Earlier quoted context omitted.
> Cell phones are routinely used as listening devices // Citation? I'm really interested, presumably there's a hacker convention talk or somesuch where they install a hidden service on a standard phone and upload all voice input even when the phone is off? Clearly I use burner non-smart phones for my criminal activities (that's a joke!) so they're going to have to use other means. Obviously they can still sniff the d…
It's an interesting video for other reasons, but at 1:47 here Binney mentions it: http://www.nytimes.com/video/opinion/100000001733041/the-pro... Here's another article about real-world use: http://news.bbc.co.uk/1/hi/magazine/3522137.stm
William Binney [ex-NSA]: "Yes. [... goes off on a tangent about data analysis]
He doesn't really mention it. Indeed the vid is considering electronic communications and information which is put in to the public sphere. Other than that one question which Binney responds to only with "Yes" there's no other mention of private audio being covertly sniffed.
The BBC article is very sparse and jumps from being able to eavesdrop mobile->basestation and decrypt that to being able to listen in on all conversations within range of a phone. Clearly ludicrous.
I don't at all doubt that phones can be modified remotely to covertly listen and that some phones could enable this when switched off (though that seems unlikely to meet with normal design requirements, it seems that this covert listening would need to be designed in). I guess maybe you could make "off" only appear to be off whilst listening - my phone gets hot when doing anything extended like recording a talk or something and drains the battery quite a lot - even with the screen off. Seems that using this sort of surveillance on a widescale is highly unlikely.
>"all it takes is one secret order to the company concerned, with a warrant covering the entire country, and their entire product line is useful for surveillance on demand" [grey-area, https://news.ycombinator.com/item?id=8569217]
Only, IMO, if it's already been designed in and you can hide the power usage (and data-store usage).
Anything better?