith started talking about this on Fox. :lol:

I'm 100% convinced the government is worried that the jig is up. They want to see if we're getting fed up enough to overthrow them. They're afraid.

ValterBorges · By: **ValterBorges** On: Wed Nov 30, 2011 8:48 pm

I dont see how this is any different than your cable provider, tivo. Basically by providing a phone #' a url, an ip, youre telling the carriers routers to relay to info, so obviously they need some info to provide connectivity, billing and qos. As long as they are encrypting messaging, voice, and not storing routing info for purposes other than billing, i dont see how else they could provide the service.

The postal man knows you got mail, maybe even what type, and if not confidential may even know what it is. He can even mistakenly open it even though its a crime. The later can be prevented in the digital world.

av8r · By: **av8r** On: Wed Nov 30, 2011 8:53 pm

ValterBorges wrote:I dont see how this is any different than your cable provider, tivo. Basically by providing a phone #' a url, an ip, youre telling the carriers routers to relay to info, so obviously they need some info to provide connectivity, billing and qos. As long as they are encrypting messaging, voice, and not storing routing info for purposes other than billing, i dont see how else they could provide the service.

Did you watch the entire video? If so...you think it's OK that every key press is logged and sent? Every text message, every email, every web search, every encrypted web page is sent in the clear?

I can only surmise that you didn't watch the video in its entirety.

ValterBorges · By: **ValterBorges** On: Wed Nov 30, 2011 9:10 pm

sent where? its got to be sent to the cell tower, to the routers etc, so it can be delivered.

Can you tell for sure from the video that before it becomes a over the air signal its not getting encrypted?
Can you tell from the video that it can be sniffed and decrypted?

If the envelope contents are not encrypted they should be, but they still get transmitted and relayed and bounced off many circuits, networks, thus the importance of encrypting everything end to end.

SMITTY · By: **SMITTY** On: Wed Nov 30, 2011 9:17 pm

That's the problem - nobody knows where ... or more importantly WHY this info is being sent. Another reason I'll never get one of these phones. Verizon is forcing us to by eliminating useful features on normal phones, like the camera & video capabilities. Then, of course, when you switch you get to pay an extra $30 a month for the "enhanced" service.

I have satellite tv, with no Tivo ( not sure I even know what that is ... ) & while it has a telephone port, I didn't see the need to connect it.

I'm about ready to toss the phone in my septic tank - keylog that you sons of bitches!

av8r · By: **av8r** On: Wed Nov 30, 2011 9:22 pm

ValterBorges wrote:sent where? its got to be sent to the cell tower, to the routers etc, so it can be delivered.

Can you tell for sure from the video that before it becomes a over the air signal its not getting encrypted?
Can you tell from the video that it can be sniffed and decrypted?

If the envelope contents are not encrypted they should be, but they still get transmitted and relayed and bounced off many circuits, networks, thus the importance of encrypting everything end to end.

Wow...Really?

it's sent to CarrierIQ's servers. Even if it wasn't...it's absolutely wrong that this data is logged anywhere on the phone. You don't need to log data to send data...that's what memory is for. As far as encryption is concerned...once the session is established all data should be encrypted before it leaves the device. He shows in the video that the data is being logged in the clear before it's sent! Read the RFC http://www.ietf.org/rfc/rfc2818.txt

ricoman2737 · By: **ricoman2737** On: Wed Nov 30, 2011 9:28 pm

Check out the Friday Night Show "Person of Interest", this show depicts everything that is being discussed here.

ValterBorges · By: **ValterBorges** On: Wed Nov 30, 2011 9:36 pm

Watched the video hes showing software that traps events much like every os. Just because you can see what your typing it doesnt mean it not encrypting this before transmitting or only transmitting certain events. In order to prove this you would have to intercept the transmitted signal and see if you can decrypt it. Then you would have to prove the carrier is storing or retransmitting or selling utilization for purposes other than qos.

ValterBorges · By: **ValterBorges** On: Wed Nov 30, 2011 9:50 pm

You don't need to log data to send data...that's what memory is for. As far as encryption is concerned...once the session is established all data should be encrypted before it leaves the device. He shows in the video that the data is being logged in the clear before it's sent!

Most interrupt based os's allow you to trap signal events and write them to video memory thus showing on the screen. You can even read data from memory and display it on the screen. Just because you can see these events and the data before it gets encrypted and transmitted it doesnt mean it isnt.

Ill give you that they should do a better job to hide and obfuscate theyre os, but who knows what hacked mod os this guy is running. Ill also give you that it should be looked into further but i still believe in innocent before proven guilty.

This is likely a utility for software developers, integrators to debug.

av8r · By: **av8r** On: Wed Nov 30, 2011 9:56 pm

ValterBorges wrote:
You don't need to log data to send data...that's what memory is for. As far as encryption is concerned...once the session is established all data should be encrypted before it leaves the device. He shows in the video that the data is being logged in the clear before it's sent!

This is likely a utility for software developers, integrators to debug.

http://www.carrieriq.com/

ValterBorges · By: **ValterBorges** On: Wed Nov 30, 2011 10:19 pm

So the carrier is gathering quality and utilization data to improve the user experience and keep up with demand, still all legit and nothing different than cable. They should give you the option to opt out but when the networks get all congested they need data to justify costs, upgrades, troubleshoot, etc. They should also make sure they are only transmitting logging statistics.

av8r · By: **av8r** On: Wed Nov 30, 2011 10:39 pm

ValterBorges wrote:So the carrier is gathering quality and utilization data to improve the user experience and keep up with demand, still all legit and nothing different than cable. They should give you the option to opt out but when the networks get all congested they need data to justify costs, upgrades, troubleshoot, etc. They should also make sure they are only transmitting logging statistics.

We aren't going to see eye to eye on this one so we'll have to agree to disagree. This information should not be logged on any device as it's no different than a keylogger. The carrier has no need of the actual contents of email, texts, etc. All they require would be the amount of data being carried, not the contents.

jpete · By: **jpete** On: Wed Nov 30, 2011 11:37 pm

When the government logs everything you do electronically, does it really matter that your phone does?

http://www.wired.com/science/discoverie ... 6/04/70619

samhill · By: **samhill** On: Thu Dec 01, 2011 9:25 am

Jpete, I'm pretty sure that those wire taps are legal under the Patriot Act, I know it gives them a lot of rights while taking them away from us & all without a court order.

Got an Android phone? it's logging everything

Got an Android phone? it's logging everything

Re: Got an Android phone? it's logging everything

Re: Got an Android phone? it's logging everything

Re: Got an Android phone? it's logging everything

Re: Got an Android phone? it's logging everything

Re: Got an Android phone? it's logging everything

Re: Got an Android phone? it's logging everything

Re: Got an Android phone? it's logging everything

Re: Got an Android phone? it's logging everything

Re: Got an Android phone? it's logging everything

Re: Got an Android phone? it's logging everything

Re: Got an Android phone? it's logging everything

Re: Got an Android phone? it's logging everything

Re: Got an Android phone? it's logging everything

Re: Got an Android phone? it's logging everything