webOS Nation Forums >  webOS Devices >  HP TouchPad > CarrierIQ (CIQ) and such "rootkits" on HP Touchpad ?
CarrierIQ (CIQ) and such "rootkits" on HP Touchpad ?
  Reply
Like Tree9Likes

 
Thread Tools Display Modes
Old 11/27/2011, 06:59 PM   #1 (permalink)
Member
 
Posts: 15
Question CarrierIQ (CIQ) and such "rootkits" on HP Touchpad ?

Has anybody looked to see if the HP Touchpad too has CarrierIQ or such "rootkits" pre-installed ?
The Rootkit Of All Evil – CIQ | xda-developers

BTW, homebrew Impostah seems to make available a lot of system info etc.
How does one make the best use of Impostah ?

Also, is there anti-virus / anti-malware apps available for TP? Thanks.
hptuser is offline   Reply With Quote
Old 11/27/2011, 07:02 PM   #2 (permalink)
Member
 
Posts: 3,579
Default

Shows that "nothing is free", while people think they are getting this free Android software on their phone, no one put to the consumer directly--would you hand over your information in exchange for this (free) software?
bluenote is offline   Reply With Quote
Old 11/27/2011, 07:05 PM   #3 (permalink)
Moderator
 
Cantaffordit's Avatar
 
Posts: 15,217
Default

no reason to have antivirus software for webOS
Cantaffordit is offline   Reply With Quote
Old 11/27/2011, 07:15 PM   #4 (permalink)
Member
 
Posts: 22
Default

One could argue that HP's overzealous use of system logging is similar to a rootkit
nexus14 is offline   Reply With Quote
Liked by spud101, xandros9, tsaunders and 2 others like this.
Thanked by Daughain, p41m3r
Old 11/29/2011, 07:19 PM   #5 (permalink)
Member
 
Posts: 8
Default

Look at Carrier IQ Info Video - YouTube (@ 1:05 minutes).....would appear that it is on our devices too.
cmcrae1 is offline   Reply With Quote
Liked by tsaunders likes this.
Old 11/29/2011, 09:16 PM   #6 (permalink)
Member
 
Posts: 126
Default

RT @Korey_Nicholson: @webosinternals @hp @webosdev @verge They are a client yes. I'm the one who conducted the interview with Andrew Coward
__________________
Apps: Junk Silver, Junk Exchange Created OpenDyslexic
antijingoist is offline   Reply With Quote
Old 11/29/2011, 09:32 PM   #7 (permalink)
Member
 
Posts: 3,579
Default

for webOS? Or for their windows tablets?

wow: video shows TouchPad and two phones: Pre3 and Pre2?

And HP technical support still had alot of trouble fixing my TouchPad. The video says the consumer has to opt-in. Where is the opt-in for webOS? Is it in the Palm agreement or the app catalogue agreement?

Last edited by bluenote; 11/29/2011 at 09:42 PM.
bluenote is offline   Reply With Quote
Old 11/29/2011, 09:48 PM   #8 (permalink)
Member
 
Posts: 675
Default

The consumer "opts in" without ever realizing it because it's generally buried in a contract or agreement in fine print.
dignitary is offline   Reply With Quote
Old 11/30/2011, 01:25 AM   #9 (permalink)
Member
 
Posts: 488
Default

Quote:
Originally Posted by independent1
The consumer "opts in" without ever realizing it because it's generally buried in a contract or agreement in fine print.
That's right.

3:56 - "...they gain this permission through service agreements..."
4:01 - contains user-identifiable info. Sweet!

Ok, so how do we kill this monster?

Last edited by p41m3r; 11/30/2011 at 01:39 AM.
p41m3r is offline   Reply With Quote
Old 11/30/2011, 03:51 AM   #10 (permalink)
Member
 
Mutoidi's Avatar
 
Posts: 1,306
Default

Quote:
Originally Posted by p41m3r View Post
That's right.

3:56 - "...they gain this permission through service agreements..."
4:01 - contains user-identifiable info. Sweet!

Ok, so how do we kill this monster?
It's dying anyway!
Just be aware of what you 'back-up' and where.. and what Accs. you 'sync' to what other Accs?
Clean out your Log files and frequently reset to 'Min Logging' etc?
Disable your Android 'identifier'?
Empty your Email 'trash' from both client & server?
Opt out of 'Location Services'?

Mutoidi is online now   Reply With Quote
Old 11/30/2011, 07:45 AM   #11 (permalink)
Homebrew Developer
 
panel's Avatar
 
Posts: 310
Default

Sorry I don't understand, is there CIQ logging on webOS or no ? Or nobody knows?
__________________
If you like my applications (SynoMusic, SynoDM, SynoFM) and want to donate for future upgrades and development
panel is offline   Reply With Quote
Old 11/30/2011, 04:39 PM   #12 (permalink)
Member
 
Posts: 114
Default

Why?

So nobody will ever develop virus/malware for webos? How can you be so sure?

Have you ever seen your touchpad displaying this message?
"Touchinput recording, press sym+opt+w to stop"



Quote:
Originally Posted by Cantaffordit View Post
no reason to have antivirus software for webOS
greenskinredeyez is offline   Reply With Quote
Old 12/01/2011, 12:19 AM   #13 (permalink)
Member
 
Posts: 62
Default

Quote:
Originally Posted by bluenote View Post
Shows that "nothing is free", while people think they are getting this free Android software on their phone, no one put to the consumer directly--would you hand over your information in exchange for this (free) software?
bluenote,

You may have missed a few things...


1. Carrier IQ software is not installed by end-users but rather embedded in the various manufacturers firmware specific for the U.S. carriers. Only U.S. carrier subscribers have found to be targeted. Verizon has denied any use of Carrier IQ software.

2. Google has not implemented the Carrier IQ software in the vanilla Android and it has not been the case with those "reference" devices directly partnered with Google e.g. Nexus One, Nexus S, Motorola Xoom, Galaxy Nexus.

3. Carrier IQ references have also been discovered in Apple iOS (verified http://forums.macrumors.com/showthre...1284749&page=2 ), Nokia Symbian (denied http://www.theverge.com/2011/12/1/26...sed-carrier-iq ) and BlackBerry OS (denied http://www.reuters.com/article/2011/...7B01PA20111201 )according to TrevE.

4. There are no up front opt-in / opt-out opportunities, no straight-forward uninstall mechanism is available as described by TrevE and others.


Of course, by offering an opt-out for collecting our usage patterns and data, many will protect the privacy rather.

Last edited by howi; 12/01/2011 at 11:22 AM.
howi is online now   Reply With Quote
Old 12/01/2011, 12:49 AM   #14 (permalink)
Member
 
Posts: 282
Default

I did a quick scan through the webOS tarball for the Pre3 and did not find anything. Just to be sure, I have updated the Max Blocker patch to block any traffic to carrieriq.com

That said, Palm logs an ENORMOUS amount of information which is uploaded to palm.com which is yet another good reason why you should install the following

- Muffle
- EOM
__________________
Follow me on Twitter: http://twitter.com/warthogkernel

Experimental warthog kernels for webOS devices. Patches such as Muffle System Logging, Max Blocker etc.

Donations go towards further experimentation.
codecrumb is offline   Reply With Quote
Old 12/01/2011, 10:47 AM   #15 (permalink)
Member
 
Posts: 107
Default Does WebOS have CarrierIQ Rootkit installed ?

Millions of Smartphones and Tablets have a Rootkit Spyware Software called CarrierIQ installed.

Of course its a good question if WebOS Devices are also affected.

If yes it would be fantastic if some experienced user can make a patch to eliminate this Spyware.

CarrierIQ | Android Security Test
the site is under heavy load so try again and again and ...

Last edited by thomaz; 12/01/2011 at 10:53 AM.
thomaz is offline   Reply With Quote
Old 12/01/2011, 11:00 AM   #16 (permalink)
Member
 
Posts: 107
Default

Quote:
Sorry I don't understand, is there CIQ logging on webOS or no ? Or nobody knows?
so where is a CLEAR ANSWER to this question ?

and if yes how can i disable it ?
thomaz is offline   Reply With Quote
Old 12/01/2011, 11:24 AM   #17 (permalink)
Member
 
Posts: 107
Default

yeahh but there is no clear answer
thomaz is offline   Reply With Quote
Old 12/01/2011, 12:37 PM   #18 (permalink)
Member
 
Posts: 1
Default

There is no carrierIQ in webOS

Last edited by bhern; 12/01/2011 at 02:13 PM.
bhern is offline   Reply With Quote
Thanked By: patapoof
Old 12/01/2011, 12:43 PM   #19 (permalink)
Rnp
Member
 
Rnp's Avatar
 
Posts: 1,092
Default

Quadrant before disable CarrieIQ in one Android here: 3427.
Quadrant after disable CarrieIQ in same Android here: 4593.

Finally, discovered the #*5647# on Androids...


Best Regards...
__________________
The Dog Is The Man´s Best Friend... Because Is The Only That Is Not Looking To Smartphone While We Talking!
Rnp is offline   Reply With Quote
Thanked By: p41m3r
Old 12/02/2011, 04:44 AM   #20 (permalink)
Member
 
Posts: 488
Default

Quote:
Originally Posted by thomaz View Post
so where is a CLEAR ANSWER to this question ?
Frustrating! If the answer is no, as Palm stated, then why would Coward misrepresent web OS devices in the video (1:05 - 1:10)?

Quote:
Originally Posted by Rnp
Finally, discovered the #*5647# on Androids...
Thats it? Would something at this (presumably) low level be this easily bypassed?
p41m3r is offline   Reply With Quote
Reply

 

Tags
carrieriq, malware, rootkit

Thread Tools
Display Modes



 


Content Relevant URLs by vBSEO 3.6.0