Mobile
News
11/15/2011
04:52 PM
50%
50%

Smartphone Invader Tracks Your Every Move

Carrier IQ software, installed on more than 141 million mobile phones, tracks GPS location, websites visited, search queries, and all keys pressed.

Eckhart said the information being collected by Carrier IQ was even more expansive than what Sprint had shared in 2009. "We can see from the dashboard that GPS data can be viewed historically or in real time by date, time, whatever. That makes for a very efficient law enforcement portal, just like what's detailed being blatantly abused in Soghoian's article. It also relates to how Verizon is gathering info for their new ad tracking program," he said. "Things like exact keypress data being stored as well shows this. What use would what words I'm typing ever be to 'network performance'? Maybe words per minute would be useful, but it's not that--it's an exact record of what you are typing."

Verizon has publicly acknowledged that it uses Carrier IQ statistics, both for mobile usage information (device location, app and feature usage, and website addresses, which may include search string) as well as consumer information (use of Verizon products and services, as well as demographic information, such as gender, age, and dining preferences). It also offers customers a way to opt out of this usage.

Meanwhile, "Sprint is known to collect Carrier IQ data because users have the application running reporting to them, but have no privacy policy, retention policy, or public information on what they use the data for," said Eckhart.

But Sprint spokesman Jason Gertzen said via email that Sprint uses the information for diagnostic purposes. "Carrier IQ provides information that allows us to analyze our network performance and identify where we should be improving service. We also use the data to understand device performance so we can figure out when issues are occurring," he said. "The information collected is not sold and we don’t provide a direct feed of this data to anyone outside of Sprint."

Deactivating installed Carrier IQ software can be difficult, at least as implemented by many carriers. While Samsung Android devices offer a somewhat hidden Carrier IQ on/off switch, HTC Android devices offer no such feature. Accordingly, if you buy an ex-Sprint phone off of eBay and Carrier IQ software is installed, you're being tracked, said Eckhart. But Carrier IQ's Woods said that her company's software is set to disable data collection if the device's SIM card or mobile carrier changes.

How can you determine if the software is running on a device? "Logging TestApp scanner will detect it in the kernel--use 'Check Props' feature--as well as files used in the regular Loggers scan," said Eckhart. He's the developer behind Logging TestApp, which can also be used to reveal the Carrier IQ menus often hidden by carriers when they roll out the application.

If Carrier IQ is found and isn't wanted, deleting it can also be difficult. "The only way to remove Carrier IQ is with advanced skills. If you choose to void your warranty and unlock your bootloader you can (mostly) remove Carrier IQ," he said. "Logging TestApp can identify files used in logging and you can manually patch or use [the] Pro version to automatically remove [them]."

Android expert Tim Schofield has also released a YouTube video showing how to remove Carrier IQ from the Samsung Epic 4G running Android Gingerbread 2.3.5, but warned that it would require flashing the ROM. "What [Carrier IQ] does is log things you do and send it to Sprint, so it's like a spyware thing that you don't want on your phone," he said.

Previous
2 of 2
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Aleee
50%
50%
Aleee,
User Rank: Apprentice
3/22/2012 | 11:44:09 AM
re: Smartphone Invader Tracks Your Every Move
Smartphones use career IQ software on their user Mobiles, they even see their contact list chat log through these software, they main intent that they put that software on user account to analyze the from which region there most of the customer and what kinda App they most like. This help these Smart-phone companies to make their Marketing Plan. Most of the other companies are offering App for different smartphones like Blackberry Spy which help them to track down any person activities.
k0nane
50%
50%
k0nane,
User Rank: Apprentice
11/16/2011 | 6:45:57 PM
re: Smartphone Invader Tracks Your Every Move
Edit 8:39pm GMT-6 11/16/11:

Comment deleted.

EDIT 12/4/2011:

Hi InformationWeek readers! I originally deleted this comment after getting in touch with Mr. Schwartz about some items found in his original article, but removed a note about that after being made aware of the pricy lawsuit threats flung at my fellow developer. In order to protect myself, I chose to bide my time until the threats were made public, at which point there would be essentially no risk to others. I would like to thank Mr. Eckhart for voluntarily taking the risk upon himself, and the EFF for aligning with him. I did not have the protection of the EFF at the time, which influenced my decision.

I would like to note that I never "moved on" at any point - I have been continuing to look into Carrier IQ behind the scenes, and have been providing assistance as necessary to other prominent researchers.

I can be contacted regarding Carrier IQ and other issues via email at k0@k0nane.info, via Twitter (@k0nane/@publik0) or via PM on irc.irondust.net. For members of the media, other contact methods are available upon request.
InformationWeek Elite 100
InformationWeek Elite 100
Our data shows these innovators using digital technology in two key areas: providing better products and cutting costs. Almost half of them expect to introduce a new IT-led product this year, and 46% are using technology to make business processes more efficient.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Tech Digest, Dec. 9, 2014
Apps will make or break the tablet as a work device, but don't shortchange critical factors related to hardware, security, peripherals, and integration.
Video
Slideshows
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
Join us for a roundup of the top stories on InformationWeek.com for the week of December 14, 2014. Be here for the show and for the incredible Friday Afternoon Conversation that runs beside the program.
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.