Carrier IQ analysis finds no evidence of 'keylogger' | Privacy Inc. - CNET News: "A Linux kernel hacker who completed an in-depth analysis of Carrier IQ's controversial software has determined that it's incapable of recording keystrokes or perusing SMS messages and e-mail correspondence.
Dan Rosenberg, who has discovered more than 100 vulnerabilities in the Linux kernel, FreeBSD, and GNU utilities, published a blog post last night that analyzed the data Carrier IQ collects and transmits on a Samsung Epic 4G Touch. He found that contrary to what a slew of initial -- and erroneous -- reports claimed, the Carrier IQ software is not a keylogger and "cannot" be configured as one.
"CarrierIQ cannot record SMS text bodies, web page contents, or email content even if carriers and handset manufacturers wished to abuse it to do so," Rosenberg concludes. "There is simply no metric that contains this information." (See CNET's FAQ, related articles, and a list of removal apps.)"
'via Blog this'
No comments:
Post a Comment