Whitepaper: HP Integrated Citrix XenServer for HP ProLiant Servers. Download this whitepaper now and get a chance to receive FREE XenServer HP Select Edition Software. Sponsored by HP, Citrix, and Intel.

Managing the Modern Network Sponsored by HP In a global economy where information crosses the globe in an instant, and where Web-based applications power business, it's more important than ever to ensure your network is safe from threats and optimized to deliver the data your business needs. »     Business Service Management: Generate Revenue Through IT Sponsored by HP IT must now help organizations attract, retain and grow customer relationships and increase customer satisfaction. Business service management (BSM) helps lay the foundation by managing services in dynamic support of business requirements. Learn more. »     Evaluating Software as a Service for Your Business Sponsored by Webroot Is Software as a Service just hype, or is something really going on here? See if your company can benefit as SaaS tries to change the face of the enterprise. »     Storage Networking: Configuration and Planning Sponsored by HP The most critical part of setting up a SAN is configuring each individual disk array. This guide examines configurations for SAN-attached servers and disk arrays, and looks at the future of IP storage. »     Is Your Disaster Recovery Plan Good Enough? Sponsored by HP Preparing for a disaster is more often than not part of the storage planning process, and it is one of the most difficult tasks, since it includes local hardware and software, networking equipment, and a test plan. Learn how to get disaster recovery right. »

Related Articles • Security Experts Warn of Web 2.0 Woes • Virus Infections Reflect Sloppy Manufacturing • So I Married a Spyware Installer • Hackers Abuse Domain-Name Trust • Apple Fixes Tiger's Core Again • Lessons Learned: People in Glass Houses Shouldn’t Brick Phones

eSecurity Glossary biometrics encryption keylogger malware phishing RFID security spyware virus worm Search for more eSecurity terms ...

FREE Tech Newsletters Instant Messaging Planet HTML CIO Update CodeGuru Update Enterprise Networking Planet Practically Networked HTML Enterprise Storage Forum HTML Optically Networked HTML Intranet Journal Update Datamation IT Management Careers Datamation IT Management Update Developer.com Update Gamelan Java Update Goodies to Go Javascript Weekly HTML JARS Java Update OpenSource Update SysOpt Tech Notes Grid Computing Planet HTML E-Security Planet HTML Virtual Dr. Text

Is Your iPhone More Like 'I Spy'?
November 21, 2007
By Andy Patrizio

Hardware hackers and security experts are claiming that the Apple iPhone might be secretly tracking some user activity. Yet even if those allegations are correct, what exactly it tracks and how much information it discloses remains a mystery.

A user first raised the issue in a posting on Hackint0sh.org. In the post, the hacker said a hex editor revealed that when iPhone users request stock quotes or a weather forecast, their phone allegedly sends the user's International Mobile Equipment Identity (IMEI) number to Apple.

The IMEI is a number unique to every GSM and UMTS mobile phone and serves as an identifier for the phone.

But the nature and amount of information it's divulging remains in question.

"It's a matter of how 'tinfoil hat' you want to get," said Dan Dorato, publisher of Uneasy Silence, a blog that picked up the item from Hackint0sh. "If it's a matter of tracking how many apps are opened or what we do, we don't know where these lines of code are, and because the iPhone is a closed system, we don't know how far it goes."

Apple's offices are closed for the Thanksgiving week holiday and spokespeople did not respond to requests for comment from InternetNews.com.

The story became further muddied when German security firm Heise Security ran its own tests and found the iPhone is, indeed, sending some number back to Apple -- but not the IMEI identifier.

"While there was a number in the HTTP requests sent to the Apple server, it did not correspond with the iPhone's IMEI," the firm said. "In addition, a weather query contains a different 'imei' parameter than the one from the Stock applet. On the other hand tests with a second iPhone showed a different set of 'imei' again."

Heise Editor-in-Chief Juergen Schmidt told InternetNews.com in an e-mailed statement that his best guess is that the number in question is akin to the UUID [Universally Unique Identifiers] that can be used to track application usage but is not related to personal data.

This article was first published on InternetNews.com. To read the full article, click here.