Sign in with
Sign up | Sign in

FBI May Be Using Carrier IQ Too; Carrier IQ Issues Report

By - Source: Forbes

There's speculation that the FBI may be using Carrier IQ's software based on a denied request for related documents.

There's speculation that the FBI may be using Carrier IQ's software based the bureau's refusal to supply information that may link back to the controversial "keylogger."

As reported by Forbes, Michael Morisy of Muckrock.com -- using the Freedom of Information Act has his foundation -- requested material from the FBI just after Trevor Eckhart's revealing video appeared on YouTube in November. The requested material included "manuals, documents or other written guidance used to access or analyze data gathered by programs developed or deployed by Carrier IQ."

But the FBI wouldn't cough up the goods, citing an exemption to the Freedom of Information law for scenarios in which forking over documents "could reasonably be expected to interfere with law enforcement proceedings." Based on that, speculation has taken flight, insinuating that the FBI may be using the software for law enforcement tracking. The bureau may also merely be investigating Carrier IQ itself thanks to a push by the Senate, or be in the process of using Carrier IQ in an investigation.

On Tuesday Carrier IQ responded to the FBI speculation, stating that it has "never provided any data to the FBI. If approached by a law enforcement agency, we would refer them to the network operators because the diagnostic data collected belongs to them and not Carrier IQ." The company also said that data is "not designed to address the special needs of law enforcement. The diagnostic data that we capture is mostly historical and won’t reveal where somebody is and what they are doing on a real-time basis."

Carrier IQ also released a 19-page document, "Understanding Carrier IQ Technology" (PDF), on Tuesday that attempts to explain what Carrier IQ does and does not do. The report outlines the benefits of using Carrier IQ for manufacturers and wireless carriers, the latter of which depend on the software's diagnostic data to make sure their networks are running optimally. The document also defends Carrier IQ against Trevor Eckhart's findings while also presenting a breakdown of its method of collecting data.

"What is actually gathered by a Network Operator is based on their business requirements and the agreements they form with their consumers on data collection," the document reads. "We cannot comment on all handset manufacturer implementations of Android. Our investigation of Trevor Eckhart's video indicates that location, key presses, SMS and other information appears in log files as a result of debug messages from pre-production handset manufacturer software. Specifically it appears that the handset manufacturer software's debug capabilities remained "switched on" in devices sold to consumers."

But Carrier IQ's report also admits to an SMS bug in the software that can inadvertently collect text message data. The bug only existed in embedded versions of the software, and was addressed with an updated version.

"Carrier IQ has discovered that, due to this bug, in some unique circumstances, such as a when a user receives an SMS during a call, or during a simultaneous data session, SMS messages may have unintentionally been included in the layer 3 signaling traffic that is collected by the IQ Agent," the company said. "These messages were encoded and embedded in layer 3 signaling traffic and are not human readable."

"No multimedia messages (MMS), email, web, applications, photos, voice or video (or any content using the IP protocol) has been captured," Carrier IQ adds.

There are 18 Comments.
Top Comments
  • 15
    NapoleonDK , December 14, 2011 6:10 AM
    Don't worry CarrierIQ, we believe you.
  • 12
    house70 , December 14, 2011 7:30 AM
    NapoleonDKDon't worry CarrierIQ, we believe you.

    The sarcasm is strong with this one...
  • 10
    bebangs , December 14, 2011 7:29 AM
    CarrierIQ use to be a sneaky, then it took an arrow to the knee.

    Stop right there criminal scum! pay the court a fine or serve your sentence, Your stolen goods are now forfeited.
Other Comments
  • 15
    NapoleonDK , December 14, 2011 6:10 AM
    Don't worry CarrierIQ, we believe you.
  • 2
    danwat1234 , December 14, 2011 6:49 AM
    It's the cell-phone companies I'm worried about and who might want the information Carrier IQ can gather. Carrier IQ's just a software company as far as I know. Kind of like how you could install Cyrix keylogger software on somebody's computer without permission and have it send information back to you.
  • 10
    bebangs , December 14, 2011 7:29 AM
    CarrierIQ use to be a sneaky, then it took an arrow to the knee.

    Stop right there criminal scum! pay the court a fine or serve your sentence, Your stolen goods are now forfeited.
  • 12
    house70 , December 14, 2011 7:30 AM
    NapoleonDKDon't worry CarrierIQ, we believe you.

    The sarcasm is strong with this one...
  • 1
    house70 , December 14, 2011 7:30 AM
    bebangsCarrierIQ use to be a sneaky, then it took an arrow to the knee. Stop right there criminal scum! pay the court a fine or serve your sentence, Your stolen goods are now forfeited.

    lol Oblivion/Skyrim.
  • 1
    house70 , December 14, 2011 7:33 AM
    For some reason, the fact that FBI uses CIQ software doesn't make me more confident....
  • 3
    nebun , December 14, 2011 7:34 AM
    the FBI does it again....all of them can go and jump off a cliff...so much for the so called FREEDOM....i feel pity
  • 7
    fyasko , December 14, 2011 7:38 AM
    The U.S. Constitution: what is it good for? it is softer than Charmin 3-ply in D.C.
  • 7
    seezur , December 14, 2011 7:38 AM
    Of course the FBI are using it. It's a logging program they can use to compile evidence on a suspect and they didn't have to develop it, it's win win for them. The thing we have to worry about is how they decide who is a "suspect"
  • 2
    bebangs , December 14, 2011 8:00 AM
    the FBI announcement was THE bomb. it just made the whole mess alot worse.

  • 4
    anonymous@guest , December 14, 2011 8:24 AM
    When your cell phone gets a call, it’s not like every tower on the network suddenly starts looking for your phone, only the towers with the best signal send the call. If for example you're in South Dakota when a call comes in, towers in California­, Kentucky and Maine aren't suddenly looking for you, only the towers with the best signal quality send you the call; this is how carriers guarantee “quality of service” and why there are cell phone towers all over the place.

    The "cell" in “cell phone” refers to the towers themselves, or more accurately the range of coverage for each tower. That is how the industry refers to them and in order to guarantee quality of service your provider needs to know what “cell” or “cells” your phone is closest to; so in that regard ALL CELL PHONES "smart" and "dumb" are tracked. Additionally all cell phones can be compromised allowing your devices microphone, camera, or GPS to be used by unauthorized persons without your knowledge. It has been proven that the contents of your entire phone including the text messages, emails, phone book, confidential log in information etc can be accessed with or without the phone being connected to any network, just like people used to steal phone numbers from highway overpasses when mobile phones first came out.

    We have spent YEARS researching the problem.

    The problem is REAL and so is the SOLUTION: The Case For Privacy – Because there is a case for privacy.

    www.thecaseforprivacy.com
  • 5
    mavroxur , December 14, 2011 10:08 AM
    If you're havin privacy problems, i feel bad for you son

    I got 99 problems, but Carrier IQ ain't one.

  • 0
    razor512 , December 14, 2011 12:21 PM
    The fact that it can be altered remotely makes it a big security risk. It may not be reading your messages and monitoring keystrokes now, but what if someone decided to enable that on a users phone.

    PS carrier IQ is not needed to get network related information from customers. Connected devices automatically report the details of the connection in order to negotiate the bit rate.
    Details on speed and saturation of the network is all generated ISP side and there is no need to get it from the phone.

    The most carrier IQ can do is probably help find dead zones by recording everywhere you go VIA GPS then reporting back home with the locations where a signal was not available.
    (but that same thing can be extrapolated with ISP side data by mapping out the average signal strength of users at certain towers and also use them to triangulate the general locations of the users with the weak signals.

    Eg if users between towers 4, 5, and 6 are having a week/ unreliable signal (really poor SNR), then they can send someone to properly examine the area and find a location for an additional cell tower.
  • 4
    memadmax , December 14, 2011 1:07 PM
    Network Security 101: Sending anything thru the air is up for grabs for anyone.
  • 1
    digitalzom-b , December 14, 2011 8:14 PM
    FBI questioned and denied comment? I bet this will be the last CarrierIQ article we see... and it will just kind of disappear from the media. :p 
  • 0
    hoofhearted , December 14, 2011 9:07 PM
    Look at the FBI's history with OnStar.
  • 1
    JacekRing , December 14, 2011 9:20 PM
    house70lol Oblivion/Skyrim.

    How does the gaurd in winterhold know that I stole that potato from farmer joe over by whiterun?
  • 0
    eddieroolz , December 15, 2011 5:14 PM
    And the plot thickens...
Tom’s guide in the world
  • Germany
  • France
  • Italy
  • Ireland
  • UK
Follow Tom’s guide
Subscribe to our newsletter