Nov - Dec 2011
Mobile privacy · reverse engineering
Carrier IQ
Carrier IQ was hiding on millions of phones. He took it apart and showed everyone what it could see.
150M+ devices Carrier IQ said it ran on
- 11 events
- 9 exhibits
- 36 headlines
- 1 video
// Subject ID TE-0001 Access: public Channel open
Trevor Eckhart
Developer. Hacker. Certified.
He has been a full-stack software engineer at Telogis, InterGis, and Verizon since 2004. He has several published research including Carrier IQ logging keystrokes on millions of phones, and has contributions to many security related projects.
As covered by
01 Subject profile
The short version
Trevor is a full-stack software engineer who specializes in security. He started at a Staples repair center in 2003 doing spyware removal back when worms like Blaster and Sasser were tearing through Windows PCs. Then he spent six years running the network and servers at Intergis, and he has built custom, enterprise level apps at Verizon since 2011. Along the way he exposed Carrier IQ and found CVE-2011-3975 in HTC's phones. In 2020 he used public records to show a police drone flying over a protest. His certifications run all the way from CompTIA PenTest+ to EPA 608 Universal for HVAC work.
- Name
- Trevor Eckhart
- Handle
- TrevE
- Current post
- Full-Stack Software Engineer, App Development
- Known for
- Exposing Carrier IQ (2011), CVE-2011-3975 "HTC Loggers" (2011), surveillance records (2020)
- Base
- Connecticut, USA
- Call sign
- KC1BLY
Capabilities
Software engineering
Security
AI
Data and platforms
Networking
Physical systems
02 Credentials
Credentials
Almost all of these link to proof you can check yourself. Most of that is on Credly, and the rest goes to the issuer's own lookup or a copy of the certificate. Tap one to see the details.
The list runs from CompTIA A+ up to PenTest+, with some HVAC and scuba mixed in.
Cybersecurity 20
-
CompTIA PenTest+ ce
-
CompTIA CySA+ ce
-
CompTIA Security+ ce
-
CompTIA Network Vulnerability Assessment Professional (CNVP)
Stackable certification.
Verify CompTIA Network Vulnerability Assessment Professional (CNVP)
-
CompTIA Network Security Professional (CNSP)
Stackable certification.
Verify CompTIA Network Security Professional (CNSP) Certificate PDF
-
CompTIA Security Analytics Professional (CSAP)
Stackable certification.
Verify CompTIA Security Analytics Professional (CSAP) Certificate PDF
-
CompTIA Secure Infrastructure Specialist (CSIS)
Stackable certification.
Verify CompTIA Secure Infrastructure Specialist (CSIS) Certificate PDF
-
Google Cybersecurity Professional Certificate
Nine-course program.
-
Google Cloud Cybersecurity Certificate
Five-course program.
-
Introduction to Cyber Incident Management (AWR169)
DHS/FEMA funded course.
-
Cybersecurity in the Workplace (AWR395)
DHS/FEMA funded course.
-
Cyber Security for Everyone (AWR397)
DHS/FEMA funded course.
-
Cyber Law and White-Collar Crime (AWR-168)
DHS/FEMA funded course.
-
Information Security Basics (AWR173)
DHS/FEMA funded course.
-
Information Security for Everyone (AWR175)
DHS/FEMA funded course.
-
Introduction to Cybersecurity Careers
Cloud & AI 8
-
AWS Certified AI Practitioner
-
Google Cloud Generative AI Leader
-
Google Cloud Data Analytics Certificate
Five-course program.
-
Google AI Professional Certificate
Course badges are listed below.
-
Google AI Essentials
-
Microsoft AI Skills Fest 2026
-
Python for Data Science and AI
Systems & Microsoft 5
-
CompTIA Network+ ce
-
CompTIA A+ ce
-
CompTIA IT Operations Specialist (CIOS)
Stackable certification.
-
Microsoft Exam 409: Server Virtualization with Windows Server Hyper-V and System Center
Verify Microsoft Exam 409: Server Virtualization with Windows Server Hyper-V and System Center
-
Microsoft Certified Professional
Listed on his original About page.
Emergency Management 6
-
Red Cross Adult and Pediatric First Aid/CPR/AED
Class conducted by Focus Health Corporation, an American Red Cross training provider.
Verify Red Cross Adult and Pediatric First Aid/CPR/AED Certificate PDF
-
Red Cross Anaphylaxis and Epinephrine Auto-Injector Administration
Verify Red Cross Anaphylaxis and Epinephrine Auto-Injector Administration Certificate PDF
-
FEMA IS-200.b: ICS for Single Resources and Initial Action Incidents (ICS-200)
0.3 IACET CEU.
-
FEMA IS-700.a: National Incident Management System (NIMS), An Introduction
0.3 IACET CEU.
Radio & Drones (FCC, FAA) 4
-
FCC Amateur Radio Technician, KC1BLY
First granted March 2014, renewed January 24, 2024.
-
FCC Restricted Radiotelephone Operator Permit
Lifetime permit.
-
FCC GMRS License, WSNM895
General Mobile Radio Service station license.
-
FAA Recreational UAS Safety Test (TRUST)
Required to fly drones recreationally in the US (49 U.S.C. 44809).
Trades & Safety 4
-
EPA Section 608 Universal Certification
Refrigerant handling under the Clean Air Act. Does not expire.
Verify EPA Section 608 Universal Certification Certificate PDF
-
EPA Section 609 MVAC Technician Certification
Motor vehicle air conditioning. Does not expire.
Verify EPA Section 609 MVAC Technician Certification Certificate PDF
-
NATE Ready To Work
-
OSHA 10-Hour Construction
10 contact hours, 1.0 IACET CEU.
Water Sports 2
-
SSI Open Water Diver
-
Connecticut Certificate of Personal Watercraft Operation
Academic 4
-
Tunxis Community College courses
Computer Information Systems, Network Administration option. Tunxis is now part of CT State Community College.
- Network Essentials I
- Network Security Fundamentals
- Programming Logic
-
Study.com computer science courses (ACE credit)
Five courses, each with its own Credly badge.
-
Sophia Learning courses (ACE credit)
26 courses, each with its own Credly badge.
- Introduction to Information Technology (CS1001)
- Introduction to Relational Databases (CS1011)
- Introduction to Python Programming (CS1100)
- Business Law (BUSI1050)
- Project Management (PM1001)
- Introduction to Statistics (STAT1001)
- Calculus I (MATH1040)
- English Composition II (ENG1002)
- Critical Thinking (PHIL1005)
- Introduction to Ethics (PHIL1002)
- Financial Accounting (BUSI1010)
- Managerial Accounting (BUSI1011)
- Principles of Finance (FIN1001)
- Principles of Management (BUSI1013)
- Principles of Marketing (BUSI2020)
- Macroeconomics (ECON1001)
- Microeconomics (ECON1002)
- U.S. History I (HIST1001)
- Human Biology (SCIE1020)
- Human Biology Lab (SCIE1021)
- Environmental Science (ENVS1001)
- Introduction to Nutrition (HLTH1010)
- Lifespan Development (HLTH1020)
- Conflict Resolution (HUMA1041)
- Approaches to Studying Religions (REL1001)
- Visual Communications (COMM1005)
-
Coursera software development courses
Five courses plus their GitHub projects.
03 Press
Press
The Carrier IQ story ran for weeks, from NPR and the BBC to the Washington Post and Fox News. Every headline below links to the original article, or to an archived copy when the original is gone.
- 50headlines on file
- 37outlets
- 48name him directly
- 2.4M+YouTube views across his videos
50 shown
October 2020
August 2020
March 2017
December 2011
- Engadget Carrier IQ VP says software poses no threat to user privacy, backs up his argument with metaphor ★ names Trevor
- CT News Junkie Torrington Security Researcher Sets Off Mobile Privacy Firestorm ★ names Trevor
- Forbes Carrier IQ Is Not Evil ★ names Trevor
- NBC News Lawmaker calls for FTC probe into Carrier IQ ★ names Trevor
- ABC News Carrier IQ: Does Your Smartphone Have It, and Is It Tracking You? ★ names Trevor
- eWeek Carrier IQ Software Compromises Android Device Data Privacy ★ names Trevor
- Threatpost Demo of the Carrier IQ Agent on Android ★ names Trevor
- EPIC Senator Franken Asks Carrier IQ to Explain Data Collection Activities
- The Register US Senator demands answers from Carrier IQ ★ names Trevor
- Forbes Here’s The Letter Senator Al Franken Just Sent To Phone ‘Rootkit’ Firm Carrier IQ ★ names Trevor
- The Washington Post What is Carrier IQ? ★ names Trevor
- CNN Carrier IQ: Your phone’s secret recording device archived
- Fox News Carrier IQ: Spyware or Handy Tool? What You Need to Know ★ names Trevor
- GSMArena Your smartphone could be secretly recording all your actions ★ names Trevor
- Computerworld Inside Carrier IQ-gate ★ names Trevor
November 2011
- SecurityWeek Carrier IQ Drops Threat of Legal Action Against Security Researcher ★ names Trevor
- PCWorld Carrier IQ Rootkit Reportedly Logs Everything On Millions Of Phones ★ names Trevor
- NBC News Researcher: Secret software tracks phone users ★ names Trevor
- The Register BUSTED! Secret app on millions of phones logs key taps ★ names Trevor
- HuffPost Carrier IQ: Researcher Trevor Eckhart Outs Creepy, Hidden App Installed On Smartphones ★ names Trevor
- NPR Researcher Finds Secret Software On Phones Logs Nearly Everything ★ names Trevor
- Wired Researcher’s Video Shows Secret Software on Millions of Phones Logging Everything ★ names Trevor
- CNET Carrier IQ apologizes, drops threat to security researcher ★ names Trevor
- The Register Software maker sorry for trying to silence security researcher ★ names Trevor
- Ars Technica Mobile “rootkit” maker apologizes to Android dev it threatened ★ names Trevor
- Phone Scoop Carrier IQ Threatens Developer Over Exposed Tracking Software ★ names Trevor
- Techdirt CarrierIQ Fails At The Internet: Threatens Security Researcher With Copyright Infringement Claim Over His Research ★ names Trevor
- EFF Carrier IQ Drops Empty Legal Threat, Apologizes to Security Researcher ★ names Trevor
- TechCrunch Android Researcher Hit With C&D After Dissecting Monitoring Software ★ names Trevor
- Wired Mobile ‘Rootkit’ Maker Tries to Silence Critical Android Dev ★ names Trevor
- The Verge xda-developers member threatened with lawsuit for exposing Android OEM tracking software ★ names Trevor
- Droid Life Android Community Member “TrevE” Hit With Cease & Desist For Researching Security Vulnerability ★ names Trevor
- Android Police EFF Defends Android Dev Trevor Eckhart From Carrier IQ’s Bogus Legal Threats After Exposing Phone Data Logging ★ names Trevor
- EFF Carrier IQ Tries to Censor Research With Baseless Legal Threat ★ names Trevor
October 2011
- GMA News ‘Massive’ security flaw in HTC Android phones ★ names Trevor
- SC Media HTC confirms hole in its Android phones ★ names Trevor
- NBC News HTC flaw gives hackers easy access to your info ★ names Trevor
- PCWorld HTC Investigates Reports of ‘Massive’ Vulnerability in Its Android Phones ★ names Trevor
- Computerworld HTC Android ‘massive security’ flaw leaks private info like a sieve ★ names Trevor
- The Register HTC Android handsets spew private data to ANY app ★ names Trevor
- BBC News HTC ‘investigating’ security flaw uncovered by blogger ★ names Trevor
- PCWorld ‘Massive Security Vulnerability’ in HTC Android Phones Claimed ★ names Trevor
- Android Police Massive Security Vulnerability In HTC Android Devices (EVO 3D, 4G, Thunderbolt, Others) Exposes Phone Numbers, GPS, SMS, Emails Addresses, Much More ★ names Trevor
- InformationWeek HTC Android Flaw Leaks Smartphone User Data ★ names Trevor
2011
★ names Trevor directly · "archived" opens a Wayback Machine copy because the original page is gone
04 Case files
Investigations from Trevor's desk
Three investigations, oldest to newest. Every claim links to the original record, video or article.
-
-
Sep - Oct 2011
CVE-2011-3975
HTC Loggers
An HTC update let any app with internet access pull your location, phone numbers and texts out of a hidden logger.
1 CVE assigned
- 5 events
- 6 exhibits
- 10 headlines
- 1 video
-
2020
Surveillance oversight · public records
Police Drones Flown Irresponsibly over Protest
He used public records and raw DJI flight logs to show a police drone flew over a protest, and an FAA inspector called the flight path somewhat careless.
6 police departments asked for records
- 12 events
- 10 exhibits
- 4 headlines
Case file 001 Nov - Dec 2011
Mobile privacy · reverse engineering
Carrier IQ
Carrier IQ was hiding on millions of phones. He took it apart and showed everyone what it could see.
In November 2011 Trevor published a report on Carrier IQ, diagnostic software that carriers and phone makers had quietly put on millions of phones. On HTC devices it ran as root with its menus stripped out, so most people had no idea it was there. It could log key presses, text messages and web activity, and HTC phones had no off switch for it.
Carrier IQ didn't like the attention. On November 16 it sent him a cease-and-desist letter claiming copyright infringement and "false allegations." The EFF answered for him on November 21, arguing his research was fair use and protected speech. Two days later Carrier IQ withdrew the threat and apologized.
Then he posted the video. On a factory-reset HTC phone you can watch Carrier IQ log every key press, an incoming text and browsing on Wi-Fi as it happens. It has been watched more than 2.2 million times. Three days later Senator Al Franken sent the company's CEO 11 questions, including whether it had broken federal wiretap law, and a member of Congress called for an FTC investigation.
About a month later he put out IQTool, a quick Android app that checked a phone for Carrier IQ and helped people send its profiles to the EFF.
- 150M+devices Carrier IQ said it ran on
- 2.2M+views on the Part #2 video
- 11questions from Sen. Al Franken
- 7days from legal threat to apology
Evidence
- Exhibit AResearch report, Part 1androidsecuritytest.com
- Exhibit BWriteup, Part 2androidsecuritytest.com
- Exhibit CVideo: Carrier IQ Part #2YouTube
- Exhibit DThe cease-and-desist letterEFF (PDF)
- Exhibit EThe EFF's response for TrevorEFF (PDF)
- Exhibit FCarrier IQ drops the threat and apologizesEFF
- Exhibit GSenator Franken's letterForbes
- Exhibit HIQTool source codeGitHub
- Exhibit ICarrier IQ on WikipediaWikipedia
Press on file 36 headlines, 30 outlets
Major news 8
Tech press 12
Mobile & Android 5
Security & privacy 4
Local & government 1
Case file 002 Sep - Oct 2011
CVE-2011-3975
HTC Loggers
An HTC update let any app with internet access pull your location, phone numbers and texts out of a hidden logger.
In September 2011 Trevor, working with Artem Russakovskii of Android Police and researcher Justin Case, found that an HTC update had added a logging suite called HtcLoggers.apk to phones like the EVO 3D, EVO 4G, ThunderBolt, EVO Shift, myTouch 4G Slide and Sensation.
Any app holding nothing more than the INTERNET permission could ask it for GPS location, phone numbers, SMS data and system logs. He wrote a proof of concept and recorded a demo. The team gave HTC a heads-up around September 24 and went public on October 1.
HTC patched the phones. The flaw became CVE-2011-3975, and F-Secure shipped a named detection for it, Exploit:Android/HtcLoggers.A. When the FTC brought its first case against a phone maker in 2013, HTC's logging apps were part of it.
- 1CVE assigned
- 6HTC phone models named
- 7days from HTC's heads-up to disclosure
- 182Kviews on the demo video
Evidence
Press on file 10 headlines, 9 outlets
Tech press 4
Mobile & Android 1
Security & privacy 1
Case file 003 2020
Surveillance oversight · public records
Police Drones Flown Irresponsibly over Protest
He used public records and raw DJI flight logs to show a police drone flew over a protest, and an FAA inspector called the flight path somewhat careless.
In the summer of 2020 Trevor used the EFF's Atlas of Surveillance as a starting point and sent public records requests to six police departments, asking about drones, Amazon Ring partnerships, BriefCam and license plate readers. He posted every response he got.
The records didn't always match what departments said. Chicopee told him it had no Ring agreement, then produced one signed in May 2020 after he followed up. Northampton turned over records for 4 drones and 97 flights since 2018. Westfield's logs showed a police drone in the air during the June 4, 2020 Black Lives Matter protest.
He mapped the raw DJI flight logs, a 2,570-foot path that ran over residential streets, and filed a complaint. On September 1 an FAA inspector wrote that the flight path was "somewhat careless" and that operating there "presented undue risk to those below." That same month he won a records appeal (SPR20/1513) ordering Northampton police to answer his flight-path request. On the EFF's referral he brought the case to Harvard Law School's Cyberlaw Clinic, which took it on pro bono.
On October 1 a city councilor read his statement into the record at the Westfield City Council meeting, asking for drone ordinances and independent review of police complaints. The Westfield News ran his letter and the police chief's response on October 21. He later took the Ring requests to Norwood, which turned over about 145 police emails with Ring, and to Quincy.
- 6police departments asked for records
- 97Northampton drone flights on record
- 2,570 ftflight path traced from raw DJI logs
- 145Norwood police emails with Ring
Evidence
- Exhibit ASurveillance records overviewtrevoreckhart.com
- Exhibit BWestfield police recordstrevoreckhart.com
- Exhibit CProtest flight complaint and flight mapstrevoreckhart.com
- Exhibit DChicopee recordstrevoreckhart.com
- Exhibit ENorthampton drone recordstrevoreckhart.com
- Exhibit FAgawam, Southampton and Easthamptontrevoreckhart.com
- Exhibit GEyes on the ground and in the skyMassLive
- Exhibit HLetter: Concern about police drone useThe Westfield News
- Exhibit IPolice chief defends use of drone during June BLM protestThe Westfield News
- Exhibit JAtlas of SurveillanceEFF
Press on file 4 headlines, 3 outlets
Local & government 3
05 Activity log
Activity log
Jobs and research, newest first.
-
Full-Stack Software Engineer, App Development
Verizon
- Builds and secures web and mobile applications in .NET, Java, JavaScript/TypeScript, Node.js and Android.
- Integrates generative AI into product workflows.
- Uses Wireshark and Fiddler for traffic analysis and debugging.
-
The certification run
open the record- Built a full CompTIA cybersecurity stack, from Security+ in 2021 to PenTest+ in November 2025.
- Added the AWS Certified AI Practitioner and Google Cloud Generative AI Leader in 2026.
- Qualified in HVAC and safety: EPA 608 Universal, EPA 609, NATE Ready To Work and OSHA 10.
-
Surveillance oversight
open the case file- Public records requests to six police departments about drones, Ring, BriefCam and license plate readers.
- FAA inspector found a protest drone flight path "somewhat careless." Harvard Law School's Cyberlaw Clinic took the case pro bono.
-
Licenses and training
open the record- FCC Amateur Radio Technician (KC1BLY) and Restricted Radiotelephone Operator Permit.
- FEMA incident command courses (IS-100, 200, 700 and 800) and DHS-funded TEEX cyber courses.
- Microsoft Exam 409: Server Virtualization with Hyper-V and System Center.
-
Android privacy work
open the record- Ported the PDroid 2.0 privacy framework to Samsung's TouchWiz Jelly Bean builds (January 2013). It shipped inside Synergy ROM.
- Added EVO 3D and Galaxy S3/S4 support to Android Wi-Fi Tether, merged in 2012 and 2013.
-
Carrier IQ
open the case file- Exposed hidden logging software on millions of phones. The EFF defended him and Carrier IQ apologized.
-
CVE-2011-3975, HTC Loggers
open the case file- Found that an HTC update exposed location, phone numbers and SMS data to any app with internet access.
-
Android developer “TrevE”
open the record- Kernel and device work for the HTC EVO 4G, published on GitHub.
- Built Logging Test App, which scans phones for hidden loggers like Carrier IQ.
- Recognized Developer on XDA Developers (now retired).
-
Systems Administrator
Intergis LLC
- Built point-to-point IPSec VPNs between business locations on SonicWall, pfSense and m0n0wall.
- Ran Windows Server 2003/2008, Active Directory and about 300 workstations.
- Kept a load-balanced Citrix environment running for more than 900 users and helped run a high-availability VMware ESX farm of more than 100 virtual machines.
- DBA for several Microsoft SQL Server databases over 500 GB each. Also ran Exchange 2007 and Veritas Backup Exec.
- Received the company's 2009 Achievement Award for Outstanding Performance.
-
Computer Tech / Sales Associate
Staples
- Certified in-store technician doing hardware and software repair plus virus and malware removal.
06 Field kit
Field kit
Tools and code he built or helped build.
-
Android Security Test
Home of his Carrier IQ and HTC Loggers research, and of Logging Test App, an Android app that scans for hidden loggers like Carrier IQ and can bring up their hidden menus.
-
IQTool
A quick Android tool that checked a phone for Carrier IQ, found its profiles and helped people send them to the EFF for analysis.
-
PDroid 2.0 TouchWiz port
Ported the PDroid privacy framework, which lets you block what apps can read, to Samsung's Jelly Bean TouchWiz builds. Synergy ROM shipped it built in.
-
Android Wi-Fi Tether
Open-source Wi-Fi tethering app. His device support for the EVO 3D and Galaxy S3/S4 was merged in, and his commits are in the project history under his email.
-
HTC EVO 4G kernels
HTC Supersonic (EVO 4G) 2.6.29 kernel source and CyanogenMod kernel and device tree forks.
-
WiMAX data reprogramming PoC
Proof-of-concept video reprogramming the WiMAX data radio on the HTC EVO 4G.
07 Training
Training and education
-
2005 - 2006
Tunxis Community College
Computer Information Systems, Network Administration option, including Network Essentials I, Network Security Fundamentals and Programming Logic
see the records -
2026
Study.com (ACE credit)
CS 105 Intro to Operating Systems, CS 204 Database Programming, CS 303 Database Management, CS 305 Operating Systems, CS 331 Cybersecurity Risk Analysis
see the records -
2026
Sophia Learning (ACE credit)
26 courses, including Intro to IT, Relational Databases, Python, Business Law, Statistics and Calculus I
see the records -
2026
Coursera
Cloud computing, cybersecurity careers, Google AI and full-stack web development (React, Node and Express, Git)
see the records -
2014, 2026
TEEX (DHS/FEMA funded)
AWR cyber courses, including Digital Forensics Basics and Cyber Incident Management
see the records -
2014
FEMA Emergency Management Institute
IS-100.b, IS-200.b, IS-700.a and IS-800.b
see the records
08 Contact
Establish contact
Hiring, writing a story or chasing a bug? Pick a reason below and I'll know what the email is about before I even open it.
Trevor Eckhart
Full-Stack Software Engineer, Verizon
- me@trevoreckhart.com
- Phone
- [REDACTED]
- Base
- Connecticut, USA
point a phone camera here
What's this about?