Saturday, December 10, 2011

A Built-in Spy in Your Phone: Carrier IQ

Most android phones have built-in softwares that provide troubleshooting and tracking services. Though these applications might be really helpful to some users, there are also potential security hazards that might harm the users.

Just recently, a software found in most mobile phones was found to have a tendency to watch and record every move of the user. This software, called Carrier IQ, was primarily developed to help costumers track down errors and gather information needed for troubleshooting. However, Trevor Eckhart, a security researcher, discovered a hidden anomaly about this software. Carrier IQ, on the contrary, also happens to capture keystrokes, recording phone logs, decrypt text messages, and capture HTTPS requests. This software was installed in most phones such as Blackberry, Nokia, and other Android Phones.

The developer of Carrier IQ claims that they don’t transmit or use the data gathered by the software, but rather, it just stores it for troubleshooting. Some phone manufacturers such as HTC, also claim the data collected by the software is under a privacy policy and shall remain private and confidential. However, most users would agree that stored data is still at risk.

A former prosecutor for the Department of Justice, Paul Ohm, believe that the company has violated federal wiretap laws by collecting and storing important information such as text messages without the users consent. The company might face an expensive litigation in the near future.





No comments:

Post a Comment