The Android developer who raised the ire of a mobile-phone monitoring company last week is on the attack again, producing a video of how the Carrier IQ software secretly installed on millions of mobile phones reports most everything a user does on a phone.
http://www.wired.com/threatlevel/2011/11/secret-software-logging-video/
__________________________________________________________
December 2, 2011
Stealthy Cellphone Software Stirs Outcry
The Associated Press
SAN FRANCISCO — Technology bloggers are asking if our cellphones are spying on us after a security researcher said a piece of software hidden on millions of phones was recording virtually everything people do with them.
Amid a broad outcry, Sen. Al Franken is calling for an investigation. A class-action lawsuit has been filed against the software’s maker, Carrier IQ Inc. of Mountain View, California
The software, which Carrier IQ says is used on some 150 million mobile devices, appears relatively innocuous. It does watch what owners of Sprint Nextel Corp. and AT&T Inc. smartphones do with them, including what people type and the numbers they dial. But it doesn’t seem to transmit every keystroke to the company. Instead, it kicks into action when there’s a problem, like a call that doesn’t go through, and it lets the phone company know.
“It is software that is developed in partnership with carriers with the intent to improve network performance. As far as we can tell, it meets this description in execution,” said Tim Wyatt, principal engineer at Lookout, a cellphone security company.
“In line with our privacy policy, we solely use CIQ software data to improve wireless network and service performance,” AT&T said in a statement.
Carrier IQ says the data its software gathers is stored by the phone companies or at Carrier IQ’s facilities. It doesn’t sell the data to third parties. Phone companies, of course, already are custodians of a wealth of private information, including whom you call, where you surf and what your text messages say.
The brouhaha started a few weeks ago, when a programmer named Trevor Eckhart documented Carrier IQ’s workings with videos on his blog. The software company threatened him with a lawsuit if he didn’t take the information down. The Electronic Frontier Foundation took on Eckhart’s case, and the company backed down.
Eckhart posted another video this week, showing Carrier IQ’s software logging keystrokes on an HTC EVO 3D from Sprint.
A central privacy worry is what kind of data Carrier IQ is retaining.
Andrew Coward, a Carrier IQ vice president, said the software doesn’t record every keystroke or send information about all of them back to the company. The only keystrokes it cares about are specific administrative commands, including those instructing the software to phone “home.” The rest it discards, Coward said.
“We never expected to need the content of SMS messages, so we didn’t code for it,” Coward told The Associated Press in an interview.
Apple Inc. has said it has stopped supporting Carrier IQ in most of its products. Separately, the company came under fire last year over location-tracking features of the iPhone and made a software change to keep data on users’ movements for less time.
For now, there’s no easy way to uninstall the Carrier IQ software without unsanctioned third-party software. Coward said it is “too early to tell” whether the company will make any substantial changes to the software because of the uproar.
___
Svensson reported from New York.
http://www.npr.org/templates/story/story.php?storyId=143069767
Dilemma X 
December 4, 2011 at 6:08 pm
Dilemma X is very informative about whats really going on in the world. Keep up the great work.
December 27, 2011 at 7:59 am
Thank you for a very informative article. Is there a phone that will work in Europe GSM with sim card and in the US with sim card and also analog? Do any providers work with such a phone system? I am in Eastern Europe and can not go in to the local cell phone providers and ask and I could not find a way to ask such a question for example to Cingular on thier site.