Slashdot Mirror


FTC Shuts Down 'Pop-Up Trapping' Sites

Masem writes: "The FTC today ordered the shutdown of 5,500 sites owned by John Zuccarini, all of them the so-called 'typo' sites that common mis-entered URLs for popular sites (such as Annakurnikova.com); when the user visits these sites, their back button behavior in most popular browsers is modified as to open multiple pop-ups featuring ads for adult entertainment and gambling sites when pressed, and uses other technology to basically 'trap' the browser until the entire application has to be closed. While some sites are still operating, the FTC is going to take this matter to court, which may decide exactly how much control a web site can take over the end browser using JavaScript and ActiveX. CNet has the full story." Le Marteau contributes a link to the same story at the Washington Post.

145 of 442 comments (clear)

  1. Thank God! by SpanishInquisition · · Score: 4, Funny

    I can know go back to browsing porn at work without the fear of getting caught.

    --
    Je t'aime Stéphanie
    1. Re:Thank God! by tbmaddux · · Score: 4, Funny
      You don't even have to worry if you are "caught" visiting porno sites. Just claim that you were "trapped!" From the original article: "The scheme is especially harmful to children or employees who may put their jobs at risk when they inadvertently call up pornographic or gambling-related material, the FTC said." (bold emphasis added)

      But seriously, I for one am glad the federal government is on top of this case. Just think of all the shoppers out there who were innocently looking to buy cupcakes online and got drawn into this insidious web of browser betrayal.

      Now, could they do something about my problem? Every time I buy a new car, the trunk turns out to be mysteriously stuffed with black 30-gallon trash bags full of child pornography, gambling tokens, and a substantial fraction of body parts that somebody must be missing...

      --
      Can't you see that everyone is buying station wagons?
  2. The FTC, not the FCC ... by taniwha · · Score: 3, Redundant

    'nuf said

    1. Re:The FTC, not the FCC ... by benedict · · Score: 2

      No, fraud and unfair business practices generally fall under the purview of the FTC, not the FCC. The FCC is "charged with regulating interstate and international communications by radio, television, wire, satellite and cable", according to their web site. They regulate the mechanisms themselves, not so much what people do using those mechanisms.

      --
      Ben "You have your mind on computers, it seems."
    2. Re:The FTC, not the FCC ... by jmorzins · · Score: 3, Informative

      Bleagh. timothy has silently edited/corrected both the story title and masem's submitted text, without even providing a sentence notifying readers that he's done so?

      Welcome to the ephemeral web, I guess. I wish the editor would at least *tell* us that he is changing history, otherwise taniwha's post makes little sense.

    3. Re:The FTC, not the FCC ... by cetan · · Score: 2

      I wish I could mod this up and mod up all the people being modded down _now_ that the change has been made and they (they being those with mod points that are the usual clueless readers) don't realize it was screwed up to begin with.

      --
      In Soviet Russia...michael would be rotting in Siberia!
  3. hmmm.... by jonfromspace · · Score: 2, Funny

    What about all the Porn sites that do this... I sure could use the FCC's help there :)

    Well, it is a start I guess...

    --
    I am become Troll, destroyer of threads
  4. Uh huh... by Anonymous Coward · · Score: 4, Insightful

    What gets me is not that someone registered those names and cybersquatted (I'm all for that), but that this kind of annoyance (popup Spam) is actually clicked through and these Casinos, fake/genuine Viagra, etc. sites make any money at all.

    Are you the one clicking on them?

    Blah blah blah... "IE sucks cuz I can turn off popups in Moz..."

    1. Re:Uh huh... by unitron · · Score: 2

      How can anybody get through to one of these sites and spend any money with them if their computer is crashing from the overload of trying to open half a zillion pages at once? Is this guy covertly doing these people a favor by luring those who would spend their money at those sites and frustrating them to the point of giving up?

      --

      I see even classic Slashdot is now pretty much unusable on dial up anymore.

    2. Re:Uh huh... by unitron · · Score: 2

      Great minds caught in the same rut :-)

      --

      I see even classic Slashdot is now pretty much unusable on dial up anymore.

  5. whoa....not at the top of my list by ruebarb · · Score: 2, Interesting

    Finally, a practical use for the FCC...Thank God. This is one of the few times where a little government intervention wouldn't hurt.

    Try explaining to your boss why the firewall detected all these adult site alerts when all you were trying to do was look for Dana Bourgouis guitars...

    Or your wife/girlfriend for that matter.

    RB

    --

    ----------
    ah honey, we're all resplendent - Bill Mallonee
    1. Re:whoa....not at the top of my list by frknfrk · · Score: 2

      i doubt my wife will be figuring out how to read the firewall logs any time soon.

      not that she's incapable, but as far as she cares, the server room is 'the place where if i go in, the internet stops working!'.

      -sam

      --
      The REAL sam_at_caveman_dot_org is user ID 13833.
  6. Wow! by Red+Aardvark+House · · Score: 4, Interesting

    And I thought X-10 was bad!

    This type of advertising only frustrates users and creates animosity between advertiser and potential customer. This is an obvious and sometimes extreme nuisance, having to shut down your broweser at times!

    Alienating your audience is not a good business practice.

    --

    I like fire ants. They are very spicy!

    1. Re:Wow! by edhall · · Score: 5, Insightful

      The guy was only exploiting a system that pays money based on "impressions" or "exposures." He set up traps that generated as many ad exposures as possible, but it made no difference to him whether the ads made a possitive impression on anyone.

      This is why most of the ads were for porn, since he needed advertisers who didn't check what the presentation of their ads would look like or the nature of the site itself. Outside of porn, few advertisers are that lax any more. I'm sure that, given a choice, even porn advertisers would want a "friendlier" presentation than this guy gave them. But they don't care enough to even check. In the mean time, this guy was raking in a hundred or more ad exposures per victim.

      -Ed
    2. Re:Wow! by dragons_flight · · Score: 4, Insightful

      According to this US News report, X10.com had the 14th highest traffic of any domain in the month of august. Pretty impressive for a site that sells something almost no one wants.

      Has anyone else noticed that their special deals are always about to expire in the next day or two, and yet the offer itself doesn't change for weeks on end. Maybe someone should get them on deceptive advertising?

    3. Re:Wow! by 4of12 · · Score: 2

      And I thought X-10 was bad!

      So did I.

      But then I thought: while you and I hate them for their annoying advertising barrage, we have been satisfactorily indoctrinated that:

      X10 ~ web cameras
      as well as dozens of the usual time-proven suggestions that if you get $PRODUCT that sexy attractive young women will find you irresitably sexy and attractive.

      If the message was delivered, then despite your protests, you can expect more of the same annoyance.

      --
      "Provided by the management for your protection."
    4. Re:Wow! by jfdawes · · Score: 2, Funny

      Yeah, I want to go out with some girl who has a bizarre web-cam fetish.

    5. Re:Wow! by benedict · · Score: 2

      A source in the NYS Attorney-General's office tells me that that type of thing is illegal but generally not considered harmful enough to go after (gov't lawyers generally being overworked).

      I asked because I saw the same type of fraud on store.apple.com.

      --
      Ben "You have your mind on computers, it seems."
    6. Re:Wow! by jesser · · Score: 2, Offtopic

      Not all porn sites pay per impression. Gamma Entertainment, a company that runs several large porn sites, will pay you either $25 per sign-up (through text, banner, or pop-up links) or five cents per banner click. If your pop-up ad is annoying, nobody will intentionally click on it and sign up, and you won't get paid. They won't pay you for banner impressions at all, probably because they recieved a large number of complaints that webmasters were claiming pop-up ads as impressions.

      I'm sorry this sounds like an ad. I don't work for them and if I was trying to make money from this post, I'd have created a referral-kickback link.

      --
      The shareholder is always right.
    7. Re:Wow! by infiniti99 · · Score: 2

      Has anyone else noticed that their special deals are always about to expire in the next day or two, and yet the offer itself doesn't change for weeks on end. Maybe someone should get them on deceptive advertising?

      I don't think anyone could do anything about it. These types of schemes have been around forever. I still hear "call in the next 10 minutes, and receive..." in radio ads TODAY. This is 2001, and apparently everyone falls for the same crap. Or the advertisers think we do..

    8. Re:Wow! by K8Fan · · Score: 4, Interesting

      I complained to the people manning the X-10 booth at CEDIA (Custom Electronics Design & Installation Asssociation - home theater and whole house electronics) convention. I tried telling the booth weasle how hated their ads are, and the smug jerkwad just kept repeating how many million "page views" they kept getting. I told them they could just as effectively get their logo tattooed on frat boys ass cheeks and pay them to drive around mooning people. Or use a soldering iron to burn the logo into a 2" by 4" and run around wacking people in the face with it.

      Unclear on the concept does not seem to even come close to describing these morons. We have to do something more.

      --
      "How perfectly Goddamn delightful it all is, to be sure" Charles Crumb
  7. FTC, not FCC by GrenDel+Fuego · · Score: 2, Redundant

    This was the federal trade commission, not the Federal Communication Commission.

    I was curious when they became involved with net traffic.

  8. another step towards the ruin of the web. by Cheetahfeathers · · Score: 3, Insightful

    As much as I hate popups like that, government regulation of such is even worse. Also, what can they do about overseas sites? Are they going to try and put it under the same controls as overseas TV broadcasts?

    The proper way to fix this is to fix the browsers so they don't allow this to happen.

    FCC, stay the hell out of the net.

    1. Re:another step towards the ruin of the web. by jesser · · Score: 2

      Once again people seem to be looking to the government to solve problems they can solve themselves, by using an appropriate browser and learning how to configure it!

      Default browser configurations should not be vulnerable to a DoS attack that has been widely exploited against web users for years. Good defaults are more important than configurability, especially when your target market includes people who don't want to look through thousands of options to find a combination that fixes the problem without breaking legitimate uses of JavaScript.

      In other words, if you could convince me that it's not the government's responsibility, then I would argue that it's the browser maker's responsibility rather than the user's.

      --
      The shareholder is always right.
    2. Re:another step towards the ruin of the web. by lizrd · · Score: 4, Interesting
      By lazily handing this problem over to the government and allowing them to "solve" it, we are setting more precedents which erode our First Amendment rights. Honestly, do we really want the government telling us how we can and can't write JavaScript programs?

      Fortunately, what's happened isn't that the government has decided to regulate javascript, the FTC is just making a reasonable application of existing laws against deceptive business practices. What we're seeing here is legal action against deceptive practices. We are not seeing action to outlaw the use of a particular technology, or any restriction on your right to write and distribute any sort of javascript tool that you like. What we are seeing is a crackdown on a business practice that was already unethical and illegal.

      Be very wary of falling into the trap of thinking that adding 'and do it with a computer' to the end of some already common thing makes it new and different. That's what Amazon did (We're going to keep our customers address and credit card number in a rolodex 'and we do it with a computer') and we all hate them for it.

      Also be wary of falling into the trap of thinking that because the Internet is international no one can exert any authority over it. While it is certianly true that the US FTC has little to no authority over what foriegn companies do with offshore servers, there is still a responsiblity to put a stop to illegal actions when you are able to do so.

      --
      I don't want free as in beer. I just want free beer.
    3. Re:another step towards the ruin of the web. by benedict · · Score: 2

      Fraud is fraud, whether it's perpetrated over the phone, the web, in print, or in person.

      --
      Ben "You have your mind on computers, it seems."
    4. Re:another step towards the ruin of the web. by ShaunC · · Score: 2

      >It is exactly the FTC's job to enforce legislation
      >against deceptive trade practices. These `typo' sites are
      >exactly that

      Perhaps there are legal precedents (I guess now there certainly is one) but I don't agree that typo sites are deceptive trade practices. If I'm trying to go to Google and I wind up at Goggle.com - which by the way is exploiting the typo - there's no way I'm going to mistake that for the actual Google site. Likewise, if I'm trying to visit Anna K's site and I wind up at a page that pops up 20 adult ads, it's unlikely I'm going to think that my future wife is running a porno business :)

      It's one thing to manufacture some soda, name it Caca-Cola, and try to pass it off as The Real Thing. Setting up a website and profiteering off of people who [can't spell|make typos] is different, though. You aren't advertising your "product," you aren't trying to deceive anyone, you're just profiteering off of accidents.

      Maybe the reason I think the scenarios are different is that one's proactive and the other's passive... Regardless, I don't see why this is the government's business.

      Shaun

      --
      Thanks to the War on Drugs, it's easier to buy meth than it is to buy cold medicine!
    5. Re:another step towards the ruin of the web. by Jagasian · · Score: 2

      Yes, Amazon may have been the first company to offern one-click web orders, but that doesn't mean that the patent isn't obvious. It is a very common and obvious concept in human-computer interface design, to minimize the number of inputs (clicks, presses, etc) required for a user to communicate a desired request to the computer. Obviously the minimum for such a request would be 1 press or click or whatever, because anything less would imply that the user has no say, and anything more would be inefficient.

      You aren't supposed to be able to patent the stupidly obvious!

    6. Re:another step towards the ruin of the web. by EFGearman · · Score: 2

      I believe that his point is that it was a precursor to the modern internet. And also that it was government sponsored.

      EFGearman

      --
      Atomic batteries to power! Turbines to speed!
    7. Re:another step towards the ruin of the web. by lizrd · · Score: 2

      Interestingly, I consider myself to be a pretty strong proponent of small government and that's why I'm encouraged by this particular situation. What has happened here is that existing laws have been applied to a new situation. The necessity of an organization like the FTC in a limited government is a topic which is open for debate, but in the case of this debate let us assume that the FTC has already been created and given the task of enforcing consumer protection laws. What I do admire about this action is that action has been taken under existing laws. We aren't seeing some brainless senator pushing legislation to ban javascript for the good of the children.

      --
      I don't want free as in beer. I just want free beer.
  9. hey, he is trying... by Karmageddon · · Score: 5, Funny
    The district court has ordered Zuccarini to take his sites offline, the FTC said, while the case continues. But as of early Monday afternoon, at least one site registered to Zuccarini, Annakurnikova.com, was still functional.

    Hey, give the guy a break, he's trying. He closes down most of his sites, but whenever he hits the "back" button they all start up again. Those damn javascript-based admin tools...

  10. Neverending popup... by FortKnox · · Score: 4, Funny

    Hope this will include the "Neverending popup", where you point to a site that popups a copy of itself, which popups a copy of itself, which popups a copy of itself...

    I think the troll link "comp-u-geek.com" (DON'T GO THERE!) does that...

    --
    Good quote, too many chars. Seriously, the slashdot 120 char limit sucks!
  11. but sites still exist by nilstar · · Score: 2, Insightful

    what about all the non-typo sites that exist? Well, how about using the no-popup feature of mozilla/netscape 6.x and dump the ie browser!

    --
    ===> An eye for an eye makes everyone blind - MG
    1. Re:but sites still exist by spongman · · Score: 2
      my site uses popups to provide modeless functionality such as settings, login, info etc... (and no, none of them 'lock' you in, or even contain any advertising). we just did it that way because it makes sense, and it makes the site 'feel' a little more like an application. howevr, if you disable pop-ups or javascript then we're screwed.


      it's a shame that after all this time we finally have a decent set of publishing functionality (dhtml/javascript) that's available and consistent (w3c) across many platforms, but that that same functionality is being killed by idiots like this that just want to make a quick buck. it's a public nuisance and should be outlawed, then maybe the rest of us can go back to doing somthing useful.


      now what was i doing?

    2. Re:but sites still exist by jesser · · Score: 2

      my site uses popups to provide modeless functionality such as settings, login, info etc... (and no, none of them 'lock' you in, or even contain any advertising). we just did it that way because it makes sense, and it makes the site 'feel' a little more like an application. howevr, if you disable pop-ups or javascript then we're screwed.

      If the elements on your site that trigger your page to open new windows are links or buttons, there's a Mozilla setting people can use to allow that kind of new window while disallowing onload/onunload pop-up ads. If the site randomly throws up new windows, your users probably close 30% of them before they load thinking they are pop-up ads, so you might as well change the triggers to be links or buttons.

      --
      The shareholder is always right.
  12. good! I've always hated Zuccinni by Telek · · Score: 4, Insightful

    er, I mean Zuccarini.

    But seriously. There's a fine line between .. no scratch that, there's a night and day difference between registering typo sites and displaying a pile of non-porn ads, and registering those sites and trapping the user in a net where they can't get out and displaying pornography to them for the sole intent of making a buck. especially when said users could be children or people who find pornography offensive.

    I've seen a few sites who grab a typo site and just use it to promote their own (not indecent) site, but also provide a link on their site to the site that "you might have wanted" instead. I think that's fair enough, no big harm there, but to intentionally trap people. Wow. I never thought I'd be praising government intervention on the internet...

    --

    If God gave us curiosity
  13. Does all this really work though? by GreyyGuy · · Score: 5, Interesting

    One thing that surprised me is that this slime ball has been sued for this before and lost 57 cases tied to 200 domain names and been fined $800,000 to $1,000,000. And he's still doing it. The only reason he would still be doing this is if it is profitable, above and beyond court costs and fines.

    Who is falling for all this and patronizing the sites that trap you like this?

    1. Re:Does all this really work though? by nanojath · · Score: 2
      "Who is falling for all this and patronizing the sites that trap you like this?"


      Well, I'm not a big fan of the word addict, but I gotta assume that people with at the least a "problem" with porn and/or gambling are doing the work, wouldn't you think?


      It's hard for normal people like us to imagine, but yeah, I gotta assume there are people out there for whom a porn or gambling pop-up is basically like sitting a needle full of smack in front of a junkie.


      And yes, it's very sad.

      --

      It Is the Nature of Information to Transgress Artificial Boundaries

    2. Re:Does all this really work though? by tregoweth · · Score: 5, Funny

      Who is falling for all this and patronizing the sites that trap you like this?

      Horny people who don't type well?

    3. Re:Does all this really work though? by EisPick · · Score: 2

      Who is falling for all this and patronizing the sites that trap you like this?

      Ho rny people who don't type well?

      Like this guy: http://www.herbzipper.com/.

      Don't worry, it's funny, not disgusting.

  14. Fix this At Browser by Rashkae · · Score: 5, Insightful

    Even though I'm sure we all had good intentions (if not complete thoughlessness) when all these cool features were added to JavaScript. But really, isn't it time that this gets fixed at the Browser end? I cannot think of *any* good reason for browsers to allow JavaScript to modify how buttons like Back and Close opperate without confirmation by the user. (it would also be trivial to apply a reasonable limit, like say 3, to pop-up windows). Microsoft and Netscape should both be *really* embarrassed that this issue is being addressed by the governent and potential legislation before they've even had a chance to suggest ways of fixing the situation.

    1. Re:Fix this At Browser by JoeShmoe · · Score: 5, Insightful

      I think it is especially embarassing that Microsoft/Netscape cannot grandularize the ActiveX or JavaScript functionality. Your choices are "Run All" or "Run None". There needs to be a way to differetiate between normal redirection (which is often used by legit sites)or pop ups (which is of course used in advertising) and those malicious elements such as "On Back" or "On Close" or "Maximize Full Screen with no buttons anywhere". I cannot stand it when I have a button in my taskbar that refuses to respond to a right-click Close command. That kind of control interferes with my GUI and should not be tolerated.

      - JoeShmoe

      --
      -- I wonder which will go down in history as the bigger failure: the War on Drugs or the War on Filesharing
    2. Re:Fix this At Browser by roca · · Score: 2

      Actually, Mozilla, Netscape 6.x, Konqueror, and other browsers provide a high degree of control over Javascript, including ways to turn off pop-ups, window resizing, etc. Just stop your ignorant ranting and google for "Mozilla configurable".

    3. Re:Fix this At Browser by jesser · · Score: 4, Informative

      There are no user-visible options for what web sites are allowed to do in Mozilla, so I don't find it surprising that users complain that they're given an all-or-none choice.

      You can get some documentation on Mozilla's configurable security policies here, and you can also test the new hidden pref to prevent web pages from opening new windows while they are loading or while the user is leaving the page. Note that the new hidden pref is still buggy: it catches some things it shouldn't, such as clicking a javascript: link in a page while the page is still loading, and fails to catch cases like onmouseover and onfocus.

      --
      The shareholder is always right.
    4. Re:Fix this At Browser by larien · · Score: 2
      Javascript doesn't actually change the function of back or close; it just traps "windowclose" or "exitframe" (no, I don't know Javascript, but I do know there are events which handle these things). The JS traps this and launches a new window where the author wants you to be.

      FWIW, the only time I've seen this implemented to a fully irritating degree was the home page of Rev Don Kool (a notorious web troll on comp.unix.*).

      Oh, and as has been pointed out, several browsers have options to limit this behaviour, such as Konquerer. I'm sure someone could get a comprehensive list together of which browser do and don't have some support for disabling openWindow()

    5. Re:Fix this At Browser by MobyDisk · · Score: 2

      It isn't supposed to catch onmouseover and onfocus. There are legitimate uses for that.

    6. Re:Fix this At Browser by jesser · · Score: 2

      It isn't supposed to catch onmouseover and onfocus. There are legitimate uses for that.

      I meant that it's supposed to prevent web pages from opening new windows while handling onmouseover and onfocus events. There are very few legitimate uses for that, and once aggressive advertisers realize they can't use the onload event, they'll use one of those instead.

      --
      The shareholder is always right.
    7. Re:Fix this At Browser by Rufus211 · · Score: 2
      Your choices are "Run All" or "Run None".
      Not so anymore:
      mozilla.org today released Mozilla Milestone 0.9.4. New to this release is the ability to disable the JavaScript window.open() method during page load and unload events.
      Been using this feature for almost a month (Well, since 0.9.4 came out) and it works perfectly, no sites that I've gone to have been broken, and no pop-ups!
  15. Why does the govt. have to regulate this? by StaticLimit · · Score: 2

    This is a client-side browser issue. If we had a competative browser market, someone might find it useful to "innovate" a feature into the browser to disable popups, or cue up the popups and let the user decide whether to let them fire.

    Was it Konquerer that put a similar feature into their browser? If so, big huge kudos to them.

    Regardless, I don't see Microsoft champing at the bit to reduce end-user annoyance over this, and I'm surprised, because I can't imagine how the IE team can browse the web without getting fed up with that crap and saying "fsck (or maybe chkdsk) it! I'm going to "innovate" a way to stop this!".

    - StaticLimit

    1. Re:Why does the govt. have to regulate this? by SuiteSisterMary · · Score: 2

      Lets face it. Konquerer does it, they're lauded. Had Microsoft done it, people would have complained about how they were ignoring standards and dictating standards.

      --
      Vintage computer games and RPG books available. Email me if you're interested.
    2. Re:Why does the govt. have to regulate this? by jmv · · Score: 2

      This is a client-side browser issue.

      Arguing this is like arguing what Code Red/Nimba is just an IIS issue. Sure IIS should be more secure, but there's still a malicious intent. The same for this. Sure, the "don't close from JavaScript" feature shouldn't be on by default, but there's always going to be a hole somewhere in all browsers. This kind of behaviour should not be allowed.

    3. Re:Why does the govt. have to regulate this? by metis · · Score: 2
      Why does the govenment regulates cleaning your dog poop from the street? Can't we have Dupont invent a tarmac that disolves it?

      Why does the government regulate noise? Can't you invest in better insulation for your home?

      The reason is simple. It is cheaper to have a cop fine one thousand offenders than to have one billion consumers invest is an expensive technological solution.

      The issue here is not innovation but nuisance. What is bad about nuisance, by definition, is that it forces you to chose between suffering it and paying something to get rid of it. An innovation that removes a nuisance does not improve your quality of life. It merely restores it. Thus having a free arm race between nuisance makers and anti-nuisance solution makers is a waste of intelligence and money that are better spent on something that actually makes life better. That is something every town council understands, and that is why nuisance is regulated.

      The only difference here is that the internet allows people to be a nuisance from a greater distance. That makes it apropriate for federal rather than local regulation.

      --
      -- look, cheese ahoy!
    4. Re:Why does the govt. have to regulate this? by Lemmy+Caution · · Score: 2

      This is sort of like saying that someone hits you over the head, it's because of a failure on your part to grow a protective carapace.

    5. Re:Why does the govt. have to regulate this? by jmv · · Score: 2

      So I guess (part of) Nimba is legal then, since one of the (4-5?) ways it propagates is through malicious Javascript in web pages. Also, I guess it means I can write a program that wipes your hard drive, label is as a text editor and make it available for download. It's your responsability if you download it.

    6. Re:Why does the govt. have to regulate this? by jesser · · Score: 2

      Had Microsoft done it, people would have complained about how they were ignoring standards and dictating standards.

      I doubt it. The W3C pays very little attention to privacy and security in most of their recommendations. The fact that web sites aren't allowed to look into an <iframe src="http://www.amazon.com"> and pull out your name from the "welcome" message is not standardized anywhere, and in fact each browser has slightly different rules about what things you can pull out of and push into frames whose content is from another web site.

      The W3C's ignoring security has also led to some holes that affect multiple browsers, such as web sites being able to find out whether a link is marked as visited using CSS. Yes, your boss could point you to a web site that creates invisible links to the last 200 slashdot stories, quietly counts the number that are marked as visited, and reports back to your boss how much /. you've been reading at work lately.

      --
      The shareholder is always right.
    7. Re:Why does the govt. have to regulate this? by Overt+Coward · · Score: 2

      Possibly, but those bashing MS in that case would be wrong. In the end, the browser is the one responsible for rendering the content, and providing an option to limit the extent of the display is not ignoring or dictating standards in any way.

    8. Re:Why does the govt. have to regulate this? by jmv · · Score: 2

      I think there's a middle between the two extremes. I think you should not be liable *except* in the few cases where it's pretty obvious that the intent was to directly cause damage. If someone writes an editor that has a bug that ends up wiping your drive, it's an accident. However if the same guy advertises an editor that startes by system("/bin/rm -rf $HOME"), I think it should be illegal. Where to draw the line, I don't know.

      But advocating that you're not responsible if you spread worms/virus is plain dangerous. Why don't you extend that to crasking into systems... after all, you're just sending bits to random ports on a system...

    9. Re:Why does the govt. have to regulate this? by metis · · Score: 2
      Who decides what a nuisance is?

      In this case, the FTC made the an initial decision. This decision will be reviewed by the court. The court decision will be reviewed by congress and congress decision will be reviewed by voters.

      If you go there and run their javascript, that's a choice that you make.

      According to your logic, if I invite a plumber to fix my sink, I cannot call the police if he starts emptying my refrigerator. If I enter a restaurant, the owner is free to poison me. etc. Doesn't it make sense to use common sense and see that all privileges that we grant each other when we willingly engage in transactions are limited and assume a trust that they will not be abused?

      --
      -- look, cheese ahoy!
  16. Seriously... by mindstrm · · Score: 2

    this shouldnt' fall under the jurisdiction of the fcc?
    I thought the FCC was there to regulate certain things... like radio, and television (as it's broadcast, and involves many public concessions to work, right-of-way, etc).

    How can they dicatate what a website can do? Sheesh.

  17. 5500 Sites! Curious. by BrookHarty · · Score: 3

    Wheres he hosting all these sites?
    Where is he buying his domains from?
    What OS is he using?

    Sounds like alot of work for popup sites, he must be making damn good money after lawsuits.

    1. Re:5500 Sites! Curious. by Spy+Hunter · · Score: 4, Informative
      All the typo sites probably point to the same computer. As for what OS he is using, Netcraft says:

      The site www.annakurnikova.com is running Apache/1.3.6 - 448 user - IKM 11211999 (Unix) on FreeBSD.

      They go on to say the netblock he is using belongs to CWIE LLC.

      --
      main(c,r){for(r=32;r;) printf(++c>31?c=!r--,"\n":c<r?" ":~c&r?" `":" #");}
  18. Some might argue by jd · · Score: 2
    That this is Bad and Wrong, that the Free Market should decide, and freedom should be for all. Well, aside from the fact that those people can bugger off, you could argue this two ways:
    • The "Free Market" wasn't free, that it had been kidnapped by a pack of Ogres, and that if it hadn't been liberated by the FTC, it would have been turned into Market Burgers.
    • The "Free Market" =DID= decide. It told the FTC that it was the watchdog, and should bloody well watch!


    Bitching aside, this decision is a Good Thing. It forces people who deliberately break something to think again. This might not be terribly popular, but who cares. This decision will do more to stop terrorism on the Internet than all the marketroid sponsored carp ever will. It will genuinely have a positive impact on how the Internet is seen and used. And that may be the best thing that has happened in a VERY long time.

    --
    It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
  19. I'm happy, but... by DaSyonic · · Score: 5, Insightful
    I can't say this is good. Noone likes those popup ads that lock you in, and do other unethical things. However, I dont think it's good for the government, or anyone, to say it's illegal/disallowed.

    Namely, You are connecting to THEIR machine.
    Mail server administrators block spam because they are using their resources, why can't these people claim the same? After all, you're using THEIR resources, shouldnt they have the right to send any data on a connection that YOU initiated? (Though I realize you might not have intentionally made that connection; they can be sneaky, but the point remains.)

    I just don't like regulation, If it's bad and wrong, it's the clients job to work with the received data. But noone's blaming Microsoft, Netscape, Mozilla, or Konq (and you really can't blame the last 2, they're implementing things to take care of this junk).

    Target a solution, rather than the cause and punishment.
    That's just my view.

    --

    Linux: Because a PC is a terrible thing to waste.
    James Brents
    1. Re:I'm happy, but... by jesser · · Score: 4, Informative

      But noone's blaming Microsoft, Netscape, Mozilla, or Konq

      Really?

      (and you really can't blame the last 2, they're implementing things to take care of this junk).

      I don't know about Konq, because its authors chose not to release a version that runs on my platform of choice, but Mozilla doesn't yet ship to block pop-up advertisements (or even "hydras", the most annoying type) by default. It has a hidden pref to disable the window.open() function while a page is loading or unloading, which should become a visible pref once bugs are worked out. I hope the pref is eventually turned on by default, at least for the case of hydras.

      --
      The shareholder is always right.
    2. Re:I'm happy, but... by erroneus · · Score: 2

      You have a terrific point on this however, this is almost like "Virus" code. The user clearly did not want this result... this was not solicited or expected. The user has fallen victim to something and should me mostly blameless in this.

      More importantly, this is a wonderful lead-in for anti-spam legislation. We cannot seem to make SPAM unpopular enough because apparently, the air-headed people outnumber the people who have better things to do that filter through crap email all day long.

      If the government can step in on this, maybe we'll get SPAM legislation passed finally.

      I'm scared to use legislation as a tool to get rid of "unwanted behavior." Frankly, I'd rather just see these unethical people get sued and lose in court really bad. Legislation lasts longer than the offender lives and the precedent can and often is twisted to server other unscrupulous purposes.

  20. Ashcroft's take? by Sorklin · · Score: 3, Offtopic

    I wonder if this would be considered as terrorism in Ashcroft's proposed law?

    1. Re:Ashcroft's take? by isomeme · · Score: 5, Funny

      I wonder if this would be considered as terrorism in Ashcroft's proposed law?

      Yes, but hacking your client to filter it is a DMCA violation. :)
      --
      When all you have is a hammer, everything looks like a skull.
    2. Re:Ashcroft's take? by isomeme · · Score: 2

      Nothing like the Zen experience of having the first moderation your comment gets be "-1 Overrated". :)

      --
      When all you have is a hammer, everything looks like a skull.
  21. As long as they allow scripting... by Anonymous Coward · · Score: 2, Interesting

    So people use scripting for imaginative ways that nobody had expected. Then people start complaining. Hello!!!! New and unexpected uses are what scripting are all about. To be programmable means that things will be asked that you hadn't anticipated. (Otherwise, there is no need to program them.) Therefore you have to expect abuses when you introduce such a technology. Scripting engines do not belong in browsers, mail clients, news clients, and so on. It was plain irresponsibility for Microsoft, Netscape, and the others to do this to their products. Years ago I saw the coming security nightmare that we live in today. It arose from the "browser wars" between IE and Netscape. This functionality wasn't about making websites better, it was about trying to have a gimmick feature that the other didn't have. This gold-plating not only lead to shoddy implementations, but bloated browsers, bloated websites, and immeasureable amounts of wasted bandwidth.

    Now that Netscape is dead, the problems unfortunately remain. Browsers shouldn't have scripting embedded in them, period. If you like scripting, then you have to expect and put up with this crap. There's no way to legislate people to stop doing things like this.

    The only way to stop them is to disable scripting on your browser. The more flexibility a program has, the less secure it is. Scripting adds almost no value to websites, and is now just a tool of marketers, used more against you than for you. They track you with it. They take over your web experience with it. They keep tabs on what you're doing... and sometimes even take over your machine when flaws are discovered and exploited. I have serious problems with other people running their code on my machine, and therefore disable all scripting.

    Consequantly, I don't every seem to have any problems with pop-up windows, pop-under windows, "trapped" browsers, infinite-loop "back" buttons, etc.

    Turn off scripting. Encourage websites to stop using it. The web is full of more than enough bloated crap already. While you're at it, get rid of flash, and all the rest of the plugins.

    1. Re:As long as they allow scripting... by Anml4ixoye · · Score: 2
      *sigh* I'll bite this one...

      Scripting adds almost no value to websites, and is now just a tool of marketers, used more against you than for you.
      Not quite. I use Javascript religiously and responsibly. It provides form validation, interactive elements, and menu selections you can't do any other way (save going to the server for form validation).

      And yes, I use pop-up windows. I use them for useful purposes. To build web applications, not just fun toys to show pictures of my cat. Some of us want this functionality, use it responsibly, and understand the risks involved.

      However, I agree with you to a point. Compromise. Don't be afraid to shut off scripting, but don't remove it completely. If you don't like it, then don't use it, but allow those of us who do like it and use it the ability to enjoy our web experience and use it for productive purposes other than just hitting refresh on Slashdot every 5 minutes.

  22. This might slow the push for filtering? by ClarkEvans · · Score: 3, Interesting

    My aunt is furious about when her 6 year old child accidently does a typo and porn sites pop up everywhere. Perhaps if this stops, it will lessen the demand for filtering software. Filtering software, IMHO, is very bad; definately the worse of two evils. At least shutting down a web site could possibly have a court process attached to it...

    1. Re:This might slow the push for filtering? by alexjohns · · Score: 5, Insightful
      Sorry, but there is no way that filtering software is evil when used by a 6 year old. No way. I have a 3 year old. He'll have filtering software on his machine until he's at least thirteen or until he figures out how to disable it. If he's savvy enough to outgeek his dad who's been geeking for over 20 years more than him, then he deserves his porn.

      People who are rabidly anti-filtering forget that for some purposes it is useful. Alcohol, cigarettes, guns, porn - all things that an age-filter is useful for. I can't watch my son every moment he's online. This prevents inadvertent finger presses more than deliberate ones, at least until they get to a certain age. When my son gets to that age, he and I'll talk.

    2. Re:This might slow the push for filtering? by rabidcow · · Score: 2, Insightful

      Filtering software is good.
      Mandatory filtering software is bad.

      If you (as an adult, fully capable of making your own choices in life) are not allowed to access something, be it filterred or shut down by law, then it is a restriction of your freedom. (If that's important to you.)

      If you (as an adult/parent) choose for you and your dependants to not access something, that is a use of your freedom. (If that's important to you.)

  23. And this makes money? by bigdavex · · Score: 2, Interesting

    I find it pretty amazing that some people, after having their browser assaulted with annoying pop-ups, go on to actually buy things from these merchants. I guess spammers and phone salesman make money too, but I find this equally strange. I would hope this sort of thing would fix itself through consumer pressure.

    --
    -Dave
  24. The FTC regulates trade by tester13 · · Score: 5, Informative

    This is a great thing. The FTC protects people from fraud and other illegal business practices. That is what they are doing in this instance. The FCC regulates the airwaves, television, and so forth.

    The government isn't "getting involved in the internet" in any new creative way. They are just protecting consumers (us) from fraudulent illegal business practices

    Next time get the FCC FTC thing correct before you post, it completely changes the context of the article.

  25. disabling intrusive scripts by corvi42 · · Score: 2

    I can get a warning when I enter or leave an ssl session if I want it.

    I can get a warning when I accept cookies if I want it.

    I can even get a warning when I submit a form if I want it.

    All of these are fairly trivial run-of-the-mill type web actions, but something as annoying & intrusive as creating pop-ups and altering my browsers history list cannot be disabled. When oh when are we going to see the ability to disable pop-ups & other intrusive/obnoxious script actions like this?

    --

    There are a thousand forms of subversion, but few can equal the convenience and immediacy of a cream pie -Noel Godin
    1. Re:disabling intrusive scripts by Edgewize · · Score: 2
      When oh when are we going to see the ability to disable pop-ups & other intrusive/obnoxious script actions like this?

      As soon as you upgrade to Mozilla 0.9.4.

  26. unauthorised javascript by rpeppe · · Score: 5, Informative
    this issue is interesting: a colleague at work was today
    looking for a bug in some Javascript (we maintain
    our own web browser), and after delving down
    through the deliberately obfuscated javascript
    code, it became obvious what it was trying to do:


    it went through all links in the document, attaching
    a javascript "front-end" to each link that did an http GET request
    informing the remote site what had been clicked on,
    before actually following the link. the technique
    used seemed fairly dodgy (the request was purporting
    to be for a non-displayed image), but it's interesting
    to see what a fairly reputable site is prepared
    to do in order to get as much information off you as possible (without your knowledge).


    how reasonable is that? i don't like it, but is that sort
    of subterfuge the kind of thing we'd like to stop too?


    [PS. apologies if this appears twice - it looked like /.
    had rejected the previous ones; and then the whole
    server seemed to crash: what was going on there then?]

    1. Re:unauthorised javascript by greenrd · · Score: 2
      Google occassionally serves up pages which check what links you click on (not using Javascript), presumably to improve its rankings. Of course the difference there is you can hover your mouse over the links and if you have a decent browser see where they point, so it's not disguised.

    2. Re:unauthorised javascript by rpeppe · · Score: 2
      well, here you go. this is where the javascript code lives (you'll find it easier going if you have a javascript beautifier or the patience to tease the code apart a little). the page we originally found it on was here.

      it looks like www.websidestory.com is the responsible party. i wonder how many sites they've fitted out like this...

      at least the code doesn't work on our browser! can anyone out there work out exactly what information the script is divulging?

  27. Re:blah blah by kindbud · · Score: 2

    more wasted seconds, don't mind me

    --
    Edith Keeler Must Die
  28. Omniweb baby! by SimJockey · · Score: 2, Insightful

    Don't think it's available for anything other than OS X, but Omniweb has great javascript control. There is actually a setting to not execute a pop-up window unless it is from within the domain of the website you are at. Very slick, haven't seen an X-10 ad in a long time. Plus it has some sweet cookie handling options, like accept but don't save. (This may be old news on other browsers, but I've been stuck with IE for a long time.)
    Only downside is I can't do my banking with it, but other than that it's the perfect browser for me.

    --
    Laugh while you can, monkey boy!
  29. Couldn't have happened to a more deserving guy by swordgeek · · Score: 2

    I noticed in the article that the guy had 'at least 63' trademark infringement lawsuits filed against him last year, 53 of which he lost.

    Maybe if he's lucky Canter & Siegel will represent him. :->

    --

    "People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
  30. Yep. by mindstrm · · Score: 2

    My bad as much as theirs.

    Having the FTC do this is an entirely different matter.... it makes much more sense.

  31. It changed my Homepage by Captain+Pooh · · Score: 2, Interesting

    I wonder if I can sue a website operator for changing my homepage without my knowledge while visiting the operators site?

    1. Re:It changed my Homepage by jesser · · Score: 2

      Do you know how the website operator did that? I had that happen to me twice while I used IE 5.5 and never figured out how it was done.

      --
      The shareholder is always right.
  32. Interesting by zpengo · · Score: 4, Insightful
    The real question is, is this a violation of the owner's civil liberties, or a victory against spammers?

    This topic should clarify a lot of the hypocrisy among the /. crowd; What's *your* opinion on this issue? And how does that opinion compare to, say, what you would feel about the court shutting down your anti-Microsoft site?

    --


    Got Rhinos?
    1. Re:Interesting by jesser · · Score: 2

      The real question is, is this a violation of the owner's civil liberties...

      No. Your right to swing your javascript stops where my browser's chrome starts.

      --
      The shareholder is always right.
    2. Re:Interesting by benedict · · Score: 3, Insightful

      Bah.

      Fraud and criticism are different types of activities and they receive correspondingly different levels of First Amendment protection.

      That's not hypocrisy, it's common sense.

      --
      Ben "You have your mind on computers, it seems."
    3. Re:Interesting by aozilla · · Score: 2

      Agreed, but how exactly does this constitute as fraud? I can understand if he is lying about a product which he is selling, but trapping people in with javascript which they shouldn't have on in the first place isn't fraud, and IMHO shouldn't be illegal.

      Looking at the bottom right hand corner of my browser I see a little green check and the words "Trusted sites". What that means is that slashdot.org is allowed to use javascript on my browser. Annakurnikova.com will not be added to that list, of course.

      --
      ok then your [sic] infringing on my copyright! Could you as [sic] me next time before STEALING my comments for your own?
    4. Re:Interesting by aozilla · · Score: 2

      I guess as long as they are laws directed toward unfair business practices, and are only civil (not criminal), it's not so bad. Once you engage in interstate commerce you agree to some extent to follow the particular rules our government has set up. As long as whatever expenses they have catching and prosecuting this guy are ultimately paid for by the fines, I guess it's a win-win-lose (us-them-him) situation.

      --
      ok then your [sic] infringing on my copyright! Could you as [sic] me next time before STEALING my comments for your own?
  33. Later reported: by Ratteau · · Score: 2, Funny


    In an ironic twist of fate, when Zuccarini attempted to take down his 5500 sites, 72,296 new sites were instantly spawned. When he tried to remove those, 9,375,012 more were created. The FTC suggests he reinstall brain 1.0

  34. Great News! by sirgoran · · Score: 2, Funny

    For me this is wonderful news.

    Since there are some days when I can't even spell my own name correctly this will help me out a lot. I know you've been there too. Too much alcohol, not enough sleep, and the caffine is taking its sweet time to kick in.

    Now if they'd only come out with spell-check for the location bar in my browser I'd be set!

    Goran

    --
    Carpe Scrotum - The only way to deal with your competition.
  35. No. by dsanfte · · Score: 2, Insightful

    Namely, You are connecting to THEIR machine.
    Mail server administrators block spam because they are using their resources, why can't these people claim the same? After all, you're using THEIR resources, shouldnt they have the right to send any data on a connection that YOU initiated?


    No.

    If I open cnn.com, I know what to expect when I get there, news. If my little sister tries to open up Britney Spears' webpage for info on Britney Spears, and lands in this guy's javascript porn-ad trap, not only is it a federal crime (she's 8 years old), but my little sister did not initiate the connection expecting the deluge of porn advertisements.

    By the same token, Microsoft doesn't have the right to wipe my linux partition every time I visit their update site to patch winME.

    --
    occultae nullus est respectus musicae - originally a Greek proverb
  36. How is this different from e-mail spam? by jesser · · Score: 4, Insightful

    A spam message wastes some of my bandwidth and a few seconds of my time. A "hydra" pop-up ad wastes some of my bandwidth and more than a few seconds of my time. The fact that I posted my e-mail address on my web site does not give you permission to use my resources to market to me. Clicking a link at a TGP (list of porn galleries) must imply a little more consent, because I obviously put up with banner ads, but I don't see why it should imply any more consent than "you may display things in this browser window". Not "you may open new browser windows or otherwise make it difficult for me to leave your site".

    We deal with spam by first by black-holing rogue networks, then through government regulation, and perhaps occasionally through international pressure. Why are we skipping straight to government regulation for pop-up ads, rather than trying the black-hole approach first?

    --
    The shareholder is always right.
  37. Be careful of the precedent this sets by consumer · · Score: 3, Insightful
    While on the surface this sounds entirely good, it leaves some things open to interpretation. What's the feature that makes these sites illegal? Is it the fact that their URLs were close to the URLs of popular sites that young people might visit? That was true for etoy.com. Is it that the sites in question had offensive material on them? The etoy.com site had a picture of the bombed Oklahoma building with the caption "Such work requires careful training" and pictures of women in S&M garb.

    It's difficult to draw the distinction without getting into questions of intent, and that's dangerous territory. In short, be careful what you ask for when talking about typo sites.

  38. It's not the FCC, it's the FTC by Animats · · Score: 2
    This is an action by the Federal Trade Commission, which enforces laws regarding false advertising and shuts down various forms of scams. The legal theory is that this is a form of deceptive advertising, and it's hard to argue otherwise.

    It's good to see that the FTC isn't totally out to lunch under the Bush administration. Usually, the FTC takes wimpy actions like asking somebody to cease and desist what they're doing. This is an unusually aggressive response.

  39. I couldn't disagree more! by addaon · · Score: 2

    How much control should a web site have over the user's browser? As much as the user gives it, of course! Now, even in brain-dead browsers like IE there are zones, where you can simply say "If i don't know this domain, don't give it full control." The default of giving away user control is admittedly unfortunate... but it is the user, by choosing the software, that is giving the site, explicitly, this freedom.
    Yes, explicitly. I have installed a piece of software which has no purpose other than to let a web site control my browser... and now controlling my browser is illegal? Huh? If I didn't want to do it, I wouldn't have installed the software...

    --

    I've had this sig for three days.
  40. Pay attention! by drodver · · Score: 3, Informative

    He's made $800,000 - $1,000,000 from these sites, which the FTC would like to take away. It does not say he's been fined for that much. Also, he lost 53 of the cases not 57, it doesn't say if he was fined beyond losing the domain names. Check your facts!

  41. Re:good! I've always hated Zuccinni by Unknown+Poltroon · · Score: 2

    you can do endtask from ctrl alt delete, but its a pain in the ass, as you still have to kill individual windows.

    --
    All Troll + "offtopic" mods are meta moderated as "Unfair", because you abused the system.
  42. An easy way out of this for IE and Moz by weave · · Score: 4, Informative
    Just do the "work offline" option in your browser.

    When you backclick or close, the next site(s) will attempt to pop up, but no further code will be loaded and hence the hell will eventually end.

    I always click "work offline" before trying to exit or back out of any of these questionable sites now BEFORE the cascading crap starts...

  43. New Browser Windows by leinerj · · Score: 5, Informative

    Okay - I'll probally get flammed for this. But if you are using Internet Explorer you can start up IE with the -new command and have each browser open in a seperate process. That way, your main browser won't lock up or be forced to 'end task' if your popup windows get out of control.

  44. OmniWeb for OS X fixes this elegantly by nbvb · · Score: 2, Informative

    OmniWeb for OSX solves this with a checkbox labeled:

    "Allow Pop-Up Windows Only When Link is Clicked On" (or something similar)

    Which means, it'll only pop up a window if and only if you click on something deliberately.

    Nice. Very, very nice.

  45. psst, Mozilla on Linux. by twitter · · Score: 2

    I've only been using Mozilla for a week or so, but I'm impressed, and imagine this is not a problem. Featurs such as right click, "block this image" to kill add.doubleclick.whatnot are very cool. It looks good and works great. Java is back on and I don't fear it will be able to replace system files. Blocking images is tricky, but I've been seeing fewer adverts and more real content. Bassed on that, I imagine the fix is already in and this is an M$ specific problem.

    That makes the implications worse. Does this mean that anything that makes MSIE do unexpected things can be shut down by the Feds? As M$ careens further and further into it's own little propriatory world, who's to say they won't put up yet more "standards" that make innocent sites look bad to M$ users, who then pull their hair out and curse the site. Is this an old pattern emerging again?!

    I've heard that M$'s crappy software was powerful, but this is too much.

    --

    Friends don't help friends install M$ junk.

  46. Re:I couldn't disagree more! with your disagreemnt by metis · · Score: 2
    The only reason I have a window is to allow me to see what is outside. Does it give you permission to stand in front of my window and make lewed or threatening gestures? Stores allow customers to come inside and handle their wares. Does this make shoplifting legal?

    The implicit contract between web-user and web-server operator is that the latter takes control of the browser for the purpose of showing the former something that he or she may conceivably want to see. Ignoring this contract is an abuse. What is wrong in a government agency tracking and prosecuting abuse?

    --
    -- look, cheese ahoy!
  47. Who needs these stupid features?!?! by rice_burners_suck · · Score: 2, Flamebait

    The only detail I'm curious to know about this whole thing is... why the fsck did Netscrape and Mafiasoft put these alleged "features" into their defective browsers in the first place?! A back button should do what it says, namely, go BACK, not open 6.02x10^28 pr0n windows!

    Shameless plug: I just use Opera. It costs money, which I gladly paid, because it actually WORKS unlike the previously mentioned excuses for browsers! Version 5.12 is great, as nearly all sites work the same as on the defective browsers--this includes online banking and bill-paying that didn't previously work with version 4.

    And even if you don't use Opera... Friends don't let friends use Mafiasoft products!

  48. ok, I can think of some that might like it. by twitter · · Score: 2
    This type of advertising only frustrates users and creates animosity between advertiser and potential customer.

    I've heard that some people pay to be abused, humiliated and embarassed. What better way to get all of that than to have your six year old daughter open one of these sites in front of your wife who never thought well of that internet thingy?

    It's a joke. I hate spam, porn and this Zuchinni loser.

    Still, for reasons posted above, I worry about this shutdown. Should the govenment shutdown web sites that simply take advantage of a crummy browser on a single crappy OS, and thus give official government protection to those products?

    --

    Friends don't help friends install M$ junk.

  49. If you use Mac use iCab/OmniWeb by Anonymous Coward · · Score: 2, Informative

    iCab has given users amazing control over JS for ages (and of course from the GUI. If you don't want a web site to:

    access the referer
    open new windows
    move windows
    touch the toolbar
    write in the status line
    create cookies
    ask for cookies
    access history
    etc

    You can prevent them from doing it with the click of a button. You can apply the settings to all web pages and choose sites where the filters won't be applied.

    You can even decide what type of Javascript will be executed by turning on/off:

    JavaScript 1.0
    JavaScript 1.1
    JavaScript 1.2
    JavaScript 1.3
    JavaScript 1.4
    JavaScript 1.5
    JScript

    among many, many other things

    It must be one of the most configurable browsers out there.

    For general browsing it's extremely fast, small and flexible and cannot be beat at saving web archives. One word of warning though. It feels like a finished browser but is still in Preview. Make sure you don't have any duplicated Text encoders on your system.

    For OS X iCab is still being primed. OmniWeb however, will give you enough control over popups.

  50. Re:Wow! 1st amendment rights... by ackthpt · · Score: 2
    Consider how they might defend this under the 1st amendment:
    Congress shall make no law respecting an establishment of religion, or prohibiting the free
    exercise thereof,
    >or abridging the freedom of speech or of the press; or the right of the
    people peaceably to assemble, and to petition the Government for a redress of grievances.


    The defendents argument might be taken from the same precedent which allows "freedom of speech" to include the invasiveness of phone solicitation, granted the phone solicitation doesn't automatically cause your phone to ring over and over until you listen to the message all the way through (a la Homer's Happy Dude scam in the Simpsons), but constitutionally, where does is the line drawn between the right of someone to make a sales pitch to someone who breaks into your house and harrangues you until feign death?

    --

    A feeling of having made the same mistake before: Deja Foobar
  51. Re:good! I've always hated Zuccinni by Wolfier · · Score: 2

    Use Alt-F4 instead. I remember it always works faster than popups pop up.

  52. Make it too costly for them by Wokan · · Score: 2

    If X10 wants their ads to get out there, maybe those of us with some spare time on our systems hands can devote it to a script that constantly downloads their advertisements. With enough people doing it, their bandwidth costs may finally outstrip their sales enough that they have to pull the web ads.
    Not a DoS or anything. Just pulling the ads repeatedly to drive up their bandwidth. Maybe we can take them from 14th place to first for a bit without giving them a dime to cover it.

  53. Browser security has a technical solution-AdShield by nagumo76 · · Score: 3, Informative

    People should be annoyed by popup trojan links and traps until they download AdShield for IE or use a browser like Konqueror that stops this crap out of the box. Microsoft should have added this to IE 6 but they are a bunch of lazy monopolistic twits. Netscape should have too but they are circling the bowl so I'll cut them some slack. I E is better because it lets you make the menus toolbar, and address bar go on one line at the top and lets you use more screen for viewing the page.

  54. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  55. In the meantime, there's pop-up preventer software by Anonymous Coward · · Score: 2, Informative

    For those who still endure the drudgery of Winblows at work or home, go to www.panicware.com and get the Pop-Up Stopper. Works great, non-intrusive, can be disabled with a quick double-click on the tray icon.

  56. Re:Wow! 1st amendment rights... by chromatic · · Score: 5, Insightful
    Nothing in the Constitution compels us to listen to or to view any unwanted communication, whatever its merit. . . We therefore categorically reject the argument that a vendor has the right under the Constitution or otherwise to send unwanted material into the home of another. . . We repeat, the right of a mailer stops at the outer boundary of every person's domain.

    -- United States Supreme Court, Rowan vs. U.S. Post Office, 1970
  57. Why scripting turned off is wonderful by WillSeattle · · Score: 2

    Now that Netscape is dead, the problems unfortunately remain. Browsers shouldn't have scripting embedded in them, period. If you like scripting, then you have to expect and put up with this crap. There's no way to legislate people to stop doing things like this.

    No, there is a way to legislate this. We programmers just don't want to admit that the language is wrong, that we may be forced, due to unintended consequences, to amend the Javascript code.

    And this is something the FCC or FTC could require be fixed, just as they can change the standards for HDTV (FCC due to communications standards, FTC due to trade implications).

    The only way to stop them is to disable scripting on your browser. The more flexibility a program has, the less secure it is. Scripting adds almost no value to websites, and is now just a tool of marketers, used more against you than for you. They track you with it. They take over your web experience with it. They keep tabs on what you're doing... and sometimes even take over your machine when flaws are discovered and exploited. I have serious problems with other people running their code on my machine, and therefore disable all scripting.

    Consequantly, I don't every seem to have any problems with pop-up windows, pop-under windows, "trapped" browsers, infinite-loop "back" buttons, etc.

    Turn off scripting. Encourage websites to stop using it. The web is full of more than enough bloated crap already. While you're at it, get rid of flash, and all the rest of the plugins.


    I do this too, but yahoo, slashdot, and cNet all try to pop up Javascript - it's boring clicking "No" each time, but a lot better knowing they can't run the code on my PC. And I don't get to choose which browser I use at work, or the default settings ...

    --
    --- Will in Seattle - What are you doing to fight the War?
  58. I'm not happy and don't want to pay dollars by WillSeattle · · Score: 2

    I can't say this is good. Noone likes those popup ads that lock you in, and do other unethical things. However, I dont think it's good for the government, or anyone, to say it's illegal/disallowed.

    Like killing people, blowing up things, or taking your PC from your home while you're at school?

    Namely, You are connecting to THEIR machine.
    Mail server administrators block spam because they are using their resources, why can't these people claim the same? After all, you're using THEIR resources, shouldnt they have the right to send any data on a connection that YOU initiated? (Though I realize you might not have intentionally made that connection; they can be sneaky, but the point remains.)

    I just don't like regulation, If it's bad and wrong, it's the clients job to work with the received data. But noone's blaming Microsoft, Netscape, Mozilla, or Konq (and you really can't blame the last 2, they're implementing things to take care of this junk).

    Target a solution, rather than the cause and punishment.


    Wrong. Some people send spam with http get requests to request an image, then use the request to track who responded and what server it was. I did not consent to this.

    Basically, it comes down to privacy. I have the right to shoot intruders in my home with a gun. I should be able to do the same to the CEO and execs of the spam firms that use such tricks.

    After all, it's home invasion, no?

    --
    --- Will in Seattle - What are you doing to fight the War?
  59. Ouch! by r_j_prahad · · Score: 2

    This is gonna really hurt the FreeBSD counts on next months Netcraft report.

    Netcraft page for CWIE LLC

  60. Security should be the default by stevenj · · Score: 2

    There should be no need for user-visible options for this sort of preference: the browser should be secure against such annoyances by default.

    --
    If a thing is not diminished by being shared, it is not rightly owned if it is only owned & not shared. S. Augustine
    1. Re:Security should be the default by jesser · · Score: 2

      Some users may need to create expceptions for sites they trust, most likely those sites were written before people realized that window.open was abused so often that its use would have to be restricted. Also, some users may want to place further restrictions on all sites if they visit many malicious sites, such as "you many only open a new window if I ctrl+click a link".

      I agree that security should be the default, but I think some user-visible options are also necessary in this case.

      --
      The shareholder is always right.
  61. Just like DeCSS by ikekrull · · Score: 4, Insightful

    They don't like what a piece of code does, so they ban it.

    I can't believe people are supporting moves to dictate what you are or are not allowed to express in a piece of code.

    This functionality is, i'm sure, in the W3C standard for Javascript, so criminilizing this is pretty stupid.

    Now, if your browser is engineered so poorly that it allows you no control over this behaviour - i.e. a site author is free to mess up your web browsing experience, shouldn't you ask the manufacturer of that browser to do something about it?

    Don't restrict this guy from publishing anything he wants to on the web. The control over whether to view that content should be in the user's hands.

    I know that M$ etc. would love to turn the web into a heavily regulated, TV-like environment where most content is approved and published by a few mega-corps, with government regulations on what is or is not acceptable, but that idea makes me sick to the stomach.

    i mean, how hard would it be to have a preference setting for 'ask me before allowing javascript to open a new window'? Give the user a choice, don't make it a crime to write this type of application (for which there are many perfectly legitimate uses)

    Making rules for what types of applications you may or may not publish on the web is surely a free speech issue.

    'Sorry, window.open() is now a federal crime.' doesn't cut it with me.

    The problem is with the tools that web browsers expose to site developers. The site developers should be free to put any tags they like up on the web.

    This is why web browsers are free to ignore markup they do not support.

    --
    I gots ta ding a ding dang my dang a long ling long
    1. Re:Just like DeCSS by sik+puppy · · Score: 2

      This is the FTC. To get them to act, the individual has to be engaged in deceptive/illegal business practices.

      Not only is he deceiving the people who mistype the website name, but he is collecting revenue from porn sites, gambling sites, etc that aren't getting traffic that they want. The porn operator doesn't want little johnny or susy - they don't have credit cards.

      I don't see where writing the code is being made a crime. Its deceptive business practices that have attracted the governments notice.

      --
      The first thing we do, let's kill all the lawyers. Shakespeare, Henry VI, Part 2, Act 4, Scene 2
  62. two words by Archfeld · · Score: 3, Interesting

    POPUP KILLER, sadly afaik win32 only but it works wonders on those annoying pop ups and pop unders

    --
    errr....umm...*whooosh* *whoosh* Is this thing on ?
  63. Very good... by Picass0 · · Score: 3, Interesting

    Now I wish the feds would do something to stop the pop up adds that interupt my TV shows every 10 minutes. I hate those.

  64. Overcomplexity is to blame. by fmaxwell · · Score: 3, Interesting

    Because a bunch of morons thought that the web had to look like television, they put ActiveX, VBScript, Javascript, Flash and other crap into browsers and plug-ins. This, not surprisingly, lead to many vulnerabilities like the one exploited here. (Who is the genius that decided that the "Back" button should be able to be redefined by any website that the user viewed?) If the web simply displayed pictures and text, we would not have this idiotic problem. Lest you laugh, that's what books and newspapers have done for centuries and they still seem mighty useful and popular.

    We have seen this overcomplexity lead to many problems. Look at Microsoft Outlook: some group of idiots decided that displaying text, or even pictures, was not enough. So they added Visual BASIC scripting to it. And HTML that you can't turn off. Suddenly any nitwit could create an e-mail Trojan horse that emailed itself to every person in the address book. Or Outlook could display some web site in the preview window, play annoying music, or provide confirmation to a spammer that you received and saw his message.

    It's time that we started demanding robust, secure applications even if it means that web sites won't be able to display animated, dancing piglets.

  65. Re:How cool can it be? by unitron · · Score: 2

    Okay, let's say that the moderation system exists solely to improve the browsing experience of those who do so at +1 or higher. What then is the point of reducing the karma of innocent victims of a site bug?
    If someone makes what would have been an up-moderated comment if it had landed in the story the commenter submitted the comment to, then suposedly this is a person one would want in the pool of potential moderators.
    What if this one down-modding is the only one they get, and the only reason they aren't given mod points? Kinda defeats the purpose, doesn't it?

    --

    I see even classic Slashdot is now pretty much unusable on dial up anymore.

  66. Hate to nitpick, but... [RANT] by FallLine · · Score: 2
    But my beef about that isn't with Amazon, it's with the patent office.
    That's not the patent office's job. It is not, has not, and should NEVER be their job. The USPTO's primary function is to act as a mere repository of claims. Inventors file their claim so that they can officially document what their claims are and when they filed them. When necessary, the inventor can take any infringers to court, using their fillings as evidence. The COURTS are the ones that are designed to resolve conflicts. It's only secondary and incidental that the patent office has any real filtration function whatsoever--the primary objective there is to keep the Signal to Noise ratio as a reasonable level. They do this by doing some nominal checking for prior art (which there clearly isn't any in 1-click's case) and through other means. But it's not intended to be THE decider of worth or originality.

    Anyways, the point is:

    Don't blame the patent office. Blame the courts or blame the applicant, where appropriate.

    Don't even necessarily blame the "system". Realize that ALL systems have problems, the question is whether our system itself is relatively optimal. I believe that if you take a few steps back, you'll see that the system, the way it is today, is well thought out and makes a lot of sense. [FYI, it works too!]

    Think about it: Do you really want or think it makes sense to put all the hurdles up front? Consider how costly it is to decipher the various claims, prior art, research, and so on. It's simply unrealistic. Do you really want to give some gov't bureaucrat that kind of power if you're an inventor? Do you want to give up your ability to argue your case OR, alternatively, allow potential problems to resolve themselves.
    1. Re:Hate to nitpick, but... [RANT] by FallLine · · Score: 2
      Actually, up until (IIRC) the late 70s, they did screen patents closely for merit. It's only been relatively recently that the "dump it off on the courts" philosophy was introduced.
      The USPTO has surely relaxed a bit due to the drastic increase in the number of applications, but you're incorrect if you think the USPTO has _ever_ been the actual or intended determinant of the patent. Anyways, the courts don't have to overturn, they can simply declare that the product or service did not infringe on the patent, or even if they do, simply award nominal damages for negligible infringement.

      The patent office needs to be reorganized to actually examine applications closely again, and WHO CARES if they make a damn profit. Any money saved by insisting that the PTO is profitable ends up being wasted in court anyway.
      I never stated or implied that the PTO should be a money making operation. However, it is simply ridiculous to ignore the economic implications of operating the patent office in a given matter. This is true not just for the patent office, but also for the various inventors which file their claims with them. Put simply, not all patents deserve the same scrutiny, allowing market-like mechanisms to deal with it is a much more appropriate mechanism insofar as it does not waste resources on patents that are irrelevant or worthless. Most patents simply aren't even worth the filing costs, never mind the legal costs. [This has been true since the foundation]
  67. Re:good! I've always hated Zuccinni by unitron · · Score: 2

    If every IE window is a separate process (and I have that option selected), why is it when I'm trying to do something useful like find information on a particular 2 cycle engine carburetor or an older Compaq monitor vertical scan circuit or whatever, and I've got several pages that I want to see open, if one causes IE to choke, it closes everything?

    --

    I see even classic Slashdot is now pretty much unusable on dial up anymore.

  68. Back button by Phroggy · · Score: 3, Interesting

    An important technical point: it sounds like the Back button was not actually reprogrammed to perform a different action. Rather, an onUnLoad event handler was specified in the BODY tag to execute a bit of JavaScript code when the window was closed. There are legitimate uses for this that are not annoying, although offhand I can't think of any (probably cleaning up things that were previously set, perhaps on a site that is designed to use multiple small windows for some special purpose).

    --
    $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
    $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
  69. W00t! by veddermatic · · Score: 3, Insightful
    Me likee.


    Registering typos is a smart, good thing (regradless of what you think =) but "trapping" is just plain WRONG.


    I am pleassed to see this type of thing, assuming it actually gets implemented with some knowledge and thought.


    Imagine surfing pr0n without holding your fingers poised over Alt-F4!


    Oh, and to they guy who (anon) responded to my sig about being dyslexic as "we used to call you idiots who couldn't spell", I think we used to call folks like your mom "Dumb bitches who couldn't afford abortions"

    --
    Department of Homeland Security: Removing the rights real patriots fought and died for since 2001
  70. Re:First Ammendment infringement, or is it? by sik+puppy · · Score: 2

    One of his sites, per the cnet story, was cartoonnetwork.com.

    It doesn't take a genius to figure that a substantial percentage of the visitors to this site will be children. To deliberately expose children to porn is criminal.

    I strongly oppose the "but its for the children" tack as justification for shutting things down, but when you blatantly target them like this, you've wandered into extremely dangerous territory.

    Personally, I don't allow activex, java, etc to run, except on sites I explicitly trust, but the vast majority of people either aren't aware or aren't technically savvy enough to do these things. There's a reason AOL is the number 1 isp. (I know I'm preaching to the choir)

    Anyway, this idiot is no better than a spammer, and deserves the same treatment.

    --
    The first thing we do, let's kill all the lawyers. Shakespeare, Henry VI, Part 2, Act 4, Scene 2
  71. Right to lif^He? (was Re:Interesting) by Simon+Brooke · · Score: 2
    The real question is, is this a violation of the owner's civil liberties, or a victory against spammers?

    The guy is setting out to deceive the unwary. Do you have a civil right to deceive people? Of course people decieve people all the time, and some forms of deceit are considered legal (and, equally, some illegal). But there's a big difference between being legal and being a civil right. What it seems to me this is fundamentally about is the right to lie, and as far as I'm concerned that is not a civil right.

    --
    I'm old enough to remember when discussions on Slashdot were well informed.
  72. Re:Your sig by greenrd · · Score: 2
    rm: `/root' is a directory

  73. Juts like DeCSS SHOULD HAVE BEEN HANDLED! by Per+Abrahamsen · · Score: 2

    It is NOT the code that is banned, it is a particular use of the code that is banned.

    This is how DeCSS should have been handled, the code itself should be legal, but using it to make unauthorized copies of DVD's should be illegal.

    Using DeCSS to play DVD's or to make copies under "fair use" should be legal, of course.

    (sorry for shouting)

  74. Give the power back to the users! by Per+Abrahamsen · · Score: 2

    The real problem is that Netscape and to a lesser degree Microsoft have been bending over backwards to give full control of the presentation to the content provider, against the original idea of HTML to let the content provider describe the content, and leave the presentation to the user, or the software acting on his behalf.

    Such traps are just the absurd symptoms of how control of the users machine have been taken away from the user, and given to the content provider. The real way to combat this is to tranfer control back to the user, and demand content based markup over presentation based markup.

  75. Re:good! I've always hated Zuccinni by hearingaid · · Score: 2

    I'm guessing you're running Windows IE.

    remember, IE is a part of Windows?

    thus, when IE dies, so does Windows. :)

    --

    my old sig used to be funny, but then slashcode ate it and now it's not funny anymore

  76. Re:False alarms: sPEEch, peTITion, clASS by alexjohns · · Score: 2
    From This page: "The Electronic Frontier Foundation believes that personal and parental choice is the best filtering mechanism of content on the Internet. The development of technological filtering tools and children's services will go much further to promote the safety of children and free speech than any legislation."

    The fact that there are closed source (so to speak) filtering solutions doesn't mean that all filters are bad. False alarms I can live with, him typing in "www.whitehouse.com" and staring at a picture of a woman sucking on a dick is not something I can live with. There's a reason why my wife and I lock the bedroom door when we're uh, 'doing it', there's a reason I don't let him have a subscription to Playboy, there's a reason he doesn't go to bars with me.

    There's all kinds of injustices done to children every day. Overexuberant filtering software is pretty far down the list of things we need to address. As I said, when he gets close to being a teenager, we'll talk, but that's 10 years away and no one has the ability to forsee what the 'net experience will be like at that point, anyway. In the meanwhile, he'll get access to disney.com and nickjr.com and that's just about it. (And, of course, here I'll get the flames about how bad Disney-fication is to kids. Actually, my son is really into Scooby-Doo at the moment. I didn't get into it until I was in my early teens. Does that mean he's a child prodigy?)

  77. Re:I couldn't disagree more! with your disagreemnt by metis · · Score: 2
    As you say, this isn't a perfect world. That is why the requirement that regulation be perfect is pointless. People mess up everything, and society stumble along by a myriad of checks and balances.

    regulation does work. For example, the streets are not covered with litter and dog poo, and none of my neighbors remodel their appartment during the night. Of course, there are failures and problems, because as you said, the world isn't perfect.

    There is no such contract. You speak of a illusion, a ghost, if you will.

    An implicit contract exists in every human transaction, and becomes legally binding whenever the courts say so. Of course, judges can and do err. To prevent such "imperfection" your seem to want to to ban human judgement.

    Code is speech

    Yes, and code also does stuff. That is why it is the business of the courts to decide which speech is protected and in what circumstances. Your all or nothing attitude doesn't fly and never will.

    Period. End of story

    No, the story just begins, the story of making distinctions and bringing human intelligence to bear on life.

    Sooner or later that FTC will shut down a site a majority of people doesnt think is "abusive"

    And then someone will appeal the decision and the courts will decide whether the rights of the minority have been somehow inapropriately curtailed. And if the court will judge wrongly, you and me can demonstrate in Washington until we get politicians to appoint smarter judges.

    And in the end, it still isn't perfect. Because nothing is, not even the technological shiboleth.

    --
    -- look, cheese ahoy!
  78. Re:good! I've always hated Zuccinni by Telek · · Score: 2

    remember, IE is a part of Windows?

    thus, when IE dies, so does Windows. :)


    WHAT are you talking about? If you're on windows 9x then having iexplore.exe go wacky doesn't effect the rest of the processes, just kill all the internet explorer windows. If you're on windows 2000/Xp/NT just kill the root iexplore.exe process and all IE windows will go poof.

    what you said makes no sense.

    --

    If God gave us curiosity
  79. Re:good! I've always hated Zuccinni by Telek · · Score: 2

    If every IE window is a separate process

    Umm, no, you're confusing explorer windows with internet explorer windows. There is no option to "open every internet explorer window in it's own process". And I don't know why you'd want the "open every explorer window in it's own process" anyways.

    Thus you can just kill the root iexplore.exe process and all of the ie windows under that process (i.e. spawned from that site) will die with them. You *cannot* open a new iexplore.exe process from within internet explorer.

    --

    If God gave us curiosity
  80. Re:First Ammendment infringement, or is it? by jesser · · Score: 2

    One of his sites, per the cnet story, was cartoonnetwork.com.

    I think the cnet story was trying to say he owned a misspelling of cartoonnetwork.com. It took me a few seconds to figure out what that sentence was trying to say, as well. That doesn't change the fact that many of his hits were from children, but it does mean that he didn't get hits from 60% of the people trying to find the cartoon network's web site.

    Here's the sentence: "Zuccarini registered many misspellings of popular sites, such as Cartoonnetwork.com, the FTC said, in a bid to draw traffic from sloppy typists."

    --
    The shareholder is always right.
  81. Re:good! I've always hated Zuccinni by unitron · · Score: 2
    "Tools, Internet Options, Advanced, Launch browser windows in a separate process"

    Of course we are talking about MS here, so when they say separate process who knows if that means what it would to anybody talking about any other OS. (I mean, what the bleep is a "friendly" URL or error message?)

    I've had the problem happen both with windows launched by right-clicking and clicking "Open in new window" and with windows launched by calling iexplore.exe via the Start button menu.

    Usually it just murders all the IE windows but not anything else, although if I get trapped in hydra-headed pop-up hell, that'll sometimes lock up the whole machine and require a cold boot.

    I do hope that there is a special circle of eternal torment for whoever thought it was a smart idea to give the file manager and the browser the same name.

    --

    I see even classic Slashdot is now pretty much unusable on dial up anymore.

  82. Re:good! I've always hated Zuccinni by Telek · · Score: 2

    what?!

    "Tools, Internet Options, Advanced, Launch browser windows in a separate process"

    I don't have that option. I do have that under explorer as tools, folder options, view, advanced settings, launch folder windows in a seperate process.

    (I mean, what the bleep is a "friendly" URL or error message?)

    right click, choose "what is this?", and it will explain it to you.

    I've had the problem happen both with windows launched by right-clicking and clicking "Open in new window" and with windows launched by calling iexplore.exe via the Start button menu.

    right-click and "open in new window" opens in the same process, running another iexplore.exe creates a new process.

    if a window goes berserk or crashes or you kill the process, it will only kill all of the windows that were launched from that process... your other iexplore windows will be fine and unharmed.

    and unless you're using windows 9x then you can't kill the system by having popup hell with iexplore windows.

    I do hope that there is a special circle of eternal torment for whoever thought it was a smart idea to give the file manager and the browser the same name

    Huh?

    "Internet Explorer" and "Explorer" is not that small of a difference, and what does it matter? They're two seperate names. I don't understand your beef.

    --

    If God gave us curiosity
  83. Re:First Ammendment infringement, or is it? by sik+puppy · · Score: 2

    A little late on the reply, but at one point, I read he has 15 misspellings of cartoon network.

    I have a couple of friends who are former surfwatch employees, and they were familiar with a many of the porn sites. These sites were absolutely opposed to children visiting them. They do not want kids traffic, as they don't generate revenue, and they do generate parental and political problems.

    --
    The first thing we do, let's kill all the lawyers. Shakespeare, Henry VI, Part 2, Act 4, Scene 2