Giving major smartphone makers and users, globally sleepless nights; the fear of Carrier IQ is back in news, and this time its search giant, Google clearing their stand in the issue. A Reuters report confirms that Eric Schmidt, Google's Executive Chairman has stated that neither does Google work in tandem with Carrier IQ, nor does it support it.
Google and Apple faced a lot of heat when news about Android and iOS-powered smartphones being packed with Carrier IQ software began surfacing. When questioned the same, Schmidt stated that, "Android is an open platform, so it's possible for people to build software that's actually not very good for you, and this appears to be one."
Carrier IQ is one of the leading providers of mobile Intelligence solutions in the wireless industry. They came into news when it was discovered that a rootkit program installed by them on Android and iOS-powered smartphones kept a track of private user details. Makers like RIM, Nokia, stated that their smartphones do not come with Carrier IQ software, soon after.
Only yesterday, we reported and subsequently introduced you to the misdeeds of Carrier IQ - one of the leading providers of mobile Intelligence solutions in the wireless industry, who were accused of snooping into the private details of the users' smartphones, an accusation, which they accepted. Now, an official post by RIM assures users that those using BlackBerry smartphones needn't worry about any rootkit programs by Carrier IQ.
Just as reports about the supposed Carrier IQ interventions on several smartphones began making rounds, RIM issued a statement saying, "RIM can attest that it does not pre-install the CarrierIQ application on BlackBerry smartphones and has never done so. Furthermore, RIM does not authorize its carrier partners to install the CarrierIQ application on BlackBerry smartphones before sales or distribution and has never done so. RIM also did not develop or commission the development of the CarrierIQ application, nor is RIM involved in any way in the testing, promotion, or distribution of the CarrierIQ application." A Nokia spokesperson via a tweet stated that, "CarrierIQ has not shipped products for Nokia devices."
The accusations, which trickled in yesterday revealed that Android smartphones and iPhones were the ones suspectedly infected by the rootkit programs. Worryingly though, it has been learnt that Carrier IQ works closely with handset manufacturers, so irrespective of whether you’ve bought the phone on contract, you may have this rootkit in your phone.
If you’re worried about downloading rogue apps from the app store accidentally then this may come as a bit of a shock. Apparently, a company called Carrier IQ has been installing rootkit programs that log your data and usage patterns in many smartphones like iPhones and Android phones. This company is one of the leading providers of mobile Intelligence solutions in the wireless industry and have stated that while they do look into the device’s performance, they are not recording keystrokes or providing tracking tools. This is mainly a concern in the U.S right now, since mobiles are usually purchased on contract basis with carriers. The thing is however, Carrier IQ also work closely with handset manufacturers, so irrespective of whether you’ve bought the phone on contract, you may have this rootkit in your phone.
The solution is obviously to get rid of it, since none of us want any of our personal data to be shared by anyone. The solution is the simplest for the iPhone running iOS 5. Simply head to Settings > General > About > Diagnostics & Usage and select ‘Don’t send’. It’s a bit trickier on Android. For starters, you’ll have to install this app, ‘Logging Test App’. It’s not available on the app store and you’ll need a rooted Android phone. Once installed, click the ‘CIQ Checks’ button and in a short while, you get the result. If the white box is blank, this means you don’t have Carrier IQ. However, if you get a bunch of text then it’s present and the only way to get rid of it right now is to pay $1 for an Android market key and the app will ‘try’ to get rid of it. This is more of a 50-50 chance, which isn’t very reassuring, but that’s how it is. If you are paranoid about this then do give it a shot and holla in the comments on how it went.
Last year, iPhone users had to deal with “locationgate.” Now, Android users have their privacy to worry about, as recent information that’s been uncovered by YouTuber TrevorEckhart has shown that software made by a company called Carrier IQ, installed by default on many Android phones by the carriers and hardware manufacturers, is tracking a whole lot more about your phone usage than just your location.
What is Carrier IQ, exactly?
The software is hidden inside phones — there is little you can do to detect that it’s even installed, let alone remove it, and it tracks everything. Keystrokes, browsing and surfing habits, Google searches, and basically every single thing that you are doing on your phone and every button that you press is logged by this software. Jump to 9:00 in the YouTube video below for the proof — this is basically a keylogger running on your phone that you didn’t know about.
The company that’s creating this software claims that the point of the software is to deliver “analytics” about devices to the carriers to help them provide better service to their users. But is recording every keystroke really necessary for that information? Does not telling the users about this and making it near-impossible to opt out seem a bit fishy to anybody else? This software is on almost all Android phones made by the big names (HTC, Samsung, Motorola), and is even on BlackBerries and Nokia devices, as well.
Carrier IQ says in this public statement that it is “not logging keystrokes or providing tracking tools” and that its software is used to track performance, but the video proves entirely otherwise: this app is sitting in between you and the Android OS and is making a note of everything you do. Secure websites don’t help. Even using Wi-Fi doesn’t help. Your phone use is being logged by this software, and there is no way to easily opt out.
So what can I do to ensure my privacy?
Unfortunately, there is no easy way to protect yourself. There’s no switch that you can turn off in the settings of your phone or software that appears in your app drawer that you can simply uninstall. As far as the GUI of your phone is concerned, Carrier IQ isn’t even there. But it is there, hiding in the background, making sure that you don’t even know it exists. And for many, that’s just not cool. Your phone is a deeply personal device and contains lots of things (emails, photos, text messages) that many would consider totally private. Why should this company have access?
While I’m almost certain that the hubbub on the blogosphere that has resulted from TrevorEckhart’s research will force the company to come up with a way to turn its software off, that has not happened yet. In the meantime, Android users who value their privacy need some kind of a solution. If you’d like to make sure Carrier IQ is not on your phone, the best way to do that would be to replace the Android ROM on your phone with another that does not have Carrier IQ installed. Here’s how to do it:
First, you need to root your phone. Rooting isn’t as scary as it may sound, and there are many guides available for the different devices. The best place to look for information on rooting is the XDA Forum. Search on the page for your phone name and go to the “General” forum for the device. There, you should find threads with guides on how to root and get the phone ready to install custom ROMs. The process varies widely phone by phone, so we can’t give you a definitive guide here, but XDA is generally on top of the best rooting processes for the major devices.
The next step is to find a ROM that supports your device that does not have Carrier IQ installed on it. Your best bet is to look for “AOSP” or “Vanilla” ROMs. These are versions of Android that have built entirely from the open source code for Android that’s released by Google each time a new version comes out. These ROMs will be free from carrier and device manufacturer tinkering, and won’t have Carrier IQ hiding in the background.
Another great custom ROM solution is Cyanogenmod. Cyanogenmod has some nice additional tweaks and features above stock Android, and is definitely the most well respected and most frequently updated custom ROM out there. Additionally, it’s available on most popular Android devices out there. We wrote a guide on installing Cyanogenmod earlier this year, as well as a guide on updating Cyanogenmod to the newest version. If you are worried about Carrier IQ, I recommend Cyanogenmod as the best solution. The developers are even working hard on the next version, based on Android 4.0, Ice Cream Sandwich.
Final thoughts:
I’ve had a custom ROM installed on my Android phone since day one, mostly because I don’t want to deal with Verizon’s bloatware, and I’m happy that this Carrier IQ tracking fiasco has not — and will not ever — affect me. It’s not okay that it’s affecting others, and the best way to combat it is to install a custom ROM and let Carrier IQ know that what it is doing is not okay. Here’s their website. Here’s the company’s contact page. We need as many Android fans as possible letting the people there know that they have installed Cyanogenmod specifically because Carrier IQ’s software invades their privacy. Let them know that unless they make this service opt-in rather than impossible to opt-out, you as a user will avoid their software and let your friends know that by default, their phone is spying on them.
In this digital age, privacy is more important than ever. Just because you “don’t have anything to hide,” does not mean that you shouldn’t value your privacy or fight for it when companies do things like this, especially with something as personal as your cell phone. While I understand that tracking some information such as phone performance and signal level anonymously is okay and important for carriers to optimize their networks, your keystrokes on your cell phone should not be logged.
