Morpheus Hijacks Browsers For Affiliate Links

An anonymous reader submits: "According to this news.com article, morpheus (aka streamcast) has begun silently installing a browser plugin on its users' machines that basically hijacks the web browser even when not running Morpheus. An afflicted browser will sense if a user is going to visit a shopping site like Yahoo! or Amazon, and secretly send them to a different site instead and then redirect them from this site to the user's intended destination. The user will not be aware that this is happening... however the site doing the redirecting will benefit because they are set up as an affiliate partner and will get a commission on the backs of the user. On a horrible scale of 1 - 10 for sleazy business practices, I rate this a 9. Comments?"

Comments

Scary

[EvilAlien]

What else is peer-to-peer software silently borrowing?

Trillian password files perhaps?

Re:Scary

[mcrbids]

That's not all. Try searching for "system.dat". That's the Windows System Registry. There, you can get names, passwords, Install codes, all kinds of neat stuff. Hit Gnutella or Morpheus. Do a regex to get the keys, etc.

That's scary.

Re:Scary

[supermoose]

The last time I ran a peer-to-peer client, the darn thing went and stole all my music! =)

Re:Scary

[Com2Kid]

Bah, some people leave spreadsheet files shared on p2p applications because they want to increase their share size (a big deal on Direct Connect in which you get access to better and better hubs as you share more and more gigabytes worth a files).

CC#s and more. . . .

Bleh, dumb shits. Lucky for them I am kind enough to tell them about it as opposed to taking the information for myself. . . .

Ethics suck at times. ^_^

Re:Scary

[fenux]

pfff, every seen how licq sores your password, i wrote a script, it's called cat an you give you configig file as an option, for more effective use you use 'grep Password=' .. do i look klike i care if someone uses my licq???

Re:Scary

[Anonymous DWord]

You'd care if it was tied to something like, sayyyy, Passport, and let you shop online because you've "verified" your identity. But you'd never do anything like that, right? How 'bout your parents? Or your friends that don't know anything about why they should care?

Re:Scary

[dossen]

Sure, nice, but don't you need to be me, to get to my password. It's called permissions. And if you run some binary package from someone you don't trust, then good luck to you.

Re:Scary

[Anonymous Coward]

That's the Windows System Registry. There, you can get names, passwords, Install codes, all kinds of neat stuff. Hit Gnutella or Morpheus. Do a regex to get the keys, etc.
That's scary.

So what do you propose, there is no safe way to store passwords if you have to send them plain text later, that is if you asume security trough obscurity is not safe which most people do

Oh and real men use regedit.exe (whats in a name) to search the registry and use regmon to find out what stuff software is storing/reading from the registry (thats includes user.dat/user.man, which has unique user data rather then the system wide settings in sytem.dat)

Re:Scary

[Anonymous Coward]

That's what Peer-to-Peer do, steal information!

Re:Scary

[Crass Spektakel]

I always share /dev/zero, that does the job. If they still insist on "share more" then I also share /dev/random. :-)

Re:Scary

[WWWWolf]

Except that according to stat, /dev/zero and /dev/random both have size of 0...

nighthowl:~$ perl -e 'print -s "/dev/random", "\n";'
0

Besides, what's easier to report with a long type: "zero size" or "infinite size"? =) Sure, it'd be neat to return LONG_MAX...

Re:Scary

[thing12]

The best any program can do is hide the passwords if they want to allow auto-login. It just can't be done any other way. You can get auto-login passwords MSN, AOL, and ICQ all by going through the registry or configuration files. Trillian could encrypt the files, but then you need to enter a password when Trillian starts. Maybe that's a small price to pay for a little bit of added security, maybe it it's not worth it to most people.

I encrypt my Trillian directory and run it as a user that has the ability to read those files. And likewise I run all file sharing programs as a user that has no permissions at all except for their own directories. Windows 2000/XP aren't so bad :-) at least they give you a process model that's similar to *nix.

Re:Scary

[plalonde2]

Simple answer then. Write a device driver. Stub it off of the /dev/null code, but return a huge size. If you're not a kernel hack, this is a great simple way to learn how to build a driver.

Re:Scary

[Zeinfeld]

What else is peer-to-peer software silently borrowing?

There are a bunch of overlapping issues here. One is the politician problem. Many people want to vote for politicians who are going to serve their personal self-interest best. This raises the problem that the self-interest of the politician is rarely that of the voters, particularly if they are elected. So politicians who make a bid for public support on the basis of self interest alone are likely to believe what they preach and serve their personal self interest exclusively.

The problem of spyware appears to be almost unique to P2P software. This might be coincidence, P2P just happened to get hot at the same time that the Internet bubble burst and Internet business models turned Hobbsean. On the other hand it appears more likely that people who write software whose primary purpose is to help people steal music have no moral qualms about exploiting their users as well.

A second set of problems comes from the fact that P2P pretty much cuts itself off from most of the traditional Internet business models. Post Napster no P2P company can make money from any business model that requires them to maintain a central server or long term business relationships with other companies.

The thread contains many posts that attempt to dispute the claim that Morpheus is doing anything bad. The debate tactics used suggest that it is FUD from the Morpheus self justification dept. There are plenty of posts saying 'the poster hasn't read the article, Morpheus is not stealing referals', only that is precisely what the article accuses Morpheus of. This is not about collecting information about users.

On the legal side I don't imagine that this is a sustainable business model. There is no way that Amazon and the other companies are going to want to pay people for intercepting referals from other sources. Depending on the circumstances if an affiliate is collecting money by misrepresentation the actions may constitute fraud.

The other main issue is of application security. Here the only significant difference between Linux and Windows is that Windows being more popular makes it a more attractive target for scumware. Linux has to consider the problem since if Microsoft develops a defense the scumware folk will attack Linux next on the 'bear principle' - I don't have to outrun the bear, I just have to outrun you.

There is a hook in IE to disable all third party plug ins. The problem is that this is the big switch approach. What there should be is the ability to select which plug ins are enabled. Windows really should not have so many under the covers switches for installing software. I recently found that one of my machines had been infected by comet cursor, I have no idea when. Checking the Windows registry to find out if you have spyware reminds one of Arthur Dent's difficulty finding out about the plans to build a bypass through his house.

The problem with the big switch is that Adobe Acrobat is pretty useful. Macromedia flash is also useful in limited circumstances. I like the animations on Slate, but the new breed of annoyance ads have led me to disable it. There sholuld be a switch to allow plug ins to be enable on a site by site basis. Unfortch, the security zone mechanism does not do this as yet.

Re:Scary

[lkaos]

Oh and real men use regedit.exe

I don't think I even need to commit on this...

Re:Scary

[Anonymous Coward]

Then, for the sake of consistancy, you should
rollback the whole transaction.

Re:Scary

[Anonymous Coward]

Bullshit. Look at how UNIX does it (salt in /etc/shadow). These people are just too lazy to open up the redbook.

Re:Scary

[matrix29]

The skinny of the news is a file called BPBOH.DLL that comes with the MORPHEUS PREVIEW version and carries the nasty little bugger that is causing CONSTANT browser crashes right now on my system. LAVASOFT's AdAware has a program called REFUPDATE which includes the killer for this little spyware nasty. The downside is RefUpdate is SUPPOSED to be aware of BPboh.dll, but didn't find it on my system as per Lavasoft's mirror page. So search the BPBOH.DLL and delete the nasty crashing bugger.

The nasty is made by a sleazy firm called Wurld Media, Inc. (They spelled it "Wurld" not "World")

Here's a snippet of the bastard.
rdxr020305.dat (which appears on my desktop)
bpboh.dll (the offending file)
bpboh2.dll (not on my system but in the hex dump)
www.rdxrp.com
www.maplehollow.com
www.rdx rs.com
www.inmotiongolf.com
/rdxr020304.dat
/bp boh.dll
about:blank werule
\winbpupd.exe
www.sephora.com
http://www.sephora.com
(Who wants to boycott Sephora's "we'll make you look like a prostitute" makeup selection? I don't wear it, but who would?)
http://www.sephora.com/help/about_sephora.jhtml?lo cation=contact

www.shop.barnesandnoble.com
www.barnesandnoble. com
http://www.barnesandnoble.com
(Who wants to boycott Barnes&Nobles now for foisting crappy spyware on us? I sure do! By the way, MAKE CERTAIN you let them KNOW what we feel about spyware please.)
http://www.barnesandnoble.com/help/customer_servic e/morehelp.asp?userid=199PI1EZ1Y

Go to this nasty crapware website and share how you feel about their little spyware games please.
http://www.wurldmedia.com/
Their email address for contacting them is
corpcom@wurldmedia.com

Or use their snail mail address:
WURLD Media, Inc.
63 Putnam Street
Saratoga, Springs, NY 12866
Telephone: 1-518-691-1100
Fax: 1-518-691-1180
(Oh... let me think for a moment about what kinds of FAX pranks exist...)

Re:Scary

[Decimal]

What else is peer-to-peer software silently borrowing?

Well, Morpheus is "borrowing" Gnucleus' source code to switch over to Gnutella. What really bothers me is that not only did they not consult with the Gnucleus authors first, but they also didn't tell Morpheus users that they had switched networks. Suddenly the Gnutella network has been flooded with tons of unhappy Morpheus users who only know that it's much harder to transfer files than it was in the last version. The only place MusicCity has publicized it's use of the GPL code is in the program's "about" box, and in a few text files in the same directory the program. The closest the webpage comes to acknowledging the change is under the improvements list: "More files".

Well of course, we can't expect them to advertise for the competition. Would you keep using Morpheus if you knew it was actually Gnucleus with ads, hijack-ware, and a big M stamped on it?

Re:Scary

[thing12]

What's bullshit? Look at how unix does what?

Re:Scary

[Com2Kid]

Not to mention a great way to get your IP banned from entire NETWORKS of Hubs on Direct Connect. ^_^

Besides, DC does almost NO checking of authenticity, any 13 year old with a packet sniffer can easily figure out how to insert a "Dude I have 10000000 Gigabytes of files!!!!" message.

(this problem was recently taken care off by the regular swift application of perma-bans to anybody stupid enough to enter a hub sharing more GBs of files then exists data on the internet. :) )

Now what you MIGHT want to do is help us poor windows users out and add some decent security to this program, last I checked anybody can still access/run any program on your computer if you have direct connect up and running. (as I said, it doesn't check ANYTHING for authenticity, though a 'security update' was released awhile back, but no information was given as to WTF it actualy DID. . . .)

more links

[kritikal]

here's arstechnica's forum about it:
http://arstechnica.infopop.net/OpenTopic/page?a=tp c&s=50009562&f=174096756&m=9220974704

violate referer terms

[monkeyserver.com]

So this is based on zero knowledge, but I would guess that that violates the terms of referership (is that a word), considering that fact that that "partner" did not actually refer you to the site.

I think a list should be compiled and reported, I would guess that places like yahoo and amazon could file criminal, if not at least civil, suits against such cheaters. It wouldn't surprise me if they did too, just to make a point, and to try not to jade users to the system....

any thoughts? that's a dumb question this is /.

Re:violate referer terms

[Anonymous Coward]

Ten to one they've already noticed, and I doubt that the Morpheus people are going to be getting any money from this.

Re:violate referer terms

[Anonymous Coward]

Not to mention the valid REFERER that they would be stealing from by replacing their REFERER

Re:violate referer terms

[perky]

So this is based on zero knowledge...

quite. Moderators please do your job and moderate this junk back down. The poster hasn't read the article, and doesn't know about the referral rulaes, and certainly doesn't know about the law in regard to referrals. The post is just one great big guess, which whilst not implausible, has no factual content and adds nothing to the argument.

What else do people expect?

[espresso_now]

It's free software after all, how else are the developers supposed to make money? Not that I approve...

Re:What else do people expect?

[coene]

in simple, they arent. lets see...

1) they dont make software, the license it (or now, in the case of gnucleus, steal it).

2) they install bullsh!t spyware everywhere they can

3) they have sleazy management and software developers who know how to use MFC app wizard and modify icons

4) they violate every good business practice known to man

In my book, that does not constitute a software development company.

Re:What else do people expect?

[jred]

That's right. I'm often amazed at the stupidity of most of the people here. Hey, it's free. I won't even be suprised when they start inserting ads into your fave linux distro.

Re:What else do people expect?

[Rayonic]

how else are the developers supposed to make money?

Any... other... way... possible.

Re:What else do people expect?

[rjamestaylor]

It's free software after all, how else are the developers supposed to make money?

Yeah, I mean it's not like they aren't providing a service. I mean they're helping people get their music for free, 'cause, you know, music is just digital but programs are, well, they have themes and skins and stuff.

Oh, the irony. Someday I suppose Morpheous will join the BSA and enforce their rights to takeover your browser. That'd be cool.

Re:What else do people expect?

[pauldy]

Damb this sounds like microsoft.

Re:What else do people expect?

[Mr_Matt]

I won't even be suprised when they start inserting ads into your fave linux distro.

Aaaugh! That'd be the end of the world! Oh no, wait, I have the source code to my fave linux distro, I'll just take those ads right back out.

Ah. Problem solved. You were talking about...stupid?

Sheesh. :)

Re:What else do people expect?

[Anonymous Coward]

>It's free software after all, how else are the
>developers supposed to make money?

No one ever told you that crime does not pay?

I hope they are prosecuted for fraud.

Re:What else do people expect?

[Anonymous Coward]

(or now, in the case of gnucleus, steal it)

LISTEN YOU PSEUDO-OPEN-SOURCE MORON, THEY DID NOT STEAL THE CODE!

Gnucleus is released under the GNU Public License which requires that you publish any changed code. (which they did) It DOES NOT require that you tell the original author what you're doing. You have a problem with that? Take it up with the EFF. idiot.

Re:What else do people expect?

[Anonymous Coward]

So ho do you like thispost-apocolyptic world?

Re:What else do people expect?

[DimitryP]

"how else are the developers supposed to make money?" well, they could do 1000 fat chicks for $50. or 50 really fat chicks for $1000.

Re:What else do people expect?

[coene]

Sorry -- steal was the wrong word. I use the word steal for more than actual piracy/theft, i use it to describe copying. I use the word 'piracy' the same way. You know, slang. 'Hey dude, who stole my cheerios', 'Yo, who pirated my pr0n tape!!!', that kinda thing. Why i said that they did this to gnucleus is because they were able to drop the kazaa platform and use gnucleus in a matter of 24 hours -- icon changers. Oh, and settle down. I wouldent want you to give yourself a panic attack.

Re:What else do people expect?

[jred]

Yes, you do have the source, and you could remove the ads. I wouldn't. Knowing that most linux users hate ads almost as much as paying for anything, I can't imagine a linux distro putting ads in unless it was absolutely necessary. If they need the money that bad, and I'm using their "free" product, I'll look at ads. Even click on some.

Maybe that'd be a decent way to differentiate between d/l iso & boxed sets.

So anyway, smarty-pants (since we're resorting to name-calling). How would *you* make money off a free product that no one pays for? I love Linux, and try to support it in any way I can. And I doubt any *theoretical* distro ads would be spyware.

Whatever.

Re:What else do people expect?

[decoydog]

Maybe there is no money and there isn't a business in P2P software. Maybe these developers shouldn't expect to make a living writing P2P software and should be working on something that people will pay for instead of secretly infesting people's computers with stuff they don't want in the first place.

Re:What else do people expect?

[Datafage]

Hey, fat chicks need loving too. Only, they gotta pay!

Re:What else do people expect?

[Mr_Matt]

d'oh - I mistyped. IIRC, you're the name-caller here...I believe the word "stupid" is yours as well. My use of the word was intended to show that putting ads in Linux wouldn't confound all of those "stupid" free software advocates out there, and that in fact, they weren't so stupid. As I read my original post, I see that I didn't make that very clear. My bad. But anyways...

So anyway, smarty-pants (since we're resorting to name-calling). How would *you* make money off a free product that no one pays for?

I dunno, I do actual work for a living. Try asking Red Hat, though - they do a pretty good job without putting ads in Linux. (How would that work, BTW? Instead of Tux in the console framebuffer, a pr0n banner? Product jingles when you grep() something? Easily blockable ads on Slashdot? Oh wait a minute...:)

Whatever

Han Solo - "Sorry about the mess" *flips coin* :)

after reading that article...

[vena]

all i can say is that i'm utterly confused. can someone please shed some light on just what exactly is done here? the article doesn't make it sound nearly as frightening as the /. summary...

Re:after reading that article...

[graveytrain]

Indeed, the article painted a much different picture than that given by /. It seems to be that this whole issue is actually reversed -- the browser doesn't visit a commerce site in the background - it visits a 'counter' site when you visit a commerce site.

>Thus, when a file swapper visits a site such as
>Radioshack.com, eBay.com or a handful of others,
>their computer visits a separate site behind the
>scenes before loading the final destination site.
>Those separate servers, run by marketing
>companies including Be Free, count how many times
>Morpheus users stop by.

This isn't exactly what the headline lead you to believe...

Re:after reading that article...

[Anonymous Coward]

that's exactly what I thought after i read the summary, that it was a counter thing. I think someone just didn't read the summary right.

Sleezy, but no point in Morpheus anymore anyway.

[Raskolnk]

Now that Morpheus is just a hacked-up (or down ;-) version of Gnucleus, there's really no point in using it anyway. I don't see what it provides that Gnucleus doesn't, other than annoyance.

haha. i'd rate this a 10 on the funny scale

[Anonymous Coward]

it's funny because it points out how stupid those affiliate things are. why doesn't the user get a discount if they find the site on their own? it just takes advantage of those lame referral programs

you should expect this from install that morpheus crap. it doesn't even work under linux

its like theres lots of money being lost from users not being referred to sites, somebody should cash in

Re:haha. i'd rate this a 10 on the funny scale

[DA-MAN]

How in the hell does this unintelligable anonymous coward get +5? People think before you moderate! Although he does make a good point on the discount for people who find the site on their own.

Anyways not to be too off topic, it doesn't matter if Morpheus doesn't run on Linux or not, the original software is Gnucleus and that runs fine on Linux. Hell Morpheus src code is available on their site, you can modify it to run on Linux if ya like (unless they left enough of Gnucleus intact that a port is just a recompile away.)

Re:haha. i'd rate this a 10 on the funny scale

[The Bungi]

How in the hell does this unintelligable anonymous coward get +5?

While I agree in principle with your insightful post, you should have tried to run a spell checker on it before posting a flame that has the word unintelligible in it.

Hope this helps!

Re:haha. i'd rate this a 10 on the funny scale

[DA-MAN]

ROFL! Thanks, I missed that. Oh well, at least I made some sense, more so than that joker I replied to.

Great Comments

[shogun]

Oh this is promising, I load up this news article and theres a total of 3 comments posted under it, all of which are below my threshold, I assume all of which are first posts. But anyway back on topic.
I've heard of sneakyness not far off this already. It seems some of the other P2P file sharing programs also like to install sneaky plugins which do things from reporting your every url visited up to popping up windows with ads in them on encoutering certain keywords. Very nasty and can also incur a performance hit.

Re:Great Comments

[Anonymous Coward]

Oh this is promising, I load up this news article and theres a total of 3 comments posted under it, all of which are below my threshold, I assume all of which are first posts. But anyway back on topic.
I've heard of sneakyness not far off this already. It seems some of the other P2P file sharing programs also like to install sneaky plugins which do things from reporting your every url visited up to popping up windows with ads in them on encoutering certain keywords. Very nasty and can also incur a performance hit.

How the fuck is this informative?

Okay..

[Anonymous Coward]

So Kazaa, the premeir FastTrack client, begun to bundle spyware.

Great, I can deal. I switch to Grokster.

Grokster begins to bundle spyware.

Fuck. Switch to Morpheus.

Morpheus bails from FastTrack, and switches to Gnutella.

Fuck again. Switch back to Grokster, use AdAware.

See that Morpheus, who explicitly claimed that it contained "No Spyware of Any Kind" engage in this type of practice?

I can only laugh at the pitiful wreck that the company/corporation-based P2P programs have become.

Re:Okay..

[Anonymous Coward]

Okay, so where are you expecting company/corportation based P2P software to make their money? They have to make something somewhere to continue to operate.

Now, as for the Free clients out there, like gtk-gnutella...there's no problem there.

Re:Okay..

[Anonymous Coward]

Okay, so where are you expecting company/corportation based P2P software to make their money? They have to make something somewhere to continue to operate.

The thing is, I'm not expecting the c/cp based P2P software manufacturers to gain revenue.

Typically, when a product or service is available for free, and another one is put on the market at a non-zero cost, unless there's some type of luxury association attached to the product or service that's non-free, people are going to go with the free choice.

Now, we have these 3 companies, all of which make their software available for "free".

Their only source of revenue is the companies who want them to attach their bits of software to the application. How could they ever hope to make money elsewhere? Nobody would buy the product if it's available on the market. Likewise, who would subscribe to it, if a free alternative is available? Really, their only other option is to develop some type of value-added service to make consumers choose their platform over the free ones.

What could they possibly include as a value-added service? I can't think of anything.

And at the same time, the people who get pissed off with these companies go off, and create something like Kazaa Lite, and undermines your entire company's lifeline.

Re:Okay..

[muffen]

I can only laugh at the pitiful wreck that the company/corporation-based P2P programs have become.

Actuallt, I don't find it too surprising that they are bundling spyware and installing "secret" plugins. I mean, they have to earn money in some way, and it's not like people are going to pay for the apps :)

Fuck again. Switch back to Grokster, use AdAware.

Sadly, this doesn't work for Kazaa. Stupid Kazaa re-ads the regkeys directly after they are removed. Also, it won't run if the cydoor (that's the spyware app) dll file is removed.
Personally, I use a script that removes the regkeys and renames the dll. Then, when I want to use kazaa, I run another script file that puts the crap back. Kinda suxx, but the best sollution I could come up with.

Anyone up for hacking kazaa so that it can run without the cydoor dll file (cd_clint.dll).

Re:Okay..

[Anonymous Coward]

http://www.project-insomnia.com/grokster.html
Has a link to a site with a fake cd_clint.dll to make it think Cydoor is there :)

Re:Okay..

[muffen]

http://www.project-insomnia.com/grokster.html Has a link to a site with a fake cd_clint.dll to make it think Cydoor is there :)

This is excellent!! Thanx a lot!! :)

Re:Okay..

[Anonymous Coward]

there is such a thing a kazaa_lite which has no spyware installed.

That's really clever..

[DuncanMurray]

Business 101 - try really , really hard to piss off your customers

Re:That's really clever..

[Anonymous Coward]

Hey, if it works for the RIAA... oh, wait.

Re:That's really clever..

[tempest303]

Business 101 - try really , really hard to piss off your customers

"customers"? As in, one who buys things from you? I thought the whole idea of Morpheus, et al, was that no one ever paid for anything anymore. ;p

Re:That's really clever..

[Fletch]

Business 101 - try really , really hard to piss off your customers

Ah yes, the real model.

Anyway, this is pretty damn evil. I bet the gnucleus guys are loving that they're being associated with such horrible scumware.

Re:That's really clever..

[Ilgaz]

Than why they ship it? For fun? Don't be tricked by "free" label, those guys are making tons of money.

Else, they couldn't even afford bandwidth required for enormious downloads.

Re:That's really clever..

[aanantha]

Ah, but the point is that the Morpheus user isn't the customer. The Morpheus user is the product that is sold to these advertisers, the real customers. The Morpheus software is bait.

I like it.

[Neck_of_the_Woods]

The truth of it is this could be seen as a virus. It is just a profitable one. They will get smacked on this one as soon as it comes out in the light of day.

Re:I like it.

[squaretorus]

Not meaning to piss on the flames here - but how is this any different from Burger King opening an outlet in a cinema, or Alders opening a shop in an airport - I have to walk further around these things to get to my cinema screen / plane!

I don't have to buy from them - but its costing me shoe leather (or trainer rubber) and calories to avoid them!

This is just a sound business principle being implemented in a new commercial arena. If you use comercially oriented software you'll end up seeing sites you didn't want to - no getting around it.

What is the driver here? People actually buy stuff when they get spammed, redirected, BIG ad'd. Who are these people? I've only ever bought one thing on the back of a spam - and that was an animal book on special offer at amazon!

Re:I like it.

[muffen]

The truth of it is this could be seen as a virus.

You could not be more wrong. This is nothing like a virus. A virus is defined as a piece of code that replicates. Since this does not follow the definition, it is NOT a virus.

Re:I like it.

[zbuffered]

Trojan horses are not virii, yet they are detected all the same. Despite the fact that this does not replicate, the end result is that it is not beneficial to the user, and anyone who knew what he was up to would not want it on his Windows boxen.

Re:I like it.

[muffen]

Trojan horses are not virii, yet they are detected all the same.

Please explain this, because I don't know any product myself that will detect a trojan as a virus.

Despite the fact that this does not replicate, the end result is that it is not beneficial to the user, and anyone who knew what he was up to would not want it on his Windows boxen.

I agree. However, it doesn't make it right to call everything we don't want on our computers "viruses". I, for example, would not want to have Office installed on my computer. Does that make Office a virus?

Re:I like it.

[rabidcow]

You could not be more wrong.

Nonsense! (s)He could have said it was a chicken!

Re:I like it.

[Frank T. Lofaro Jr.]

How about a Trojan. That fits.

Also, is there any could we use the DMCA against this? Perhaps by saying they are getting access to data copyrighted by us?

The DMCA is an evil law - but perhaps it could be used for good.

You gotta be kidding...

[eyepeepackets]

...if you think people who run Win XP are going to either notice or even care. Truth is, sheep get shorn.

Re:You gotta be kidding...

[YourMissionForToday]

best. username. ever.

Re:You gotta be kidding...

[Anonymous Coward]

Why should the user care? It makes no difference to him who gets the referral fee. Amazon and Yahoo should care, but not the user.

And what the fuck does running Win XP have to do with anything? What about users running Win2K? Win98? WinME? Are they sheep too?

Truth is, your knee-jerk anti-Microsoft rhetoric makes you as much of a sheep as so many other Slashdotters.

Baaaaah!

Re:You gotta be kidding...

[Anonymous Coward]

isn't that painful?

pure sleaze...

[MrLee]

Let's see, they don't pay their bills and now they are hijacking browsers...Good business practices. Another one for the dot.bomb list.

well in all honesty

[theCURE]

What you don't know can't hurt ya. Most people will still get up and go to work the next day. The crud is going to come down the line, when it waterfalls into a much bigger problems with worse results.

Man-in-the-middle attack

[AtomicBomb]

Man-in-the-middle attack is the only phrase that flash across my mind... I have no way to check the identity of the "referer".

You can call me a paranoid. Each time when I need to buy stuff online using credit card. I will reboot to a cleaner "environment" -- a clean copy of OpenBSD or something similar. God knows who the hell the various windows plugins are doing..

What's a 10?

[Anonymous Coward]

If this is a 9, I'd hate to see what the submitter considers a 10.

Re:What's a 10?

[chronos2266]

If this is a 9, I'd hate to see what the submitter considers a 10.

Microsoft.

Re:What's a 10?

[Anonymous Coward]

they come around and have anal sex with your dog.

Re:What's a 10?

[Anonymous Coward]

a 10 will be a hijack of your browser and just order extra books and make Paypal donations from your paypal account to Morpheus or whatever.

:))

Re:What's a 10?

[mlk]

Someone has been looking at too much porn on P2P networks.

Re:What's a 10?

[Anonymous Coward]

And obviously, so has someone else. !

Re:What's a 10?

[SB5]

Definitely trolling here, but a '10' would also be using your sending everyone online in your instant messanger to goatse.cx every 10 minutes, with the text between the brackets suggesting something about hot grits.

-fbp- troll troll troll I know but I had to make a comment it seemed funny to me!

Re:What's a 10?

[Anonymous Coward]

how about a screensaver that shows carefully chosen graphics so that it will eventually burn goatse pic on the screen permanently?

Corrections and notes...

[Cutriss]

An afflicted browser will sense if a user is going to visit a shopping site like Yahoo! or Amazon, and secretly send them to a different site instead and then redirect them from this site to the user's intended destination.

The final destination is more or less the same. The difference is the intermediary. Morpheus isn't stopping me from going to Amazon by instead redirecting me to Borders.com...They're just stealing referral dollars.

Honestly, though...I wonder how long it'll be before these online vendors lock out Morpheus' referral IDs, or even worse, deny the connections altogether (since the most recent source IP will be Morpheus' proxy, not your own).

And I assume that if there's a pre-existing Referral ID, Morpheus will strip it out and replace it with its own. Doesn't this constitute actual monetary theft?

Re:Corrections and notes...

[Coward, Anonymous]

how long it'll be before these online vendors lock out Morpheus' referral IDs, or even worse, deny the connections altogether (since the most recent source IP will be Morpheus' proxy, not your own).

It doesn't sound like it uses any kind of proxy, an IE plugin redirects you to another website which redirects you back to amazon/yahoo/whoever so the morpheus machine isn't the one connecting to the vendors, they're just telling your machine what url to request from the vendor. I would be very surprised if vendors honor the comissions "earned" through this method.

Re:Corrections and notes...

[lw54]

And I assume that if there's a pre-existing Referral ID, Morpheus will strip it out and replace it with its own. Doesn't this constitute actual monetary theft?

Wait a second, that's pure speculation. To my knowledge, there isn't any evidence that they are doing this.

Re:Corrections and notes...

[Cutriss]

Technically, by earning referral dollars by referring purchases that they didn't actually have a hand in, they're at the very least stealing from the retailers. That's no different than taking commission on a retail sale you didn't actually make. And, if it's inserting referral IDs to make money, I doubt it's going to leave existing ones intact. To quote Star Trek II:

McCoy - "Suppose this device were to be used where life already exists..."
Spock - "It would presumably destroy such life, in favor of its new matrix."

Re:Corrections and notes...

[cyberformer]

It could make a huge difference to small Web sites that rely on referrals to defray bandwidth costs. Linking to relevant books on Amazon (or bn) can often make more than banner ads. If a significant proportion of users have Morpheus installed (not an unreasonable assumption), the other referring sites could go under.

I know I'll be checking that any referral programs my Web site participates in aren't on Morpheus's hitlist, and switching to a competitor if they are. I expect others to do the same, thus giving retailers like Amazon a real incentive to make sure that they don't pay anything out to Morpheus.

Re:Corrections and notes...

[Anonymous Coward]

How else would they do it if not by replacing the referral ID?

Re:Corrections and notes...

[Anonymous Coward]

"since the most recent source IP will be Morpheus' proxy, not your own"

So then wouldnt this mean if I was infected (infected is the correct word right) and lets say amazon banned morpheus ip's to their systems, I would then get "refered" to a access denied site?

Re:Corrections and notes...

[pejve]

So, let's say amazon ignores referrals from Morpehus' own proxy.
How would Morphues tackle that?
Well, they could sell referrals to other sites.
And what would amazon's do about that?
They still get flawed statistics, but then how do you single out which referrals are real and which aren't?

Re:Corrections and notes...

[nedrichards]

Morpheus isn't stopping you from going to amazon by going to borders.com at all. Since borders.com is run by amazon and you can use your amazon username and password there just the same.

Re:Corrections and notes...

[scoove]

Seems to me that there should be enough regulations from other industries that they'd be able to be nailed.

For instance, a taxi driver that takes you to a hotel he gets a kickback from when you specifically tell him "the airport hilton" will lose his license and could even risk kidnapping charges.

Or imagine the postal service looking at the address of your mail. While that envelope says "Lands End," they route it to JC Penny for processing and get a cut.

Likewise, telephone providers are prohibited from intercepting legit numbers and rerouting them to favored partners.

Perhaps the simplist charge is one of fraud and theft by deception, levied by those thrifty class action boys looking for a buck...

*scoove*

Re:Corrections and notes...

[markmoss]

At an absolute minimum, they are stealing from the user's bandwidth -- because to go to Morpheus and then to Amazon (say) is certainly going to take more bytes transferred, and more time, than going directly.

Re:Corrections and notes...

[grahamm]

Isn't it call fraud?

Re:Corrections and notes...

[grahamm]

Wasn't it that very situation (with manual telephone operators) that prompted the undertaker Mr Strowger to develop an automatic telephone exchange?

Re:Corrections and notes...

[blibbleblobble]

So charge them with theft. Next story, please.

Re:Corrections and notes...

[WNight]

Amazon could download Morpheus, install it, and go to their own site from referrer's pages. Any time the referrer ID doesn't match the page they came from they log another of Morpheus's IDs. Then they lock that account out.

No problem for me

[Anonymous Coward]

• I run my closed source binaries on a machine with no connection to the net. Nice sandbox for that stuff. If some program sends hate mail to the president, you will get into some trouble regardless.
  
• I only run stuff with source available on my "net aware" computer.
  
• You should too.

Re:No problem for me

[a3d0a3m]

Doing this is similar to only crossing the street in a reflective jumpsuit wearing a helmet and kevlar motorcycle wear. Overkill. Not worth it. I highly doubt you have gone through every line of every open source program you run, what if there's some buffer overruns in there and your net access enabled computer gets hacked?!?!?! Obviously you have to take risks to go online.

adam

Re:No problem for me

[mlk]

And you have installed Morphous on your net-unaware computer? :)

Re:No problem for me

[Anonymous Coward]

so what if the open-source program sends hate mail to the president? wouldn't it be easier to hold you party accountable, since you were privy to full knowledge of what the program did?

this is a stupid argument.

Re:No problem for me

[Anonymous Coward]

morpheus is opened source

I'd read the article...

[Rayonic]

But I keep getting redirected to ZDnet somehow!

Oh jeez.

[__david__]

That is horrible. Aren't these the guys that were installing the spyware with their filesharing app a little while ago? If not (and even if it is) then it's one more company to avoid. I'm starting to think that people should avoid all these file-sharing companies--they apparently can't be trusted.

Let's hear it for open source gnutella clients!

-David

Re:Oh jeez.

[Dave_bsr]

Let's hear it for open source gnutella clients!

I don't know if you are being sarcastic, or not. but if you are, may i direct you to this site and particularly this link labelled "source code." Also interesting is this graphic on the same site, given what we know now, and what CNET reports about them. *shrug*.

It's scumware...

[ckkoh]

This belongs to a new breed of nusiance known as scumware. Check out http://www.scumware.com for more info.

Re:It's scumware...

[I Want GNU!]

And here's a clickable link for the lazy: http://www.scumware.com :-)

Re:It's scumware...

[Anonymous Coward]

Their claims look overblown. "Biggest threat to the survival of the Internet"? Whatever. I'm not reading a site that makes such ridiculous statements.

crapdotters wacking off to morpheus

[Anonymous Coward]

Thank god I wont have to hear... Morpheous.....

napster is the real way to steal music.

buts its open source

[jmcnamera]

It sounds evil, but it can't be bad, because its open-source, right?

More seriously, I hope the sites being hit with "fake" affiliates revoke the affiliate status of sites that Morpheus redirects thru.

It shouldn't be hard for EBay etc to load a copy and just try it and find out who is playing this game.

Re:buts its open source

[Scoria]

Heh heh, it's only open source because they've modified the Gnucleus client to contain the Morpheus artwork and assorted "hidden functionalities" (I doubt that they'd distribute them as open source if they were attempting to obscure them from the public's view). The Slashdot editors accepted a pseudo-fabricated story at the beginning of the month with information about how Morpheus PE was a GPL violation. Apparently, Streamcast had not yet made the source available.

On a scale of 1 to fucked...

[MattRog]

Morpheus is totally fucked.

Been waiting for this...

[Suicide]

Honestly, I had the idea for this a while ago while talking with a friend. I've been waiting for someone else to implement it. Its not that much different than those sites that collect and list internet deals, in the hopes that you'll follow their links and they'll get the referer fee, Like this one.

While I personally see this as a bad thing, since they do it behind the users back, I would probably have no objection to installing something similar for slashdot. I don't exactly feel the need to subscribe, but I would have no objection to them collecting a referrer fee off of my internet purchases.

Re:Been waiting for this...

[Xero]

Its not that much different than those sites that collect and list internet deals, in the hopes that you'll follow their links and they'll get the referer fee, Like this one [slickdeals.net].

It is totally different than the sites that provide lists of internet deals. These sites refer customers to a site that the consumer most likely would not have gone to if they had not known it was the lowest price. Sites that list internet deals deserve the referall because that is the reason the refered site sold the product. Morpheus has nothing to do with why that consumer went there and thats why it is nothing at all like the internet deal sites. And furthermore, these deal sites don't covertly install a plugin to get all the referalls, they simply have links on a page and provide a service to consumers.

Wow, I never knew

[smoondog]

I guess this is why I entered cnn and ended up on slashdot.

So your saying the only way to make

[Vicegrip]

money is to lie and do dirty stuff if your software is free?

Somebody needs to inform Redhat.. apparently nobody told them.

Or better yet: Company X is dishonest. Company X makes product Y. Therefore all companies that make product Y are dishonest.

You, sir, are a moron.

Who this really hurts

[dytin]

This isn't that bad really for the user, Yahoo and Amazon will give a commision to somebody anyways. What really annoys me is that this hurts all the other websites in the world. If I give a legitimate referal from my site to Amazon, then I should get the commision, not Morpheus. If this becomes common practice, then it will effectively kill the way that business is done on the web, and in the process take out a ton of small websites that are struggling to stay alive out there.

Re:Who this really hurts

[Dynedain]

This isn't that bad really for the user, Yahoo and Amazon will give a commision to somebody anyways

WRONG!!!!! - What's happening here is when a user types in amazon.com, Morpheus redirects the request through their amazon referrer page. Hence, amazon is now paying out referals that it otherwise would not have. Direct navigation does not incurr referal fees, only refered navigation

Re:Who this really hurts

[dytin]

True, but the point that I was trying to make is that the user is not affected either way. Businesses are affected though. I guess that it is not only the small businesses, but also the big ones like Amazon and Yahoo that are harmed too.

Re:Who this really hurts

[pauldy]

Half a clue will tell you the money to pay those refferal fees aren't comming out of the pockets or salaries of the Executives at amazon or yahoo. It's comming from increased costs for products and services via their site. Guess who pays for products and services on their sites.

Point this has a large impact on the way advertising is done on the internet. The whole idea that the software was free and no one is hurt by them doing this is without merit. The other that people only use morpheus for piracy also lacks any substance.

Re:Who this really hurts

[jgerman]

Insightful my ass. This is an invasion of privacy pure and simple. If it was an integrated browser in the Morpheus client, that's one thing. But if I were to write a virus to do the exact same thing, I'd be prosecuted if I was caught. Why is ok for a corporation to do something that is a criminal act for an individual?

Re:Who this really hurts

[Anonymous Coward]

Amazon has already experimented with giving different pricing to different people buying from them. Wanna bet that if they are paying a referral fee, their prices are in fact higher than if they are not?

I thought Morpheus was "cool"??

[Dr Kool, PhD]

Didn't they claim to be "spyware free"?? Now it looks like the spyware comes along with the program, free of charge.

So what's the alternative?? Go back to IRC and ftp?? I hate uploading, it's dumb. What do you all use to get your MP3s??

Re:I thought Morpheus was "cool"??

[DaCool42]

Buying the CD's and ripping them works well.

excellent!

[duncanIdaho.clone()]

"With these plugins, I'll take over the WORLD!"

At least it's easy to disable

[Tremblay99]

Under "Tools" -> "Internet Options" -> "Advanced" deselect "Enable third party browser extensions" and reboot. Even if the .dll responsible for the redirection, bpboh.dll, is installed, it won't be able to run.

Re:At least it's easy to disable

[Anonymous Coward]

HAHAH you are so damned naive... I can shove my ref from WITHIN the IE PE space and make it come from within... no external SLL just good old fashioned hacking.

I like your simple mindedness.

Re:At least it's easy to disable

[Dynedain]

of course that turns off flash, shockwave, java, possibly windows audio support, quicktime, real, vrml, and a whole slew of other things you might have running and actually want

Re:At least it's easy to disable

[Pilferer]

Under "Tools" -> "Internet Options" -> "Advanced" deselect "Enable third party browser extensions" and reboot. Even if the .dll responsible for the redirection, bpboh.dll, is installed, it won't be able to run.

Actually, it's:
"Tools" -> "Internet Options" -> "Advanced" -> deselect "Fraud"

Re:At least it's easy to disable

[Anonymous Coward]

windows audio support, quicktime, real, vrml, and a whole slew of other things

VRML?! I'd rather have the scumware.

Re:At least it's easy to disable

[DrSbaitso]

not to mention Real, which _IS_ scumware! :)

Re:At least it's easy to disable

[bombom]

Thus disabaling the most useful thing about IE, the google toolbar!

Re:At least it's easy to disable

[Malcontent]

"Tools" -> "Internet Options" -> "Advanced" -> deselect "Fraud""

I think that would disable your entire windows.

Re:At least it's easy to disable

[I Want GNU!]

Not quite. The Google toolbar is useful, but see this CNet article about privacy concerns it raised. It tracks all the sites you visit.

Re:At least it's easy to disable

[Anonymous Coward]

so? and you can turn that off also :)

all they use it for is page statistics anyways, at least thats what they claim ;p

Re:At least it's easy to disable

[Anonymous Coward]

Just use the open source Google toolbar for Mozilla.

Re:At least it's easy to disable

[GoRK]

No it doesn't. Browser extensions aren't the same thing as plugins like flash/shockwave/etc. that handle files based on a mimetype (or file extension - stupid microsoft). Browser Extensions change the behavior of the browser itself - They are things like the Google toolbar and that Alexa piece of crap. There are some useful ones too that do things like block ads and kill popups. I have Extensions turned off and I can still see flash just fine. Sadly, I can no longer kill popups or ads so easily in IE anymore. Oh well... for all these settings and extensibility, we still can't control the levels of access that scripting languages have to or system or selectively allow certain programs to run.

I think IE is scumware.

Re:At least it's easy to disable

[epsalon]

The easiest way to remove it is to click here or install this.

Re:At least it's easy to disable

[Anonymous Coward]

This is an ie 6.x feature/tip only. Fortunately I didn't waste much time wondering why I couldn't find this in ie 5.5sp2.
Also note, if you can turn this off, no doubt some program can turn it back on. After all, IE has never been known to be secure against local attacks little alone other kinds.
And to think, MS thought it was a great idea to intergrate it into it's OS. :)

Re:At least it's easy to disable

[Anonymous Coward]

> I think IE is scumware.

You got it right, my friend. Use mozilla.

Cheers,

--fred

Re:At least it's easy to disable

[FuzzyBad-Mofo]

[a whole slew of other things you might have running and actually want]

• For the record:
• flash: don't want
• shockwave: see flash
• java: mostly harmless
• noisy web pages: don't want
• quicktime: don't want integrated
• real player: don't want integrated
• vrml: you've got to be kidding..

Anyway, why screw around with the gaping security problems of IE, where there is a better browser?

Re:At least it's easy to disable

[matrix29]

Under "Tools" -> "Internet Options" -> "Advanced" deselect "Enable third party browser extensions" and reboot. Even if the .dll responsible for the redirection, bpboh.dll, is installed, it won't be able to run.

Try this SEARCH for bpboh.dll with that search window open you can try to delete the file outright, but Windows will claim "File is in use". So leave the search window open. Close all Internet Explorer browsing windows. Then you can delete bpboh.dll easily. If you want, you can then under START/RUN type "regedit" then Find "bpboh" and delete the registry keys that it has (there will be some keys regarding "recent searches" which you can also safely delete).

Re:At least it's easy to disable

[scrytch]

Thus disabaling the most useful thing about IE, the google toolbar!

Installed it, found it had no keyboard accellerator, uninstalled it. Dragged a google shortcut onto my desktop, bound it to ctrl-alt-g. Now I have a google shortcut without a toolbar I have to aim for (I use mousekeys, having to click on something is a monstrous pain in the ass)

Dear Watson . . .

[loraksus]

And what, pray tell, is a fucking 10?

I think someone is being a little um. . . friendly to these jerks. Not that the warez leech kiddies don't deserve it.
Bah

Re:Dear Watson . . .

[bonzoesc]

A 10 is when it takes control of your computer, prints out ads, and has your AIBO tape them up all over your house. It paints your walls with company logos, tapes over your Star Trek tapes with infomercials, fills up your TiVO with the same, and replaces all your vinyls with Britney Spears CDs. It will kick your puppy and attack your kittens. It converts your children to Scientology and steals your beer.

Re:Dear Watson . . .

[Anonymous Coward]

I've never slept with a 10, but one night I fucked five 2's.

Re:Dear Watson . . .

[Danga]

Steals my beer! ahhhhhhhhh!

Re:Dear Watson . . .

[Ho-Lee-Cow!]

And what, pray tell, is a fucking 10?

That would be Microsoft.

Re:Dear Watson . . .

[Anonymous Coward]

LMAO! Oh how I wish I had mod points.

Re:Dear Watson . . .

[Anonymous Coward]

i think a 10 would be actually redirecting you from amazon.com to borders.com

Re:Dear Watson . . .

[SomeoneYouDontKnow]

Good Lord, man, that sounds like what some people I knew in college might have done, except that they would have used New Kids on the Block and Debbie Gibson CDs.

Oh wait, it's Deborah Gibson now. Sorry Debbie.

Re:Dear Watson . . .

[mlk]

Yeah!
I have some vile beer, and have been tring to off-load it for months!

Re:Dear Watson . . .

[toby]

No, a 10 is when businesses murder to protect their profits. As Shell has in Nigeria; as American oil interests are currently doing in Afghanistan, and the list goes on. (Recommended reading: John Pilger's Hidden Agendas.)

Re:Dear Watson . . .

[Anonymous Coward]

The problem is, I wouldn't trust John Pilger as far as I could comfortably spit out a rat. While the people he normally complains about are hardly the Samaritans, he does tend to believe anything bad you have to say about them (e.g. that the US only attacked Afghanistan because they want to build an oil pipeline - that may be an added extra bonus for Bush et al, but it sure as hell isn't the reason for it). He's also an absolute hypocrite, in that he complains about western governments spinning, while spinning as much as he can himself (although he's probably convinced himself he isn't).

Re:Dear Watson . . .

[ShavenYak]

Hey, now, don't diss Deborah. She's now an accomplished Broadway actress and is still putting out some great albums, despite the fact that they're getting no radio airplay. Also, she writes her own music and plays many of the instruments - she's no Britney.

And I'm not even posting this anonymously.

Re:Dear Watson . . .

[Rakarra]

Heheh, sounds like the old "Good Times" virus explanation. "Good Times" was a virus hoax that circulated around in the days before Outlook exploits, when the idea of getting a real virus from just looking at a piece of email was laughable. It claimed to do all sorts of things like reformat hard drives, so this "warning" about the Good Times virus came in the reponse.

The latest breaking news on the GOODTIMES virus.

It turns out that this so-called hoax virus is very dangerous after all. Goodtimes will re-write your hard drive. Not only that, it will scramble any disks that are even close to your computer. It will recalibrate your refrigerator's coolness setting so all your ice cream goes melty. It will demagnetize the strips on all your credit cards, screw up the tracking on your television and use subspace field harmonics to scratch any CDs you try to play.

It will give your ex-girlfriend your new phone number. It will mix Kool-aid into your fishtank. It will drink all your beer and leave dirty socks on the coffee table when company comes over. It will put a dead kitten in the back pocket of your good suit pants and hide your car keys when you are late for work.

Goodtimes will make you fall in love with a penguin. It will give you nightmares about circus midgets. It will pour sugar in your gas tank and shave off both your eyebrows while dating your girlfriend behind your back and billing the dinner and hotel room to your Discover card.

It will seduce your grandmother. It does not matter if she is dead, such is the power of Goodtimes, it reaches out beyond the grave to sully those things we hold most dear.

It moves your car randomly around parking lots so you can't find it. It will kick your dog. It will leave libidinous messages on your boss's voice mail in your voice! It is insidious and subtle. It is dangerous and terrifying to behold. It is also a rather interesting shade of mauve.

Goodtimes will give you Dutch Elm disease. It will leave the toilet seat up. It will make a batch of Methamphetamine in your bathtub and then leave bacon cooking on the stove while it goes out to chase gradeschoolers with your new snowblower.

Re:Dear Watson . . .

[bonzoesc]

Drat! Somebody found my inspiration!

Has anyone asked Amazon about what they think?

[shri]

Has anyone asked Amazon what they think about this practice?

From what I can see on their website ..

To protect the integrity of the reputation of Amazon.com Associates as well as the Amazon.com brand name, you may not promote your site via certain forms of indiscriminate advertising, commonly referred to as "spamming." Accordingly, you may not promote your site via unsolicited commercial e-mail (UCE), postings to non-commercial newsgroups, or cross-postings to multiple newsgroups at once. In addition, you may not promote your site in any way that effectively conceals or misrepresents your identity, domain name, or return e-mail address.

If I were Amazon, why would I pay 10-15% margin to someone who has not really promoted the product, but has hijacked the links?

They also probably violate this portion of the operating agreement.

We may reject your application if we determine (in our sole discretion) that your site is unsuitable for the Program. Unsuitable sites include those that: promote sexually explicit materials promote violence promote discrimination based on race, sex, religion, nationality, disability, sexual orientation, or age promote illegal activities include "amazon" or variations or misspellings thereof in their domain names otherwise violate intellectual property rights

Re:Has anyone asked Amazon about what they think?

[fonebone]

promote sexually explicit materials ... otherwise violate intellectual property rights

well morpheus isn't really a website promoting anything, but more like a search engine. google links to shopping sites even though you can access porn links with it, and i guarantee they don't consider google an innapropriate website.

nonetheless, i think you're right that amazon would never be okay with this. i think, though, that their usage policy probably would have overlooked such an abuse, purely because it's actually quite inventive. I think it's the most clever idea since the AllAdvantage cheating programs. Don't you wish you could get ahold of this program, set it up for your amazon reseller account, and install it on the computers of your friends and family? i mean, it's not like it makes a real difference to anyone, except that their friends make a couple of easy dollars.

Vendors taking liberties with your configuration

[Bruce Perens]

TurboTax and Quicken install advertising icons on the user's desktop. A whole bunch of Windows applications do that, often icons for Internet providers, but in the case of TurboTax and Quicken they install icons for banks.

These folks really must think that they own the user once the user buys their product, becuase even a "respectable" company like Intuit doesn't seem to have any problem with monkeying around with the private parts of the user's computer for their own purposes. Certainly those icons are paid placements.

Bruce

It's called FRAUD

[erc]

If I were Amazon, I'd be going after both the affiliates and Morpheus - this sort of thing is called fraud...

I knew it!

[Dynedain]

I saw something doing that (wierd long url and instant redirect) when I was browsing, esp. when I went to register.com.......I figured some piece of software I had was doing it (figured it was DivX 5 though).....now I know

Another reason...

[NanoGator]

... I use Opera. Although if too many people start using it, I'll haveta find something else.

Re:Another reason...

[metalhed77]

I use opera too, I love having such speed and being impervious to IE exploints

Like Outkast Said...

[cicatrix1]

I smell a class action
HOO
I am for re-e-eal

So much for ...

[happyhamster]

"we're proud of not installing any spyware on your system", or whatever bull$hit they said on their download page... Good thing I've never used any of this adware crap. Usenet forever :)

Re:So much for ...

[PepsiProgrammer]

'coincidently', looks like now they have silently removed the 'No Spyware' logo from their site as well.....

Re:So much for ...

[Anonymous Coward]

"we're not installing any spyware on your system"
"You're not installing any spyware on my system"

"These aren't the droids you're looking for"
"These aren't the droids we're looking for"

"You can go about your business"
...

This is why

[Anonymous Coward]

I don't use the internet.

Sigh...

[Anne_Nonymous]

More evidence that people suck.

Re:Sigh...

[Anonymous Coward]

You need evidence to believe that? Oh wait, you're still waiting for your first blowjob... :)

Re:Sigh...

[Anonymous Coward]

on your knees bitch, ize done waitin!

What is the plus side to using Morpheus?

[Bartab]

I could see an advantage to Morpheus when it was on the fasttrak network. Not enough of one for me to install it, but I could understand why others would. Now that it's running on Gnutella (With Gnucleus specifically as it's client base) why would anybody install it?

Personally, I have Gnucleus up pretty much all the time, even when not downloading anything. High speed network, I can at least serve as a somewhat stable connection. However, since Morpehus invaded it's gone from bad, to abysmal. Gnutella has been hurting for a long time, but the 10k (or whatever) users added recently pretty much killed it.

Re:What is the plus side to using Morpheus?

[Anonymous Coward]

10K is quite a serious underestimate.

The Gnucleus version of Morpheus has been downloaded over 80 million times since it launched.

Re:What is the plus side to using Morpheus?

[Ian Peon]

Heh... I wonder what website a Morpheus user would find himself at if he clicked here.

Re:What is the plus side to using Morpheus?

[Anonymous Coward]

No, the 80 million is the total number of people who have dowloaded all versions of Morpheus up to the most recent from download.com.

darn P2P

[Champaign]

Why is it that EVERY p2p client/protocol seems to eventually bow to the wishes and choose these really slimey advertisement strategies? I *HATE* Gator and its ilk. I realize that the advertising piggy-bank has dried up, the p2p is way worse the other advertisement driven technologies, and in my mind, use far less resources (eDonkey has a few people doing development and whatnot, their only bandwidth costs are for the client download and hosting some forums. Slashdot has how many people and what kind of bandwidth usage???)

(sigh) Even though Gnutella started open-source, the only usable clients seem to commercial (which campy I'll include Limewire since they did a dance with the gator crew)... Seems to be crying out for a truely open-source alternative...

Re:darn P2P

[wampus]

Uhh... Limewire does the same damn thing as this... its called LimeShop. And gator... and some gambling links on the desktop...

Re:darn P2P

[Champaign]

Sorry if I was unclear in my writing (it happens often! :-), I was saying that Limewire DOES do this, but that they release their source. I still consider it commercial, but appreciate that they release the code. Since writing this I've found gnucleus from other posts here, which is exactly what I was calling out for! :-)

Next I'm going to put the call out for a machine to help us out with repetitive tasks. I think it should be called a... COMPUTER!

Unauthorized Access

[libertynews]

If I were a user of Morpheus I'd be looking at filing charges for cracking my computer and using it for unauthorized activities. Companies conducting business like this need to be naild HARD. Teach them a lesson and make an example of them.

And what about the programmers who wrote this 'feature'? Who are they? I wouldn't be opposed to blacklisting them, or at least smearing their names across the headlines. This is sleazy and unethical and shouldn't be tolerated by the rest of us 'respectible' programmers.

Brian

Re:Unauthorized Access

[10am-bedtime]

programmers tolerate much sleazier scenarios. and what's this about "ethical programmers against sleaze" anyway? an ethical programmer doesn't have to time to stand against anything, only for something: the code written for the programmer's enjoyment.

programming is a power and the exercise of power happens in a political arena. politics that are based on exclusiveness waste precious time (for politics that are based on other criteria).

thi

Re:Unauthorized Access

[Anonymous Coward]

> If I were a user of Morpheus I'd be looking at filing charges for cracking my computer and using it for unauthorized activities. Companies conducting business like this need to be naild HARD. Teach them a lesson and make an example of them.

BRAVO! So, when can we expect to read about the lawsuit you'll be filing? You will be installing Morpheus, won't you, so you can lead the charge (and pay for that lawsuit yourself)?

Or are you just one of those sidelines snipers willing to encourage someone else to do what you won't?

Wait Until the ISPs Install It

[Anonymous Coward]

I used to work for a company that was developing software/hardware that would allow ISPs to do this for all traffic passing through them.

What was interesting was that you could not only add affiliate codes and redirects for links that didn't have them - but that you could also replace existing affiliate codes if you wanted to, basically hijacking the commissions.

They had lots of other ideas for doing similar things - and once the hardware/software is in place at the ISP, there's really not a lot the user can do about it except change ISP.

Re:Wait Until the ISPs Install It

[MaggieL]

This is the slippery slope you step onto starting with "it's OK for an ISP to implement a web cache".

Why an ISP should be permitted to modify, redirect or do *anything* to your traffic other than move it to its destination escapes me. I heard lots of handwaving about how OK it was from my ISP when they installed a webcache, but it was basically a load of hooey intended to justify degrading my service and pocketing the profits they made from doing so.

Re:Wait Until the ISPs Install It

[Anonymous Coward]

Feh... That's nothing. Several people I used to work with worked on a project at Phoenix (the BIOS company) called PhoenixNet, which had the lofty goal of allowing them to show web-based ads as your computer was booting.

Sell service...

[zome]

yeb, I heard someone sells service for some free software :-)

Like KaZaA?

[Xenex]

Reminds me of a report about KaZaA around the middle of last year. The TopText 'spyware'added yellow links to some words in Internet Explorer. I never dealt with it first-hand, but it sounded very annoying.

Is Morpheus' latest effort at all related? It seems to be based around thr same idea, however the idea of being redirected sounds worse. For exanple, does it work that if you type say, http://www.google.com, you arrive at AltaVista?

What is it with crappy (ex)FastTrack networks and I-can-believe-it's-not-trojan software?

Re:Like KaZaA?

[wizbit]

no, i think what the author meant to say is that the plug-in discretely redirects you to an affiliate of said search sites, which in turn sends you to the site you requested. the affiliate gets paid commission for referral links.

Re:Like KaZaA?

[Traxton1]

RTFA! (Read the fucking article)

Preview Edition...not for *DIST*!

[Anonymous Coward]

I think the point is that the intent of the promo copy was not distribution. You can say its in the spirit all you want, but it wasn't meant for distribution. Period.

I don't think its fair the way artists get ripped off by the "value chain" involved in getting music to consumers. However I do think it is their artistic content and they should have the right to determine who can hear it and who can't. That's why they sign contracts. Sure they get ripped off, but that's the way the system is set up.

You want to change it? Me too.

I don't think "screwing the man" helps change anything. All you get is "the man" trying to screw you back. Everyone enjoying all those encrypted CDs that don't play on computers? Leave that crappy system alone. Show your support of artists that use alternate distribution channels, download and share free music all you want. Make the distributor feel the pinch by helping their competition. P2P is not their competition, its their enemy. There's a difference.

So check out the artists that provide their music for free. Some artist release their music for use on these P2P networks, and they should be supported. But in the end, it is their choice.

Dave Matthews (for example) released the first single of an album on Napster, essentially saying "Here is a song, enjoy. If you like it, check out the rest of the album." He didn't say "Here is a song, steal the rest if you like it."

It should be up to the artist to determine what happens to their creation. Support the artists that choose the other way and you might start to see changes.

Stealing won't do much other than break the law. And warp your morals to that of a lowly slug. But that's a story for another day!

Re:Preview Edition...not for *DIST*!

[Anonymous Coward]

The whole concept of copyright theft, is, I think, inherently flawed.

Someone breaks my window, comes in my flat, takes my television - THATS theft. I would no longer have a television.

By downloading an artists work, am I stealing it away from him?

Come to http://www.infoanarchy.org for a lot of essays exploring this exact issue in greater depth.

If i want to play the song out, or feel that I "own" it, I'll buy the vinyl. If I just fancy a listen, I'll leech the .mp3, or tape it off my mate.

And please, man... There's nothing I hate more than people who harp on about "morality". It's subjective - and anyone who disagrees with you is a slug? Bloody hell...

you reap what you sow

[LiquidPC]

On a horrible scale of 1 - 10 for sleazy business practices, I rate this a 9.

Almost as horrible as stealing Intellectual Property from musicians?

Re:you reap what you sow

[Anonymous Coward]

You cannot "steal" Intellectual Property.

You can violate copyright, or illegally use trademarks, etc., but you CANNOT "steal" it.

The law is quite clear that copyright infringement and stealing/theft are not the same.

Re:you reap what you sow

[Anonymous Coward]

And you suck what you blow. Believe it or not this isn't about free music nut wad. Nor is it free movies or software.

What is boils down to is being better than what you are not getting something for nothing. Another part of it is personal responsibility but that sits mainly with the people crying wolf over buisness losses caused by piracy. The actual losses are to small to measure so instead they feed you figures that seem rational so you will buy into them and make it seem like there is a problem so you buy off on the need for a solution.

Re:you reap what you sow

[Anonymous Coward]

Listening to a dope track is hardly the same as "stealing Intellectual Property". Except perhaps in your cardboard world

Re:you reap what you sow

[kubrick]

I would have thought Morpheus users were stealing intellectual 'property' from record companies, who had already stolen it from the musicians.

Just remember, 'Property is theft' (Proudhon).

Re:It's called FRAUD --- try Apple's ad placement

[Anonymous Coward]

Apple did it first.

It costed me ONE DOLLAR per user if I refused to put an add for apple on the desktop of a users system when they installed my quiktime program. Admittedly the way it worked is TWO dollars to distribute quicktime library with my app on a CD, and only ONE DOLLAR if I permitted apple to place an add on the desktop.

The ad was a beg-ware equest to upgrade to pro version of quicktime... for more than the cost of my original program!

Apple is evil and corrupt with their fascist policies.

I have a different perspective on the issue

[DreamMaster]

From what I gather, it's always a single hardcoded site that the user is redirected to. So I think the original poster is off the mark in thinking that this is a way for the website to make some quick bucks in referrals. However, the issue of secretly redirecting a users browser is still a fairly serious issue to consider, just on privacy grounds. If I type in a URL, I expect it to go that URL, and not to secretly start visiting other websites that I didn't want.

Anyone remember a while ago AOL was detecting URLs for the popular search engines and instead forcing the user to their own search engine page? Is that still going on? That was bad, but at least they were open about it. This case is much worse in that it attempts to conceal what's it's doing

Are you insane?

[ergo98]

If software which does this sort of sleezy tactic put as a clear, easily obvious disclaimer "You are indirectly paying for this by allowing us free reign over your PC", then I'd wager that about 5 people on the planet Earth would actually install it. Instead, however, companies that do this sort of tactic either sneak it in entirely unintended, or they hide the details 40,000 words deep into a EULA which they know that no one reads, all the while promoting their "free" software. Why stop at redirecting the browser though? I mean surely there's some worthwhile nuggets of information on that harddrive somewhere that could be sold to the highest bidder. All's fair in the land of free software, right? (Why say just free though? Using this "anything goes" justification, anyone who believes that they are providing a more valuable service than they are charging can go nuts)

This sort of activity is atrocious, and I don't see how these people aren't facing the same punishment as the Kevin Mitnicks and Melissa virus writers are. Without any doubt there is a serious need for either a technical solution (one could say that it exists by way of Java : Sandbox every application to ensure it has no rights outside of its little world. The .NET Framework supposedly offers this but I wouldn't trust it until its evaluated and proven) or a legal solution. It's obvious that a "Dirtier-than-thou" cat fight is taking place with every sleezy vendor out slimeballing the next.

Re:Are you insane?

[Anonymous Coward]

> Without any doubt there is a serious need for either a technical solution

Start here for a technical solution:

http://www.gnu.org
http://www.mozilla.org
http ://www.freebsd.org
http://www.openbsd.org
http:/ /www.netbsd.org
http://www.debian.org
http://www .redhat.com
http://www.mandrake.com
http://www.s use.com

Cheers,

--fred

Who Cares: I hate gnutella anyhow

[Veramocor]

You shouldnt be using gnutella network anyway. Ive tried it a few times both in its infancy stages and the most recent client. The fact its reliabilty sucks. 95% of downloads you attempt fail.

The napster and fast track network actually worked when I want to download things. Unfortunatley napsters gone now, morpheous has not only turned to the dark side of "spyware" but also is using the aforemention crappy gnutella network, and its only a matter of time until Kazaa is shut down by the 'man'.

I'd be interested in seeing if gnutella ever gets better. It looks like it will be the only surving P2P. I guess I'll just stick to good ole FTP and its 6 sigma( grandios exaggeration) reliabilty.

Veramocor

It Is DEAD

[Daveman692]

Morpheus is already dead. ever since they screwed up about two weeks ago by saying they released an update but not doing so screwed them over. It basically shut down the entire network killing their argument in court that their network couldn't be shut down. The company has also said they will no longer develop new software.

It's only a single counting website

[DreamMaster]

I posted another message on my take on the issue, but I don't think I put my perspective clearly enough. Given that it's a single website that the redirection is going through (at least, we can presume it is), it would be piss easy for a big outfit like E-Bay to detect the website name and not include it in any referral monetary program.

So the website is likely to be only usefull as intended - as a means of secretly counting how many Morpheus users visit a particular big site, without going to the trouble of having to enter into an agreement with the popular website owners to get the information. It's sneaky, it sucks, but I don't think that they're really trying to secretly make a few bucks.

Re:It's only a single counting website

[Anonymous Coward]

Its a marketing department strategy, not a sales department one. The distinction is fine, but important: stealing revenues or commissions would be a sales issue. This isn't. The objective is to be able to go back to Amazon.com and say "look, 5 million Morpheus users went to you site last week. Why don't you buy ads (of some sort) to run on Morpheus... for a premium price."

mozilla.org

[mark_lybarger]

go there, get your copy today! this has got to have some lawyers in a frenzy, but really when you're the crack dealer selling to HS kids, is someone really going to suddenly pay attention now that you're lacing it with some heroin?

Re:mozilla.org

[Anonymous Coward]

when you're the crack dealer selling to HS kids, is someone really going to suddenly pay attention now that you're lacing it with some heroin?

Uhm, yes. What kind of stupid example is that?

ah well

[BigBir3d]

just another reason to add to my list of why i haven't done any p2p since napster went away. simple kindergarden stuff here; if i can't trust, how can i share?

Re:ah well

[Anonymous Coward]

what I would like to point out to people is that it tracks you with or with out your program on. even if you uninstall the program it's self it will still track what your doing.

to remove this you need to do the following.

you need to find all three files and delete them

c:\windows\rdxr020305.dat
c:\windows\system32\r dxr020305.dat
c:\windows\bpboh.dll

if your really smart you will clean your registry too of all Morpheus listings.

what upsets me about this is that it's listed as none spyware but clearly is..

Re:ah well

[Anonymous Coward]

Or, you could just not use MS Windows... I hear Linux is kinda cool...

No...Thats...

[Robber Baron]

...Business 101 - try really , really hard to piss ON your customers!

Re:No...Thats...

[Anonymous Coward]

If you're going to try to look smart by referring to Nietzsche, learn to fucking spell.

Re:No...Thats...

[Anonymous Coward]

Just for that I hope he leaves it spelled that way just to piss you off (or to piss on you).

Re:No...Thats...

[Anonymous Coward]

Nice Mel Brooks reference (Robin Hood: Men in Tights)...

Re:I'm a Slashdot kind of guy

[Anonymous Coward]

not bad for a first try.

And once again...

[m4g02]

This is the 1001 reason why you shouldnt use Internet Explorer, all the spyware targets it.

Re:And once again...

[wadetemp]

Of course, it's reason 1002 why you shouldn't use Windows, because all spyware targets it. And when Linux becomes a more common operating system than Windows (uh, yeah), it will be reason 1003 not to use Linux.

Sad, but not new

[ziriyab]

I saw something similar a few weeks ago. A friend asked me to take a look at his computer. He had started getting bombarded with porn ads for no reason. I fired up his IE and found out that his home page had been switched to a site that redirected him to his old home page, but not before popping up a bunch of porn windows. The process was invisible to him.

What's worse is that it had somehow also managed to make it impossible to change his homepage from within IE (the fields were grayed out.) After a quick registry hack he was porn free

Anyway, as long as there's a way for people to make money off the swiss cheese that passes for software security, they're going to do it. The sad thing is most people don't know how to stop these things. The sadder thing is that most people don't remember a time when the internet wasn't about making money (when people were boycotting web sites with banner ads) and don't think there's much wrong with these tactics.

So don't use IE...

[jdreed1024]

I should get some mod points for that subject :-)

Seriously though, the article says it can only affect IE. This makes sense, given that it's easier to do sneaky things in the registy and elsewhere which, while invisible to the user, will cause drastically different behavior in parts of the operating system, like IE.

Aren't you glad you use Netscape? Don't you wish everyone else did?
(apologies to the old Dial ads)

Re:So don't use IE...

[sidb]

What do you mean, "parts of the operating system"?

Re:So don't use IE...

[nob]

One thing everyone should have with their browser (and all software really) is freedom of choice. Even if these means choosing IE, they should be able to. One shouldn't have some rouge file trading software forcing them to use one browser or another.

But hey, if it gets people to try one of the better browsers, maybe it isn't *that* bad :)

Re:So don't use IE...

[Anonymous Coward]

Aren't you glad you use Netscape? Don't you wish everyone else did?

I develop websites. My answer is no.

Re:So don't use IE...

[Anonymous Coward]

If Netscape was the dominant browser, the same thing would happen to it. This isn't really IE's fault. Being the most popular browser has advantages and disadvantages (mostly advantages).

More browser scumware, and how to remove

[heretic108]

While visiting astalavista to, um, get a serial number that I'd previously lost from a program I'd bought, I followed a link to a site http://www.cracks.am. When I clicked on the link to download the serial, a dialog popped up asking for my permission to install a program from C2 Media, and certifying that the program had a certificate from Verisign.
Stupidly, I clicked yes, and promptly regretted it. A whole day of browser abuse followed.
* My desktop got taken over by an 'affiliates' homepage
* My desktop got swarmed with icons for adult and gambling sites
* If a site took a long time to load, or got a 404, my browser would end up at the portal http://www.lop.com, part of the 'affiliates' network.
The program didn't leave a listing in the add/remove window. It wasn't in c:\program files.
It had buried itself deep into my windows folder.

Instinctively I searched my disks and registry for lop.com and removed all references. No cure. My browser still kept going to lop.com.

My only cure was radical action. I ran Win2k in a VMware box with disks set to non-persistent. Immediately before saying 'yes' to the installation, I ran the 'InCtrl' install tracker program. Thank God for InCrtrl - after the install was done, I had a list of all files added by this nasty piece of scumware, and had the utmost pleasure in removing it once and for all.

Re:More browser scumware, and how to remove

[Anonymous Coward]

Can you list the files you found?

Re:More browser scumware, and how to remove

[Anonymous Coward]

I think this falls under the "don't install software from shady places" rule. Just because Verisign trusts them doesn't mean you should.

NEVER install free software from crack sites or porn sites unless you know what you're doing. (ie, download the exe and check it before running it)

Morpheus? Secretly installing insidious software?!

[NowIveSeenItAllGuy]

Now I've seen it all!

Slashdot should do something similar.

[CaptCanuk]

Screw subscription based system for Slashdot. Just make up interesting articles and put them in the headlines and get the company involved to pay for being a referrer. Slashdot viewers would see great articles like this: Windows XP Home Page: Which Edition Is Right for You? and Target's Deal of the Week. In return, Microsoft and Target pay $0.01 a hit or something. CmdrTaco could retire in a few days!

It's like hijacking hits, but with the slashdot effect.

And you're asking this why?

[Anonymous Coward]

...because you want to know how many people will be upset when ./ starts doing this, right?

an 11 on a scale of 1 to 10

[Narcocide]

oh god. why can't those people spending all they're effort trying to make mp3's illegal just make THIS stuff illegal?

Re:Sleezy, but no point in Morpheus anymore anyway

[NetRanger]

Wow -- you're right on the money.

I was shocked to see how Morpheus is a VERY bad clone of Gnucleus. Well, Morpheus is off my system for good. No more damn pop-up ads either.

Good riddance.

slashdot referrer fee

[fcanedo]

Interesting idea, sort of a donation that doesn't cost you anything. Or, maybe that should be the subscription fee!!!!!

Wanna subscribe to Slashdot's extra features, just download this nice plugin.

We have to think about the privacy implications though. I personally don't care that Slashdot can track when and how often I go to certain shop-sites, but I know that many people will. But hey, if it's voluntary!

Besides, it remains to be seen whether sites like Amazon and others will accept this kind of thing. Basically, you're not actually referring, you're just bringing someone to a destination that they were going to already. Evildoers will have no problem with signing up for the referrer programs every time their id is cancelled (assuming that it's easy and automatic to sign up). Slashdot however will have to do stuff in the open.

On an other note, it just goes to show that people need more control over their computers. The system should make it obvious, that something is installing something that's going to interact with your browser.
The problem is easily solved in Linux (or any other *nix-like), just never run as root and make sure that the browser can't use your local plug-ins directory.

this is how they "pay" for all that free music

[Anonymous Coward]

... that you're downloading. C'mon people, Morpheus isn't exactly 1st rate software. Let the downloader beware. Even since the "death" (well, at least rigor mortis) of Napster, these kinds of P2P programs have been slowly sliding downhill.

I'm no fan of the RIAA, you can't always expect to get _everything_ for free ... (I'm sure someone will refute me by saying yes, but not all the files traded are protected by copyright ... LOL, do you honestly believe that the non-copyright protected stuff is much more than a tiny fraction?)

Sorry, folks. The salad days are over with. Don't complain about privacy if you're getting something for nothing!

I just uninstalled Morpheus...

[wadetemp]

...both the original version and the preview. Good ridance.

Exceeds authorized access

[Animats]

Somebody really needs to file Federal criminal charges on this. This clearly "exceeds authorized access", as defined in the Federal computer crime law.

Re:Morpheus? Secretly installing insidious softwar

[FIRESTORM_v1]

And people expect what? Orginizations to be honest about what they do? Heck everyone's going to the ad-banner craze now. Thank god doubleclick went to /dev/null and I guess this will too. Everyone's trying to make a buck and they're going to do it regardless what is "right" "moral" or "ethical" I have been using LimeWire ever since it came out and I refuse to upgrade simply because I know that Limewire is starting to take stats on what people search for. If they can cause ads to popup or display within the Limewire program through the Java API that limewire runs in I can only imagine what someone could do with the Jave API anf Limewire itself! If people are worried about their browsers links being hijacked, then use VMware and build a virtural PC inside of your existing OS and ONLY use it for searching for files! Remember, they CAN'T jack with/learn/save/report anything that YOU DON'T do on that box! just my .02 (it's my 1st post, be gentle)

Bearshare does this too

[rufusdufus]

Installing Bearshare also installs two secret spyware apps. One of them does a similar redirection, but is especially evil because it bypasses firewalls like ZoneAlarm. More information about this at cexx.org/newnet.htm and lots of related stuff at the root cexx.org

Re:Bearshare does this too

[mr3038]

Installing Bearshare also installs two secret spyware apps.

Yeah, but I was able to figure this out! The dialog in question presented during installation has following checkboxes:

• BearShare
• BearShare Desktop Icon
• SaveNow
• New.net Domain Names
• Desktop Shortcuts: Links to Great Products
• n-CASE Ad Delivery System

Simply uncheck everything else but BearShare and there's no spyware. To be honest, if you couldn't figure out which of those you need then I'd suggest you to sell your PC and purchase Xbox or PS2 instead.

("Secret spyware" that was mentioned contains New.net and SaveNow)

Delete Morpheus

[Von Rex]

First, they took an open source app, Gnucleus, and repackaged it as their own, adding nothing while actually degrading the software by adding popup ads.

Second, they started banning from their chat room anyone who mentioned this fact and posted the url to Gnucleus.

Now, they're installing scumware in order to control your browser for their own profit even while you're not using Morpheus.

Anyone left who still wants to argue with me about whether or not Music City is a company of degenerate sleazebags? Anyone who still disagrees with me that the proper course of action is to delete Morpheus and install Gnucleus immediately? (at least until something better comes along).

BHO Files

[ImaLamer]

I hoped the Morpheus name would help gnutella network along but maybe not...

... although I have installed this "Preview Edition" I ran a piece of software and could find no BHO files other than Norton's and Adobe's.

So... my question is where is the spyware?

Re:BHO Files

[matrix29]

I hoped the Morpheus name would help gnutella network along but maybe not...

... although I have installed this "Preview Edition" I ran a piece of software and could find no BHO files other than Norton's and Adobe's.

So... my question is where is the spyware?

You want it? I've stuck that nasty piece of crapware in my Norton Antivirus Quarentine directory just for future reference.

Hell, I'll email it to you today if you desire it.

Re:BHO Files

[ImaLamer]

Better yet,.... send me where in the source code the spyware is.

Fuckin morons

[Anonymous Coward]

You're all a bunch of fucking morons. Read the article. Its only a tricky, slightly more stupid implementation of spyware. It visits a secret site in the background, if you go to ebay.com. That site records the his as a hit to ebay from a morpheus user. Not right, but also not as bad as the poster thinks it is.

Probably not acceptable to Yahoo, eBay, etc.

[letxa2000]

My guess is that this will quickly be eliminated. Regardless of whether the users are happy about it I seriously doubt Amazon, eBay, Yahoo, etc. are going to be willing to pay Kaza any money for referals that they didn't really generate.

This is like spammers embedding banner images in their spam and getting paid every time someone opens the email just because the banner was loaded. It's just running the meter and the entity being screwed is the website that is paying them a referral fee.

The article, in one part, reads: "Griffin said the technology is simply taking the old affiliate referral program to a new level. Most of the referrals will happen inside the Morpheus application itself after the new version is launched with a commerce section, he said."

Yeah, right. Most of the referrals will clearly be a result of their sneaky browser add-ons, not because anyone really pays attention to the commerce section of a P2P client. Heck, P2P users generally get as much as they can for FREE--not exactly the target market of much of anyone.

other software installed

[vlauria]

For you windows users, I noticed that Morphesus also installs a program called BDE under "\%Windows%\BDE", and it installs a Registry Key under:

"HKEY_LOCAL_MACINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run".

This key loads the program at startup. The program appears to be some sort of video codec/player.

Re:other software installed

[The Bungi]

"Brilliant digital". Crapware, actually. See this

Re:Vendors taking liberties with your configuratio

[Anonymous Coward]

So what, in particular, is wrong with paid placements? As a consumer, I don't really mind having businesses subsidize my purchases. Would you still object if Quicken also sold a version without paid placements that cost more? More importantly, would you buy the more expensive version rather than just delete the icons?

I see creating shortcuts as being in a totally different ballpark than proxying a user's browser and silently redirecting them. An icon on your desktop is immediately noticeable, easy to remove, and only a cosmetic change.

morons

[Anonymous Coward]

I wonder how many people would have opted out if they just asked nicely. It's not like it hurts people to use Morpheus as a referrer, and it helps Morpheus a great deal. Who's going to trust them now?

What an incredibly stupid move.

blub

The source code

[1155]

The source code to Morpheus was made from gnucleus. I do not know the link to that, but it should be pretty easy.

The source code for morpheus is here. It is in a zip file, right from the site. I do not know how to program too well, but I do have a website, Xcompile.com in which I would gladly put anything made from the morpheus source onto my site, so long as this feature is removed, along with the advertisements.

Time to check the facts.

[metacell]

From the News.com article:

"The company on Tuesday said it has begun installing a Web browser add-on that sends some Morpheus users on an invisible Web detour aimed at capturing data about file swappers' surfing habits."

I.e, so far it's only about collecting usage statistics. It's simple spyware, not stealing referrals from someone else.

A little further down, the article goes on to say:

"By invisibly inserting the redirect into Web surfers' browsers, StreamCast can make it look like it is referring traffic to shopping Web sites without the shopper ever being aware that the Morpheus technology was involved."

The keyword here is "can". It doesn't say they do it yet. It doesn't say how the referrals are inserted into the browser either.

Maybe Morpheus just makes your browser have an extra, annoying banner-line with referrals.
Or maybe, if there's a web page with the text "Britney Spears" it inserts a referral to the Amazon.com page where Britney Spears albums are sold if there isn't already a referral there.

If StreamCast was going to hijack other people's referrals, I doubt they'd be so open about it. I don't think StreamCast would ever try something like that, because it would be stopped by the vendors themselves faster than anybody can say "litigation".

More from the article:

"Most of the referrals will happen inside the Morpheus application itself after the new version is launched with a commerce section, he said."

Putting referrals inside the Morpheus application sounds pretty legitimate to me. There's just the issue about just how exactly the other referrals, inside the browser, are done.

Re:Time to check the facts.

[sfe_software]

Maybe I'm reading it wrong, but I took 'refer' to mean simply the HTTP_REFERER header:

...StreamCast can make it look like it is referring traffic...

That simply sounds like, due to a meta or Location: redirect, the browser sends their website as the HTTP_REFERER, thus appearing that they are "refering" traffic, not using an affiliate/referral program.

I could well be wrong... but my first reaction was the less paranoid conclusion. I'm sure if they were actually hijacking affiliate links there would have been a lot more fuss about it by now.

Re:Time to check the facts.

[sqlrob]

The keyword here is "can". It doesn't say they do it yet. It doesn't say how the referrals are inserted into the browser either.

Yes, it does.

The new Morpheus marketing program is based on a technology called browser helper objects (BHO), which attach themselves to Microsoft's Internet Explorer browser.

That's why I don't use IE when booting to windows. Too many ways to hide stuff in it, never mind the holes.

Re:Time to check the facts.

[metacell]

Well, you're right, it does say how the referrals are done technically speaking. What I meant was, it doesn't say if the referrals will be done in an intrusing or deceptive way, like, hijacking other people's referrals, inserting links into innocent web pages, displaying ads in extra frames, etc.

Re:Time to check the facts.

[Anonymous Coward]

The referer programs do not use HTTP_REFERER. That would be silly.

How to disable Morpheus redirects

[Dynedain]

After reading this article (and noticing redirects being performed on my system - i thought it was something else, not morpheus) I downloaded this utility: BHO Cop which is designed to search out these nasty browser-attached proggies and allow the user to disable them. I found the culprit: bpboh.dll put out by Wurld Media, who, according to their inadequite website, claim the primary goal of their business is to help companies be profitable (very ambiguous, don't you think?).

Well, I disabled the .dll w/ BHO Cop, relogged in (WinXP) and low and behold, when I go to amazon.com, I end up at the root page rather than a referal page deep in the system.

So - download and run BHO Cop now! who knows what else you might find (Acrobat seems to have dumped something as well)

Re:How to disable Morpheus redirects

[Dynedain]

Wait, it came back (not the "plugin", the redirects). Morpheus is going to be unistalled...I'll post an update.

Re:How to disable Morpheus redirects

[Dynedain]

Yep, the original article at Newsbytes confirms the software is bpboh.dll by Wurld Media

My removal was successfull, just make sure to completely reboot (instead of relogging on)

Re:How to disable Morpheus redirects

[Java Pimp]

Seems that BHO is a Micro$oft technology. Yet another reason to stay away from IE. God, thank you for bessing us with this.

Re:How to disable Morpheus redirects

[dynweb]

The acrobat BHO is what lets you read PDFs within IE without needing to spawn a separate Acrobat window. There's nothing really bad in there.

Acrobat (the creater, not the reader, I believe) does have its own "auto-update" system, but it can be disabled in the preferences

You're a fool, but..

[Anonymous Coward]

yes fellow AC, he is an idiot. actually, i think he was referring to the fact that XP reports everything you do back to microsoft anyways. so you are wrong. and you're an idiot.

Ahh..the freedom provided by being an AC and just yelling at people at 2 in the morning. its so good.

Comment removed

[account_deleted]

Comment removed based on user account deletion

anyone use the BHO cop?

[roberto0]

In the article, there's a link to a cnet download page that contains a BHO Cop....This is supposedly software that scans for and allows you to disable hidden browser plug-ins.

Has anyone used this before and can it be used to conteract such forms of internet theivery?

I'd hate to see Amazon lose even more money. Rob

Re:anyone use the BHO cop?

[Dynedain]

I just did to remove this....

checkout my post on it: 1 post before you

It worked well, and even told me the name of the dll so I could go delete it myself

Re:anyone use the BHO cop?

[erasmus_]

Yes, I used it successfully as well. Acrobat and this Morpheus garbage were my only 2 BHOs.

Re:anyone use the BHO cop?

[Mearlus]

I have been playing with it today, and it didn't stop the redirect for me. I've uninstalled morpheous, ran bhocop, deleted the .dll file manually, and rebooted multiple times. Yet, amazon.com gets redirected. *sigh* /me digs into the registry.

Re:anyone use the BHO cop?

[erasmus_]

I don't know, I had someone without any Morpheus-type programs installed go to amazon.com and they get redirected to http://www.amazon.com/exec/obidos/subst/home/redir ect.html/002-6952020-6514439 as well. Are we sure this is not a feature of the particular site? I always thought their referrals URLs looked differently in structure.

Just Use LimeWire!!!

[EMR]

Eh.. just uninstall Morpheus and use LimeWire.. It's the exact SAME network.. Gnutella!!..
And LimeWire has a nicer interface anyway..

I use that now.. it's better. yeah I do have that annoying ad bar at the bottom.. but I may just pay the $8.50 to have it removed permanently...
and since I use linux.. it doesn't install all that CRAP software like Bonzie Buddy!! (SPYWARE!!!!)

Anyway.. just download Ad-Aware and have it remove the SPYWARE from your system.. (I bet it'll probably remove the Morpheus one too!) Oh and once you remove the spyware you'll notice your system runs better too and doesn't crash (as much).. (I did this on a friends system and WOW no spyware=more stable system, still not as stable as Linux though)

So true

[Dave_bsr]

I was talking to a friend today. He runs an ftp here at my school and is a good computer programmer. We got on the subject of operating systems* and he asked why i didn't run winXP, as it is provided free to all CSE students. I explained that it didn't run some games/apps (notably abandonware like the Cmdr Keen which I did pay for back in the day) and I told him that XP reports a lot of what you do back to MS. yay. gettin' monitored. I run windows 98SE for games. Now with a good version of Xine in my new OS, i don't need 98 for movies any more.

My friend blew off hte privacy issue, and that worried me. I mean, this guy trades warez, he has illegal movies, pirated MS office, and he doesn't worry about MSspyware XP. sigh. and this guy is supposed to be a computer-smart CS student.

*i mentioned how i was soon going to install mandrake 8.2, which btw, is beautiful, and i love you mandrake-linux. its just so...good...

Re:So true

[Anonymous Coward]

"... and this guy is supposed to be a computer-smart CS student." Yet another nail in the coffin of belief that is "One takes a degree in computer science, therefore one must be talented or knowledgable". But, you run Linux, so your opinion isn't worth the $0.26 CD that Mandrake is burned onto. "yay. gettin' monitored." Watch out, the NSA are overhead. You twat.

microsoft do this all the time

[Anonymous Coward]

If you pay attention to your links at the bottom of IE. IE calls home frequently:
do they get the hits?
do they promote how ^%^%^%ing popular they are?

Nuff said

Lavasoft's AD-AWARE will Remove this thing for ya!

[EMR]

goto http://www.Lavasoft.com and download ad-aware and the latest ref update and have it remove all your spyware from your computer..

Download Limewire!

[MillionthMonkey]

Limewire is good. But don't download its Windows installer- that has spyware in it! Instead: install a JVM on your computer, then go to Limewire's page for alternate OS downloads, select "other" as your operating system, and run it using the JVM, without all the crap they bundle in. Most spyware is Windows-specific.
Yeah, it's a shame that P2P only became popular recently, in the age of the MP3. If it had been invented 10-20 years earlier, with RFCs, and had the stature of, say, FTP, people would be thinking of it as a fundamental part of the Internet. Instead we have this horrible situation, where anyone who uses a P2P client is presumed to be a freeloader or a criminal. P2P deserves better than a bunch of spyware-loaded clients that block each other's users from their own networks.

Re:Download Limewire!

[colmore]

Limewire is just gnutella right? How about just downloading a different Windows gnutella client?

Re:Download Limewire!

[eeek]

"Limewire is good."

How do you define good? I found it to be extremely slow and quite buggy. In fact I'd say it sucked.

You might all be missing the point

[Anonymous Coward]

This is marketing metadata. Amazon can -buy- a small portion of the ebay logfiles and ebay can -buy- a small portion of the amazon logfiles. A third party can tell them how many hits go to which web pages of their competitor. They don't have to collect email addresses or anything, just numbers of hits on certain web pages. So ebay can get an idea of how amazon is cutting into their auction business from a third party. Barns and Noble can check which amazon pages get the most interest and emulate whatever tactics they think makes the high-hit web pages so attractive. The company that can tell them this is really giving them a piece of inside information from the other company. They'll pay for that and they really don't need to worry about who it was that hit the web page, just what works to attract hits.

Re:Frist

[Rampant Atrocity]

I'd have to say the former. The concept of 'karma' is foreign to the Chinese. I had to travel to America in pursuit of the karma i so desire. That would make me a Whore for Karma who happens to be Chinese in citizenship (yeah, I'm an illegal immigrant, so sue me)

Damb is...

[Anonymous Coward]

"Damb" is a new word. It means "Damn they are dumb!"

Method to remove Morpheus spyware

[jonearth]

The new Morpheus marketing program is based on a technology called browser helper objects (BHO), which attach themselves to Microsoft's Internet Explorer browser

The Morpheus spyware is just a .dll that will be loaded every time your Internet Explorer starts. It is registered in the windows registry.

So this bho spyware can be removed by using bhocaptor . Bhocaptor displays all bho that are registered within windows registry. So, what you need to do is to select Morpheus bho(a .dll file) and then deactivate it.

As bho is an Internet explorer technology, those who are using netscape or mozilla should be immune to this spyware.

Grab a pal, it's /. analogy hell!

[teamhasnoi]

Well, here goes.

This like you asking a guy for directions to the "Stop and Rob", but he gives you directions to his brothers store, "Grab and Run". His brother lets him live in the basement of his house, because he sends lots of business to the "Grab and Run".

You wanted to get some YooHoo but the "Grab and Run" doesn't have any, and you were going to shoplift it anyhow.

Doubly pissed, you report the "Grab and Run" to the authorities (you saw a rack of VCRs in the back room, making copies of Asian snuff films.) The cops come and arrest the owner and throw his ass in jail.

After looking up the address of the "Stop and Rob", you head over there. The brother of the now jailed owner sees you, beats you to the ground, and takes your wallet. In your wallet is an I.O.U. from your boss to an employee that works in the same row of cubes as you. Your wallet is gone, and so is your mugger, so you get up and run over to the "Stop and Rob".

You ask to use the phone, and while the clerk is hitting on some drunk chick with a feather boa, you steal your bottle of YooHoo.

1. Before anyone responds to this, I might add that this analogy is far better than all the "I buy a Ford; they won't let me play my radio" analogies, on so many levels. Also, this post is not offtopic! It is a comprehesive analysis of the current Morpheus situation. Thank you. You may return to your duties.

Not scary: par for the course

[TygerFish]

The only reason Morpheus and the other sites exist in the form that they do is because they've learned from the Napster experience. It's evolution, they're faster, smarter, and nastier than Napster, and their way of doing business is the direct result of the entertainment industry's failure to see beyond extending their stranglehold onto the internet.

The recording industry has demonstrated conclusively that a pure, straightforward way of doing things like Napster's leads to schools of lawyers swimming your way to protect the entertainmnet industry's right to fix prices without interference by consumers exchanging files on the internet. By destroying Napster, they left an ecological niche for the bottom feeders to slide into.

Now, the Dinosaurs of industry won't be happy with the stuff they can't block and we won't be happy with having to either go underground or risk using spyware to exchange files we've already paid for.

Stupidity and greed have failed to yield happiness. Why is anyone surprised?

Is not Morpheus Open-Source?

[Anonymous Coward]

Some time ago there was a /. article about Morpheus not releasing it's code now that it has gone Gnutella. It was soon revealed that they did reveal their source code. Sooo.....

Did no one see the 'invasive, evil, jerk-spawn' code? I could see an open-source organization dedicated to 'auditing' and revealing information to those less capable of understanding the peculiarites of computer code.

But then again, just because a prog when Open-Source doesn't mean they can't insert closed source progs on the side, but the deliver mechanism for such jerkware might be better detected hopefully in the future.

Alternate headline

[Qrlx]

Developers: Finally Real P2P With Brains

admittedly, they are using their powers for evil, but if they get rich off everybody warezing, more power to 'em.

Oh dear...I really should have renewed my domains.

[Bowie J. Poag]

And to think I actually -owned- streamcast.org for a while. Yeesh.

And, Microsoft reports to???

[Anonymous Coward]

Windows XP reports to Microsoft, and, judging from the painless result of the antitrust action against Microsoft, Microsoft reports to the U.S. government.

Nasty performance hit

[akh]

I saw this on a co-workers computer yesterday. IE (and the rest of his system) were virtually unresponsive - especially when it came to network operations. Turns out he had just installed Morpheus on it. Grabbed a copy of Ad-aware, ran it, and all his problems went away. Nasty stuff though...

From the Download Page

[Screamer49]

Taken from download page of Morfeus:

"This ad-supported software includes technology that will serve banner advertisments through the program interface. Morpheus also includes BuyersPort, a shopping portal that may log your IP address, track surfing habits online, and share aggregate user information to third parties. For more information, please refer to BuyersPort's privacy policy."

What's a 10?

[Anonymous Coward]

"If this is a 9, I'd hate to see what the submitter considers a 10."

A 10 is when the program looks for files with names like "HotCindy001.jpg", and emails them to everyone in your address book with your last name.

spyware, how to tell?

[Anonymous Coward]

Ok, we know that morpheus is spyware. Would anyone mind telling me how to find that out? I have a few programs that i would like to test and see if they are whispering behing my back

Re:spyware, how to tell?

[Anonymous Coward]

Nasty performance hit (Score:2, Informative)
by akh on Wednesday March 20, @02:33AM (#3192840) (User #240886 Info)
I saw this on a co-workers computer yesterday. IE (and the rest of his system) were virtually unresponsive - especially when it came to network operations. Turns out he had just installed Morpheus on it. Grabbed a copy of Ad-aware [lsfileserv.com], ran it, and all his problems went away. Nasty stuff though...
[ Reply to This | Parent ]

spyware, how to tell? (Score:2, Interesting)
by Anonymous Coward on Wednesday March 20, @02:39AM (#3192849)
Ok, we know that morpheus is spyware. Would anyone mind telling me how to find that out? I have a few programs that i would like to test and see if they are whispering behing my back
[ Reply to This | Parent ]

Instead of the standard r.t.f.a. (read the article) I guess whe should have a r.t.f.d (read the discusion) to ;-)

Re:Vendors taking liberties with your configuratio

[mlk]

The next stage of this could be fun, double click on the My Account icon installed on my desktop, and my account is moved from Lloyds to TSB.

:-)

Taking food from the mouths of starving children!

[Artifex]

I admit, I'm being a bit extreme with the title of this comment, but please consider this point, which I don't think has been brought up, yet:

Shopping sites in general, as well as many other public sites that depend on referral revenue to operate will lose money as a result of this, and if this practice becomes common, will eventually have to shut down or change revenue models.

While you may not think that has a real impact on sites you personally visit (does Slashdot really depend on revenue from its click-through links to bookstores?) there are some good causes that stand to be hurt by this.

One highly-visible example of how hijacking referrals would be a real problem for a good cause is the shopping site that the parent company behind The Hunger Site (linked in my .sig) runs. It's a very simple setup: you click through, buy stuff, and the nonprofit of your choice gets most of the commission (the parent company makes money, but hey, it's not like Amazon would give me the money back if I went straight there).

Obviously, if Morpheus has a way to hijack referrals, that means it's now outright fraud. And yes, in situations like the one I just outlined, money that would otherwise have trickled to, say, a humanitarian organization that feeds starving kids, would instead go Morpheus (Not to mention that there might be some laws about using computer resources without permission).

Most people don't use the shopping site I mentioned, but they do use other sites that depend at least in part from referral revenue. You should find out what your favorite sites' (Anandtech, Sharky Extreme, Ars Technica, Slashdot, Everything2, just to name a small number that might) revenue sources are, and if any of them rely on referrals, you should consider whether another file service might fit your needs better.

(p.s. No, I don't have any formal relationship with the Hunger Site or its parent company, unless you count clicking its URL when I remember to, putting its site up as my .sig, and subscribing to its shopping service.)

Mail Sent to EFF, CAFE

[plaidfishes]

I have sent the following message to Robin Gross of EFF.

Dear Ms. Gross

I am writing to express my concern that my attempts to financially support EFF have been stolen by Morpheus and similar companies. I have long been careful to use the Amazon Affiliate Button on your front page for all of my book purchases. I have felt that doing this combined to support what I believe in simply and effectively. Since my purchases have been well over $1000 per year for at least the last two years, I know that it has to have been worth at least some money to EFF.

It has recently become apparent that Morpheus et al. have been placing software such as TopText and other scumware on users machines. These programs have the sole purpose of rewriting affiliate links. This effectively redirects the financial benefits of these links to the scumware operators. To put it bluntly, this is theft, no different than if they had taken the affiliate checks and written their own names as payee.

I have supported the EFF for years. I supported Morpheus partly because of EFF's support of them. But I am frankly disgusted by this turn of events. As the Director of the Campaign for Audiovisual Free Expression, and a staff attorney for EFF for Fair Use and Intellectual Property, I believe that you may well be the single best person to let them know they have gone too far. To take a principled stand on Fair Use is one thing. To pump ads to users while using the software is also perfectly legit. To actively steal revenue from other people, companies and organizations, even after the user has supposedly removed the software, without notice is simply beyond comprehension.

Sincerely

Walter Williams

hrm.

[Anonymous Coward]

all the more reason to stop using MSIE, and use Opera instead. IE and MS generally sucks and I could'nt wait for MS to offer OS-only Windows if they lose the trial.

Morphus without spyware (Was Re:Like KaZaA?)

[permaculture]

Seen this? http://www.project-insomnia.com/grokster.html

Excuse me...

[metacell]

... but this is a storm in a waterglass. I must point out what the article actually said and didn't say.

The article said that StreamCast will:

1. Redirect users to another site to collect usage statistics before sending them to the site they wanted to go to. This might be seen as invading people's privacy, but no personal data will be collected, merely usage statistics.

2. Put up a shopping section in Morpheus. That sounds perfectly legitimate to me.

3. Put referrals to online stores inside the browser window in some unspecified manner.

Please note that 1) and 3) are two separate points. They won't redirect you to another site when you're trying to go to Amazon.com, and then claim the referral bonus. The redirection is only for collecting usage statistics.
And the referrals inside the browser window have nothing to do with the redirection.

There's nothing in the article saying that StreamCast will hijack other people's referrals.

There's nothing in the article saying that StreamCast will pretend to refer people to sites (like Amazon.com) when they go there themselves.

Re:Excuse me...

[AnalogBoy]

Slashdot requires sensationalism such as this to keep up it's reader base. I propose one of the following is true:

1) The editors are complete and total idiots.

2) The editors are actually brilliant businessmen who know how to tool their audience into a frenzy, keeping them addicted to the forum, where they return to the page every x minutes/hours to continue their bitching/arguments/debates/conversations/firstpost ing/trolling to their hearts content all the while racking up $$ in ad revenue.

I'll let you be the judge.

Re:Excuse me...

[WalterSobchak]

I try to keep out of these "Slashdot is evil" frenzies, but must agree this newsitem was not up to what used to be put on the frontpage.

O tempora, O mores

Alex

Re:Excuse me...

[metacell]

"The editors are actually brilliant businessmen who know how to tool their audience into a frenzy, [...] all the while racking up $$ in ad revenue."

Aha, so it's not really StreamCast that collects ad revenue through sleazy business practices, it's the Slashdot editors!

The conspiracy goes deeper than I thought...

(Just joking here, AnalogBoy. Your point is valid. A lot of the Slashdot articles are way too sensationalist.)

Re:Excuse me...

[metacell]

Seriously, I don't think the editors of Slashdot do any censoring and manipulate the users to up their advertising $$.

I think it's just lack of quality control in the articles posted, and that so many people jump to conclusions instead of checking the facts, that the factual postings get buried under the avalanche.

Re:Excuse me...

[ironfroggy]

The who zlib article is a great example of this. Upon further reading, you find it isn't nearly as bad as it was made out to be. I must admit however, they do have alot of submissions and it would be hard to research the validity of each completely. Site's like Kuro5hin have it done right, I believe. Post anything, if people like it, then it gets to the front page. It does work like that there, doesn't it? Some site should do it that way...

Re:Excuse me...

[IdiotBoy]

You need not check the validity of every submission, only the ones which you are going to actually post.

Re:Excuse me...

[digitalunity]

Dudes, Rob Malda is the granddaddy and founder of the Trolling Club. How many other trollers do you know that get to post shit and make money off it too?

Re:Excuse me...

[Graspee_Leemoor]

This is on +5 as I speak- just wait and it will get editor bitch-slapped down. Or are they afraid to since it got to 5 first and more people will notice?

graspee

p.s. I liked the way the post used the concept of tooling people into a frenzy and still made +5. Way to innuendo.

Re:Excuse me...

[Bender Unit 22]

yeah yeah yeah but I, for one, am sick and tired of programs that want's to install something that juuust monitors something non-personal. If you're not carefull, you will easily end up with 4-5 programs running in the background monitoring you. Let's put the privacy issue aside for a moment.
The average user just races through program installations since they don't have a concept of what half of it means.
So when I end up a a computer belonging to friends and/or family, work what ever. And they complain about it's speed stability etc. the first thing I do is look for ad/spyware. I always end uo finding some and it always ends up being more stable that it had been for a long time.

I'd say that ad/spyware is one of the big threats to the uptime on Microsoft products.

Re:Excuse me...

[Elvis Maximus]

There is a third possibility:

3) The editors started this thing on a whim and lucked out when it became popular enough that they could make a living doing it. But they're not professional editors, publishers, or fact checkers, and they're not particularly interested in those things. And with a few thousand people critiquing every story, no amount of sloppiness goes unnoticed.

Just throwing it out there.

Re:Excuse me...

[Anonymous Coward]

It's just Timothy. His articles are consistently FUD and outright BS. I'm about ready to filter him.

Re:Excuse me...

[Anonymous Coward]

If only G Oatse gave out referral money, Slashdot wouldn't be facing bankruptcy!

Re:Excuse me...

[Wntrmute]

Damn you and your Occam's Razor! Who said you were allowed to think here! :-)

Re:Excuse me...

[nege]

and also to attract people who hate this sort of sensationalism aparently...

Re:Excuse me...

[Anonymous Coward]

You have to give this site credit for its open style. I have not seen very many well-known news sites posting comments directly with the articles. Honestly, how objective can one news source be unless they do something to bring the question into light. The fact that Slashdot does not censor these opinions is enough to keep me reading.

Re:Excuse me...

[Anonymous Coward]

Hmm ... Occam's Razor is pretty unambiguous on this one.

Re:Excuse me...

[cir77787]

The redirection is only for collecting usage statistics.

And what business is it of theirs where I shop?? If I'm not using their program to shop, they have no right to collect this information without my permission, personal or otherwise.

The sollution

[wzzrd]

rm -rf Morpheus/

whoops! let me fix a typo.

[Artifex]

Somehow the word "conceivably" did not make it through the filtering into the final comment. That is, the corrected sentence above should read "Obviously, if Morpheus has a way to hijack referrals, that means it's now conceivably outright fraud."

I guess I typo'd the EM tags... I would hate to be sued for slander simply because I didn't couch this in properly oblique terms. Watch me be the next Morpheus scandal to hit Slashdot...

Re:Vendors taking liberties with your configuratio

[Anonymous Coward]

I was convinced a few years ago of the completely predatory business model of internet/software companies. They do it because people seem to accept being treated poorly.

They're just poking and prodding to see just how much they can get away with to base future business models from. Some companies will get gored in the process, others will observe and learn. And then we'll have a stable level of crappiness for awhile.

While this is all going on, internet/software users will drift like chromosomes in electrophereses gel, to places they are most comfortable with. Sadly large numbers will go right into the arms of the vampires, who will feed on them at every opportunity.

The internet is a hostile place, and the tools should reflect that. But instead, everyone is instructed from day one to use java, cookies, and other fluffery, which is equivilant to dressing someone up in a suit made from raw meat, and sending them out on foot, in an African wilderness reserve. And of course, the predator population will benefit and grow from this.

Take the food supply from the predators, and they'll go away.

let's play with this...

[gregor]

I played with a few URLs, and here's my findings:

www.ebay.com

links to http://www.qksrv.net/image-280514-220264, which has an instant redirect to pages.ebay.com. I played with this in netscape 6.2 and lynx, and they still directly put me towards www.ebay.com. There is definitely redirection occurring here.

www.amazon.com

links to http://www.amazon.com/exec/obidos/subst/home/home. html/104-9801158-34639, while netscape and lynx go similar (but not the same) page in the same sub-directory tree. I'm not sure if there's a url redirect occurring here.

www.barnesandnoble.com

In IE, goes to http://service.bfast.com/bfast/serve?bfmid=2181&so urceid=21425507&categoryid=rn_home, then redirects towards a barnesandnoble.com redirected address. Netscape and lynx still go straight the low level barnesandnoble.com address. There is also definite, blatant redirection occurring here.

So, there you have it- out of just three simple checks, Morpheus went and screwed with two of them. I'm getting this crap off my machine and installing a better gnutella client.

Re:let's play with this...

[sfe_software]

Hm, this invalidates my previous conclusion. I thought maybe this was being blown out of proportion, and I figured by "referer" they simply meant the HTTP_REFERER was being mucked with.

However, I know that "qksrv.net" is (IIRC) Commission Junction, which tracks affiliates. Note btw that CJ's functionality relies on your browser setting/sending cookies to a third-party server (something all non-IE browsers let you disable), but that's beside the point.

Every day I find more reasons I'm glad I stopped using Windows and MSIE...

Re:let's play with this...

[gregor]

I think I'll return to my previous brower policy- using IE for cookie-less surfing, and using Netscape for cookie enabled sites.

I certainly wish I could check my bank account and email without needing cookies...

hehehe :)

[Aqua OS X]

Wow, it's so tacky that it's funny :)

These guys are going to be out of business soon. MusicCity is going down the poop hole.

1 reason not to use Opera

[Anonymous Coward]

That it too is spyware infested shite

see for yourself

of course opera claim it isnt (like morpheus) but cydoor would wouldnt they ?

Re:1 reason not to use Opera

[sqlrob]

It is?

From here, which is from your link:

Opera does not collect and send information about you, nor your computer, nor which sites that you visit.

Re:1 reason not to use Opera

[Anonymous Coward]

> That it too is spyware infested shite

How is displaying ads the same as spyware? You have evidence that Opera is relaying client-related info in some other, sneaky, manner in contrast to what they say, or are you just wearing a tight tinfoil hat?

Re:Sleezy, but no point in Morpheus anymore anyway

[ender81b]

Exactly. Why the hell are people using it anyways? Go here to download the spyware free and opensource version.

StreamCast hasn't done anything wrong.

[metacell]

True, if StreamCast really detoured people to another site to collect referral bonuses, they would be violating the rules, and Amazon would most likely refuse to pay up.

However, according to the News.com article, they are merely detouring people to collect usage statistics.

They'll also put referrals inside the browser window in some unspecified manner. Maybe this will take the form of some annoying extra ad banner, or maybe they will put a link to the Amazon.com page selling Britney Spears stuff every time the phrase Britney Spears appears in a web document. But that's only annoying, not "sleazy business practices".

More specifically, there's nothing in the article saying they'll hijack other people's links. See my other post, #3192878.

Where is this plugin,,

[Anonymous Coward]

Ok, so I've installed Morpeus, and is getting annoying ads.. what is this plugin called so i can remove it?

AdAware should be able to kill it..

[Dynamoo]

Lavasoft's AdAware program is great at dealing with these spyware/scumware packages.. I don't know if it deals with Morpheus yet but it's updated regularly (like an antivirus package).

If you don't have it installed on your Windows system, then do so RIGHT NOW. Heck, these guys are heroes.. best of all it's free! :)

What Happened to "No Spyware"?

[dugless]

Didn't Morpheus' just recently (as in last month) contain a prominent "no spyware" logo?

That sure didn't last long.

Re:What Happened to "No Spyware"?

[pod]

It still does, it still does. The "No Spyware" logo is on the Morpheus page, at the bottom of the left frame. http://www.morpheus-os.com/

Delete the plugin

[Otis_INF]

The plugin is likely to be found in the directory:
\winnt\downloaded program files\
where al the IE plugins are stored. I don't know the correct filename, but you should first de-register it from the registry by using regsvr32 /u filename and then delete it from the dir.

Quality of Reporting

[Anonymous Coward]

This is not the first time I've read a /. summary that has told me a story totally unrelated and/or supported by the URLs they provide. Nowhere in the link article is the same scenario discussed. After reading it, I simply cannot fathom where the hell the author got the idea the technology was doing this.

Is it his/her opinion of how the technology might be abused? If so, please prefix your posts, as appropriate, with "X'S PESSIMISTIC OPINION TODAY:". We can stick it next to the daily horoscope. If indeed you have some real reason to believe that Morpheus is doing these nasty things behind our back -- then please provide the links to THOSE sources and not something totally unsupportive of your story and conclusion!

What's even worse is how it seems like the majority of replies to this have not read the article, but only the summary! Again this is not the first time I've seen this happen. I would have thought /.'s would have been less gullible than most, but it appears that once they trust a given source of information in general, they mistakingly equally trust ALL the people involved with that site.

you get what you pay for.

[Anonymous Coward]

So let me get this stright, a application that allows you to steal music, software, porn, etc, is stealing referals from its users and other companys, get out of town!?!

Re:you get what you pay for.

[Graspee_Leemoor]

A web browser or an ftp client allow you to steal music and porn. Blank paper and a pen allows you to steal sheet music, books etc.

There is nothing illegal or wrong about p2p software, it's just another way of transferring information.

graspee

Even easier

[Arker]

Download IEradicator and get rid of that POS for good.

Real Names

[Anonymous Coward]

There is a company called Real Names that licenses the IE toolbar by default from Microsoft and redirect users with "keywords". In other words, you forget to type dell.com and type just Dell. Real Names is the #1 Affiliate in most Merchant programs they belong to. Affiliate Managers can't seem to keep up with technology. Guess Morpheus is going to give them a run for their money.

Item 3 is the problem

[plaidfishes]

TopText is KaZaA's version of this mess so I assume Streamcast is doing basically the same. Specifically, it reads the HTML coming through and does two things. First, any link to an affiliate program it recognizes gets rewritten so that the referal ID is TopText's NOT the site which provided the link and content. Second, the text is searched for keywords which are then rewritten to be links again with a refer ID for TopText. This is the source of the so called Yellow Text links.

The first one is theft pure and simple. The people like me who write the site are trying to get paid by putting the link there. KaZaA, Morpheus etc are simply stealing scarce and hard earned money from others. The second activity might barely be legit but not likely. For example, if I linked "Buy your books at BN" with my referal ID and TopText then grabbed "books" to point it at Amazon, I have still been robbed.

If my sites didn't make at least some money off the links, they would disappear when the hosting bills come around. For all the screaming about /. subscriptions, how bad would it be if all the ad revenue disappeared because Morpheus and KaZaA stole it? Now think about all of the free sites out there trying to live off the referal ads. They will all die if scumware like this becomes standard.

Re:Item 3 is the problem

[metacell]

Is TopText doing this right now? And Amazon et al allows it?

Re:Item 3 is the problem

[BIG MUST]

Just curious are there any _scumware_ free p2p apps out there that actually work?

Re:Item 3 is the problem

[cir77787]

These leeches are killing themselves without realizing it. When a site can no longer make money, it closes. This is true for ALL businesses. When sites no longer exist, there won't be any sites to hijack and no money to make for anybody.

Re:Item 3 is the problem

[JLinden]

KaZaA, Morpheus etc are simply stealing scarce and hard earned money from others. Well they certainly help others steal music artists' hard earned money, why shouldn't they do the same themselves? You can't expect a music stealing company, of all things, to abide by high moral standards.

Gnucleus - no Linux version.

[Anonymous Coward]

Can't believe it.

"Any problems you've had with NT/2000 are gone in 1.6"

No fucking Linux version.

As I've said before, 95% of the readers of Slashdot are just wanna-be Linux users, who use Windows cos, Oh, using Linux on the desktop is just too tricky in todys world.

Can't someone port it to KDE/Gnome?

Anyone using Sourceforge should have to make their stuff ./configure and make under Nix.

Calum, Using Linux cos it's good, not cos it's easy. Wimps.

Re:Gnucleus - no Linux version.

[markyd]

Guess that puts me in the other 5%. I hate Linux.

Re:Gnucleus - no Linux version.

[EpsCylonB]

As I've said before, 95% of the readers of Slashdot are just wanna-be Linux users, who use Windows cos, Oh, using Linux on the desktop is just too tricky in todys world.
Can't someone port it to KDE/Gnome?

If your such a real hardcore linux geek, and better than 95% of the slashdot readership then surely you would be able to port it to linux yourself.

Re:Gnucleus - no Linux version.

[Fweeky]

> No fucking Linux version.

So? What's wrong with supporting one platform well rather than many platforms poorly?

It's not as if the world is short on Gnutella clients; use one of them; do you want me to whinge because x *ix Gnutella client isn't available as a Win32 native app?

> Can't someone port it to KDE/Gnome?

Sure; you. You seem to want it so badly, go right ahead. Have fun replacing all those Win32 API calls with Unix equivilents, and testing it on 20 different platforms, while keeping it in sync with the original version.

> Anyone using Sourceforge should have to make their stuff ./configure and make under Nix.

Why? Last I looked SF was for open source projects, not open source *ix projects.

I guess you're going to go and whinge for a Linux version of Descaler next.

(Score: -1, Dumbass)

Re:Gnucleus - no Linux version.

[ShavenYak]

Just use Qtella. Is that so hard?

Re:Gnucleus - no Linux version.

[Raskolnk]

Callum, Spouting off because he thinks he's smart, not cos he's right. Ass

Quick to jump to conclusions aren't we?

I think you're wrong about slashdot readers. A good part of them are wanna-be Linux users, and most of the rest are wanna-be knowledgable Linux users who pretend that because they can install a big-name distro all by themselves everyone will believe they're really intelligent. And then there are those few of us who don't have a juvenile mentality, and are comfortable enough with our Unix skills to not be afraid to mention Win32 software when it's relevant.

I didn't make the point because I frequently use either Morpheus or Gnucleus. When Morpheus made the announcement I tried both of them--curious to see how far they'd forked the Gnucleus code, and what they'd added.

My observation is just that there is no value in extending GPL software if your strategy is to only add shitty non-features.

Re:Taking food from the mouths of starving childre

[rudy_wayne]

"Shopping sites in general, as well as many other public sites that depend on referral revenue to operate will lose money as a result of this,"

What utter nonsense. A business is supposed to make money by selling a legitimate product or service. If a significant portion of your revenue comes from "referrals" and not from the sale of a legitimate product or service, then you deserve to go out of business.

Re:Taking food from the mouths of starving childre

[Artifex]

What utter nonsense. A business is supposed to make money by selling a legitimate product or service. If a significant portion of your revenue comes from "referrals" and not from the sale of a legitimate product or service, then you deserve to go out of business.

Since when is this not a legitimate service?

By saying that referrals are not legitimate services, you're saying that the site that Greater Good runs, (the one that gives most of the revenue to nonprofits that I mentioned earlier) should go out of business. You're also saying that all of those 1-800-DENTIST or whatever lines should go out of business; they do the same thing, except for profit. And you're definitely saying that all the little if-you-find-my-program-useful-please-click-here-an d-buy-something websites deserve to die, because they are getting money for referrals, not directly from sales, too.

Re:Sleezy, but no point in Morpheus anymore anyway

[bartok]

Gnucleus runs perfectly under WINE btw.

Re:Sleezy, but no point in Morpheus anymore anyway

[Suppafly]

there are native gnutella clients that run natively under nearly every operating system.. its kinda dumb to run one under wine when you can run it natively.

the next step for morpheus...

[mardoen]

... will certainly be the one where the company sues everybody stating these obvious facts in public message boards (like slashdot).

kchhrr.

You are missing who this really hurts.

[Chetmurray]

To hell with the idiots downloading porn or warez.

This affects website owners. Many small websites make ends meet by their affiliate links. This will steal that money away. This is one of the few way small webmasters can make money - short of begging.

And aren't we all sick of the virtual begging cup by now? Don't let the last legit way for sites to make money be destroyed. Sites that don't have traffic for banner ads sales, need these sales. They need this income. If this takes off, it will wipe out small sites everywhere.

As an example, look at http://www.gonegold.com

Informative helpful website. IGN pays them squat. But they do make money on their affiliate gaming links. Take them away and who will pay the site's bandwidth? That is the real issue, that is the real fight. And for some smaller sites, this really is a fight for their survival.

By the way- what is the implications that the only thing you have to agree with when installing morpheus is the gnu license. their is no mention of this spyware(even though it is installed).

Chet

Re:You are missing who this really hurts.

[10am-bedtime]

the implications is that curious agreers look for the source and clean their systems when disgusted enough. the non-curious live in their muck until the people they care about point out how their curiouslessness costs them. then they may become curious. isn't all this obvious?

thi

Re:You are missing who this really hurts.

[Anonymous Coward]

Hear, hear! LinuxPrinting.org is paid for by these referral programs. I'm much happier with this arrangement than I would be with ads or begging, since the former is annoying and the latter doesn't really work. Ads in particular would represent a clear conflict of interest, whereas I can just provide refer links for every printer and then recommend the good ones without as much potential impropriety.

Over the years, three of my original five referral destinations have dropped their affiliate programs. I'd hate to see any more go away; the whole thing is a fairly marginal enterprise as is.

If this is what some of these programs are really doing, then is strikes me as possibly fraud or certainly a breach of affiliate contract. Either way it will be key for the referral tracking operators to figure out how to detect this; tracking them down by rumour or complaint will be impractical.

eSafe would save you...but no longer free

[Ilgaz]

eSafe, ( http://www.esafe.com ) was my cure against IE paranoia while I had to use it.

They do sort of "proactive sandbox security" so eSafe alerts you if some sort of "scum" added to IE 's special helper apps.

Even it watches startup folders and registry continueusly.

Program is kinda problematic on some machines and *sigh* no more totally free, like 1 month of nag free trial now.

Ah, they are proud that none of their customers/users was infected with ILOVEYOU virus before it was known even.

ah found the word, its "behaviour blocking".

Morpheus is crap

[JimPooley]

One of the guys at work had this on his PC, but after the weekend I came in and our IDS had reported shitloads of snarky portscans aimed at him. So he took it off again.

Just don't go there....

PS. EMI report today that due to falling profits, they're laying off 1800 people. That's eighteen hundred people who have lost their jobs, because of shit like Morpheus allowing easy piracy..
Don't forget that. Music theft costs ordinary people their livelihood.

Re:Morpheus is crap

[Queuetue]

PS. EMI report today that due to falling profits, they're laying off 1800 people. That's eighteen hundred people who have lost their jobs, because of shit like Morpheus allowing easy piracy..

Right. Either that, or the fact that the economy is in the toilet and people aren't buying CDs. We're not really sure which. Let's allow the media empires to make some broad-reaching laws that limit consumer control just in case that's what the cause is.

First, using anyone's work without compensating them in the manner they dictate is immoral and illegal. Software, music, art, etc. PAY FOR THE MUSIC YOU LISTEN TO. Hopefully, pay the artist directly. If necessary, pay thier broker or distributor. But pay, or don't use the work.

Second, listening to music doesn't cost anyone anything. It just doesn't provide the revenue expected. If I just didn't listen to music, would that be costing those people jobs? I can't be held accountable for the effects of NOT buying something, can I?

If EMI cared about those 1800 people, they would take a 10% salary reduction across the executive level. I doubt they did. In reality, I assume the market is slower, technology is better and LESS PEOPLE ARE REQUIRED to do the same job than last year. If you don't need personnel, you let them go.

What kind of software is this.

[MikeDX]

So what do we call this new kind of undocumented feature? What is the software now? Ad-aware killed off (almost) anything that could be classed as spyware, so I guess this is now redirectware, or something. What a lot of people don't realise, or remember sometimes is that not everybody has their own computer, and morpheus is probably stored on a family computer where lots of people are using the internet for different needs. Software like this could potentially do any number of harmful things. What was that software that "saved you time" by keeping your form details, or that other one that was catching browser inputs and archiving them. I think just the email addresses alone would be worth a few hundred dollars ;)

This is the same issue...

[wedg]

...that comes up all the time, particularly with reguard to virii and warez. If you can't trust the software - don't install it. When you run any .exe in Windows, you accept that you do not know that it is going to do - at all! It may format your hard-drives, and mail all your porn to your mother.

So, if you don't want all the crap, don't use software you can't trust. How do you know if you can trust it? Well, you could audit the source code and compile it yourself. You could write the software yourself. Or you could get the software maker to sign into a legally binding contract which says that their software will not do anything but its primary intended use (for Morpheus, this would be stealing music), and that they must disclose everything that it's going to do to your computer. Fat chance of that.

What do I do? I run Linux. I only login as a unpriviledged user (I have access to my home directory, that's all.) All the software I install I only install into my home directory (again, as the unpriviledge user.) I'm the sole user of my machine - I don't need to be putting it in /usr/local for others, so I never need to log in as anything but that unpriviledged user.

The security then isn't perfect, but strangely enough, most open source projects don't include spyware/scumware of any sort. So I don't worry about it.

Running any priviledged executable is the ultimate shrinkwrap EULA, saying, "I give you permission to do what ever you want to my computer." We'd all be a little better off if people were more paranoid about their computer - but if they don't mind untrusted software messing around, who am I to stop them? Maybe we'll get lucky, and the next version of Morpheus or Kazaa will automagically lock out any user that downloads it. That would provide a nice lesson. Would it be a virus? Well, you chose to download it and run it yourself. So, I say no.

What do you think?

Re:This is the same issue...

[5KVGhost]

It's quite possible to do exactly the same thing with Windows 2000 or XP, of course.

You need to see this spyware crap at it's worst.

[grundie]

I'm a sysadmin in a large call centre which used to tolerate a certain amount of personal use of it's computers. One of the main helpdesk requests to the IS department had was for ghosting's of computers which had been so f**cked up by various bits of spyware. The worst offender by far was Save Now, getting it to uninstall was a pain and even when you did think it was gone, it would reappear sooner or later. We firewalled the Save Now website and any addresses the app connected to to and rather than die after 2-3 attempts the plugin would thrash the firewall contiuously trying to make a connection. We also came across a particular nasty spyware app which had no visible front end but would randomly redirect you to a porn site, thankfully we had Super Scout installed which blocked 99% of porn sites. However this didn't help the poor employee who unknowingly had this crap on his PC as he though he was going to be sacked for looking at porn (we have always had a very, very tough line on porn).

Most of the spyware on the computers was not intentionally installed which is what made it worse. The last straw for us was when we discoverd a Win98, 1ghz Pentium with 256mb RAM and a fast hard drive taking 15 minutes to start as it was loaded with so much spyware/plugins/rubbish and they all wanted to start simultaneously, running a packet sniffer on that particular machine showed that spyware was using over half the bandwidth available. We locked down the network after that barring access to anything known to inolve file sharing, plugins, spyware etc. However there is an interesting side note, we had a retained lawyer with IT specialisms, aparently the UK Computer Misuse Act makes it illegal to alter the contents of a computer without getting the users authority, which was interesting.

It's bad enought these spyware app's stealing money from deserving small websites and let's face it users as well. You just need to see the damage they can do to networks and computers as well, I can see a lot of sysadmins becomming very angry if these sort of applications get more sneaky and nasty in the way the operate.

they deserve it

[Anonymous Coward]

Anyone who chooses to install software on their machine that allows others to install plugins without their knowledge deserves to be hacked, subverted, etc. It's just stupid.

So the real subject of this Slashdot story should be "Man Gives The Entire World Carte Blanche on His Computer and (BIG SHOCKER) Someone Abuses It."

Re:Vendors taking liberties with your configuratio

[Amanset]

Aren't Lloyds and TSB the same people these days?

So don't use Internet Explorer then

[boltar]

There are plenty of alternatives available
which don't support BHO.

Re:Vendors taking liberties with your configuratio

[mlk]

Yeap :)

I could not think of a diffent bank.

Re:Are you insane? Aretn't we all?

[Anne Thwacks]

And what percentage of Windows users can understand the words "indirectly" and free reign"? (Violate is probably within their vocabulary, and paying too, I guess.

Joe average user just think "I wish PCs were easier to use, I sure as hell won't switch to Linux, Windows is hard enough for me!"

Damages?

[Lord Bitman]

What about the /real/ referers? Can they claim damages?

No Duh.

[Anonymous Coward]

Gee, a company that makes money off of helping people steal is doing something else sleazy? Who would have thought!

Why is anyone suprised?!?

[rberton]

Has anyone ever known a company to be honest in it's business practices?

Show me a clean P2P program.

[Bender Unit 22]

I have played with a couple of them.

Limewire has spyware/adware hardwired into the program, at least in the Windows version. Re-apearing Reqistry keys shows this.

Seems to be possible to run BearShare without all the snooping. But 3rd party crap is included and you must be careful not to get it installed..

A bit offtopic but still on the subject of spy/adware.

Now even my Logitech comes with a lot of crap that when you try to install their drivers, you have to read carefully right to the end what the diaglog boxes says and even after avoiding all their "helpful" programs there seems to be one or two programs running in the background that you can remove without it having any impact on the functions of the mouse like the webwheel etc. witch by the way will have a date with my packet sniffer one day, I'd be surpriced if they didn't do some monitoring.
That Logitech was really too much, they REALLY tried to shove a lot of junk down your throat. Which made med loose the last ounce of respect for the company. I am a user who knows what to look out for, but I'll bet that 99% of the mouse buyers just answers yes to it all.

Re:Show me a clean P2P program.

[Graspee_Leemoor]

"witch by the way will have a date with my packet sniffer one day"

Hey, this is slashdot. Lots of people have dates with packet-sniffers. Hell, lots of the readership *are* packet-sniffers.

graspee

Re:Show me a clean P2P program.

[nestler]

Check out http://furthuernet.com.

A GPLed Java program with absolutely no bullshit
spyware. It is for sharing legally tradable
live performances of bands that allow such things.

i'm thinking a 10 on that

[Kortec]

this is a horrible pratice. the real question is how can it be stopped and how many other services are doing the same thing?

I suggest

[jgerman]

...that everyone who's running Windows pull this little proggie down from cnet:

BHO Cop 1.0

I ran it this morning and don't seem to have bee infected by their fraud so I don't know what the BHO looks like that belongs to Morpheus, but this app looks pretty helpful.

Not new

[Evro]

If they're "hijacking" affiliate codes then they're not the first people to do so. eBates is a company that uses affiliate programs to get 10-15% commissions on sales and then gives the customer back like 3-5% or whatever. They have a piece of software called Moe Money Maker which apparently tracks every click you make, and if you visit a site that has an affiliate program (through linkshare, etc), when you land on, e.g. http://www.moviesite.com/product?title=blabla&sku= 123-131,
it redirects you to http://www.moviesite.com/siteID=ASDFKLAAKIAIRTHAI (the eBates referrer code) so eBates gets a commission - regardless of whether or not the user used eBates to find the store. I work for a company that's had this happen a couple of times and we really hate it, but we let it slide because we'd rather sell the item than not. The only solution is to block eBates as an affiliate, which we don't really want to do.

It's most annoying when the user comes in through a search engine that we've paid Overture to list us on. Some of our overture keywords are over $1, so we have to pay overture $1 plus we have to pay eBates the 10-15% commission. Very annoying, but still better than making no sale at all.

Re:Are you insane? Aretn't we all?

[Cygnusx12]

People in glass houses shouldn't throw stones.

Who's really running these P2P systems

[Graemee]

The way the P2P "companies" are working lately makes me wonder if the RIAA hasn't already taken them over and are secretly running them into the ground to teach the users a leason. Now that's a business plan. ;)

just a nit

[bluebomber]

Or you could get the software maker to sign into a legally binding contract which says that their software will not do anything but its primary intended use (for Morpheus, this would be stealing music).

Just a nit: if the subject matter of the agreement is illegal (ie. stealing music), there is in fact no contract. So if I sign a contract with you to whack your neighbor, I can't legally enforce the contract in the courts. (And not just because they'd arrest both of us for murder; the "contract" doesn't exist.) This is why you see "alternative" methods of enforcement for such agreements.

Re:just a nit

[wedg]

Well, there's the practical use, and the intended use. Stealing music was a joke. Morpheus' intended use would be something like, "Peer to peer sharing of files and information." Only more specific.

Perfect 10

[Anonymous Coward]

When it emails your entire pr0n collection to your mother, girlfriend and boss unless you pay StreamCast N x $$$$$

Re:Taking food from the mouths of starving childre

[RunzWithScissors]

Yes, it's truely ashame that companies don't make more money off of the Internet. If I had a nickel for everytime someone clicked my link , the world would be a better place. I mean, imagine people enjoying the Internet with out referer fees and dynamic redirects. What a horrible thought.

BTW did you click my link yet? How about my link now? I have no vested interest if you click my link . NO really, I don't; in fact whatever you do, don't click my link . Please, for the love of God, DON'T DO IT!!!! my link

My Solution to Spyware...

[Xenoran]

I've found an easy solution to avoiding Spyware... VirtualPC. Simply install virtual PC, throw a copy of Win9x on it and install any questionable programs on that, such as Morpheus. It's the perfect setup... I can keep my real system spyware free, while using every app I want, no matter how much spyware it contains... all of the crap simply stays on the Win9x VirtualPC, where I could care less since it doesn't get any real use for web browsing or anything else...

Browser

[Desco]

Another reason I use Opera.

Re:Browser

[greenshoe]

Ditto. Best browser in the world. I still occasionally have to use ie for sites that won't cooperate with open standards, but 95-99% of the time I use opera. Used to have trouble with banking sites but that has changed as well.

so it really is a solution for getting around spyware. If you have spyware on your system but you never use it, it has less of a chance to harm you? Maybe.

As for disabling popups, thats a built in option with F12>open popups in background || not at all

My Morpheus Borg

[TestBoy]

The only thing that this doesnt do is replicate to other computers. The Morpheus Borg is here.

how do I see if IE has this "BHO" installed?

[BroadbandBradley]

I work support for an ISP and gets LOTS of calls abou not being able to browse because of these types of apps, like webhancer....webhancer shows as a running program whagent...how do I see if a customer has this new marketing helper installed/running?

at the end of the day, it's great to go home and fire up my mozilla browser, sometimes it feels real good to be unsupported.

Re:Vendors taking liberties with your configuratio

[Jester99]

There's a difference, though.

In Intuit's case, they're trying to be helpful with targetted ads ("If you need a tax program, maybe you need a bank -- try this one") and they're obviously being open about it. Shortcuts on the desktop do not bug me. Highlight - click - drag - delete. (And ideally, this should be lowering the price of the software... fine by me.)

What does bug me is when a program silently installs something named 'cdload.exe' or some other important driver-sounding thing in the background which randomly pops up IE windows every 30 minutes or so, and really confuses the heck out of me (especially when I didn't have IE running in the first place!).

To me, "monkeying around with the computer" really means surreptitiously installing boot-time-start daemons which consume resources and spy/spam/etc actively, not just throw a few links around....

That's the difference between scumware and just selling "sponsored links".

Obligatory /. reader comment

[argStyopa]

Why not? Bill Gates = richest man in world = pissing on customers is clever business strategy.

QED.

Timothy only rates this as a 9 ?!?!

[GuNgA-DiN]

On a scale of 1 - 10 for sleazy business practices I would rate this as a 11 or a 12 !!! The nerve of these people to hijack your browser and send you somewhere else. I have heard about sneaky plugins that detect the keywords you type in to a search engine and pop up banner ads to you. But, this takes the cake! We should all file a class-action lawsuit against them. When will advertisers learn that they are not "above the law" !?!?

I rest my case

[rossjudson]

See Fair Software Installation here on SlashDot. This is just the tip of the iceberg -- many, many applications will do this kind of thing. You CANNOT rely on the "good will" of software authors any more. There must be a technical and legal framework in place to prevent these kinds of abuses.

It does happen.

[Anonymous Coward]

For those that tink this is BS I just loaded up amazon with morpheus running and instead of getting the standard amazon.com page I got redirected to an affiliate site

Has anyone done a packet trace?

[U6H!]

I would like to see a nice decoded packet trace so we can see just what the plugin does. It's not important enough to actually install a M$ OS on one of my computers though.

If any of you use this sh-- do us a favor and sniffit so we can see the GET requests. Nothing like the horses mouth to get accurate information. Or maybe it's another part of the horse w/ M$?

BTW: Just in case there is still a M$ user that reads the page, you'll be happy to know that pcap, tcpdump, and ethereal have been ported over to the lesser OS. This means that you can sniff the wire like real men. Do a google search for winpcap, windump, and Ethereal. You won't have to steal any license keys either.

A sense of proportion

[Sebbo]

In the world that gave us the Bhopal disaster, the Sonny Bono Copyright Extension act, and the conditions of migrant farm workers, I have trouble rating browser redirection more than a 4.

"stealing"

[Anonymous Coward]

"You keep using that word... I do not think it means what you think it means."

Re:Excuse me... -are we reading the same article?

[Redwing]

from the story:

By invisibly inserting the redirect into Web surfers' browsers, StreamCast can make it look like it is referring traffic to shopping Web sites without the shopper ever being aware that the Morpheus technology was involved.

Yet you beleive this does not mean your point 1 (the invisible re-directs) and point 3 (the referrals) are related? That is explicitly what the article says. (What's the opposite of FUD?)

I do not trust Morpheus

[DavidBrown]

I installed the latest version of Morpheus, and like the bad Internet citizen I am, I did all I could to limit file sharing. In fact, I deleted every directory off the shared directory list. Yes, I fully admit to being a hypocrite who downloads stuff and doesn't share his own.

So what happens? After running Morpheus for a couple of days, I note from Zone Alarm that I've uploaded about 600Mb through Morpheus. How? The hell if I know. Maybe by deleting all of the shared directories Morpheus decided I wanted to share my entire hard drive.

What was uploaded? I have no idea. If were paranoid this would frighten me.

An now someone says that Morpheus can redirect my web browser. Shudder.

I'd like to see you do better!

[Sloppy]

Fuckin' picky judges! The Morpheus people work hard on this, and still you leave them with bitter disappointment. What does it take to get a perfect ten?!?

Boo Hoo

[Anonymous Coward]

So sombody silently makes a click-thu or sales commission by me going to a site that I was going to anyway. A pretty small (read nonexistent) price to pay for all of the free warez, mp3z and pr0n I get via P2P.

I've seen that...

[BLKMGK]

Read the license closely - you agree to have your search page, your home page, and your favorites HiJacked when you install that crap! In my case the ActiveX applet was NOT signed by a cert that my browser trusted. Needless to say I skipped their "download applet" and went elsewhere. Lot's of P0rn sites are popping up dialogs asking to be made your home page - on one case I saw the dialog had been modifed to say "click yes to proceed". I didn't fall for it but I know someone who did...

A woman I know who has several young kids did a search for "puberty" and when following a link she got into a pop-up site. She must've hit "yes" to one of the dialogs because her homepage was now smut - not that the "Yes" button has default focus. She was in tears by the time I got her straight, she was deathly afraid her kids would see that crap before she could get it fixed. (sigh) Some of this stuff is REALLY sleazy and it's getting worse...

I now use Serials2K instead of going to Asta when I need a number. It has the added bonus of allowing you to input your own serials and store them in an encrypted format. Can be ported to a Palm too!

limewire also doest this

[Anonymous Coward]

check out "limeshop" - it's installed and changes your browser... be sure to remove your Program Files/topMoxie directory

How to write your very own scumware

[TheTomcat]

Documentation on Browser Helper Objects (BHOs) at MSDN.

S

I don't care if you don't think it's a big deal

[Anonymous Coward]

I did not spend money on my computer to turn it into a god damned marketing machine for less-than-scrupulous advertisers. It's a battle for your desktop, marketing companies sneaking shit here, crap there, until you can open a file without some pop up add for a spy cam or an online casino.

fake problem?

[r00tyroot]

sounds as bad as the problem which let morpheus users browse any file on your computer! oh wait, that was fake, too... sometimes I wonder if "The Industry" fabricates/leaks info like this to dissuade people from using such software.. of course, everythings a conspiracy and if it's posted on the Net it's true, right ? :)

Re:fake problem?

[Anonymous Coward]

Why should I believe you then?

Re:fake problem?

[Anonymous Coward]

Point is you shouldn't believe anyone. In which case, he's right, whether you believe it or not.

Re:Vendors taking liberties with your configuratio

[Anonymous Coward]

Yeah, I had really tough time with this when I installed Turbotax...Oh damn, how does that right mouse button work so I can drag those shortcuts to the trash. Man, I must have struggled with getting them off my desktop for at least 5 or ten seconds.

Get over it! It may have been slightly annoying but it was also completely transparent, easy to deal with, and may actually have been helpful for some users!

Is turnabout fair play?

[chmod]

If you associate with criminals and thieves you can expect some rough play.

Don't tell me this isn't about thievery, that's bullshit. When we find the "P2P File sharing service" that isn't ***primarily*** about enabling the unauthorized distribution of copyright and otherwise encumbered works then we can talk about legitimate.

I was a senior UNIX admin at Napster for a year, this doesn't make me an IP expert but I sure did spend a lot of time very close to this issue and some of the principle people and events. Not to mention my own collection which is about 50G ripped from my own CD's.

Morpheus/Kazaa/whatever. Why are you alarmed to find out they've got a knife at your back? They're crooks!

Re:Vendors taking liberties with your configuratio

[Anonymous Coward]

> In Intuit's case, they're trying to be helpful with targetted ads ("If you need a tax program, maybe you need a bank -- try this one") and they're obviously being open about it.

That's ridiculous - someone using a tax program who doesn't already have a bank?!?!?! Just because their being open about it doesn't make it any less obnoxious.

RIAA

[Anonymous Coward]

The record companies are behind this.

ac

Ad-Aware

[RaboKrabekian]

It's worth noting that the new reference list for Lavasoft's Ad-Aware identifies this.

errm Not seen a single instance

[Archfeld]

of redirect since I installed the preview client.
BHO Cop as well as Ad Aware do not find anything.
There were a couple of things I replied no to and I did a custom install.

See, this is what gets me.

[TrebleJunkie]

See, this is what gets me. We'll call a practice like this "sleazy," but never mind that everyone's using the softwear in the first place to steal and pirate music, movies and software.

That's freakin' rich.

this just in

[greymond]

WARNING: any product not purchased through a physical location and highly overpriced is and should be considered "contaminous-opensource-unstable-hacked-cracked-il legal-nazistic" and god will kill a kitten if you use it. :)

Re:Vendors taking liberties with your configuratio

[j7953]

These folks really must think that they own the user once the user buys their product

Well, maybe that's because they effectively do own the user? Operating systems are still designed around the idea that any application has all priviledges the user running it has. This is a good idea if you have small tools -- e.g., cat may read all the files that I have read permission on. When you have larger applications, like a complete office suite, this solution is somewhat less good. Once the user installs software from the internet, this design is a fundamentally flawed one.

Users expect that e.g. on a UNIX system, cat will only read files, and therefore it is a perfect idea to let cat read all files that the user has read permission on. The user's perception will be "I may read this file," when technically it is actually "software I run may read this file."

As soon as the user installs software that does things they don't expect, because the software doesn't advertise all of its functionality, this model breaks. Most users won't even find out, and if they did, they'd probably ask "why is Morpheus allowed to do this?" The user will no longer have the perception that he is doing things, and will have to realize that actually it is the software doing things. The operating system however is still designed around the idea that everything the sofware does was intended by the user. (No, I don't have an idea for a better design.)

Speaking of SpyWare...

[Anonymous Coward]

Did anyone even notice that DiVx:) 5 is now bundled with spyware... does anyone have a link to a version without spyware???

typo in URL in prev. message

[nestler]

It is http://furthurnet.com Sorry.

Re:Vendors taking liberties with your configuratio

[5KVGhost]

The desktop is a "private part" of the user's computer? Not hardly. And, yes, they're paid placements for companies with whom they have a financial relationship. I don't have a problem with that.

Re:Sleezy, but no point in Morpheus anymore anyway

[athakur999]

Are there any Linux clients that support multi-source downloading other than that hideous blob LimeWire?

That's my main reason for trying to get Gnucleus working under Wine :)

Speaking of which, Bartok, how'd you get it to work? Did you have to copy any native DLL's, etc? I can get Gnucleus to come up, but the search bar is missing... It's not much use without that :)

a crime or just slime

[DEFFENDER]

this all brings to light IS THE FORCED DOWNLOAD OF A "PLUG-IN" OR "AFFILEATE" PROGRAM ILLIAGE? think about it.... its sollisitaion. if you buy one thing you CAN get this other thing free. on the net it's you must unclick this box and read 5 pages of legeal BS so you dont.......o and we researve the right to over-turn your unchecking of that box beacuse it our software......but were giving it to you free so you shouldnt grip you ungreatfull slave. is it me or does this sound like the "company store" to anyone else.

Re:Sleezy, but no point in Morpheus anymore anyway

[zmooc]

It's not even a clone - it's a fork. They didn't even bother to rename the directory in which the source is - it's called gnucleus2 or something:P

Re:You need to see this spyware crap at it's worst

[TheAwfulTruth]

Uh... any competent network admin would be using the 98 administration kit to lock down all client machines on the network so that no software cannot be installed and run without the admins permission (The IEAK works the same way for IE).

I hear of "networks" having this problem and I'm flaberghasted. Whose running these things? This is a non issue if the IT department actually did their jobs!

Internet Explorer

[zhar]

Internet Explorer has run a redirect through Microsoft's site since at least version 5.0. They claim it is to inform you of "Product Updates", but they still get to see where you were trying to go.

Why Can a Plugin Even Do This?!?

[Royster]

I want plugins that will display content that the basic browser does not. The browser should pass unrecognized content to the appropriate display engine and provide it a wondow to draw into and the plugin should display the content in the window.

WHY CAN THE PLUGIN ALTER BASIC BROWSER FUNCTION?

This has got to be a huge security hole just waiting to be exploited.

How dare you imply that IE is insecure!

[Anonymous Coward]

This whole thread is scandelous @!

Rumors about silently-installing spyware modules are yet another attempt by the 'Linux Community' to propagandize and capitalize off of the goodwill of Microsoft who only wishes to make our lives easier.

Browser Helper Objects and .NET are the securest, soundest, niftiest, coolest technological breakthroughs to come along to empower the American consumer since the day that Al Gore woke up and decided he would invent the Internet.

I pray for the ungrateful, feebleminded conspiracy-theorists who dare to impune the Benevolence of Microsoft who could very well just not give us IE for free if it chose.

So, if you have any doubts about the security of IE, then you should visit Microsoft's web site and patch Windows through our wonderful update system (which BTW, protects us from The Terrorists who are probably using Linux anyway!)

Face Licks!

-B.G.

Diversion of affiliate link = loss of free content

[markwelch]

By "hijacking" the affiliate referral links from content-based web sites, Morpheus and other "parasite-ware" seek to remove one of the few remaining revenue sources for content sites, and thus it directly threatens the availability of certain types of free content on the internet.

If it looks like c|net is taking a stand in this article, perhaps it's because c|net's reporters will lose their jobs if c|net can't generate income through affiliate links. Note that many of the banner and button ads you see on c|net and other web sites (probably including Slashdot) are actually affiliate links -- the site is not getting paid unless sales are generated and tracked to the content site.

When Morpheus or any other app checks the URLs and replaces other affiliate codes with its own, Morpheus is trying to take revenue from someone else, without providing any benefit to the consumer or anyone else.

The good news is that most affiliate managers refuse to pay commissions to any "affiliate" who uses "predatory methods" like this. The affiliate managers realize that smart affiliate sites won't do business with any merchant who pays the "hijackers" in this situation.

The bad news is that if the hijacker replaces the affiliate link, even if the hijacker does not get paid, there is no way for the sale to be credited to the "real" affiliate. The hijacker is also likely to mis-manage the multiple redirects that often happen when a link passes through two or more ad servers (common with affiliate links that look just like paid banner or button advertising).

In the end, if these predatory software tools become more pervasive, content providers will lose all incentive to provide "free" content on the internet.

This issue is not unique to "predatory browser add-ins." Other content providers are threatened with loss of "the benefit of their bargain" in other ways. For example, that the TV networks have battled hard to discourage marketing of TiVo and ReplayTV as "commercial skippers" because if too many people find ways to skip TV commercials, then the advertisers won't pay the rates, and the networks eventually won't be able to spend $10 million on the next episode of "E.R."

Maybe, in the end, we just won't have advertising-supported content like we do now. Certainly, the current revenue model isn't working to pay the salaries of content producers: even with intrusive pop-up and pop-under advertising, and rows of banners and buttons, big content sites often earn net rates of a few pennies per thousand visitors, and some earn only a few mils (tenths of a cent) per thousand visitors. Those earnings might be enough to cover the server and bandwidth costs, but not to pay a single part-time reporter's salary.

So maybe in the end, the only free content will be sponsored directly by big corporations, who have good reason to pay to control the content and viewpoints of the news we read.

Or maybe some of us will break down and start paying for web content, if only someone would come up with some workable mechanism to allow micropayments (payments of a few mils or a penny to view a web site for a day, or to read an article).

Re:Taking food from the mouths of starving childre

[Anonymous Coward]

douchebag, they're STEALING FROM CHARITIES in this case.

i suppose The Hunger Site really does deserve to go out of business. survival of the fittest. anyway, those kid's wouldn't be starving if they being productive members of the economy, right?

idiot...

Re:Vendors taking liberties with your configuratio

[Anonymous Coward]

In Intuit's case, they're trying to be helpful with targetted ads ("If you need a tax program, maybe you need a bank -- try this one")

If you need a tax program, you already have at least one bank.

And ideally, this should be lowering the price of the software... fine by me.

And I guess you really believe that?

Re:Sleezy, but no point in Morpheus anymore anyway

[secolactico]

That bloody Bonzy buddy is as annoying as the paperclip...

This Has To Be Illegal...

[SkewlD00d]

This is tantamount to theft and fraud. Musiccity.... what a bunch of pr0n-ad-spyware warez-mongers. Then again, blame the people that install these closed-source spyware progs. As they say, know what you're installing lest you pickup a virus.

Re:Taking food from the mouths of starving childre

[Artifex]

i suppose The Hunger Site really does deserve to go out of business. survival of the fittest. anyway, those kid's wouldn't be starving if they being productive members of the economy, right?

Yah, I guess they need to take a lesson from little kids in China and South America, etc., and learn to make clothes and toys for rich Americans and their kids if they want food and stuff... right?

1 - 10 scale

[I am Jack's username]

> On a horrible scale of 1 - 10 for sleazy business practices, I rate this a 9 -- anonymous reader

10: fucking over billions of people (living and yet to be born) by sacrificing their only habitat for short term financial gain
9: torturing people and supporting psychotic murdering tyrants
...
much, much lower: some scum suckers leaching a few dollars with a Trojan horse

Similar to IE...

[smisk]

Does anyone else realize that is is similar to the tactic that IE does nowadays?

Type in "www.asdfasldfjkasdklfjas.com" in an Internet Explorer window and watch it take you to "autosearch.msn.com".

And people wonder how MSN could claim to be more popular than google.

Re:Excuse me... -are we reading the same article?

[metacell]

Hm... You're right. I mistakenly thought StreamCast would insert referrals into the browser in a second way, not related to the redirects.

But please note, the article only says the redirects can be used to get referrals, not that StreamCast actually plans to use them that way. StreamCast says that most referrals will happen inside the shopping section of Morpheus, and that Morpheus will use the redirects merely to collect usage statistics:

"Most of the referrals will happen inside the Morpheus application itself after the new version is launched with a commerce section, [Griffin] said."

"The company on Tuesday said it has begun installing a Web browser add- on that sends some Morpheus users on an invisible Web detour aimed at capturing data about file swappers' surfing habits. [...]
Those separate servers, run by marketing companies including Be Free, count how many times Morpheus users stop by."

What The!?

[dann0]

I keep ending up at The Onion when I type in slashdot.org!?! I didn't noticde at first.

"Final destination"

[WD_40]

All destinies are final. That's what it means. If you haven't gotten where you're going, you aren't there yet.

Re:You need to see this spyware crap at it's worst

[Anonymous Coward]

Some network admins prefer to treat their employees like adults when installing software.

Re:You need to see this spyware crap at it's worst

[Anonymous Coward]

yes, new ultra controlling sysadmins do this.

i let it fly. if they foul it up, i warn them once. not a second time. the second time comes the lock down.

you are probably young, younger then all your users. you will learn. i did.

treat people like adults. also, i didn't go into sysadmin to babysit.

now, i just swap tapes.

Re:Sleezy, but no point in Morpheus anymore anyway

[prog-guru]

Are there any Linux clients that support multi-source downloading other than that hideous blob LimeWire?

gtk-gnutella is really good.

Actually...

[BillX]

The article says that they are not pretending to refer people *now*, during the testing phase, and are merely collecting usage statistics. But from the article, it sounds like this is the intention when the marketing tool *officially* launches:

"When the full marketing program launches in April, Griffin said the affiliate program that sends Morpheus users to participating shopping sites will provide them with some reward in return. ... By invisibly inserting the redirect into Web surfers' browsers, StreamCast can make it look like it is referring traffic to shopping Web sites without the shopper ever being aware that the Morpheus technology was involved. "

Re:Actually...

[metacell]

Maybe. But I doubt Amazon.com et al would allow them to hijack links or artificially inflate referrals even for a second, since they wuould have to shell out the dough and it scares away other affiliate partners.
That's why I assumed the referrals either were from the shopping section inside Morpheus, or inserted into the browser without hijacking other people's links.

But time will tell.

If StreamCast really does try something ugly, I don't think they'll get away with it, because people can just as well switch to Gnutella now when Morpheus is just another Gnutella client...

'I develop Websites'

[DivideByZero]

For who, Microsoft? Maybe you could take your fingers out of the poison-dusted candy jar of IE-forced HTML extensions and back off on your 'Artistic vision' far enough to let all the OTHER browsers work with your site?

Or maybe you're happy with MS forcing their standards on the internet?

Re:'I develop Websites'

[Rakarra]

For who, Microsoft? Maybe you could take your fingers out of the poison-dusted candy jar of IE-forced HTML extensions and back off on your 'Artistic vision' far enough to let all the OTHER browsers work with your site?

The original poster never mentioned IE-specific standards. The simple fact is Netscape doesn't even render regular standards properly.

Re:You need to see this spyware crap at it's worst

[grundie]

We do use the lockdown kit and have done for quite a while, initially to randomly monitor client machines for dodgy stuff then later to lock machines down. Unforunately it just does not work! Plus there is the social engineering of this scumware which takes advantage of users naievity to make them think the app is of real benefit to them and mentions phrases such as "Will work behind most firewalls" or "This plugin can bypass you network security setting which sometimes blocks innocent programs like this". The sad fact is scumware programmers write their software to bypass security mechanisms sysadmins put in place. We now simply rely on a good old fashioned firewall and signed agreement that says if you install unauthorised software you'll be out the door.

Re:You need to see this spyware crap at it's worst

[scrytch]

You seem to be operating under the impression that the competent network admin is the entire IT department. It's really easy to crucify the IT department as a bunch of bumbling incompetent fucks, but I can just about guarantee that the techs will want your head after they have to personally service every special request from every user to get this or that item installed. You can sit on your righteous high horse all you like, but once you try to force it into reality, you'll learn real fast that policy decisions have real and unintended consequences.

Admining a couple linux boxes does not make you an IT division.

Re:Lavasoft's AD-AWARE will Remove this thing for

[FlacoFuerte]

I have the newest version of lavasoft and it didn't detect it. Morpheus' little redirect fairy wreaked all kinds of havoc on my comp when I used norton firewall to restrict access of the website they send you to- www.inmotiongolf.com. Once I restricted it, xp froze completely and after rebooting, it would freeze everytime once imapi.exe loaded. After a few hours of figuring out what the hell just happened, I reinstall my firewall, uninstall the superevil morpheus, delete c:\windows\bpboh.dll, c:\windows\rdxr020305.dat, and c:\windows\system32\rdxr020305.dat. System clean, no more spyware, no more crashes, and I hope whatever ad wizard decided to throw that little component into the new Morpheus drowns in a pool of his own vomit or better yet stops by my place so I can beat him about the head and neck with my keyboard.

the two programs...

[krs-one]

The two programs it installs are called MDM.exe and is something else that does the same thing. They both run silently in the background, popping up windows and banner ads whenever you visit sites. Its annoying as hell. Of course, you could just use Moz and disable pop-upwindows and then uninstall Morpheus.

-Vic

Here's Microsoft's site on how to disable it.

[rapidweather]

Go here: http://support.microsoft.com/default.aspx?scid=kb; EN-US;q298931

Re:Lavasoft's AD-AWARE will Remove this thing for

[Anonymous Coward]

Lavasoft updated the Ad-Aware reference files to detect this. Go and download the newest reference file which has detection and removal of this little unwanted guest.

Is that story a hoax?

[jaaba]

I got the latest version of Morpheus installed, ran the BHO Cop mentioned in Cnet that should be able to track and disable the BHOs. (link to BHO Cop: http://download.cnet.com/downloads/0-3364664-100-5 930345.html ) Results: - Morpheus-related BHOs found: none - Adobe Acrobat related BHOs found: one So I'm asking you people raving here, have you verified if that article is true at all? -jaaba-

Hijack

[b_dahlia]

There is a page at this site dedicated to browser hijackings, and how to remove them. There is also a good size thread on the forum. Hijackings are becoming more and more prevalent, with lop.com (don't go there! ;) ) being the latest up and comer. http://www.SpywareInfo.com/hijacked.html

Re:Taking food from the mouths of starving childre

[DrivesWithSignalsOn]

Runz -- you are so gay! --Drives