Trevor Eckhart, home: TE//DOSSIER
Channel open

// Subject file TE-0001 Clearance: public Channel open

Trevor Eckhart

Developer. Hacker. Certified.

He has been a full-stack software engineer at Telogis, InterGis, and Verizon since 2004. He has several published research including Carrier IQ logging keystokres on millions of phones, and has contributions to many security related projects.

  • 23 yrs in IT
  • 75 Credly badges
  • 2.2M views on the Carrier IQ video
  • CVE-2011-3975

As covered by

  • NPR
  • The Washington Post
  • CNN
  • Wired
  • BBC News
  • NBC News
  • ABC News
  • Fox News
  • Forbes
  • HuffPost
  • TechCrunch
  • Ars Technica
  • The Verge
  • CNET
  • Engadget
  • The Register
  • Computerworld
  • PCWorld
  • InformationWeek
  • SC Media
  • SecurityWeek
  • Threatpost
  • eWeek
  • Techdirt
  • GSMArena
  • Tom's Hardware
  • Android Police
  • Droid Life
  • 9to5Google
  • Phone Scoop
  • GMA News
  • CT News Junkie
  • MassLive
  • GovTech
  • The Westfield News
  • EFF

scroll to decrypt press / for the terminal

01 Subject profile

The short version

Trevor writes software for a living and takes it apart when something smells off. He started at a Staples repair bench in 2003, spent six years running the network and servers at Intergis, and has built apps at Verizon since 2011. Along the way he exposed Carrier IQ and found CVE-2011-3975 in HTC's phones. In 2020 he used public records to show a police drone flying over a protest. His certifications run all the way from CompTIA PenTest+ to EPA 608 Universal for HVAC work, and he is finishing a BS in Cybersecurity at Thomas Edison State University.

Name
Trevor Eckhart
Handle
TrevE
Current post
Full-Stack Software Engineer, App Development, Verizon (2011 - present)
Known for
Exposing Carrier IQ (2011), CVE-2011-3975 "HTC Loggers" (2011), police surveillance records (2020)
Education
BS in Cybersecurity, Thomas Edison State University (in progress)
Base
Connecticut, USA
Call sign
KC1BLY
Scouting
Eagle Scout, Troop 4, Connecticut

Capabilities

Software engineering

  • Java
  • TypeScript
  • JavaScript
  • Node.js
  • .NET (C#, VB.NET)
  • Android
  • Angular
  • ExtJS
  • React

Security

  • Application and network penetration testing
  • vulnerability research
  • reverse engineering
  • traffic analysis (Wireshark, Fiddler)
  • cryptography
  • privacy advocacy

AI

  • Generative AI implementation and integration
  • Google Cloud Generative AI Leader
  • AWS Certified AI Practitioner

Data and platforms

  • MS SQL Server
  • Postgres
  • Snowflake
  • MongoDB
  • Windows Server
  • Hyper-V
  • VMware
  • Citrix
  • Linux (Debian, Red Hat, FreeBSD)
  • AWS
  • Google Cloud

Networking

  • Site-to-site IPSec VPNs
  • SonicWall
  • pfSense
  • m0n0wall
  • Active Directory
  • Exchange

Physical systems

  • Data center thermal management (EPA 608/609, NATE)
  • electrical and HVAC systems integration

02 Case files

Case files

Three investigations, oldest to newest. Every claim links to the original record, video or article.

  1. 001 Carrier IQ Nov - Dec 2011
  2. 002 HTC Loggers Sep - Oct 2011
  3. 003 Drones over the protest 2020

Case file 001 Nov - Dec 2011

Mobile privacy · reverse engineering

Carrier IQ

Carrier IQ was hiding on millions of phones. He took it apart and showed everyone what it could see.

In November 2011 Trevor published a report on Carrier IQ, diagnostic software that carriers and phone makers had quietly put on millions of phones. On HTC devices it ran as root with its menus stripped out, so most people had no idea it was there. It could log key presses, text messages and web activity, and HTC phones had no off switch for it.

Carrier IQ didn't like the attention. On November 16 it sent him a cease-and-desist letter claiming copyright infringement and "false allegations." The EFF answered for him on November 21, arguing his research was fair use and protected speech. Two days later Carrier IQ withdrew the threat and apologized.

Then he posted the video. On a factory-reset HTC phone you can watch Carrier IQ log every key press, an incoming text and browsing on Wi-Fi as it happens. It has been watched more than 2.2 million times. Three days later Senator Al Franken sent the company's CEO 11 questions, including whether it had broken federal wiretap law, and a member of Congress called for an FTC investigation.

About a month later he put out IQTool, a quick Android app that checked a phone for Carrier IQ and helped people send its profiles to the EFF.

Play video: Carrier IQ Part #2
17:10 · 2.2M views · Nov 28, 2011 · watch on YouTube

Case file 002 Sep - Oct 2011

CVE-2011-3975

HTC Loggers

An HTC update let any app with internet access pull your location, phone numbers and texts out of a hidden logger.

In September 2011 Trevor, working with Artem Russakovskii of Android Police and researcher Justin Case, found that an HTC update had added a logging suite called HtcLoggers.apk to phones like the EVO 3D, EVO 4G, ThunderBolt, EVO Shift, myTouch 4G Slide and Sensation.

Any app holding nothing more than the INTERNET permission could ask it for GPS location, phone numbers, SMS data and system logs. He wrote a proof of concept and recorded a demo. The team gave HTC a heads-up around September 24 and went public on October 1.

HTC patched the phones. The flaw became CVE-2011-3975, and F-Secure shipped a named detection for it, Exploit:Android/HtcLoggers.A. When the FTC brought its first case against a phone maker in 2013, HTC's logging apps were part of it.

Play video: Android Security Elevation With HTCLoggers.apk
7:33 · 182K views · Sep 24, 2011 · watch on YouTube

Case file 003 2020

Surveillance oversight · public records

Drones over the protest

He used public records and raw DJI flight logs to show a police drone flew over a protest, and an FAA inspector called the flight path somewhat careless.

In the summer of 2020 Trevor used the EFF's Atlas of Surveillance as a starting point and sent public records requests to six police departments, asking about drones, Amazon Ring partnerships, BriefCam and license plate readers. He posted every response he got.

The records didn't always match what departments said. Chicopee told him it had no Ring agreement, then produced one signed in May 2020 after he followed up. Northampton turned over records for 4 drones and 97 flights since 2018. Westfield's logs showed a police drone in the air during the June 4, 2020 Black Lives Matter protest.

He mapped the raw DJI flight logs, a 2,570-foot path that ran over residential streets, and filed a complaint. On September 1 an FAA inspector wrote that the flight path was "somewhat careless" and that operating there "presented undue risk to those below." That same month he won a records appeal (SPR20/1513) ordering Northampton police to answer his flight-path request. On the EFF's referral he brought the case to Harvard Law School's Cyberlaw Clinic, which took it on pro bono.

On October 1 a city councilor read his statement into the record at the Westfield City Council meeting, asking for drone ordinances and independent review of police complaints. The Westfield News ran his letter and the police chief's response on October 21. He later took the Ring requests to Norwood, which turned over about 145 police emails with Ring, and to Quincy.

Aerial map of downtown Westfield, Massachusetts with the police drone flight path from the June 4, 2020 logs drawn around Park Square
His map of the June 4, 2020 flight around Park Square, built from the raw DJI flight logs (Google Earth).

Press on file 4 headlines, 3 outlets

Every headline on this case

03 Clearances

Clearances

Every credential here links to proof you can check yourself, usually a Credly badge or the certificate PDF. Tap one for the details.

From Eagle Scout to PenTest+. From scuba to HVAC to cloud security.

Cybersecurity 20

Cloud & AI 8

Systems & Microsoft 5

Emergency Management 4

  • FEMA IS-100.b: Introduction to the Incident Command System (ICS-100)

    Issuer
    FEMA Emergency Management Institute
    Issued
    Apr 4, 2014
    Expires
    No expiration
    Track
    Emergency Management

    0.3 IACET CEU.

  • FEMA IS-200.b: ICS for Single Resources and Initial Action Incidents (ICS-200)

    Issuer
    FEMA Emergency Management Institute
    Issued
    Apr 4, 2014
    Expires
    No expiration
    Track
    Emergency Management

    0.3 IACET CEU.

  • FEMA IS-700.a: National Incident Management System (NIMS), An Introduction

    Issuer
    FEMA Emergency Management Institute
    Issued
    Mar 27, 2014
    Expires
    No expiration
    Track
    Emergency Management

    0.3 IACET CEU.

  • FEMA IS-800.b: National Response Framework, An Introduction

    Issuer
    FEMA Emergency Management Institute
    Issued
    Apr 13, 2014
    Expires
    No expiration
    Track
    Emergency Management

    0.3 IACET CEU.

Radio & Drones (FCC, FAA) 4

  • FCC Restricted Radiotelephone Operator Permit

    Issuer
    Federal Communications Commission
    Issued
    Apr 5, 2014
    Expires
    No expiration
    ID
    RR00101837
    Track
    Radio & Drones (FCC, FAA)

    Lifetime permit.

  • FCC GMRS License, WSNM895

    Issuer
    Federal Communications Commission
    Issued
    Jul 14, 2026
    Expires
    Jul 14, 2036
    Call sign
    WSNM895
    Track
    Radio & Drones (FCC, FAA)

    General Mobile Radio Service station license.

  • FAA Recreational UAS Safety Test (TRUST)

    Issuer
    Pilot Institute, an FAA-approved TRUST test administrator
    Issued
    Jul 12, 2026
    Expires
    No expiration
    Authentication token
    EASY12575172985
    Track
    Radio & Drones (FCC, FAA)

    Required to fly drones recreationally in the US (49 U.S.C. 44809).

Trades & Safety 4

  • EPA Section 609 MVAC Technician Certification

    Issuer
    SkillCat (EPA-approved certifying program)
    Issued
    Aug 7, 2025
    Expires
    No expiration
    Track
    Trades & Safety

    Motor vehicle air conditioning. Does not expire.

Scouting & Diving 2

  • SSI Open Water Diver

    Issuer
    Scuba Schools International
    Expires
    No expiration
    MID
    1245759
    Secondary ID
    VN.352649/287617
    Track
    Scouting & Diving

Academic 4

04 Press

Press

The Carrier IQ story ran for weeks, from NPR and the BBC to the Washington Post and Fox News. Every headline below links to the original article, or to an archived copy when the original is gone.

50 shown

  1. The Westfield News Police chief defends use of drone during June BLM protest ★ names Trevor
  2. The Westfield News Letter: Concern about police drone use ★ names Trevor
  3. GovTech Data Map Illustrates Surveillance by Massachusetts Police ★ names Trevor
  4. MassLive Eyes on the ground and in the sky: Dozens of police departments in Massachusetts have drones, partnerships with Amazon security company Ring ★ names Trevor
  5. Tom's Hardware Carrier User Tracking Is Back On Android Devices, After Congress Voted To Repeal FCC Privacy Rules ★ names Trevor
  6. Engadget Carrier IQ VP says software poses no threat to user privacy, backs up his argument with metaphor ★ names Trevor
  7. CT News Junkie Torrington Security Researcher Sets Off Mobile Privacy Firestorm ★ names Trevor
  8. Forbes Carrier IQ Is Not Evil ★ names Trevor
  9. NBC News Lawmaker calls for FTC probe into Carrier IQ ★ names Trevor
  10. ABC News Carrier IQ: Does Your Smartphone Have It, and Is It Tracking You? ★ names Trevor
  11. eWeek Carrier IQ Software Compromises Android Device Data Privacy ★ names Trevor
  12. Threatpost Demo of the Carrier IQ Agent on Android ★ names Trevor
  13. EPIC Senator Franken Asks Carrier IQ to Explain Data Collection Activities
  14. The Register US Senator demands answers from Carrier IQ ★ names Trevor
  15. Forbes Here’s The Letter Senator Al Franken Just Sent To Phone ‘Rootkit’ Firm Carrier IQ ★ names Trevor
  16. The Washington Post What is Carrier IQ? ★ names Trevor
  17. CNN Carrier IQ: Your phone’s secret recording device archived
  18. Fox News Carrier IQ: Spyware or Handy Tool? What You Need to Know ★ names Trevor
  19. GSMArena Your smartphone could be secretly recording all your actions ★ names Trevor
  20. Computerworld Inside Carrier IQ-gate ★ names Trevor
  21. SecurityWeek Carrier IQ Drops Threat of Legal Action Against Security Researcher ★ names Trevor
  22. PCWorld Carrier IQ Rootkit Reportedly Logs Everything On Millions Of Phones ★ names Trevor
  23. NBC News Researcher: Secret software tracks phone users ★ names Trevor
  24. The Register BUSTED! Secret app on millions of phones logs key taps ★ names Trevor
  25. HuffPost Carrier IQ: Researcher Trevor Eckhart Outs Creepy, Hidden App Installed On Smartphones ★ names Trevor
  26. NPR Researcher Finds Secret Software On Phones Logs Nearly Everything ★ names Trevor
  27. Wired Researcher’s Video Shows Secret Software on Millions of Phones Logging Everything ★ names Trevor
  28. CNET Carrier IQ apologizes, drops threat to security researcher ★ names Trevor
  29. The Register Software maker sorry for trying to silence security researcher ★ names Trevor
  30. Ars Technica Mobile “rootkit” maker apologizes to Android dev it threatened ★ names Trevor
  31. Phone Scoop Carrier IQ Threatens Developer Over Exposed Tracking Software ★ names Trevor
  32. Techdirt CarrierIQ Fails At The Internet: Threatens Security Researcher With Copyright Infringement Claim Over His Research ★ names Trevor
  33. EFF Carrier IQ Drops Empty Legal Threat, Apologizes to Security Researcher ★ names Trevor
  34. TechCrunch Android Researcher Hit With C&D After Dissecting Monitoring Software ★ names Trevor
  35. Wired Mobile ‘Rootkit’ Maker Tries to Silence Critical Android Dev ★ names Trevor
  36. The Verge xda-developers member threatened with lawsuit for exposing Android OEM tracking software ★ names Trevor
  37. Droid Life Android Community Member “TrevE” Hit With Cease & Desist For Researching Security Vulnerability ★ names Trevor
  38. Android Police EFF Defends Android Dev Trevor Eckhart From Carrier IQ’s Bogus Legal Threats After Exposing Phone Data Logging ★ names Trevor
  39. EFF Carrier IQ Tries to Censor Research With Baseless Legal Threat ★ names Trevor
  40. GMA News ‘Massive’ security flaw in HTC Android phones ★ names Trevor
  41. SC Media HTC confirms hole in its Android phones ★ names Trevor
  42. NBC News HTC flaw gives hackers easy access to your info ★ names Trevor
  43. PCWorld HTC Investigates Reports of ‘Massive’ Vulnerability in Its Android Phones ★ names Trevor
  44. Computerworld HTC Android ‘massive security’ flaw leaks private info like a sieve ★ names Trevor
  45. The Register HTC Android handsets spew private data to ANY app ★ names Trevor
  46. BBC News HTC ‘investigating’ security flaw uncovered by blogger ★ names Trevor
  47. PCWorld ‘Massive Security Vulnerability’ in HTC Android Phones Claimed ★ names Trevor
  48. Android Police Massive Security Vulnerability In HTC Android Devices (EVO 3D, 4G, Thunderbolt, Others) Exposes Phone Numbers, GPS, SMS, Emails Addresses, Much More ★ names Trevor
  49. InformationWeek HTC Android Flaw Leaks Smartphone User Data ★ names Trevor
  50. 9to5Google Trevor Eckhart (topic page with their 2011 coverage) ★ names Trevor

★ names Trevor directly · "archived" opens a Wayback Machine copy because the original page is gone

05 Activity log

Activity log

Jobs and research, newest first.

  1. 2011 - present Job

    Full-Stack Software Engineer, App Development

    Verizon

    • Builds and secures web and mobile applications in .NET, Java, JavaScript/TypeScript, Node.js and Android.
    • Integrates generative AI into product workflows.
    • Uses Wireshark and Fiddler for traffic analysis and debugging.
  2. 2021 - 2026 Milestone

    The certification run

    • Built a full CompTIA cybersecurity stack, from Security+ in 2021 to PenTest+ in November 2025.
    • Added the AWS Certified AI Practitioner and Google Cloud Generative AI Leader in 2026.
    • Qualified in HVAC and safety: EPA 608 Universal, EPA 609, NATE Ready To Work and OSHA 10.
    open the record
  3. 2020 Research

    Surveillance oversight

    • Public records requests to six police departments about drones, Ring, BriefCam and license plate readers.
    • FAA inspector found a protest drone flight path "somewhat careless." Harvard Law School's Cyberlaw Clinic took the case pro bono.
    open the case file
  4. 2014 Licenses & training

    Licenses and training

    • FCC Amateur Radio Technician (KC1BLY) and Restricted Radiotelephone Operator Permit.
    • FEMA incident command courses (IS-100, 200, 700 and 800) and DHS-funded TEEX cyber courses.
    • Microsoft Exam 409: Server Virtualization with Hyper-V and System Center.
    open the record
  5. 2012 - 2013 Research

    Android privacy work

    • Ported the PDroid 2.0 privacy framework to Samsung's TouchWiz Jelly Bean builds (January 2013). It shipped inside Synergy ROM.
    • Added EVO 3D and Galaxy S3/S4 support to Android Wi-Fi Tether, merged in 2012 and 2013.
    open the record
  6. Nov - Dec 2011 Research

    Carrier IQ

    • Exposed hidden logging software on millions of phones. The EFF defended him and Carrier IQ apologized.
    open the case file
  7. Sep - Oct 2011 Research

    CVE-2011-3975, HTC Loggers

    • Found that an HTC update exposed location, phone numbers and SMS data to any app with internet access.
    open the case file
  8. 2010 - 2012 Research

    Android developer “TrevE”

    • Kernel and device work for the HTC EVO 4G, published on GitHub.
    • Built Logging Test App, which scans phones for hidden loggers like Carrier IQ.
    • Recognized Developer on XDA Developers (now retired).
    open the record
  9. 2005 - 2011 Job

    Systems Administrator

    Intergis LLC

    • Built point-to-point IPSec VPNs between business locations on SonicWall, pfSense and m0n0wall.
    • Ran Windows Server 2003/2008, Active Directory and about 300 workstations.
    • Kept a load-balanced Citrix environment running for more than 900 users and helped run a high-availability VMware ESX farm of more than 100 virtual machines.
    • DBA for several Microsoft SQL Server databases over 500 GB each. Also ran Exchange 2007 and Veritas Backup Exec.
    • Received the company's 2009 Achievement Award for Outstanding Performance.
  10. 2003 - 2005 Job

    Computer Tech / Sales Associate

    Staples

    • Certified in-store technician doing hardware and software repair plus virus and malware removal.

06 Field kit

Field kit

Tools and code he built or helped build.

07 Training

Training and education

  • In progress

    Thomas Edison State University

    BS in Cybersecurity, with prior learning portfolios for CYB-2210, CYB-3200, CYB-3210 and CYB-4510

  • 2005 - 2006

    Tunxis Community College

    Computer Information Systems, Network Administration option, including Network Essentials I, Network Security Fundamentals and Programming Logic

  • 2026

    Study.com (ACE credit)

    CS 105 Intro to Operating Systems, CS 204 Database Programming, CS 303 Database Management, CS 305 Operating Systems, CS 331 Cybersecurity Risk Analysis

    see the records
  • 2026

    Sophia Learning (ACE credit)

    26 courses, including Intro to IT, Relational Databases, Python, Business Law, Statistics and Calculus I

    see the records
  • 2026

    Coursera

    Cloud computing, cybersecurity careers, Google AI and full-stack web development (React, Node and Express, Git)

    see the records
  • 2014, 2026

    TEEX (DHS/FEMA funded)

    AWR cyber courses, including Digital Forensics Basics and Cyber Incident Management

    see the records
  • 2014

    FEMA Emergency Management Institute

    IS-100.b, IS-200.b, IS-700.a and IS-800.b

    see the records

08 Contact

Establish contact

Hiring, writing a story or chasing a bug? Pick a reason below and I'll know what the email is about before I even open it.

secure channel AES-256 · ready

Trevor Eckhart

Full-Stack Software Engineer, Verizon

Phone
[REDACTED]
Base
Connecticut, USA

point a phone camera here

What's this about?

Contact

Secure channel

secure channel AES-256 · ready

Trevor Eckhart

Full-Stack Software Engineer, Verizon

Phone
[REDACTED]
Base
Connecticut, USA

point a phone camera here

What's this about?

guest@dossier: ~

↑↓ moveenter opentab completeesc close