Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
The keylogging is legitimately concerning as it is logging all your passwords as well and storing them on device somewhere. edit: incorrect

arn

Concerning? Sure, if you're worried about a company wanting to log into your Facebook and bank account. Illegal? No.
 
Last edited by a moderator:
Just read the article already? It's not about whether iOS/WindowsPhone7/Android/BBOS is safe or not. It is about the networks adding stuff like this in almost all phones to get user behaviour & information and what not.

And as far as I can see, Apple doesn't allow anything like that. It only allows actual diagnostic data including location instead of user behaviour or information. Please read carefully.

----------

Either via an on device Terminal or via SSH.

Cool. Correct me if I'm wrong; you would actually need your iPhone to be jailbroken to SSH into it right?

----------

My log, in screenshot format with the other person's info removed:

View attachment 314476

Thanks for the info.
 
Just read the article already? It's not about whether iOS/WindowsPhone7/Android/BBOS is safe or not. It is about the networks adding stuff like this in almost all phones to get user behaviour & information and what not.

And as far as I can see, Apple doesn't allow anything like that. It only allows actual diagnostic data including location instead of user behaviour or information. Please read carefully.
This. I don't care that this software isn't (allegedly) sending this information back home to sell to advertisers, the carriers, or whoever. It's that fact that the OEMs installed a keylogger on my phone to begin with. Wouldn't you be extremely upset if Apple installed a keylogger on your computer? This means that all your emails, passwords, credit card numbers, social security number, whatever you type is now in some file (potentially unecrypted) that can be stolen by a malicious user and used for whatever reasons.
 
Your iDevice must be jailbroken to SSH into it to modify this file.

All right. I get it.

Thanks

----------

"As far as you can see" doesn't count for much. Apple has too big of an incentive to do exactly the same thing as any other phone manufacturer. Or maybe they just do it "by accident." It's not wrong or even morally objectionable really, it's just business.

Good grief. You still didn't read the article and follow other stories on the Internet?

Seriously, when trying to confront people, gather your sources and information so that you need not bow your head with every fatuous comment.

Please.
 
Wirelessly posted (Mozilla/5.0 (Linux; U; Android 4.0.1; en-gb; Galaxy Nexus Build/ITL41D) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30)

All that matters to me is:

There is no CIQ on stock Android.
There is no CIQ on my Nexus phones.
There is no CIQ on AOSP builds of Android (like Cyanogenmod on my ZTE Blade)

The real fury should be directed at Sprint (Verizon have said they don't use CIQ), HTC, Samsung and CIQ themselves. Their monitoring software has no place monitoring half of what it does. The plain text SMS logs and HTTPS logging is absolutely appalling.

I hope that the full truth comes out over every aspect of what this software is doing comes out and who is using it.
 
Wirelessly posted (Mozilla/5.0 (Linux; U; Android 4.0.1; en-gb; Galaxy Nexus Build/ITL41D) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30)

All that matters to me is:

There is no CIQ on stock Android.
There is no CIQ on my Nexus phones.
There is no CIQ on AOSP builds of Android (like Cyanogenmod on my ZTE Blade)

The real fury should be directed at Sprint (Verizon have said they don't use CIQ), HTC, Samsung and CIQ themselves. Their monitoring software has no place monitoring half of what it does. The plain text SMS logs and HTTPS logging is absolutely appalling.

I hope that the full truth comes out over every aspect of what this software is doing comes out and who is using it.

All that matters is that they are screwing people while saying they are fluffy and pointing fingers at Apple.

Talk about droid-aid ....
 
Another WIN for the Android platform. My HTC is flashed with a custom ROM without any of that horse-hockey.

Open source FTW.
 
Wirelessly posted (Mozilla/5.0 (Linux; U; Android 4.0.1; en-gb; Galaxy Nexus Build/ITL41D) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30)

All that matters to me is:

There is no CIQ on stock Android.
There is no CIQ on my Nexus phones.
There is no CIQ on AOSP builds of Android (like Cyanogenmod on my ZTE Blade)

The real fury should be directed at Sprint (Verizon have said they don't use CIQ), HTC, Samsung and CIQ themselves. Their monitoring software has no place monitoring half of what it does. The plain text SMS logs and HTTPS logging is absolutely appalling.

I hope that the full truth comes out over every aspect of what this software is doing comes out and who is using it.

I don't get why HTC, Samsung, LG, Motorola, Sony and others have to bow down before carriers and totally SCREW with the phones operating system.

Why do none of those guys at some point say "No, your bloatware CRAP has no place on our phones or bogging down the customers experience."
 
This is a serious scandal. But the way that this keylogging software is publicized is even more interesting... It all started when CarrierIQ issued a C&D letter to a researcher...
 
Another WIN for the Android platform. My HTC is flashed with a custom ROM without any of that horse-hockey.

Open source FTW.

Only in the the most delusional Android fan dreams can it be called a win that someone would have to root a phone and flash the ROM to remove a legally questionable rootkit sanctioned by the service provider and OEM.

Seriously. Some of us want a phone, not a weekend hobby. :rolleyes:
 
Even HTTPS sites can be keylogged, which are supposed to be encrypted for safety...iOS has done right by us, Android might have sold everyone out

On Android (and Symbian, etc), It's got nothing to do with Google and everything to do with carriers. Basically, this software has been added by carriers into the custom firmware they ship on their phones. Vanilla Android doesn't have it and UK phones don't have it (it would probably be illegal over here).

This is one area that Apple have more control over than other manufacturers: They don't allow carriers to customise the firmware and that's most likely the reason there's no keylogging on iOS

In summary, it's not Google doing this, it's not Samsung, HTC, or other manufacturers: it's the US Carriers
 
So some clarification,

A closer look at the video seems to show that it's not really "keylogging", as originally indicated in the title.

- It's recording received text messages
- It's recording urls that you visit (https://www.google.com?query=my+search+term")
- It's recording physical button presses (home button etc...)
- It's recording virtual numeric keypad presses

As far as I can tell it's not recording every virtual keyboard press.

sorry for the confusion,

arn
 
/RANT

It seems to me that when a company has intentionally invaded privacy and broke the law in the process, the result shouldn't be some warm and fuzzy legislative hearing, but prosecution for organized crime. (Here in the UK it appears that there have been widespread violation of privacy laws by newspapers, yet precious few have been arrested, charged and convicted. :mad:) If CIQ has violated the law, then I hope those in the company who are responsible serve serious jail time.

RANT/

In any case, I think this highlights how much conflict of interest there among some phone manufacturers, network carriers, and software companies in who they consider to be the 'customer'. This kind of thing makes Android seem even less appealing to me (GMail as well).
 
So some clarification,

A closer look at the video seems to show that it's not really "keylogging", as originally indicated in the title.

- It's recording received text messages
- It's recording urls that you visit (https://www.google.com?query=my+search+term")
- It's recording physical button presses (home button etc...)
- It's recording virtual numeric keypad presses

As far as I can tell it's not recording every virtual keyboard press.

sorry for the confusion,

arn

All of that is just as intrusive. Its a *major* breach of privacy regardless.
 
This, on a tech news site, is comical.

Some of us want a phone, that we can tinker with to OUR liking, not steve jobs' liking.

Then you've chose the wrong company. That isn't Apple's philosophy anymore, and because of that, it has allowed them to make products which are insanely popular.

I never understood people who continue to hang around banging on about this sort of stuff that is just inherently against Apple's stance. Apple aren't trying to be this way, nor want to be this way, just be happy with the platform you have.

It has nothing to do with being on a technology site.
 
The real fury should be directed at Sprint (Verizon have said they don't use CIQ), HTC, Samsung and CIQ themselves. Their monitoring software has no place monitoring half of what it does. The plain text SMS logs and HTTPS logging is absolutely appalling.

I hope that the full truth comes out over every aspect of what this software is doing comes out and who is using it.


My HTC Wildfire S on 3 doesn't have carrier IQ on it, going by the running process list...
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.