Slashdot Mirror


Netscape 6 is Spyware?

spoon00 writes: "AOL is collecting information on what Netscape 6 users are searching for on sites like google.com. IP address, the date Netscape was installed and a unique ID number are other bits of information AOL is also collecting."

43 of 647 comments (clear)

  1. What's the betting... by Jon+Chatow · · Score: 1, Insightful

    ... that this is an overblown response over a mistake, thinking that the crash reports might be sending spyware-like data - e.g. which windows are open right now and their URIs, etc? And, umm, the IPs would be part of that TCP/IP connection.

    Well, it's worth considering. But then, I use Mozilla nightlies, so I'm submitting pretty often...

    --
    James F.
  2. Is this really a problem for us? by DickPhallus · · Score: 2, Insightful

    I mean how many people actually use NS6?

    Anytime a Navigator user performs a search by typing terms into the browser's URL bar and pressing the adjacent Search button, or by using the Search tab on the browser's My Sidebar feature

    And out of those that do, how many use the URL bar to search?

    Personally, I don't give a rip, 'cos I don't use NS and never will...

    --

    --
    Some weasel took the cork out of my lunch.
  3. For God's sake by Anonymous Coward · · Score: 2, Insightful

    Netscape gives you the browser for free.

    Netscape pays dozens of engineers to keep improving the browser and gives you the source code. (You can count on one hand the number of Mozilla developers who don't get an AOL paycheck).

    And you're bitching about AOL collecting some lousy anonymized demographics???

    If you don't like it, write your own damn browser. And stop making companies that contribute to the Open Source movement feel like they're wasting their time.

    1. Re:For God's sake by Markusis · · Score: 1, Insightful

      Anonymous they may be, but it's still collecting a unique ID. I think that using this they could collect a list of all the searches you've done, then target ads at you (by checking your IP). It may be anonymous and entirely passive, but it still shouldn't be done...regardless of the price of the browser.

    2. Re:For God's sake by Tackhead · · Score: 5, Insightful
      > And you're bitching about AOL collecting some lousy anonymized demographics???

      With the unique identifier, and having every search query you ever enter pass through a netscape.com redirector, yeah, he's got a right to bitch.

      What's anonymous about this? It's one cookie (from a bank, or a broker, or some other site to which he's given real data) and one SQL join away from having his entire search history linked to him.

      A redirector is transparently intercepting and logging the user's search queries.

      Whether it's www.netscape.com, www.fbi.gov, or www.doubleclick.net doing the intercept and redirect isn't the point. My search queries are transactions between me and Google. I can log 'em. Google can log 'em. They're nobody else's fsckin' business.

  4. When will laws be passed? by CitznFish · · Score: 3, Insightful

    When will we all finally be so fed up at the consistent invasions of our privacy by media moguls like Real networks, AOL, Netscape (yeah one and the ame..)? We neeed to contact our legislators and demand these practices stop. Maybe if anonymous data was gathered, but to tie it with an IP address really goes beyond any justifiable data collection.

    --
    'mmmmmmmmm.... forbidden donut'
  5. Very old news. by Doktor+Memory · · Score: 5, Insightful
    Netscape's internal search components have been collecting information (to be processed by Alexa) since the late 4.x versions.

    --

    News for Nerds. Stuff that Matters? Like hell.

    1. Re:Very old news. by HiThere · · Score: 3, Insightful

      It's only old news if you've already heard it. I hadn't.
      .

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    2. Re:Very old news. by RazzleFrog · · Score: 2, Insightful

      It doesn't "route" through MSN. It uses the MSN search engine by default but you can switch that off. If you read the article you would know that they did not find this happening with IE. Nice bit of flamebaiting though. Glad to see that a moderator decided to reward you for your stupidity.

  6. Doesn't XP/IE 6 Do The SameThing? by Tesser · · Score: 5, Insightful

    According to IE 6/XP's "Search Companion", this feature "provides task suggestions and automatically sends your search to other search engines."

    How does this occur if it doesn't transmit the information to Microsoft as well?

    Sure, if I add a search engine into the preferences, I can type "google keyword" all I want to go directly to Google. I suspect, though, that if I rely on the "features" that Microsoft provides, they have access to exactly the same information-- regardless of what the article might claim.

  7. There should be a law... by Ghengis · · Score: 1, Insightful

    Anytime some piece of software is spying... I should be informed during the install of this. I have a right to know who's watching me do what from my own home. How this would be enforced is beyond me, but I have the right to know.

    --

    "The best laid plans of mice and men gang oft agley..." - ROBERT BURNS

  8. I overreact as much as the next guy... by quinto2000 · · Score: 5, Insightful
    but the article is pretty clear that the data are anonymized and for billing purposes only. Microsoft might not need to collect data on how often their users use affiliated search engines, but Netscape isn't in a position where they are free to lose money.

    Netscape needs to collect information about the frequency of searches in order to bill the search engines correctly. The very fact that it only occurs in the "Search bar" shows that they are very likely to be telling the truth. It wouldn't be hard to log much much more data than they apparently do.

    The commment about the ip address was misleading as well. Any time that information is sent to my computer, I can log the IP address. It doesn't mean that I am going to be doing anything with it.

    --
    Ceci n'est pas un post
    1. Re:I overreact as much as the next guy... by Zeinfeld · · Score: 4, Insightful
      The commment about the ip address was misleading as well. Any time that information is sent to my computer, I can log the IP address. It doesn't mean that I am going to be doing anything with it.

      Netscape should know that logging of IP addresses has severe privacy issues, they were a major source of controversy in the early days of the Web.

      This could easily be abused for corporate espionage. It is very easy to correlate addresses with companies - particularly if they have a NAT box and reverse DNS.

      This is also introducing a single point of interception for law enforcement, including in police states. People in China trying to access Google to find out about "Tiannamen Square Massacre" could be redirected to the communist party search engine by simply redirecting a single DNS record.

      --
      Looking for an Information Security student project suggestion?
      Try http://dotcrimeManifesto.com/
    2. Re:I overreact as much as the next guy... by sjames · · Score: 5, Insightful

      Netscape needs to collect information about the frequency of searches in order to bill the search engines correctly.

      If all they need is aggregate information, why is there a unique id number and date of installation? Why not have it send a packet saying for example "google search" and then send the search itself directly to google?

  9. So what if it's not a surprise.... by Muddie · · Score: 4, Insightful

    It shouldn't be tolerated. People shouldn't be informed they are being spied on and say, "Eh, I figured as much anyway." Would you say that if you found that the CIA had been wiretapping your phone line and/or DSL/Cable line for the past 6 months?
    I haven't read the licence agreement to Netscape 6 recently, but I don't care if it says anything about monitoring your browsing trends (it's hard to call them 'habits' due to the very definition of the word). It almost appears as people are becoming complacient about this. If you get used to it, they will just push further once they have their hand in your privacy and you don't flinch. Eventually, it may come down to a /. headline, "MS-AOL using tiny dust-sized robot probes that ship with Windows 3K that get into your nostrils, sit behind your eyes and monitor everything you do." *shutter*
    Once more a large company is stepping on your rights and your privacy, and while maybe you shouldn't be suprised, you should be outraged.
    Please?
    Pretty please?

  10. Re:Glad I use mozilla... by reaper20 · · Score: 4, Insightful

    True, but considering that a lot of people still think that Mozilla == Netscape, it still becomes a problem for Mozilla, granted it's only perception, but try explaining that to the "average" user.

  11. Any data mining a product does on user by Vicegrip · · Score: 5, Insightful

    behavior and information is something a product should clearly and regularly identify it is doing to the customer. Customers are generally willing to cooperate when they perceive there is value to the free product/service they are getting-- but only if they understand exactly what is being recorded, when, and how.

    Having to worry about software doing stuff behind your back without informing you is exactly the reason why I go to great lengths to avoid using Windows Media and why I don't use a number of current gnutella clients.

    --
    Do not spread "09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0" over the internet, thank you.
  12. Re:Easy Solution by TheMatt · · Score: 2, Insightful

    Actually, a better browser, usually, since NS6 is often far behind the latest Mozilla. In fact, now that Mozilla Mail is so nice, there went the last vestige of Netscape on my XP box.

    Kinda sad, really. I can still remember laughing at MS because "mighty" Netscape was beating them -- especially be putting out a better product. Now, though, IE is tons better than the bloat that is NS6.

    --

    Fortran programmer...oh yeah. Array math for life!

  13. Re:Glad I use mozilla... by AlexDeGruven · · Score: 4, Insightful

    The problem with that is, it works exactly the way they want it to. The computer savvy people in the world know what they want to search for, and how to find the engine of their choice. What they're targeting are the inexperienced users who don't know any better. They are the ones that will actually use the Netscape search function, and not notice the fact that your information is being redirected to the parent company before it actually goes where you intended it.
    It falls under the same category as the Ameritech/SBC debacle here in MI. People who don't read all the way through their phone bill may not have noticed the "SBC/Ameritech intends to sell it's customer data to a 3rd party marketing firm, if you don't want your information to be included, be sure to call 800-xxx-xxxx to be removed from the list." in very fine print in an obscure section of the bill.
    Hardline marketing strikes again.

    --
    Randal Graves says: I'm a firm believer in the philosophy of a ruling class... Especially since I rule.
  14. Re:Glad I use mozilla... by FatRatBastard · · Score: 4, Insightful

    Show me the "average" user who even knows what Mozilla is!

    I'm not knocking the browser, its the browser of choice on my Lin box, but lets face facts: its a geek browser. Joe user has no idea what it is.

  15. Enough Already by erasmus_ · · Score: 2, Insightful

    Dear sources, please stop giving us reasons to use Netscape, we already know it's a horrible browser with rapidly declining market share. Adding insult to injury is almost .. sad.

    --
    Please subscribe to see the more insightful version of th
  16. Re:any surprise? by Zeinfeld · · Score: 5, Insightful
    Really once aol took over is this any real surprise?

    I hope so because that is what any privacy suit would turn on. Does the user expect AOL to intercept searches and log the results?

    The Windows XP 'powertool' has a very useful feature that allows you to enter a shortcut for a search engine. So if I type 'g privacy' it sends off a search to Google for 'privacy'.

    I just hope that the Slashdot community will have the guts to go after AOL for this in the same way they would Microsoft. As it is I suspect the response will be a bit like the response in Congress to administration stonewalling or the like. Outrage at the actions if it is the other party, appologism if it is their own party, or even outrage that people would even complain.

    Netscape has never been pro-privacy. They invented cookies so that advertisers could track readers and now they are tracking them directly themselves.

    --
    Looking for an Information Security student project suggestion?
    Try http://dotcrimeManifesto.com/
  17. Re:Glad I use mozilla... by Eimi+Metamorphoumai · · Score: 4, Insightful

    I don't think so. First of all, most people don't understand the idea of spyware at all, or simply don't care. For those who do, you now have a really simple answer to what is Mozilla: "It's Netscape without the Spyware and other corporate crap."

    --

    Visit me on #weirdness on the Galaxynet.

  18. Re:So? by jonathanjo · · Score: 2, Insightful
    Who here has been locked in jail or harassed or abused by AOL or the authorities because of what they typed into their netscape 6 search bar? Hm, nobody? Okay, nothing to see here. Move along.


    Perhaps they don't harass you or jail you yet.

    But -- and this is the absolutely salient point -- they could. (With apologies to Bill Bryson.)

    Are you willing to trust AOL Time Warner with your browsing info? Are you that confident that they won't decide someday there is profit in, say tracking who searches for Newsweek and sends them junk mail trying to get you to switch to Time? What if you apply for a job at any of the many companies owned by AOL Time Warner, and they check the databases for people known to search Google for information on illegal drugs, or to make AOL-bashing comments on /.? Nothing to see her, eh?

  19. Re:Figures! by simplexMethod · · Score: 4, Insightful
    Every program we run has some kind of SPY thing with it.

    Unfortunately for people like the person who made this general statement, privacy is probably unattainable.

    Web privacy is possible. Open source encryption programs i.e. OpenSSH (Secure SHell) allow users to pore over the code for security holes. I download all of my mail with SSH connections to the individual mail servers (even my yahoo.com address). This is obvoiusly not a total security solution but it does keep employers, coffee shops, etc... from reading bits of my mail.

    I just wanted to give an example of how your privacy fate is in your own hands...
  20. Microsoft Irony by MSwanson · · Score: 2, Insightful

    I find it very ironic that a story mere weeks ago about Microsoft spyware had such a negative bent, while it's okay for Netscape. Hypocrites.

  21. Re:So? by Wakko+Warner · · Score: 3, Insightful

    Perhaps they don't harass you or jail you yet.

    But -- and this is the absolutely salient point -- they could.


    Yeah, and they could send a squad of death ninjas after me too, or tickle me to death. But I'm quite confident the odds of either of these three things happening are about equal and probably an integer no greater than zero.

    Am I willing to trust them with my browsing info? I trust my employer to not give a shit that I'm reading slashdot right now. Why should I care one whit what AOL knows about the search keywords that come from my IP address?

    The chicken-little-syndrome on this site is absolutely astounding sometimes.

    - A.P.

    --
    "Remember when the U.S. had a drug problem, and then we declared a War On Drugs, and now you can't buy drugs anymore?"
  22. Don't be stupid by Hrothgar+The+Great · · Score: 5, Insightful

    While this argument does tend to be extremely one-sided at times on good ol' Slashdot, your implication that it should be a non-issue to people is preposterous.

    What you're basically saying is that AOL can do anything it wants with their browser, and anyone who thinks otherwise should either

    A. Stuff it
    B. Write a browser

    While just about anyone could choose (A), I believe you have greatly overestimated/exaggerated the amount of people who are capable of (B). Perhaps there are quite a few on Slashdot; certainly there would be a greater concentration of such people here than in the average American suburb; however, reacting to every argument over the ethics of data gathering in application software with "WRITE IT YUORSLEF!!!!!" might not be the most intelligent way to join the discussion. No one is going to listen to you in a debate if you act as if there is no debate and your point is totally obvious. Not everyone can write a browser; and most people are just going to use what's on their computer when they buy it. Arguing that spying on people who don't know any better and have no way to protect themselves *might* just be a little shady certainly is valid and does not warrant your instant dismissal.

  23. Re:any surprise? by The+Original+Bobski · · Score: 2, Insightful

    Netscape has never been pro-privacy. They invented cookies so that advertisers could track readers and now they are tracking them directly themselves.

    That makes about as much sense as saying "Spammers invented open relays so they could spew their crap across the Internet."

    Reality isn't your forte, is it?

    --
    satire, n: 1) witty language used to convey insults or scorn; 2) a form of humor lost on most slashdot moderators.
  24. While 95% of the world uses IE... by Anonymous Coward · · Score: 1, Insightful

    Oh well, just more reasons to use Internet Explorer 6 or Mozilla.

    NS6 is the crippled, downgraded Mozilla anyways. Why do poeple bother?

  25. Re:Glad I use mozilla... by Anonymous Coward · · Score: 1, Insightful

    The average user will never ever hear of anything like a spyware function in netscape. Moreover they wouldnt know what to do about it. Really what do you do about it except not use it(uninstall what is that?). Would your mother just keep using it or would guilt and concern force you to go over and fix it?!? hmm?

    www.os-library.com Good reviews, Good books.

  26. You either hard code the site or... by blazerw11 · · Score: 4, Insightful

    It seems to me that it might just be that AOL/Netscape sends the search info "home" to make sure the search is correct. This way if Google (or any of the other possible search engines) decides to change how searches work, then you browser doesn't break.

    Also, all we know is what is sent, not what AOL collects.

    And finally, the search in Netscape is NOT sending the IP address of your computer, this is how HTTP connections work. The packet's origin is always included. Netscape 6 is also sending your IP address to every site you visit. As is IE, Opera, Mozilla, etc.

    --
    A great many people think they are thinking when they are merely rearranging their prejudices. -- William James
  27. Just think about it... by rebron · · Score: 2, Insightful

    one, the information they collect is not personally identifiable. Did you sign-in to use the browser. No. Then how do they know who you are. (and don't say IP address). two, if you're netscape, how do you bill those people that are getting placement in the browser, like a google, goto, just put them in for free? Do you really think that Netscape wants to rely on google logs and let them tell netscape how much they really should be paying? Right... three, it's not like you can't go to mycroft.mozdev.org and configure a sherlock plug-in without the Netscape redirects in there... four, what the hell are they going to do with search information on an individual basis? Not a damn thing. Can you imagine the size of the logs and the data warehouse that this needs for them to truly track your every move. The only entity that can do this is the gov't. Even AOL can't afford to do this. give it up. You guys make no sense. Oh, and far as the cookie comment...Netscape created cookies to establish a means to provide saving information for cross-sessions not for advertising.

  28. Re:Big deal by jilles · · Score: 4, Insightful

    In some countries there are laws against collecting data that can be related to individuals without the individuals permission. Also in most countries, upholding a "click to agree" license in court would be tricky at best.

    These two combined probably makes netscape's actions illegal in some countries. Why are people making a fuss about it? After all netscape's intentions are probably pretty harmless.

    However, there's no way of knowing for sure and would you really want your queries for porn of a very dubious nature logged by AOL? What if you're a chinese and you enter "falung gong" in the search field? In China that information about you is likely to get you some very special attention of the local authority.

    In short, privacy matters. You own your data and stealing it (i.e. taking it without your knowledge) violates your privacy since you are not in control of what is stored and who has access to it.

    Suppose you want to apply for a job at AOL (ok that's a bit extreme, I know) and the nice guy who does the interviews does a query on the netscape DB to see what kind of searches you've been doing and subsequently shows you the door. So, first they invade your privacy and then they use that information against you.

    This kind of scenario's is of course not very likely but Murphy's law tells us that if it can happen it will happen. Allowing companies to secretely log privacy sensitive data will at some point have negative consequences. All that data will just be sitting there waiting to be used by whomever has access to it. The data is valuable (that's why it's being collected) and customers of that data will want to use that data for whatever is in their interest.

    That's why you don't want any spyware on your computer.

    Now probably Netscape's intentions are pretty harmless. Probably netscape's programmers are just as clueless about privacy as most other computer users.

    --

    Jilles
  29. Re:But there's a major difference by freakinPsycho · · Score: 3, Insightful

    Not in Netscape, you can't.

    Netscape is a comercial product. Mozilla is not, but that's not what we're talking about.

    The hypocracy here is that people are saying "oh, it's Netscape, so I'll believe whatever they tell me and think it's ok."

    Let's face it, if IE sent information about your searches back to Microsoft, you would have a screaming fit. Even if there was an option to turn that off, you would still be cry foul.

    I have seen this many times on /. OSS supporting company A does something that is terrible. Huge security hole, gathering of data, etc. It is brought up and defended here.

    If Microsoft does it, all hell is raised.

    The PR release for both can be the same, basically saying "look, we're not actually doing anything with this information. it goes to our servers, sits there and is eventually used to get a general profile of our users without any specific information being applied to anyone." If OSS supporting company does, that's fine. Microsoft does it, it's a lie and a furthering of their monopolistic strategies.

    I'm not defending Microsoft. All I'm doing is pointing out the double standard of many here.

    --
    "All the things I really like to do are either immoral, illegal, or fattening."
    - Alexandar Woolcot
  30. Re:Glad I use mozilla... by civilizedINTENSITY · · Score: 2, Insightful

    "most people don't understand the idea of spyware at all, or simply don't care"

    I respectfully but *strongly* disagree that people "don't care" their software is tracking and reporting their online behavior. This is one of two issues that people seem to get. They really don't like being spied upon.

  31. Re:Easy Solution by DeadMeat+(TM) · · Score: 4, Insightful
    I'm on a college campus. Since people set up floor and campus mailing lists which inevitably get added to address books, we get a ton of E-mail worms being spread around. (Fortunately for me, the different schools have different mail servers, and it looks like the engineering school's mail server has some kind of server-side scanning on it.) It eventually got so bad that the entire arts & sciences school lost E-mail for two days thanks to one of the recent worms (I don't remember which) which practically made their server go up in flames. The only problem that's worse around here is spyware (*cough* New.net *cough*) killing peoples' Internet connections, and that's relatively recent, since people pick it up from recent versions of P2P apps.

    So yeah, when people come up to me and ask "How can I stop all these E-mail viruses," I give them an honest answer: don't open E-mail attachments you're not expecting, update your virus scanner manually when you hear about a new worm (fortunately the copies of NAV our school gives out is pre-configured to automatically update itself every couple of weeks), and stop using Internet Explorer and Outlook Express. Their options are basically Netscape and Opera -- and most college students (myself included) are reluctant to cough up the registration fee for Opera, so that leaves one option.

    I'm not going to go into the debate of whether the IE/OE combination is so dangerous because of Microsoft being incompetent or simply because 80something percent of the world uses it (it's been argued way too many times). But either way, switching to Netscape works, and so far nobody's complained. I've even gotten a couple of "ooh, pretty" comments once people saw Netscape's Modern theme.

  32. Re:mozilla source search by Fweeky · · Score: 5, Insightful

    > What follows is my commentary as I tried to get this post under the lameness filter -- resulting in the useless shit post you see above.

    Ugh, yeah, the lameness filter truely is the most evil bit of code Mr Taco ever made/approved. Probably.

    At the very least it should be turned off (or tuned down significantly) for users with lots of karma; if I get to post at +2 I think it's also reasonable to expect I'm not going to post ASCII penis birds etc.

    A few weeks ago I wrote a nice little comment that was mostly a list of points; obviously liking to get proper formatting I threw in the required HTML and was instantly hit by the lameness filter, basically making the HTML formatted mode entirely useless.

    And yes, I admit, my train of thought wasn't entirely different from yours :)

    (said HTML mode also removes a lot of useful HTML I like to use; titles for links in order to describe what I'm linking to better, <abbr> and <acronym> which are nice when using a lot of TLA's and ETLA's, <small> which is useful for notes and something I might even have used for this piece of text, etc. Yet I'm allowed to use elements like <div> that have pretty much zero use? Blegh)

  33. Re:Easy Solution by maxpublic · · Score: 2, Insightful

    Or install Opera instead. It's a better browser than Mozilla and despite the 'black box' you can readily test it to see that it isn't sending your information anywhere.

    Max

    --
    My god carries a hammer. Your god died nailed to a tree. Any questions?
  34. Re:any surprise? by JamesOfTheDesert · · Score: 4, Insightful
    There's a difference between suspected peeping toms and convicted rapists ( sorry -- I guess Micro$oft still on appeal for their conviction ).

    Wow. Comparing Microsoft to a rapist. Let me guess: you're a guy, and you probably don't even *know* any women.

    Am I right?

    I *knew* it!

    Here's a tip: If you want to make clever analogies, avoid glib references to crimes of sexual violence that destroy lives. Half the population will appreciate your effort.

    And maybe chicks will finally talk to you.

    --

    Java is the blue pill
    Choose the red pill
  35. Re:Simple solution by 10am-bedtime · · Score: 3, Insightful
    real men use vi

    well i'm glad my non-computer-geek girlfriend uses emacs, then.

    thi

  36. Read the licensing, silly by rickmoen · · Score: 3, Insightful
    cnkeller wrote:

    If netscape needs information to sell/share to it's partners so it can get more revenue and keep producing great products, that's fine. You don't have to use their browser. A more interesting question is that did you agree to it in the EULA?

    I'm glad you asked that question. No, he did not.

    I happen to maintain an archive of licence agreements for common proprietary Linux software, including the one for Netscape 6.1. It includes a clause that the "he Product may automatically send information relating to the download and install process to Netscape", but nothing about post-installation spying.

    Rick Moen
    rick@linuxmafia.com

  37. Re:Netscape, IE and Mozilla by DunbarTheInept · · Score: 3, Insightful

    Speed of loading the program into memory is irrelevant. Opera is faster at rendering the pages, and that's what was being talked about.

    --

    Don't label something "offtopic" unless you know the topic well enough to tell what's on topic.