[tptacek]

You are militantly missing my point. There is no evidence that they are seeing message contents. All we are going on in this thread is the supposition that because they're getting "10 gigabytes a day", it must be message contents.

[rhizome]

They themselves use the phrase "raw data" to describe what they collect (as "metrics"). Metrics are not comprised of raw data, but of measurements, so unless they're being hinky with word choice, a plain reading of their own materials would suggest that they do indeed receive user content.

[tptacek]

They've said repeatedly that they do not collect that data. This is a common attitude on HN threads: the idea that the only facts for us to discuss are the ones in the article itself or in other comments on the thread. There are more facts just a Google search away for you.

Their own words are not dispositive; I'm not suggesting that they are. But here you're trying to interpret their words in a way that contradicts their own direct statement. Your interpretation is possibly accurate, but implausible.

[rhizome]

An update: http://daringfireball.net/2011/12/rootkit_eh

[tptacek]

I read this and don't see how it clears anything up.

My best guess (I know just as little about CarrierIQ as everyone else on this thread) is that CarrierIQ is trying to collect very innocuous information (performance statistics and event information to correlate them to), but is doing a slapdash job of generating that information --- for instance, by logging raw details to the Android filesystem.

I wouldn't want it on my phone either, but that doesn't make them Big Brother --- or, obviously, a "rootkit".

[rhizome]

that the companies are all playing hot potato still, days later, tells me there's more to come out about this.

[rhizome]

Fair enough. Given what you've read, where do you think the line is between "user content" and the data they received?