Skip to main content

Your Android Phone Is Recording Everything You Do. Really Bad.

We have seen many security loop holes in Android related to either malware, apps, custom carrier modifications. Now, 25 year old Android developer Trevor Eckhart has discovered an interesting piece of software that comes pre-installed on most Android, Blackberry and Nokia phones.

It records everything you do from your phone. It can even grab your passwords and queries! Worse!

 

image

 

 

The below embedded video recorded by Trevor shows how it works. The spying software called Carrier IQ (developed by www.carrieriq.com) secretly logs everything a user does with his phone including text messages, encrypted web searches, phone calls, location and you name as well!

Carrier IQ as described on their website is a software meant to monitor user’s experience with a phone so that carriers and manufacturers can do quality control.

 

 

This 17 minute long video is lengthy but interesting. Fast forward to 8:45 for the actual scene. A unique identifier is logged depending on the user key stroke. Once connected to WiFi or 3G, Carrier IQ will send all the logged data to its servers. This may include all your important information.

However, the in a phone interview to Wired.com, the company defended in a PDF statement what the product does -

We’re not looking at texts. We’re counting things. How many texts did you send and how many failed. That’s the level of metrics that are being gathered.

But the video clearly demonstrates this is not true.

Unfortunately, there is nothing much you can do to avoid it. You cannot uninstall or stop the service. On Android phones, the only choice is to root your phone and replace the OS with your own custom without this software pre-installed.

Now it looks like the late Steve Jobs was right. Back few months ago, when security researchers found iPhones running iOS 4 firmware were tracking location, during the whole debacle, one such user sent an email to Apple asking for answers. If he didn’t get them soon, he said, he’d switch to Droid; they don’t track him. Steve’s answer: “Oh yes they do”.

[via] Wired

Comments

Popular posts from this blog

Your Google Apps Account is Changing

Google is about to make more of its services available to organizations with Google Apps accounts. This is an early adopter phase, and all domains may not get this option to move to the new infrastructure. What this means for you: In addition to the core suite of messaging and collaboration applications, Google Apps users may now access many more Google services with their Google Apps accounts.     Those who are eligible for this early adoption, Google Apps administrator will be presented with the above banner to start with the migration. In your organization, you can transition selected pilot users and admins, or you can start the transition now for all your users. The transition for pilot users can be reverted if necessary. After successful transition, your users will now be able to use other Google popular products like AdSense, AdWords, Alerts, Analytics, Android, Blogger, Finance, Google Desktop, News, Orkut, Reader, Voice, YouTube (Full list here ). Als...

How to Turn Your Android Phone into a Fully-Automated Superphone

What if your phone automatically went silent when you step into the movie theatre? Texted your significant other when you finished your long commute? Or automatically turned down the volume when a particularly loud friend called? It can; here's how. Android application Tasker gives you total rules-based automation for your Android phone. It's not free, but it offers a free 14-day trial download. Tasker can do nearly anything on your phone. It's mostly limited by your imagination. Here are some up-front ideas about neat automations that come to mind: • Set preferences for each application: Give the Kindle app a longer screen time-out. Make Maps or Foursquare automatically turn on GPS, and have a file browser launch when you trade out SD cards. Have your music and other audio apps lower the volume to 50 percent when you plug in headphones, so you never get a way-too-loud moment. • Time of day automation: Make your phone go into airplane mode overnight, but re-conne...

Google Wallet: The Future Innovative Mobile Payments

Earlier few months, Google unveiled future innovative way of payment technology – Google Wallet. Today, Google released its first version of the Android app with Sprint Nexus S 4G phones through an over the air update. Google Wallet is an app that lets you pay for things using your phone, either by tying your credit card or gift or pre-paid cards. It works using an near field communication (NFC) embedded chip and there is no swiping required.   According to Techcrunch , Google Wallet will not work everywhere your credit card will. It won’t work everywhere there’s an NFC-friendly card reader, either. Wallet requires an NFC reader based on a new-ish specification, and only a select bunch of retailers have gotten around to updating. The post also had some great review and walkthrough in real life. This app is now available to Samsung Nexus S owners on Sprint, through PayPass sensors at Radio Shack, Foot Locker, Peet’s Coffee & Tea, Sunoco, CVS/pharmacy, etc. retailers. ...