Carrier IQ Denies Wiretap Claims
Smartphone network diagnostic software maker says it only collects data that carriers request. Is your phone affected?Carrier IQ, a "mobile service intelligence" provider, has responded to ongoing questions about exactly what types of information its handset monitoring software records, and denied allegations that its software runs afoul of wiretapping regulations.
"Carrier IQ is aware of various commentators alleging Carrier IQ has violated wiretap laws and we vigorously disagree with these assertions," according to a statement released by the company Thursday.
More Security Insights
Webcasts
- Why Bad Guys Write Malware– And What You Can Do About It
- Protecting End Users Against Emerging Threats
White Papers
- Five Steps to Managing Third-Party Application Security Risk
- Meeting the Challenges of Endpoint Security
Reports
More >>According to Carrier IQ, while its smartphone monitoring applications see smartphone data--to assess what is or isn't pertinent to monitoring the performance of the smartphone or the network that it uses--that isn't the same as recording or transmitting that data. "While a few individuals have identified that there is a great deal of information available to the Carrier IQ software inside the handset, our software does not record, store, or transmit the contents of SMS messages, email, photographs, audio, or video," according to Carrier IQ. "For example, we understand whether an SMS was sent accurately, but do not record or transmit the content of the SMS. We know which applications are draining your battery, but do not capture the screen."
[ Carrier IQ is an insane breach of enterprise trust, says IT leader Jonathan Feldman. See what he says must change, in Carrier IQ: Mobile App Crap Must Stop. ]
Notably, federal wiretapping statutes provide exemptions for carriers and their business partners to monitor the performance of their infrastructure. Carrier IQ said that it "acts as an agent for the operators," to help make their customers' phones work better. "Our software allows operators to figure out why problems are occurring, why calls are dropped, and how to extend the life of the battery," it said.
Carrier IQ's Thursday statement includes a testimonial from security expert Rebecca Bace of Infidel, a former member of NSA's Information Security Research and Technology Group, as well as deputy security officer for Los Alamos National Laboratory. "Having examined the Carrier IQ implementation it is my opinion that allegations of keystroke collection or other surveillance of [a] mobile device user's content are erroneous," said Bace.
Carrier IQ's statement was released in response to growing questions about what data its software collects from handsets, and why. Suspicion had been mounting over the company's software after the Electronic Frontier Foundation disclosed a cease-and-desist letter that Carrier IQ had sent to 25-year-old Connecticut security researcher Trevor Eckhart last month--threatening at least $180,000 in copyright damages--after he published insights into how the company's software operates, and branded it as a rootkit. (Similarly, security researchers before him had labeled it as spyware).
Related Reading
| To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy. |
Subscribe to RSSResource Links
Related Webcasts
- Why Bad Guys Write Malware– And What You Can Do About It
- Securing the Cloud: Extend the Benefits of Traditional IT Environments to Cloud
- Protecting End Users Against Emerging Threats
- Perform Better in a Hybrid Cloud World
- Outsourcing Security: What Every Potential Cloud Security Customer Should Know
This Week's Issue
Free Print Subscription
SubscribeCurrent Healthcare Issue
- InformationWeek Healthcare CIO 25: Our second annual honor roll of the health IT leaders driving healthcare's transformation.
- EHR Unreadiness: Only a small percentage of physicians planning to apply for Meaningful Use funds have e-health record systems capable of achieving most of the requirements. .
- And much more!
- Read the Current Issue
Related Whitepapers
- Cyber Security Risk: A Conversation with Richard Clarke about Threats to Enterprise Software
- Meeting the Challenges of Endpoint Security
- Forrester Report: Killing Data for Security and Risk Professionals
- Everything You Need to Know About Cloud Security but Were Afraid to Ask
- Seven Steps for Building Security in the Cloud from the Ground Up
Featured Resource
Download this paper to learn how Dell computers running Microsoft Windows 7 can help you make your operations more secure and meet compliance requirements.
Learn More












