Carrier IQ Whistleblower Trevor Eckhart Works for Tracking Firm
December 13, 2011 3:45 PM
comment(s) - last by
Intergis makes GPS tracking/telemetry products
We've wondered why amateur Android devoloper Trevor Eckhart's commentary on his "discovery" of Carrier IQ was so seemingly one side and exagerrated. Now we've found out something interesting -- he works for a tracking firm that is a potential rival to Carrier IQ.
Carrier IQ -- installed on over 140 million phones -- even in the worst case is hardly as bad as Mr. Eckhart, along with some members of the public and the media, made it out to be in their rush to lynch the telemetry firm. In fact my own analysis of Carrier IQ -- which included
both debug logging
(as in Mr. Eckhart's research) and
decompilation of the Carrier IQ Android applications
on an HTC Corp. (
) device (something Mr. Eckhart did not do) -- indicated that the worst things Carrier IQ distributions were doing were largely the result of poor coding and pratices from its carrier and OEM partners.
So what led Mr. Eckhart to fail to qualify that Carrier IQ was only keylogging inside one proprietary app on a handful of HTC phones, leading many members of the media and public to mistakenly think it was keylogging passwords inside web forms and third party applications?
Mr. Eckhart, by his own accounting, works as a "Systems Administor" at a Torrington, Connecticut firm called Intergis LLC. He describes the work as "Computer Software Industry" functions:
tracking and telemetry products, remarkably similar to Carrier IQ, although currently targeting corporate users. The company's product gives businesses a way to GPS tracking to secure their mobile device fleet or coordinate employee travel.
At the heart of Carrier IQ's application is the same functionality -- phone GPS tracking -- that allows carriers to assess and improve their network. Thus while Mr. Eckhart's firm markets its app to business customers only, at this point, it would be almost trivial for it to add wireless signal and battery life gathering and create a Carrier IQ competitor for the consumer market. And if his firm does that, they likely now realize how to escape observation -- by avoiding obviously named apps and egregious prints to the debugging screen.
The interesting thing is that if Carrier IQ gets the boot or gets sued out of existence, it will create a vacuum in terms of telemetry gathering in the consumer space. As a company already deeply invested in tracking and telemetry solutions, that's just the kind of thing that could allow Intergis to get its talons on the consumer market.
We'll likely never know what the true motives are, but file this under "very interesting" in the ongoing Carrier IQ saga.
This article is over a month old, voting and posting comments is disabled
this is actually entertaining
12/18/2011 8:48:28 PM
you guys are silly. i used to work at intergis with trevor (until of course all of its assets were assumed by telogis a year ago).
telogis and intergis were competitors in the market we call MRM (mobile resource management). this is just software that helps business that deliver things (like soda, or medical supplies, or furniture) efficiently, to help save gas and hours etc.
they did have handheld software that utilizes gps tracking (as ALL MRM companies do - see UPS's MobileCast addon for their RoadNet software) but this is entirely different from carrier IQ's application. gps software for MRM is designed to acquire a gps fix on a standard interval, and plot it on a map so that dispatchers back at homebase can make sure their drivers aren't goofing off. another thing the software applications do is send the drivers a list of workorders so that the companies can "go green" and eliminate paper and whatnot.
-tracks drivers' locations
-allows workorder transmitting
-the company that OWNS the truck/phone/employee PURPOSEFULLY installs it, understanding its capabilities
-tracks and stores most user input
-harvests data from peripherals (gps points)
-is installed on our phones without us knowing, and without us understanding its capabilities.
as said above by another user, the only reason why trev found it is because he has worked with mobile device software. this is the only way these two situations are related.
i for one want it removed because it wastes a collosal amount of resources on my phone, and drains my battery. and even if it isn't outright transmitting the data it collects, i dont want someone else to figure out how to exploit it.
its basically the situation of why we don't leave dangerous objects of any kind laying around. they wont hurt you if no one touches them, but they can if they get into the wrong hands.
"Mac OS X is like living in a farmhouse in the country with no locks, and Windows is living in a house with bars on the windows in the bad part of town." -- Charlie Miller
One Line of Code Created a World of Woe for HTC, Carrier IQ, et al.
December 9, 2011, 4:44 PM
Research: Carrier IQ Underscores Deeper Hole in Android OS's Security
December 5, 2011, 9:41 AM
Retiree Sues Apple For $7,500 for Wiping Honeymoon Photos From His iPhone
November 30, 2015, 10:23 AM
iPhone 7 May Pack 3-4 GB Memory, More Storage; 4-Inch Comeback is Rumored
November 20, 2015, 10:12 PM
OnePlus One, OnePlus 2 Will Receive Android Marshmallow in Q1 2016
November 16, 2015, 9:58 AM
Lenovo Whoa: Motorola Droid MAXX 2 and Turbo 2 Break Cover in Leaks
October 26, 2015, 3:12 PM
Leak: Apple Preps for First Real Android App Foray With New Apple Music App
October 24, 2015, 1:59 PM
Pepsi Smartphone? Empty Calories Coming Soon to the Midrange
October 12, 2015, 11:41 PM
Latest Blog Posts
Sceptre Airs 27", 120 Hz. 1080p Monitor/HDTV w/ 5 ms Response Time for $220
Dec 3, 2014, 10:32 PM
Costco Gives Employees Thanksgiving Off; Wal-Mart Leads "Black Thursday" Charge
Oct 29, 2014, 9:57 PM
"Bear Selfies" Fad Could Turn Deadly, Warn Nevada Wildlife Officials
Oct 28, 2014, 12:00 PM
The Surface Mini That Was Never Released Gets "Hands On" Treatment
Sep 26, 2014, 8:22 AM
ISIS Imposes Ban on Teaching Evolution in Iraq
Sep 17, 2014, 5:22 PM
More Blog Posts
Copyright 2016 DailyTech LLC. -
Terms, Conditions & Privacy Information