full-disclosure - Re: Carrier IQ for your phone

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20111206172220.GA2662@sivokote.iziade.m$>
Date: Tue, 6 Dec 2011 19:22:20 +0200
From: Georgi Guninski <guninski@...inski.com>
To: "Alan J. Wylie" <shyyqvfpybfher@...ie.me.uk>
Cc: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: Carrier IQ for your phone

On Sat, Dec 03, 2011 at 12:14:06PM +0000, Alan J. Wylie wrote:
> "Kain, Rebecca (.)" <bkain1@...d.com> writes:
> 
> > http://www.extremetech.com/computing/107427-carrier-iq-which-phones-are-infected-and-how-to-remove-it
> >
> > and Julian Assange weighs in:
> >
> > http://www.geek.com/articles/mobile/julian-assange-to-iphone-blackberry-users-youre-screwed-2011121/
> >
> > It is interesting how many errors my Iphone has stored on it, now that I looked.  I'm amazed the thing makes calls at all.
> >
> > And congress is here to save us:
> >
> > http://www.pcmag.com/article2/0,2817,2397105,00.asp
> 
> Interesting response from Carrier IQ in a long article on The Register:
> 
> http://www.theregister.co.uk/2011/12/02/carrier_iq_interview/
> 
> | Yes, Carrier IQ is a vast digital fishing net that sees geographic
> | locations and the contents of text messages and search queries
> | swimming inside the phones the software monitors, the company's VP of
> | marketing, Andrew Coward, said in an extensive interview. But except
> | in rare circumstances, that data is dumped out of a phone's internal
> | memory almost as quickly as it goes in. Only in cases of a phone crash
> | or a dropped call is information transferred to servers under the
> | control of the cellular carrier so engineers can troubleshoot
> | bottlenecks and other glitches on their networks.
> 
> -- 
> Alan J. Wylie                                          http://www.wylie.me.uk/
>


looks like if a corporation does it, it is business.
if a non-incorporated entity does it, it is a crime.

-- 
j

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/