EFF Releases IQIQ to Decode Carrier IQ Profiles
The Electronic Frontier Foundation is hard at work on the Carrier IQ issue. EFF volunteer Jered Wierzbicki reverse-engineered the Carrier IQ Profile file format from WBXML to human-readable XML. (A Profile is a set of instructions telling IQ Agent on your phone what information to collect, and when to send it back to Carrier IQ.)
He then created IQIQ–a clever title, providing a watching-the-Watchmen sort of commentary–to allow anyone to decode the Carrier IQ Profile active on their phone. The EFF hopes to create a Carrier IQ Profile database to force transparency when it comes to information collected from mobile devices.
In order to get the Profile from your phone, you need root, and you have to find it first. So open a terminal and type
adb busybox find / -iname “*.pro”
When you find a file named something like IQProfile.pro, CIQProfile.pro, or defaultprofile.pro, type
adb pull /full/path/to/profile.pro .
T-Mobile customers may have to use a second method to get their Profile, typing this in the terminal:
adb pull /data/data/com.carrieriq.tmobile/app_iq_archive/archive.img
Note the warning EFF gave us:
Please be warned that sensitive data could be in this archive.img file such as URLs, IMEI, SMS metadata, etc. EFF will always do its best to keep archive.img files confidential, but please DO NOT send them if there may be any private information on the handset you are working with.
Then, follow the instructions from EFF to submit it for the Profile database.
Please send us 1) a copy of the Profile, 2) which phone and network it was from, and 3) where on the phone’s file system you found it. You can send us this information in an email at firstname.lastname@example.org or in a git remote we can pull from.