Connect
Related Content
On Twitter
M2M Channel - News
Eric Schmidt, or "Mr. Pot" as we prefer to think of him

Different keystrokes for different folks: Google’s Schmidt says Carrier IQ approach wrong

Posted By TelecomTV One , 09 December 2011 | 1 Comments | (0)
Tags: Google Carrier IQ Android keylogger Network Management

Talk about black kettles and pots! Eric Schmidt of Google has popped up to say that Google doesn’t support Carrier IQ’s approach and described its software as a ‘keylogger’. Ouch! By Ian Scales.

Carrier IQ has been embroiled in controversy since it was revealed that it worked with two US mobile operators to put software clients on Android phones that reported back on smartphone ‘events’.  It has claimed that this helped carriers manage the network and trouble-shoot problems and that personal data was not collected. Promise.
Advertisement
 (see - Not so smart? Carrier IQ admits it got things wrong, but it's not spying and it doesn't have secret software )
 
Now personal data collector-in-chief, Google’s Eric Schmidt, has put the boot in to Carrier IQ when he addressed a Google-hosted conference on internet freedom in the Hague this week - despite the fact that Google itself has been caught out actually collecting and storing personal data from WiFi hotspots (amongst other things).
 
Schmidt said that because Android was an open platform “people can make software for it that’s not very good for you,” and he indicated that Carrier IQ was an example of the wrong approach because the software had been pre-installed and users were unable to disable it.  
 
In fact the story has a familiar arc.  ‘Yes’, the software and the system behind it does have the capability to store keystrokes (it can record any event which takes place on the phone); but ‘no’ the 140 million handsets already installed with the software do not do that - at least that’s what’s claimed by the company.  
 
But the problem is not really to do with what the software is actually doing, but to do with the fact that the carriers using it were not being transparent about it to their users and didn’t offer any ‘opt-out’ for those worried about data security. Then, just to make the situation worse, when the story first broke Carrier IQ tried to gag the whistle-blower rather than hold its hands up and openly explain. 
 
In an interview on TelecomTV, Andrew Coward, VP of Marketing at Carrier IQ categorically denies that his company’s software is used to collect users’ keystrokes. 
 
Who can you believe?  Watch our Breaking News video below.
 

please sign in to rate this article
48297
BREAKING NEWS: Carrier IQ refutes Google accusation
 
 

1 comments (Add Yours) - click here to sign in

(1) 09 December 2011 16:26:48 by Doug Hanchard

An application can record keystrokes. But it's not what many think it is. It's not live. It'a record of what is being used. This has been done for decades, again in a different format. Mobile billing platforms would be impossible without such technology. The applications do not function at the carrier level by tracking key by key history. Carrier IQ can be used to determine connectivity issues with each application used (voice or data), which is why the software was developed in the first place.

Newer smart phones are the same way. Carriers do not collect data sets on a hourly, daily or weekly basis either, their Data Centers are not equipped to handle it, it's not practical and it would be impossible to analyze given the different ways smart phone applications are designed and used.

GPS coordinates have always been used since their implementation on phones and wireless triangulation for each phone is also used to track a phones call route to determine roaming charges.

This story has been over blown as it pertains to Carrier IQ. That's not to say that such applications are being used in phones - they are, but not by the carriers themselves and they are targeted phones through viral trojans and other methods.

There is one important question that hasn't been answer yet. Trevor Eckhart's discovery that even when a browser application is in HTTPS mode, it does appear that Carrier IQ establishes a link that breaks the security certificate path without the user's knowledge and can plot, record and archive the users website surfing history. This raises important issues including how https is being circumvented, and still complying with the SSL certificate standards laid down in RFC 2818.