Slashdot Mirror
Carrier IQ Relents, Apologizes
symbolset writes "Update from an earlier story here, where Carrier IQ was pursuing a security researcher for pointing out privacy issues in an application alleged to track and record the activities of smartphone users. The company has relented, and retracted their Cease and Desist letter. In their press release [PDF] they say: 'As of today, we are withdrawing our cease and desist letter to Mr. Trevor Eckhart. We have reached out to Mr.
Eckhart and the Electronic Frontier Foundation (EFF) to apologize. Our action was misguided and we are deeply sorry for any concern or trouble that our letter may have caused Mr. Eckhart. We sincerely appreciate and respect EFF's work
on his behalf, and share their commitment to protecting free speech in a rapidly changing technological world.' Notch another win for the Streisand effect."
First Post
How much of this was due to the slashdot publicity and EFF involvement
Or was this all out of the goodness of their hearts?
How many little guys are getting squashed because they dont get the publicity or cant get the support of a big organisation?
'Sorry' is the most devalued word in the corporate world today :-/
Probably almost entirely the EFF's utter thrashing of CIQ's request/demands.
The EFF is a great organisation
Where would we be without them
Donate https://www.eff.org/deeplinks/2011/11/double-your-impact-take-eff-mission-challenge with dollar for dollar matching by the Brin Wojcicki Foundation until december 31st
I've sent mine in
Any subscribed service with a 2-way tethered user device such as cell phones, dsl / cable boxes, and cable/dsl/digital television will have embedded information gathering and remote update/control software almost guaranteed.
Much of it is strictly for service metrics, diagnostics and predictive problem avoidance. Some of it is used as an interactive problem solving tool for tier 1 support. You might want to look at www.motive.com as an example company.
If desired though, these products usually have the capability for being very invasive. eg: TV set top boxes can record all kinds of info about your viewing habits: every button push on the remote can be recorded, effectively recording much about your viewing habits.
It's an old story: there are legitimate and desirable uses for these tools but they are all capable of misuse. Even when not abused, our access to privacy and anonymity is severely eroded from what it was even 20 years ago.
Benign? Maybe. Food for thought anyways.
No, really.
This is why the EFF is so important -- because they have the resources and know-how to stand up for the Hackers, the Security Researchers, the Makers, the Professors, and even the lowly Undergraduates.
The EFF didn't just get results here, they effectively Pimp-slapped the company....with knowledge.
So before you go out on Black Friday to blow a few hundred on electronic toys..err...valuable tools for your job, go give the EFF $20 dollars. Heck, give them something like $65 and they'll even send you a sweet T-Shirt.
What are you waiting for? Think about it: You're a geek and don't get to pimp-slap anyone. Live vicariously through the EFF -- strike a blow against Censorship.
http://eff.org/donate
coding is life
The apology letter looks sound to me. I don't see any reason why we should be second-guessing their intentions. There is nothing ambiguous here.
It says at the very end, "We welcome feedback on our products and understand that Mr. Eckhart and other developers like him play an important role by raising questions about the complicated and technical aspects of the mobile ecosystem."
These people really sound like fair players, people who are listening, people who are concerned, and who are trying to do a good job. They aren't silencing discussion, and they aren't showing themselves to be anything other than fair.
The EFF is a great organisation
Where would we be without them
Donate https://www.eff.org/deeplinks/2011/11/double-your-impact-take-eff-mission-challenge with dollar for dollar matching by the Brin Wojcicki Foundation until december 31st
I've sent mine in
The EFF is a great organisation
Where would we be without them
Donate https://www.eff.org/deeplinks/2011/11/double-your-impact-take-eff-mission-challenge with dollar for dollar matching by the Brin Wojcicki Foundation until december 31st
I've sent mine in
Note that the "Brin" in Brin Wojcicki is none other than Sergey Brin from Google. I think that speaks volumes, the cofounder of Google is giving half a million dollars of his personal fortune to the EFF. What other corporate entity would side with the EFF on any matter?
It is dangerous to be right when the government is wrong.
1/2. The guy who discovered it wrote an app that will detect CIQ (among other things), though you need to have root for it to work. It'll also remove it for you if you donate a dollar. Alternatively, use a ROM that has it removed.
http://forum.xda-developers.com/showthread.php?t=1247108
upon the advice of my lawyer, i have no sig at this time
Dear CarrierIQ,
It's good that you've recognized that the security researcher in question had no illicit intent in mind, and was actually working for the good of the general public. Very nice, and definitely the high road. But...
It's clear that not only did you unapolgetically and unreservedly produce a product with the explict, baked-in and horrific capacity to spy on the activities of millions of people (with no distinction between adults and minors, many of whom also have smartphones these days), but you also intended to use brutish, irresponsible tactics to muzzle a person who called you out on it.
So the lesson you need to take away from this is not that pushing the envelope and then apologizing gets you off the hook. The real lesson you need to learn is that, from this point onwards, when I see the brand name "CarrierIQ" before me, my brain will automatically and reflexively replace the phrase "PIG-FUCKING ASSHOLES". And I'm sure I'm not the only ones who feel that way, you scumbag pieces of shit. Fuck you all. I wish nothing more than that the carriers who are your customer base will be ashamed to buy your product, and that you will go out of business.
Clean up your product and make it about..and only about...what you say your goals are as a company, and after half a decade most of the people who feel like I do (including me) will come around and actually see "CarrierIQ" when we read "CarrierIQ". That's the cost of what you have done, and the real lesson you should take away from this.
For your security, this post has been encrypted with ROT-13, twice.