top | item 3298205

Carrier IQ references discovered in Apple's iOS

305 points| acak | 14 years ago |theverge.com | reply

85 comments

order
[+] Kylekramer|14 years ago|reply
Companies love data. Every last of one of them from your local grocery store to Apple. Love it, want as much of it as possible. Heck, most of the major publicized features of iOS 5 put your data on Apple's servers (iMessage: your texts and MMS; Siri: pretty much every thing including searches, calendars, and email; iCloud: it is called iCloud).

Long and short of it is that if you want privacy beyond "I'm boring, so no one cares", a device that holds pretty much every important bit of info about you made by large corporations that is nearly always connected to the internet via carriers isn't really for you.

[+] Samuel_Michon|14 years ago|reply
If you are not paying for it, you're not the customer; you're the product being sold. That's why I don't use Gmail. When I pay for cloud services (like MobileMe, now iCloud) I feel more confident that my personal information isn't analyzed, sold, and used to manipulate me. Apple doesn't need to sell my data to profit from me.

I value my privacy but I'm not Richard Stallman. I carry a cell phone, so there's a chance I'm being tracked. I like viewing web sites in a graphical web browser (not Chrome) -- it has JavaScript permanently turned on, I accept some cookies, and I find the geolocation service convenient. I understand I'm giving up some privacy by doing all that.

[+] ajross|14 years ago|reply
I think that's way too cynical. Yes, that's what the manufacturers and carriers want. No, they don't "have" to get it. They don't get it in other consumer product areas.

We can roll over or we can complain and fix it. This fight is winnable and worth having.

[+] ugh|14 years ago|reply
Why do they love data? What do they use it for?
[+] gurkendoktor|14 years ago|reply
When I upgraded to iOS5, I was asked if I wanted to help Apple by automatically sending anonymous usage data. Doesn't this sound like exactly what CarrierIQ would be doing? If this is really what it is, then this is a total non-issue on iOS.

See here (for those not on iOS5): http://www.youtube.com/watch?v=oxBsKO2lJQk#t=42s

But if this is CarrierIQ working there, then it means it's also being used in Europe. And it probably also means that the media will get in an iOS vs Android fight again instead of highlighting the issue. And FWIW, it surprises me much more that RIM would do crap like that.

[+] doe88|14 years ago|reply
Here are the result of the current investigations made by @chpwn http://blog.chpwn.com/post/13572216737

I'm an iOS user and I'm concerned by this, I know that maybe these data are not sent to any remote server or maybe it depends on the carrier, but still I'm concerned that Apple would integrate a third party binary on its system. That's plain wrong for me. I want them to tell us what their phone collect, what their phone send to remote servers and for what uses. It is a matter of trust, trust is hard to gain and easy to lose and I think that Apple should handle this asset with great care.

[+] Anechoic|14 years ago|reply
still I'm concerned that Apple would integrate a third party binary on its system

Really? Based on the "Legal" section of my 3rd gen iPod touch, there appears to be a bunch of third-party binaries integrated into iOS.

[+] jritch|14 years ago|reply
Apple would like your help to improve the quality and performance of its products and services. Your device can automatically collect diagnostic and usage information and send it to Apple for analysis — but only with your explicit consent.

Diagnostic and usage information may include details about hardware and operating system specifications, performance statistics, and data about how you use your device and applications. None of the collected information identifies you personally. Personal data is either not logged at all or is removed from any reports before they’re sent to Apple. You can review the information by going to Settings, tapping General, tapping About and looking under Diagnostics & Usage.

If you have consented to provide Apple with this information, and you have Location Services turned on, the location of your device may also be sent to help Apple analyze wireless or cellular performance issues (for example, the strength or weakness of a cellular signal in a particular location). This diagnostic location data may include the location of your device once per day, or the location where a call ends. You may choose to turn off Location Services for Diagnostics at any time. To do so, open Settings, tap Location Services, tap System Services and turn off the Diagnostics switch.

You may also choose to turn off Diagnostics altogether. To do so, open Settings, tap General, tap About and choose “Don’t Send” under Diagnostics & Usage.  

To help Apple’s partners and third-party developers improve their apps, products and services designed for use with Apple products, Apple may provide such partners or developers with a subset of diagnostic information that is relevant to that partner’s or developer’s app, product or service, as long as the diagnostic information is aggregated or in a form that does not personally identify you.

For more information, see Apple’s Privacy Policy at www.apple.com/privacy

[+] quadhome|14 years ago|reply
Sweet copy paste.
[+] X-Istence|14 years ago|reply
I wish we could get straight answers from Apple, HTC, Nokia, Samsung and others as to whether this tracking technology is located within devices they are selling, on what carriers and what is happening with the data, what is logged, where is it logged, what it shipped from the device up to remote servers, and exactly how is that data being used?
[+] omouse|14 years ago|reply
Who cares! It's time for a free/opensource firmware and operating system you can flash into the ROM of any and all phones. The phone manufacturers, the software makers and the carriers have proven hostile to consumers, there's no reason for them to be allowed to control things any more.
[+] epistasis|14 years ago|reply
Perhaps now this story will get the media storm it deserves.
[+] leoc|14 years ago|reply
I'm happy to assume that iOS's Carrier IQ, er, integration is much less comprehensive than what has been put into Android handsets, and may never have been activated at all. Nonetheless I can't resist pointing at http://daringfireball.net/linked/2011/11/30/imagine-if-it-we... and muttering something about seafood stew.

UPDATE: And if Apple's Carrier IQ code is only ever activated in an opt-in diagnostics mode, then it may be in the clear completely here.

[+] mey|14 years ago|reply
Has anyone compiled a list of devices confirmed with CIQ, confirmed not to have, unknown and suspected?
[+] gurkendoktor|14 years ago|reply
It is not device, it is device-per-carrier. If the same device models had been sold with silently acticated CarrierIQ in the EU, that would be a lot of fun for lawyers.
[+] rytis|14 years ago|reply
Just another angle to approach the problem:

I suppose one way to fight this is to develop some sort of "multiple personalities" behaviour and habits.

There's "normal A" me, who goes to work every day, using the same route, checking the same webpages on route, doing the same web searches while at work, sending the same type of messages on IM during the day, etc, etc.

Then there's another me, "normal B", with his own habits and hobbies. But normal A and normal B should not overlap in terms of devices, friends, maybe even (online) behaviour. Location is bit more difficult, especially when you're at home. Home should be associated with only one "persona".

Once you make a conscious effort it might become easier with time, and thus hiding your real "identity".

Drawbacks?... Well, sounds bit like DID (http://en.wikipedia.org/wiki/Dissociative_identity_disorder), so don't get caught accidentally :)

[+] Tyrannosaurs|14 years ago|reply
Alternatively you can just use this sort of mechanism to screw with them.

How many people can we get to take out some sort of loyalty card which tracks your behaviour and then use it to buy only root vegetables and lube?

[+] OoTheNigerian|14 years ago|reply
Why is Carrier IQ being made the villain here? From what I understand, they provide a service which has been abused by the phone manufacturers probably in conjunction with the carriers.

Logitech makes web-cams, would you hold them responsible if you found them hidden in hotel rooms and they were put there based on request by the CIA?

Let us hold the right people responsible. That will mean Apple, HTC, Samsung, RIM etc.

[+] hsshah|14 years ago|reply
It's not a proper comparison. Using your analogy, Logitech should be held more liable if the video streams from the webcams were uploaded to Logitech's server. Would you agree?
[+] forgotAgain|14 years ago|reply
Carrier IQ has stated that the information collected is transmitted to and stored on their network. They are playing an active role in this and are not just a software publisher whose wares are being misused.
[+] tlear|14 years ago|reply
Anyone seen any specifics about CIQ on blackberry? I hear reference to it in the original Eckhart video but can not seem to find real data
[+] aheilbut|14 years ago|reply
Surely whatever this is tracking is covered under the contracts with the carriers. Someone must have read them...
[+] justinweiss|14 years ago|reply
If you're interested, you can see the data the iPhone has collected so far -- Go to Settings -> General -> About -> Diagnostics -> Diagnostic & Usage Data.
[+] Samuel_Michon|14 years ago|reply
Wow. That leaves Windows Phone and Bada as the only mobile OSes where no Carrier IQ references have been found so far.
[+] cryptoz|14 years ago|reply
Kind of. It's not been found in the actual Android operating system, has it? Only in carrier- or manufacturer-modified versions correct?
[+] runjake|14 years ago|reply
It has been confirmed by several knowledgeable people that the CIQ rootkit doesn't seem to be installed on any Nexus devices as shipped.
[+] megablast|14 years ago|reply
Or the OSes that nobody has looked at yet?
[+] mikerg87|14 years ago|reply
I will give he befit of the doubt to apple right now. Remeber that Steve was talking about iAd and one of the benefits was that they hated how personal data was just taken from users. And privacy was a problem in apple' link up to FacEBook which didn't happen.

If it's active - its going to leave a huge huge mark.

[+] berend|14 years ago|reply
What i wonder is, who gets the data? Is it the carrier or Apple?
[+] alantrrs|14 years ago|reply
uhmm...this sound more and more like a Carnivore reloaded