安卓驚爆竊聽(tīng)丑聞,業(yè)界直呼轉(zhuǎn)投iPhone
????你聽(tīng)說(shuō)了嗎,在搭載谷歌(Google)安卓系統(tǒng)(Android)的手機(jī)上輸入的每條短信、每封電子郵件、以及每個(gè)電話號(hào)碼、甚至每一次擊鍵操作,可能都已經(jīng)被一款名為Carrier IQ的追蹤服務(wù)偷偷地記錄下來(lái),發(fā)送給了手機(jī)供應(yīng)商? ????如果你對(duì)此聞所未聞,那我真有點(diǎn)驚訝了,因?yàn)閹字芤詠?lái),關(guān)于此事的傳聞一直在坊間發(fā)酵,其導(dǎo)火索則是安全研究人員特萊沃?艾克哈特的一項(xiàng)發(fā)現(xiàn)——在搭載安卓系統(tǒng)的宏達(dá)電(HTC)手機(jī)上運(yùn)行著Carrier IQ分析應(yīng)用程序。超過(guò)1.4億部手機(jī)上預(yù)裝了該應(yīng)用,其中包括三星(Samsung)、諾基亞(Nokia)、以及黑莓手機(jī)生產(chǎn)商RIM公司生產(chǎn)的手機(jī),唯獨(dú)只有蘋果手機(jī)除外。 ????Carrier IQ的第一反應(yīng)是令其律師致函艾克哈特,請(qǐng)求其停止相關(guān)報(bào)道,撤回已公開(kāi)的報(bào)道并且道歉。他們的第二反應(yīng)是發(fā)表聲明,稱其軟件并未記錄用戶的任何按鍵操作,而且該軟件收集的所有信息都“經(jīng)過(guò)加密并且確保安全”。 ????沒(méi)過(guò)多久,艾克哈特就揭穿了Carrier IQ的謊言。本周一,他在YouTube上上傳了一段為時(shí)17分鐘的視頻。這段視頻循序漸進(jìn)地向觀者揭示了Carrier IQ服務(wù)應(yīng)用的內(nèi)幕,視頻的第13分45秒清晰地顯示,Carrier IQ確實(shí)記錄了艾克哈特的擊鍵操作,更準(zhǔn)確地說(shuō),當(dāng)時(shí)他應(yīng)該是在進(jìn)行原本是加密的HTTPS谷歌搜索。 ????多位記者對(duì)此事進(jìn)行了報(bào)道。其中,科技博客網(wǎng)站ExtremeTech的喬爾?胡魯斯卡寫道:“就侵犯?jìng)€(gè)人隱私這一點(diǎn)來(lái)講,今年早些時(shí)候蘋果公司的‘定位門’丑聞相比之下實(shí)在是小巫見(jiàn)大巫?!?/p> ????本周三,科技博客網(wǎng)站Daring Fireball的約翰?格魯伯在其談話節(jié)目的播客中談到,Carrier IQ門事件并未在新聞界引起軒然大波,借此證明媒體界的反蘋果情緒。我覺(jué)得言過(guò)其實(shí)了,蘋果獲得的正面報(bào)道很可能已經(jīng)超過(guò)了應(yīng)得的數(shù)量。 ????但是,我對(duì)胡魯斯卡向安卓用戶提供的建議感到震驚: ????? 安裝CyanogenMod,該程序?qū)h除Carrier IQ應(yīng)用的內(nèi)核鉤。 ????? 改用iPhone手機(jī) ????“Carrier IQ軟件的所作所為,”他寫道,“既明目張膽地侵犯了隱私協(xié)議,同時(shí)也玷污了安全最佳實(shí)踐。這也是幾個(gè)月來(lái)我們聽(tīng)到的購(gòu)買iPhone的最佳理由。一個(gè)手機(jī)采用封閉的軟件生態(tài)系統(tǒng),一個(gè)手機(jī)雖然使用開(kāi)放系統(tǒng),但卻對(duì)用戶進(jìn)行監(jiān)視,在這二者之間我們會(huì)毫不猶豫地選擇前者。” ????譯者:大海 |
????Have you heard that every text message, every e-mail, every phone number, every keystroke made on a Google (GOOG) Android phone may be secretly recorded, logged and sent to your cellular provider by a tracking service called Carrier IQ? ????No? That's a surprise, because it's a scandal that's been brewing for several weeks -- ever since security researcher Trevor Eckhart discovered Carrier IQ's analytics app on HTC phones running Android. The app comes pre-installed on more than 140 million handsets, including phones made by Samsung, Nokia (NOK) and Research in Motion (RIMM) -- but not Apple (AAPL). ????Carrier IQ's first response was to have its lawyers send Eckhart a cease-and-desist letter (since withdrawn, with an apology). Its second was to issue a statement that its software does not record keystrokes and that any information it gathers is "encrypted and secured." ????It didn't take long for Eckhart to put the lie to those claims. On Monday he posted a 17-minute YouTube video that takes viewers step by step through the set-up and then, at the 13:45 mark, shows Carrier IQ recording his keystrokes -- in clear text -- as he performs a supposedly encrypted HTTPS Google search. ????"As violations of privacy go," writes ExtremeTech's Joel Hruska, one of a handful of reporters who has covered the story, "this makes Apple's 'locationgate' scandal from earlier this year look like nothing more than a minor hiccup." ????On his Talk Show podcast Wednesday, Daring Fireball's John Gruber offered the fact that Carrier IQ-gate isn't headline news all over the world as proof of the media's anti-Apple bias. I wouldn't go that far; Apple probably gets more positive coverage that it deserves. ????But I was struck by the workarounds Hruska offers Android users: ????? Installing CyanogenMod, which removes the kernal hooks used by Carrier IQ's app ????? Switching to an iPhone ????"The CIQ software, as it currently functions," he writes, "blatantly violates both privacy agreements and security best practices. It's also the best reason to buy an iPhone that we've heard in months. Given the choice between a closed software ecosystem and an open phone that spies on its user, we'll take closed software every time." |
相關(guān)稿件
最新文章