So Sprint this week finally rolled out an HTC update to the EVO which removes the CarrierIQ they had so much bad press about. This long delayed upgrade does not fix other issues which would be fixed in Icecream Sandwich instead of Gingerbread. Icecream sandwich of course will not even be available on the older phones and will be stuck with the preinstalled applications with the information disclosure to third parties forever until they upgrade their hardware to something that the carrier will allow to support Icecream Sandwich.
The issue remains with the preinstalled applications which cannot be removed. And those applications sharing your cell phone number to a third party.
Also in the latest upgrade which removes CarrierIQ finally, the HTC Loggers which previously had an information disclosure issue which was also patched previously http://goo.gl/Y3gsO was upgraded considerably.
Below are the finding from the two versions with comaprison to CarrierIQ, HTC Loggers, and the preinstalled applications which cannot be removed:
Carrier: Sprint
Phone: HTC EVO
OS:
Android 2.3.3
Carrier IQ:
/system/bin/iqfd
/system/bin/iqd
/system/app/IQRD.apk
/system/app/HtcIQAgent.apk
/system/app/HtcIQAgent.odex
/system/app/IQRD.apk
/system/app/IQRD.odex
/system/etc/iqprofile.pro
/system/lib/libciq_htc.so
/system/lib/libhtciqagent.so
HTC logger:
/system/bin/htc_ebdlogd
Preinstalled applications:
Amazon MP3:
unique device ID, cell tower name.
Block Buster:
unique device ID
Kindle:
unique device ID, unique SIM ID, unique IMSI, cell number.
Nascar:
unique device ID, cell number.
Nova (game):
unique device ID, cell number.
QIK video:
unique device ID, cell number, current location.
Sprint football live:
unique device ID, cell number.
Sprint TV:
unique device ID, unique IMSI, cell number.
TeleNav GPS:
unique device ID, unique SIM ID, current location, cell number.
Android: 2.3.5
Carrier IQ:
Removed :)
HTC logger(s): Updated!
/system/bin/htc_ebdlogd
/system/app/QXDM2SD.apk
/system/app/QXDM25D.odex
/system/lib/libhtcqxdm2sd.so
Preinstalled applications:
Amazon MP3; rights:
unique device ID, cell tower name.
Block Buster:
unique device ID
Kindle:
unique device ID, unique SIM ID, unique IMSI, cell number.
Nascar:
unique device ID, cell number.
Nova (Gameloft):
unique device ID, cell number.
QIK video:
unique device ID, cell number, current location.
Sprint football live:
unique device ID, cell number.
Sprint TV:
unique device ID, unique IMSI, cell number.
TeleNav GPS:
unique device ID, unique SIM ID, current location, cell number.
