Sprint has released a statement about its use of Carrier IQ, insisting that they respect and protect the “privacy and security of each customer’s personally identifiable information and other customer data.” Their full statement follows:

“Carrier IQ provides information that allows Sprint, and other carriers that use it, to analyze our network performance and identify where we should be improving service. We also use the data to understand device performance so we can figure out when issues are occurring. We collect enough information to understand the customer experience with devices on our network and how to address any connection problems, but we do not and cannot look at the contents of messages, photos, videos, etc., using this tool. The information collected is not sold and we don’t provide a direct feed of this data to anyone outside of Sprint.”

“Sprint is well known for our serious commitment to respecting and protecting the privacy and security of each customer’s personally identifiable information and other customer data. A key element of this involves communicating with our customers about our information privacy practices. The Sprint privacy policy makes it clear we collect information that includes how a device is functioning and how it is being used. Carrier IQ is an integral part of the Sprint service. Sprint uses Carrier IQ to help maintain our network performance.”

[Via GigaOm]

Verizon has also released a statement clarifying that none of their devices have Carrier IQ installed. From GigaOm:

“Any report that Verizon Wireless uses Carrier IQ is patently false,” Verizon Wireless spokesperson Jeffrey Nelson said in an email. In an email follow-up, spokeswoman Debra Lewis elaborated. “We did recently notify customers about new privacy programs; we were transparent about how customer information will be used and gave clear choices to customers about whether they want to participate in these programs,” she said (the privacy policy is here). “Carrier IQ is not involved in these programs.”

According to Business Insider, Nokia has stated that their devices do not come loaded with Carrier IQ. From the article:

Nokia says it does not authorize Carrier IQ on its devices. Nokia calls reports of Carrier IQ being found on its phones “inaccurate.” Nokia also says that Carrier IQ doesn’t support Nokia phones, so it’s impossible to be installed later.

RIM has also stated that none of its BlackBerry devices come with Carrier IQ. From the article:

RIM is aware of a recent claim by a security researcher that an application called “CarrierIQ” is installed on mobile devices from multiple vendors without the knowledge or consent of the device users. RIM does not pre-install the CarrierIQ app on BlackBerry smartphones or authorize its carrier partners to install the CarrierIQ app before sales or distribution. RIM also did not develop or commission the development of the CarrierIQ application, and has no involvement in the testing, promotion, or distribution of the app. RIM will continue to investigate reports and speculation related to CarrierIQ.

This contradicts Trevor Eckhart’s original assertion that BlackBerry devices—in addition to Android devices—have Carrier IQ installed.

Android app developer Trevor Eckhart discovered that hidden in his Android phone was tracking software by Carrier IQ, which he feels exhibits the traits of a rootkit. So what does it track? How about key presses, geographic locations, and messages received by its users.

On Monday, Trevor posted the following video to YouTube, exposing what the Carrier IQ software monitored on his stock HTC EVO handset:

Amazingly enough, the users are never informed of this app, nor are they given the ability to toggle whether the monitoring service should run. Instead they are forced to trust Carrier IQ, and Carrier IQ’s customers, for the privacy of any data collected.

Performing damage control, Carrier IQ has posted a Media Alert, clarifying how their software is used by customers. I find the following snippet interesting:

While we look at many aspects of a device’s performance, we are counting and summarizing performance, not recording keystrokes or providing tracking tools. The metrics and tools we derive are not designed to deliver such information, nor do we have any intention of developing such tools.

The video clearly shows the monitoring software is capable of recording keystrokes. What’s more concerning is how the software can see variables passed via an encrypted website as if they were never encrypted.

If you think that avoiding Android powered devices will exempt you from this privacy invasion, think again. In addition to Android, Carrier IQ also has software available and installed on BlackBerry, Apple iOS and Nokia devices.

Update: It has been determined that iOS devices also contain Carrier IQ.

[Via The Register]

While SOPA (The Stop Online Piracy Act) continues to threaten free-speech online in America, the hivemind over at Reddit have decided to build their own wireless mesh network. Dubbed the Darknet Plan, this ad hoc network would skirt around government regulations like SOPA, keeping online free speech alive.

Sounds great, but I have one question: Can a reliable wireless mesh network be built using off-the-shelf hardware? Shaddi has posted a technical critique of the effort, outlining five reasons why “wireless mesh networks aren’t actually a good way to build a real network.” If you have ever wondered what issues plague wireless mesh networks, this is a great place to start.