Re: [Fed-Talk] ABC WNN reports the iPhone has Carrier IQ software installed
Re: [Fed-Talk] ABC WNN reports the iPhone has Carrier IQ software installed
- Subject: Re: [Fed-Talk] ABC WNN reports the iPhone has Carrier IQ software installed
- From: "Griggs, Daniel B Mr. CTR USA CIO/G6 (EMC)" <email@hidden>
- Date: Fri, 02 Dec 2011 17:53:09 +0000
- Thread-topic: [Fed-Talk] ABC WNN reports the iPhone has Carrier IQ software installed
Has anyone actually opened up the logs on a iPhone 4 running 5.0.1? I
pulled open the logs for this carrier IQ on a phone jailbroken expressly
for this purpose and the logs are boring I assure you. I had 'send
diagnostics to apple' turned ON for approx 5 months starting from a clean
install of the phone. I was not able to evaluate my iPhone 4S for this
testing.
All I saw were phone call logs/drops/failures no numbers(in or out) just
events and times paired with location data.
To clarify:
NO key logging events
NO personal data besides your phone number
NO geotagged data beside those paired with call events
Turning OFF 'send data to apple' in settings/general/about/diagnostics &
usage
Stops ALL of these logging events (read: really does turn this off)
It is my opinion that these are truly cellular carrier diagnostic and
troubleshooting information that would be legitimately useful to the
cellular carrier at least in the implementation that is in iOS.
Hindsight being 20/20 There could have been a bit more transparency on
what exactly 'daily diagnostic and usage data' includes. I have since
turned the 'send data to apple' back ON on all of my iOS devices, I am
willing to trade that data for a better wireless network.
I can verify the information that is put forth by this developer. He went
a bit more in depth than I did but our findings were the same. Both of
our findings confirm the press statement from apple to be true.
http://blog.chpwn.com/post/13572216737
It should also be noted that I was unable to find what if any data is
actually sent to the carrier, but I will assume entire contents of the log
file to be worst case and that is trivial from a PII standpoint.
Have a good weekend,
Dan Griggs, Apple Lead
Advanced Technologies
US Army CIO/G6
703-545-1377 (Desk)
On 12/2/11 9:48 AM, "Link, Peter R." <email@hidden> wrote:
>I'm into conspiracy theories in all sorts of things but so far nobody has
>grabbed that log file and shown me what is in it. I checked my phone and
>the diagnostic setting is turned off. I click on the logs and one things
>shows up but clicking on that shows nothing. Show me what is being logged
>so I can see for myself if it's anything to worry about. If nothing is
>there, then I'm satisfied Apple isn't getting anything and we can move on
>to other more important things, like the weekend.
>
>
>
>
>On Dec 2, 2011, at 6:15 AM, Blackmon Jerry (Contractor) wrote:
>
>> Not to be a conspiracy theorist, but who's to say the off switch
>>actually does anything?
>>
>> ---
>> Jerry Blackmon <email@hidden<mailto:email@hidden>>
>>
>> From: "Villano, Paul Mr CIV USA TRADOC"
>><email@hidden<mailto:email@hidden>>
>> Date: Fri, 2 Dec 2011 08:56:32 -0500
>> To: "email@hidden<mailto:email@hidden>"
>><email@hidden<mailto:email@hidden>>
>> Subject: Re: [Fed-Talk] ABC WNN reports the iPhone has Carrier IQ
>>software installed
>>
>> The issue for me is that everyone keeps saying "No biggie. It's turned
>>off except for diagnostics." Says who? Who's to say it can't be enabled
>>by the same folks who know/knew it's there? And now that we know it's
>>there, who's to say someone won't find out a way to enable and access it
>>(including turning on diagnostics) remotely?
>>
>> ----- Original Message -----
>> From: Jeffrey Walton <email@hidden<mailto:email@hidden>>
>> Date: Thursday, December 1, 2011 15:36
>> Subject: Re: [Fed-Talk] ABC WNN reports the iPhone has Carrier IQ
>>software installed
>> To: David Emery <email@hidden<mailto:email@hidden>>
>> Cc: email@hidden<mailto:email@hidden>
>>
>>
>> On Thu, Dec 1, 2011 at 3:28 PM, David Emery < wrote:
>>> Not germaine to this particular discussion.
>> Some would argue that Apple's lack of truthfulness is very relevant.
>> Carrier IQ has a lot of capabilities, and its installed for a reason.
>> Should we believe Apple if we are told its only used for diagnostics?
>> Apple's track record indicates otherwise.
>> Jeff
>>> On Dec 1, 2011, at 3:26 PM, Jeffrey Walton wrote:
>>>
>>>> On Thu, Dec 1, 2011 at 3:14 PM, David Emery < wrote:
>>>>> Even here, we're falling prey to speculation.
>>>>>
>>>>> As I understand it:
>>>>> a. Carrier IQ software and its behavior has been
>>>>>demonstrated/shown/verified on some Android phones.
>>>>> b. What data actually gets transmitted -off the phone- has
>>>>>not been established.
>>>>> c. There's an URL on earlier iOS versions that shows data
>>>>>exchanges with CarrierIQ servers/website. (That's not the same as
>>>>>having CarrierIQ software within iOS!)
>>>>> d. Access to that URL on the iPhone is disabled by default.
>>>>>(But it's not clear to me if this is only activated by a local
>>>>>action, or if it can be enabled by a TELCO remotely.)
>>>>>
>>>>> Is this a correct statement of the facts as we know them now?
>>>> You forgot the part about Apple not telling the truth. For example,
>>>> Apple had a number of class actions filed against it due to
>>>> unauthorized collection and use of location data. This is despite the
>>>> fact that Apple told us all we needed to do was turn off Location
>>>> Services.
>>>>
>>>> Jeff
>>>
>>> -----
>>> David Emery, 703 298 3473 (c) 703 272 7496 (fax)
>>> Supporting PdM Software Integration
>>>
>>>
>>>
>>>
>> _______________________________________________
>> Do not post admin requests to the list. They will be ignored.
>> Fed-talk mailing list
>>(email@hidden<mailto:email@hidden>)
>> Help/Unsubscribe/Update your Subscription:
>>
>>l
>> This email sent to
>>email@hidden<mailto:email@hidden>
>> _______________________________________________
>> Do not post admin requests to the list. They will be ignored.
>> Fed-talk mailing list
>>(email@hidden<mailto:email@hidden>)
>> Help/Unsubscribe/Update your Subscription:
>>
>> This email sent to email@hidden<mailto:email@hidden>
>>
>>
>> _______________________________________________
>> Do not post admin requests to the list. They will be ignored.
>> Fed-talk mailing list (email@hidden)
>> Help/Unsubscribe/Update your Subscription:
>>
>> This email sent to email@hidden
>
>Peter Link
>Cyber Security Analyst
>Cyber Security Program
>Lawrence Livermore National Laboratory
>PO Box 808, L-315
>Livermore, CA 94550
>email@hidden
>
>
>
> _______________________________________________
>Do not post admin requests to the list. They will be ignored.
>Fed-talk mailing list (email@hidden)
>Help/Unsubscribe/Update your Subscription:
>rmy.mil
>
>This email sent to email@hidden
Attachment:
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden