full-disclosure - Re: Carrier IQ for your phone

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 13 Dec 2011 15:19:31 -0800
From: coderman <coderman@...il.com>
To: "Ivan .Heca" <ivanhec@...il.com>
Cc: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: Carrier IQ for your phone

On Tue, Dec 13, 2011 at 2:50 PM, Ivan .Heca <ivanhec@...il.com> wrote:
> http://www.gizmodo.com.au/2011/12/carrier-iq-explains-what-it-does-with-your-data/

"""
These logs [full debug, keylogging, etc.] are generated on phones sold
with the Carrier IQ program preloaded but the company says it’s
working with manufacturers and networks to adjust the certification
process and turn off debugging messages when the phone is activated.
"""

what a convenient little bit to flip. debug mode on!
anyone else found a way to toggle this remotely? :)

also fun:
  https://collector.iota.spcsdns.net:10003/collector/
anyone got a list of other iq collector URLs?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/