3 ms·
If Carrier IQ on iOS only collects information about calls and location data during those calls and if it is turned off by default and if Apple is explicit abou
by ugh 15y ago
If Carrier IQ on iOS only collects information about calls and location data during those calls and if it is turned off by default and if Apple is explicit about the data they collect† then there is no problem.
It seems obvious to me that carriers or manufacturers can collect that data if the user explicitly agrees to it (by actually flipping a switch without being forced or tricked into doing so).
Carrier IQ is only a problem if it is turned on by default and if it collects more data than is explicitly said∆.
—
† If the Diagnostics & Usage switch indeed controls Carrier IQ then we already know that the last two conditions are met.
∆ This is only the minimum viable evilness. Worse kinds of evil are imaginable, like not telling users anywhere that data is being or collected or making it hard for users to turn the collection of data off.
- pyre 15y ago> Carrier IQ is only a problem if it is turned on The problem being that having it installed is just another attack vector that houses potential vulnerabilities on your device.
- Anechoic 15y agoWouldn't the same be true of any diagnostic software?
- stuartd 15y agoThe same is true of any software, firmware, or indeed operating system, and probably a lot of hardware as well. Security By Tedium, I like to call it.
- Xuzz 15y agoI disassembled the iOS version of Carrier IQ, and it exits on startup if not enabled. Even when enabled, it runs as an unprivileged user and connects via SSL so should not be any "attack vector".
- robterrell 15y agoThis is reassuring -- would you consider writing it up in more detail?
- Xuzz 15y agoI did here: http://blog.chpwn.com/post/13572216737 http://blog.chpwn.com/post/13572216737
- ars 15y agoIsn't that a good think on an iPhone since it gives a route to jail breaking it? (I'm only semi-joking.)