.
/v3-uk/news/1979921/experts-slam-mobile-spying-software
27 Sep 2007, Iain Thomson , V3
Security experts have slammed applications used to spy on mobile phone users.
The warning from researchers at F-Secure comes as a growing number of programs are being launched to track and record mobile phone conversations and text messages.
Such software is chiefly marketed at those who suspect a partner of having an affair, or to monitor children's telephone activity.
F-Secure experts claim that, far from providing security, this type of software could allow anyone to access the information collected.
For example, they demonstrated to vnunet.com that it possible to find call times, numbers dialled and SMS messages from users of Mobile Spy software.
"They are not building this stuff to make people secure, they are building it to make money," said Sean Sullivan, a senior researcher at F-Secure.
"It would be easy to build a software tool that could automatically scan and record the information from anyone who had ever used the service."
Mobile Spy states on its website: "By purchasing from an established company that has been creating spy software products since early 2003, you can rest assured you will receive professional grade software and service.
"With Mobile Spy there is no need to trust an offshore company with your confidential data."
F-Secure designates such software as 'malware', since the code can run without the user's knowledge. Legal authorities in Britain have also stated that the Flexispy application from Flexispy.com may well be illegal.
Symbian, however, has defended such software's use, maintaining that it has legitimate applications.
Do you agree?
Stunned!!!
I can't believe that legal authorities have only stated that Flexispy "may be illegal."
On the basis that this is installed on a privately owned phone:
If it is installed on your phone without your permission, surely the person who installed it is in breach of the Computer Misuse Act?
By holding such information, shouldn't Flexispy be registered under the DPA, and inform people that they are holding such information or be in breach?
I also suspect that interception of telephone conversations and emails is in breach of Article 8 of the European Convention.
If this were to be installed on a company mobile, it would have to be declared as part of company policy, so that all staff are aware that it is in place, the same as rules on email usage.
Apparently "Flexispy forwards any SMS or email message sent on the phone to a third party, and monitors the phone's call logs." Who is paying for this? If it is the owner of the phone, I suspect that either Flexispy or whoever installed the software is guilty of theft, as the phone's owner is paying for the message being forwarded.
Any legal people out there who can comment? I'd seriously like to know the answers.
Posted by Kevin B, 27 Sep 2007