本文章最後由 編輯部女孩 於 2016-5-26 15:01 編輯
Android 黑客最近發現大部分 Android 用戶正在遭遇內核級別監控。進行監控的軟件名為 Carrier IQ 。這款軟件在 HTC 、Samsung 和其它手機上從內核級啟動加載。同名軟件廠商出品的這款Carrier IQ，未經用戶同意，監控和紀錄用戶手機大部分操作和數據。用戶無法干預和控制這種監控過程。
現在，Carrier IQ 公司已經開始威脅起訴公佈這一發現的Android黑客－Trevor Eckhart (TrevE)。 Trevor Eckhart (TrevE)也是著名的XDA論壇成員。
Carrier IQ公司向Trevor Eckhart (TrevE)送抵了措辭強烈的侵略性停止和終止函，聲稱，他在公開可用的培訓教材當中，侵犯了Carrier IQ公司版權，並要求他將相關材料從網站上撤除，並且刊登Carrier IQ公司擬定的聲明。
但是，電子前鋒基金會（EFF）律師幫助了Trevor Eckhart (TrevE)。律師認為，Trevor Eckhart (TrevE)做法受到美國著作權法豁免保護，EFF認為，Carrier IQ公司希望壓制Trevor Eckhart (TrevE)Trevor Eckhart (TrevE)的研究結論，並防止他人驗證這些結論。
----- ----- ----- ----- -----
Carrier IQ Apologizes for Going After Security Researcher
An analytics firm that made headlines over how its software tracks the personal data of cell phone users has withdrawn a cease and desist letter it issued to a security researcher who probed its tactics.
With the help of the Electronic Frontier Foundation (EFF), researcher Trevor Eckhart was successful in getting Carrier IQ to back down on claims that Eckhart infringed on Carrier IQ's copyrights and made false allegations in his analysis of the company.
"Our action was misguided and we are deeply sorry for any concern or trouble that our letter may have caused Mr. Eckhart," Carrier IQ said in a statement. "We sincerely appreciate and respect EFF's work on his behalf, and share their commitment to protecting free speech in a rapidly changing technological world."
"Eckhart concluded that the software, which comes by default on many mobile devices and runs quietly in the background, logs extensive details about users' activities," according to the EFF. "Eckhart not only documented the functionality of the software, but learned even more about how it works through training materials posted on the Carrier IQ website. Fearing the company would take the files offline after he posted his analysis, he mirrored the training materials to let others independently verify his conclusions."
EFF said Carrier IQ did indeed remove the files from its site, but went one step further and issued a cease-and-desist letter to Eckhart. He was accused of "unlawful copying of Carrier IQ Inc.'s training materials" on his Web site, a move Carrier IQ lawyers said could result in damages of up to $150,000 for willful infringement. The letter also accused Eckhart of "making allegations ... that are without substance, untrue, and that we regard as damaging to our reputation and the reputation of our customers."
Nonetheless, Eckhart sought the assistance of the EFF, "and we helped him push back against the unfounded threat," the group said Wednesday. "As EFF explained in a letter to Carrier IQ on Monday, Eckhart's research and commentary is protected by fair use and the First Amendment right to free expression."
"We're pleased that Eckhart gave us an opportunity to help him fend off this attempt to censor his findings and shut down public discussion about important privacy concerns," the EFF said. "We also hope this incident will serve as an example to others who would misuse the law to squelch legitimate research and criticism."
Carrier IQ said it understands "that Mr. Eckhart and other developers like him play an important role by raising questions about the complicated and technical aspects of the mobile ecosystem."
In a Monday blog post, Eckhart thanked the EFF for their work. "Free Speech + discussion about real problems and the right to our security are something that should never be taken away," he wrote.
Eckhart was last in the news, meanwhile, after he discovered that an update to several Android-based HTC devices resulted in the installation of tools that could collect a vast amount of personal data without permission. HTC later issued a fix.
----- ----- ----- ----- -----
|
13
7146
還好我只是普通人 沒什麼機密好監控的 XD
