Slashdot Mirror


General Public Realizes KaZaa is Spyware

blankmange writes "CNet is reporting the slow dawning of the general public to KaZaa and spyware. "Virginia Watson unwittingly authorized a company she'd never heard of to install software that would help turn her computer into part of a brand-new network. The software, from Brilliant Digital Entertainment, came with the popular Kazaa file-swapping program. But the 65-year-old Massachusetts resident--who has a law degree--didn't read Kazaa's 2,644-word "terms of service" contract, which stated that Brilliant might tap the "unused computing power and storage space" of Watson's computer. " " Fortunately the helpful graph in the article compares the complexity of IRS tax forms with Brilliant's terms of use... guess which one is harder to read?

156 of 408 comments (clear)

  1. service agreements? by dryueh · · Score: 4, Interesting
    "The question is not whether people read and understand (terms-of-service agreements)--of course they don't--but whether they can be enforced," said Cern Kaner, an attorney specializing in software legislation who teaches computer science at the Florida Institute of Technology. "I don't think that companies should have the right to spy on you without your actual permission, but I think it will be hard...to prosecute companies who do engage in this type of practice if you have actually clicked on an agreement that gives them permission."

    I'm wondering if anyone DOES know the legal implications of those service agreements. When those long agreements pop-up before installation, not only does no one read them, but you agree to the thing by clicking on either 'yes' or 'no' buttons....is a yes/no button a legally binding clause? They do not, at any point, get your signature nor is the agree monitored by anything other than the installation program itself (i'm assuming, anyway).

    I don't know...I'm curious..thoughts?

    1. Re:service agreements? by The_Pey · · Score: 2, Interesting

      The other interesting case is where use of the software implies acknowledgement of and binds you to the service agreement. This case is one that happens without actually clicking on the "Yes / No" buttons. How legally binding is this?

      --
      Hmmm...
    2. Re:service agreements? by burts_here · · Score: 2, Insightful

      I'm wondering if anyone DOES know the legal implications of those service agreements the real question is wheather anyone who clicks on them is actually prepared to honour any agreements, i mean most of these companys are providing a sevice that is at best in the "grey" rea of the law, i dont think a lot of users read the acgreements simply because they *will* igonre them.

      --
      Burt "Out of my mind back in 5 minutes"
    3. Re:service agreements? by CaseStudy · · Score: 4, Informative

      Not exactly true. If you're a minor, you can opt out of a contract unless it's for essentials. But you can choose to keep the contract and bind the other party.

      If the parent's authorizing it, though (by giving the disk to install, and using the software), they're probably going to be bound (as much as anyone else, anyway) even if they get their 10-year-old to click on the agreement.

      (As usual, not legal advice or a recommended course of action.)

    4. Re:service agreements? by aozilla · · Score: 2

      For all they can tell, a dog or cat walked across the keyboard and accepted the EULA...

      Thereby breaking the DMCA.

      --
      ok then your [sic] infringing on my copyright! Could you as [sic] me next time before STEALING my comments for your own?
  2. Agreements by itsnotme · · Score: 2, Interesting
    Heck.. I like having the GPL or the PGPL and whatnot since its a standarized agreement and once you've read it once you dont really have to read it again because its the same agreement over again so its easier to think about whether you want to use it or not.. but the terms of service agreeements and whatnot are different that there's really not a standard.. and yet thats probably why almost nobody reads 'em.. here's a direct quote from the article:

    Although people regularly click on such agreements, few scroll through the verbiage. In a survey last month of 155 adults by Richardson, Texas-based consulting firm Privacy Council, 76 percent of respondents said they were "concerned" about having their privacy violated on the Internet. Only 22 percent admitted to reading privacy policies. Among respondents ages 18 to 25--a core constituency for file-swapping software--only 8 percent read the policy.


    Only 22% admitted to reading it! gee I wonder why.. that 10 page terms of use policy in windows 2000 was so frickng long and complicated that once you get past the 2nd page you just hit the pg-down button and hit the F8 to confirm afterwards after taking advil to try to forget that you even read it in the first place!

    Maybe they should do what newspapers do and dumb it down a bit so that it'd be shorter and a easier read then more people would be better informed..
    1. Re:Agreements by itsnotme · · Score: 2
      I wish the M$ service agreement was dictated to you entirely by that charming little paperclip thing...then I'm sure everything would be crystal clear.


      No.. there would be a rise in the suicide rate after people realized they couldnt get hte damn paperclip to shut up while installing
    2. Re:Agreements by tps12 · · Score: 2
      taking advil to try to forget

      In our society, it is traditional to use spirits for this purpose. Advil is normally utilized as a pain reliever, though alcohol functions quite well in this role as well.

      --

      Karma: Good (despite my invention of the Karma: sig)
    3. Re:Agreements by analog_line · · Score: 3, Insightful

      I feel little sympathy for people "burned" by click-through stuff. If you're not willing do deal with the possible consequences, and you don't want to read the agreement, don't click "I Agree". If you click "I agree" you've got a shaky case because you allowed whatever to be installed on your machine.

      Let the buyer beware. If you sign on the dotted line or click on the flashing button, you are assumed to have done your damn homework. If you haven't, you and only you are responsible for the problems it causes. It's common sense, people.

      Oh wait, I forgot. Common sense is stuff that everyone says, but no one actually believes. I forgot.

    4. Re:Agreements by analog_line · · Score: 2

      kThat's not common sense, it's common courtesy, there's a difference. And the only real way to enforce common courtesy is avoidance of those who don't practice it.

      If someone is a jerk, if you want to avoid problems, don't deal with them. If someone is trying to snow you with mounds of legalese in a user agreement that could contain the gods know what, don't install their software. That's common sense.

      And I'm no defender of common sense...common sense is common sense whether people follow it or not. I just find people who completely ignore it, and then complain about it, pretty damn pathetic.

  3. Re:And the public cried... by anonymouZ+coward · · Score: 3, Interesting

    When you lease a car, you don't own it. The lease company does. They can do whatever they want to with the vehicle as long as they disclose that up front. If you sign the lease without reading the fine print, that's your fault. Now granted, I think software companies are trying to snowball consumers by throwing multi page EULA's at them and burying the scary stuff. All the more reason to only use GPL software. I'm afraid to even boot my Winblows box without running Adaware right away.

  4. Those Poor Normal Users by inKubus · · Score: 3, Flamebait

    I am glad that I do home computer consulting for a living. There are so many idiots out there who just install whatever software they find without knowing the facts. And I'm glad that most of the facts are only availible on obscure sites until most people have already been hurt. I LOVE AMERICA. I am glad that companies to stupid stuff like this to hurt consumer's PCs. Somebody has to fix the damage, therefore it translates into MONEY for me ($75/hour).

    I am no troll. This is the truth. It's not very nice, but look at how much a body shop charges. Or a plumber. People don't want to be protected. They do not want knowledge. They want to make mistakes, and they want to pay to have them fixed.

    God Bless America.
    Cheers.

    --
    Cool! Amazing Toys.
    1. Re:Those Poor Normal Users by inKubus · · Score: 3, Insightful

      he's basically someone who's only skill is that he has a slight bit of knowledge ver the average computer user and feels he needs to charge ridiculous prices for his *ahem* expertise. Try doing real work with computers for a living.

      Hey, I just like the BMW. A LOT. I could be coding device drivers, but I prefer to have sex with girls. Being a computer "doctor" lets me work doctor's hours. And I can take a vacation whenever I want.

      Personally, if you're not happy, then what the fuck is the point of existing? Coding device drivers does not make me happy. It can be interesting, but for about 24 hours straight only. I prefer to keep my sanity. So I fix stupid Windows problems? Does that make me not "l33t"? FUCK YES. Do have have an easy job? FUCK YES. Do I love my life? FUCK YES. You may answer these questions differently for yourself, but I am happy where I'm at and no ANONYMOUS COWARD can knock me off my pedestal.

      BTW, got my +1 bonus today, so I'm just abusing it a bit to get my voice heard just this once.

      Cheers.

      --
      Cool! Amazing Toys.
    2. Re:Those Poor Normal Users by Picass0 · · Score: 2

      I am glad that I do home computer consulting for a living. There are so many idiots out there who just install whatever...

      I bet you don't get too many call backs with your arrogant attitude. People can tell when you hold them in low regard, and they usually return the favor.

      Most of these people you're helping are not idiots, just beginners. Unscrupulous companies are taking advantage of them. Your bad ethics aren't making things any better.

      When I gave my wife her first computer she was on a web site and called me to ask for help. A banner ad designed to look like a Windows alert message was telling her that her Internet connection was "too slow, do you want to upgrade?" I told her that was an ad and to ignore it. She then asked how she was supposed to know that and I couldn't give her a simple answer. She was right, it was a trick. In the end, I told her that some things just come with experience.

      The general public is going to slowly wake up to punitive and immoral EULA over the next few years. In the meantime, you might try behaving like a professional. The world has enough self-important experts. Wanna be a good American? Try helping someone for a change.

    3. Re:Those Poor Normal Users by Picass0 · · Score: 3, Insightful

      This one is easy. A real W$ alert box won't scroll away in a browser.

      In this case, you are correct, and I showed her how to slide the scollbar and watch the ad fall out of frame.

      But it is very simple to pop a real alert, a new window, or any multitude of other ways to trick an inexperienced user into installing software, joining a service, or disclosing personal information.

      I think it's important to keep the right attitude toward users who are learning to use computers. If we make people afraid to seek our help, we only have more work to do later when we need to re-build a system.

      The first message in this thread had a mocking undertone that I think is one of the reasons people have difficulty learning to use computers.

      I hate that type of elitism. It's one of the things that hold back Linux.

  5. Kazaa Lite by Anonymous Coward · · Score: 5, Informative

    Kazaa Lite is without spyware:
    http://www.kazaalite.com

    It replaces one of the spyware DLLs Kazaa requires with a do-nothing version.

    Dan East

    1. Re:Kazaa Lite by Marillion · · Score: 5, Funny

      Anyone else find it ironic that I visit the site and and a popup ad appears?

      --
      This is a boring sig
    2. Re:Kazaa Lite by Loligo · · Score: 2, Insightful

      >Have you seen the source code?

      You are aware that the number of people that could tell ANYTHING from the source code is extremely small, right?

      That's always been one of the things that's bothered me - "Where's the source?!" I don't care, I couldn't do anything with it anyway. Neither could 99% of the people looking to use something like Kazaa.

      "But there are people that can!", you cry. Great. What makes THEM any more trustworthy?

      -l

    3. Re:Kazaa Lite by fishebulb · · Score: 2

      you can get the source code for the dll, it just returns different variables to check that it is intact, and should proceed

    4. Re:Kazaa Lite by Rogerborg · · Score: 2
      • Kazaa Lite is without spyware

      So is any Gnutella client compiled from source. Plus, the network is non proprietary, so you won't have to change clients/networks/licenses every couple of months.

      Superpeering has helped give the Gnutella network a new lease of life, and there's a lot of content out there. The only problem is that asynchronous connections are taking their toll: last night I had 300+ files queued @ 0.0k/s. But that's endemic on any P2P network. Share your damn files! ;-)

      --
      If you were blocking sigs, you wouldn't have to read this.
    5. Re:Kazaa Lite by cpuffer_hammer · · Score: 2

      But they can hire someone who can.
      Thats how programers will make money in a GPL
      world. There will be lots of work it just will be different work from the work people are doing now.

    6. Re:Kazaa Lite by alphaseven · · Score: 2, Insightful
      This will only work until whoever is behind Kazaa Lite gets greedy and decides to add spyware.

      You can't predict which program will pull the bait-and-switch anymore. A free filesharing program gets released, without spyware, then after I tell all my friends about it and they have a bunch of users they add spyware. Just like what happened with Limewire.

    7. Re:Kazaa Lite by 56ker · · Score: 2

      Ah - the /. effect - kills all known sites dead.

  6. It's been going on for ages by wackybrit · · Score: 2, Interesting

    I don't see the big deal here. Software tries to get onto your computer all the time. What about Macromedia Flash? That'll install within the browser. Or how about those lame Comet Cursors? Ditto. Do I want either? No.

    It happens in the real world too. When you buy something at Circuit City, they'll ask you if you want this 'cover plan' or that 'insurance' blah blah.. and after standing in a lot of lines, I've noticed that people generally agree to these things without understanding what they are!

    Once I stook behind a guy who agreed to everything, signed all the papers, and then the sales guy said.. okay, that's an extra $45 please. The customer didn't realize what was going on and said 'No thanks' and left.. after holding everyone up in the line for 5 minutes filling all the forms out!

    So I don't really see a problem here. It's a form of idiot tax. It's harder to avoid all of the pitfalls today, but hey.. you gotta remain vigilent at all times.

    1. Re:It's been going on for ages by inKubus · · Score: 2

      Thank god someone agrees with me. Honestly, why should I waste my time looking after stupid consumers when I could be making money off them?

      *I* know how to protect my computer. The last thing *I* need is more laws telling me what I can and can't do. That just makes more jobs for lawyers. I'd rather the money goes into my home computer consulting pocket. :)

      --
      Cool! Amazing Toys.
  7. Re:And the public cried... by ergo98 · · Score: 5, Informative

    Of course, the whole point of the article (if you've read it, though I'll guess that you haven't) is that the complexity of most EULAs are absurdly difficult : The type of convoluted, circular, impossible to read verbage that virtually no one could read through and understand even if they were truly committed to reading the EULA for every single piece of software that they installed.

    Personally, I think that there should be basic laws governing software just as there are in the rest of society (i.e. There is a 20 page EULA every time I go to a variety store and buy a can of coke, because there are certain expectations and societal and legal standards that govern the experience : i.e. Drinking a coke doesn't make them own my liver) : For instance, no software can communicate over the internet without explaining, in simple English (not intentionally vague legalize) why it is doing it, and who it's really benefitting.

  8. That's why we have Kazaa Lite! by arnoroefs2000 · · Score: 3, Redundant


    Get it here or here

    ---

    Extra Features compared to original KaZaA
    - No Adware
    - No Spyware
    - No banners
    - No bitratelimit for mp3 files
    - No irritating websites loaded into KaZaA
    - No crappy BDE Viewer
    - No f*cking Bonzi Buddy
    - Set up multiple users with the included PseudoTrack tool

    1. Re:That's why we have Kazaa Lite! by Admiral+Llama · · Score: 2, Informative

      Popups? Go into Mozilla, under Advanced, and Scripts & Windows, there's a checkbox for allowing web pages to open up unrequested windows. Bye-bye popups!

    2. Re:That's why we have Kazaa Lite! by burts_here · · Score: 4, Funny

      I have kazza light to, just i used duct tape over the right bits of the screen, and i intstalled it on a P166 machine with a 300MB hard disc, hah try and steal my spare CPU time!

      --
      Burt "Out of my mind back in 5 minutes"
    3. Re:That's why we have Kazaa Lite! by daviddennis · · Score: 2
      Ouch. That absolutely ghastly review of "him" was enough.

      He sounds just like Binky, the Office Assistant, as shown in one of my favourite cartoons of all time

      Can it be true that some people actually ... gulp ... like ... him?

      When I first saw him, I felt gripped by fear, fear that "The Paperclip Spy", as I called him, would be sending my deathless prose to Redmond for analysis. I knew that was an irrational thought, since they could send my stuff to Redmond even without a paperclip, but ... you get the idea.

      (Come to think of it, our otherwise very nice and sane accounting lady loves her cat version).

      D

    4. Re:That's why we have Kazaa Lite! by MindStalker · · Score: 2

      Does anyone know how to block bonzi from contacting MS for updates or new ads or spyware or whatnot. The old women in my office won't stop installing him and get all pissed of if I talk about removing him. So wondering if I can just ring his neck?

    5. Re:That's why we have Kazaa Lite! by Alsee · · Score: 2

      I know that Morpheus had an issue where there is an available port they can telnet to and get your user ID and whatnot.

      I was worried when I first heard about it, so I investigated. As far as I can tell it was a bunch of FUD. Your IP address is no secret - any communication on the internet has your IP address (even games), unless you use an anonymous relay. Every search result has a user psudonym on it, so nothing new there. And it reveals the list of files you chose to share - which is part of the normal search function.

      The only "back door" thing about it is that you could download from the net using a normal web browser rather than requiring special software. Neat feature - nothing evil there.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  9. An app to remove most spyware by SweenyTod · · Score: 5, Informative

    It's called AdAware, and it seems capable of nuking most nasty little apps installed by websites and applications like Kazza. Grab it here from Lavesoft USA and be very afraid at how many spyware components it finds!

    You should also download their reference file update utility too. This lets you keep up to date with the latest spyware programs out there.

    --
    Alas gallinaceas de urbe bovis volo
    1. Re:An app to remove most spyware by QuantumG · · Score: 2

      maybe I didn't experience this because I use mozilla and have the options set to not allow web sites to open unrequested windows, but I did notice the flashing "new" boxes. Annoying.

      --
      How we know is more important than what we know.
  10. My favorite quote from the article: by zbuffered · · Score: 5, Funny

    Much as the avalanche of spam in the 1990s prompted action from legislators and regulators

    Yeah, I'm glad we got that taken care of back in the 90s...

    --
    Synergy is your friend
  11. Just enlightened my neighboor by Sabalon · · Score: 5, Interesting

    He got a new computer, got all excited about Morpheus and then they switched. Since then he hasn't been able to get anything to start downloading. So he was telling me he was going to install this Kaaza thing and try it, and asked me if I'd heard of it.

    As I explained some of the functionality surplus to him, you could see his jaw just dropping and dropping.

    But I betcha he'll still install it - cause he loves the CD burner he has and how easy it is to burn MP3's-> CDDA.

  12. don't care about the 'hidden network'.... by reaper20 · · Score: 3, Interesting

    I care that this bde stuff is bringing w2k/xp machines down to a grinding halt in fugly ways.

    Ad-aware is getting used more and more in my toolkit. I sure wish Norton/Macafee/whoever would just go ahead and add crap like this into their AV software. This garbage is a "virus" in my book.

    1. Re:don't care about the 'hidden network'.... by TedCheshireAcad · · Score: 2

      Ad-aware is getting used more and more in my toolkit.
      Amen to that, I run Ad-Aware once a week on the lab I administer, spyware bogs down those PC's like nothing else.

    2. Re:don't care about the 'hidden network'.... by dzym · · Score: 2

      Probably not as bad as new.net, mind you... I just gave a deep discount to a co-worker for cleaning her computer up. The amount of nastiness left on that computer before she brought it to me prevented an upgrade to IE6 and broke the start-up process, leaving it in a totally unusable state. And she had to get files on the machine back, no backups to restore from. So I had to go the long way around and clean it all up manually. Ugh. new.net, bde, 4 different instances of gator, the list goes on and on and on. On the other hand I also trained her to use ad-aware. So hopefully that won't be a recurring issue.

  13. Re:And the public cried... by Spankophile · · Score: 5, Interesting

    It only goes to show that you should read everything before you sign it. This is similar to discovering on your car lease that the company reserves the right to use the car when you aren't.


    I've always wondered if the "click if you agree" thing is enough. I remember learning once in my highschool law class that when it came to contracts etc, both parties had to fully understand the extent of the wording - in order to protect people from "fine print" trickery.

    It would seem to me that these over-complicated EULAs are an attempt to either confuse users, or get them to click "Agree" without understanding the terms.

    If I "trick" you into signing something, you should still be legally protected. Granted of course that you can afford to take it to court.

    But that's what class action suits are for right?
    IADNAL (D==Definitely)

  14. Re:And the public cried... by The_Pey · · Score: 3, Informative

    If you read many of your EULA's carefully, you'll find that you have a right to use the software, but you don't actually own the software... Really depends on the software company, but this is fairly common.

    --
    Hmmm...
  15. Why is this so difficult? by kvn299 · · Score: 5, Interesting

    I'm so glad these guys are getting pounded for this. It's pretty amazing how many news outlets picked up on this story. Unfortunately, there are many many more situations like this that are overlooked.

    I really don't have a problem with companies adding extra programs into their software. The problem I have is 1) Not being told about it and 2) Not being given the option of opting out or not installing it.

    As far as I'm concerned, a license is not an appropriate place to inform the user of third party software coming along for the ride. Software should be very explicit during install exactly what's happening. That way, the user can either not install the program, or if allowed, not install that component. What's so hard about that?

    The fact that these companies try to hide this stuff shows they know the systems are a bit shady.

    Strangely enough, this happens with big-time commercial software as well. I was pretty p*ssed when Intuit's TurboTax installed Internet Explorer on my laptop without asking. It just told me, "Installing IE 5.5 now" with no cancel button. I had 5.0 installed and it was there for a reason. Oh, well.

    Hopefully, awareness of these practices will hurt companies who will entually find it beneficial to be up front with their customers!

    1. Re:Why is this so difficult? by AvatarADVathome · · Score: 2, Insightful

      Here's an even better idea! DON'T BUY A CAR if you don't want to have tracking devices in it! It says that there is one right there in page 15 of your loan agreement, and big deal if it calls the cops every time you speed! People already know that they're in there and if you're too stupid to have known yourself, tough!

      If you are smart enough, you'd buy your own car parts and assemble your own car. But if you're too lazy, then you can't complain when a car company tries to make an extra buck or two from the government...

      Moron. I don't build cars for a living and neither do I code.

    2. Re:Why is this so difficult? by fishebulb · · Score: 2

      we do need laws occasionally. but they need to be good thoughtout laws.

      There is nothing wrong with a law to prevent (and in this case companies) from doing certain things.

      The problem is that laws are used to "solve" everything.

      But they still can be applied properly when the time is taken to implement them the right way and for the right reasons

    3. Re:Why is this so difficult? by Rakarra · · Score: 2
      If people were smart enough, they would just download open source software, examine the code and compile it themselves.

      Man, what a huge backwards step that would be for society. One of the biggest reasons for using a computer in the first place is that it is supposed to make tasks easier. You have more power with a word processor than with a typerwriter (or pen and paper). Turbotax makes filing simple tax returns very easy and efficient. Online card catalogs are easier to search than traditional ones.. the list goes on. Yet you would ask that all the time savings not only be lost, but that everyone should be worse off with computers than they were beforehand. Now.. you could just be trolling, but there are people with this inexplicable attitude. Do you bake all your own food yourself? Did you assemble your own car? Your own house? Why should those be any different?

  16. This sounds like a great article. by n-baxley · · Score: 5, Funny

    Unfortunatly, I lost interest and didn't take the time to read all the way through it. I hope there wasn't anything I'm supposed to know in there.

  17. The correct term is THIEFWARE by Anonymous Coward · · Score: 2, Insightful

    or burglerware if you like. People rightfully don't expect their pc to be tapped, its resources used or otherwise tampered with.

    Of course "it's their own fault" but that does not take away the unprecedented lack of morality of the companies involved.

    It should be considered virii and nothing else.

    1. Re:The correct term is THIEFWARE by pomakis · · Score: 2
      or burglerware if you like. People rightfully don't expect their pc to be tapped, its resources used or otherwise tampered with.

      That's a very good point. If you sign an agreement with your plumber to get some work done, and page three of what you signed states "You hereby grant Joe's Plumbing the right to enter your home and use the resources contained within at any time", the contract would most certainly not stand up in court. I don't see how spyware contracts are any different.

    2. Re:The correct term is THIEFWARE by edrugtrader · · Score: 2

      insightful? bah.

      maybe we should call it KaZaaGate??

      --
      MARIJUANA, SHROOMS, X: ONLINE?! - E
  18. One interesting point.... by phunhippy · · Score: 4, Insightful

    How many millions have downloaded this software now?
    How come not one person out of these millions noticed that line about tapping your computers unused cycles and wrote to a news site pr here about it?
    Why did this come out only when brilliant filed with the SEC?

    Surely at least one person must have read the damn eula? Somehow i don't feel to bad for everyone..

    A very happy furthernet[furthernet.com] user :)

    burn my karma if ya like i don't care i think i have a good point :)

  19. There should be a law... by CaptainPhong · · Score: 5, Insightful

    It should be illegal to have complicated and misleading user-agreements in software. Over the course of a day, a consumer might have to agree to several of these, not to mention other contracts, service agreements, etc. they have to sign in their non-computer life. Invariably, these sorts of things are unreadably long and full of Legalese unintelligible to the average Joe. We're bombarded by so many, that it is literally impossible to read and understand them all, let alone send them to our lawyers (as we are "supposed" to do with contracts).

    Because of the size, complexity and volume of these things (and the need to usually get past them quickly), I would argue that they amount to coercion (which would invalidate them). The same is true of shrink-wrap software licenses (which you are rarely able to examine until well after you've unwittingly agreed to them). Of course, I doubt a court of law would agree with me. However, I think it would make sense to have a consumer protection law that requires that these sorts of things have a short, concise, easy to read summary at the beginning that gives the user an idea of what they're getting in to (with all the legalese below for completeness). That would prevent companies from creating scumware like this then hiding behind their user-auto-agreements.

    --
    ... "Give me a woman who loves beer and I will conquer the w
    1. Re:There should be a law... by MrFredBloggs · · Score: 2, Insightful

      `coercion` to me suggests someone being forced to do something against their will. This is the exact opposite - someone choosing to download some software, then choosing to install it, and choosing to NOT read the contract they are entering into. Its about as far from coercion as you could hope to be.

    2. Re:There should be a law... by CynicTheHedgehog · · Score: 3, Insightful

      I would prefer to get rid of licensing agreements entirely. I don't have to agree to any binding terms when I purchase a CD player or a hair dryer; why should software be treated any differently?

      Of course I realize that unlike my hypothetical hair dryer, a piece of software can be copied and distributed using little or no personal resources. It isn't exactly a commodity, so it can't be treated as such. Nevertheless, I'm still opposed to EULAs in their current forms, so perhaps a compromise is in order.

      Generally speaking, the GPL and its close relatives don't get much flack from the SlashDot crowd. In essence they are EULAs, using the same legalistic and hard-to-understand languages as their distant proprietary cousins, but they are accepted, tolerated--even welcome in our community. They are maintained by standards organizations, publicly reviewed, and well understood.

      Can this be done in the commercial world? Like, such-and-such has a EULA that is approved by the [insert standards body here]? But then again, even if it did help identify these issues sooner, my guess is that no one would even bother to look for that seal ("Kazaa isn't using an approved EULA? Oh no! Oh well.").

      And then, no one could force a company (*cough*Kazaa*cough*) to get their EULAs approved. I'm not sure if I'd want that anyway.

    3. Re:There should be a law... by karmawarrior · · Score: 2

      Of course I realize that unlike my hypothetical hair dryer, a piece of software can be copied and distributed using little or no personal resources. It isn't exactly a commodity, so it can't be treated as such. Nevertheless, I'm still opposed to EULAs in their current forms, so perhaps a compromise is in order.

      You don't have to sign a licence agreement when you buy and read a book, borrow a book, watch TV, watch a movie at a theatre or on a VHS tape or on a DVD, listen to a music CD, listen to a radio station, etc, etc. To varying degrees, all of these are comparable to the use and flexibility of software.

      So I agree: screw 'em. At the very least, it should be possible for every user to use a piece of software without agreeing to an EULA, to the extent that a buyer can claim money back, time and effort recouped, and extra damages if they are not given the option. If a software company wants to offer an alternative, then that's fine, as long as it's an alternative, and not a replacement.
      --
      KMSMA (WWBD?)
    4. Re:There should be a law... by LL · · Score: 4, Insightful

      Because for software to be useful, it has to interact with other components and people. A hair dryer is a stand alone task but driving a car, you have to acknowledge the rules of the road and all the traffic signals and accept liability for 3rd party damaage and injury.

      GPL is a *voluntary* offer. In return for consideration of using other people's GPL code, you agree to behavior restrictirs (not obscuring source). EULA offer zero warranties and impose so many conditions and disclaims and exclusions clauses it wouldn't surprise me if it violated a dozen statutes. Because so many technical people have tested GPL (not to mention argued it up and down the valley) hackers have a fair understanding of the implications, even if they disagree with it, can can even come up with their own counter-offers (MPL, etc).

      With the commercial world, pre-defined contracts basically weight themselves against the user, there is no negotiation, and courses for remedy are virtually non-existant. The doctrine of equity is seriously eroded here. Until companies come up with a way of justifying their service (as encoded in software) is legally binding and balanced as to benefit/obligations, I think the public is right to be sceptical of any claims. Would you trust an email that offered you $xxxx by doing your taxes in a certain way? Or would you ask your accountant who can at least be charged with professional negligence.

      LL

  20. OB AdAware Link by Tower · · Score: 2
    --
    "It's tough to be bilingual when you get hit in the head."
  21. Unexpected (unintended?) bit of honesty by drew_kime · · Score: 3, Insightful
    "I'm not an extremist," said Robert Regular, vice president of sales and marketing at New York-based digital advertising firm Cydoor. "But all this talk of spyware is the equivalent of elevating one bad seed, and it's having negative consequences on the good software. The public doesn't have time to investigate if it's negative software; they'll just stop downloading ... I would hate to think we could reach a point that, whenever a dialog box comes up and says, 'Do you want to do this,' bells go off and people become worried." (My emphasis)

    Personally, I wish that is exactly what would happen. Popups dialogs and confirmation boxes should only appear when there is something you need to think about. If you're not supposed to think about it, then why are they bothering you with the popup in the first place?

    --
    Nope, no sig
  22. Re:And the public cried... by inKubus · · Score: 3, Funny

    Boo hoo, the poor public. If they cared enough about their computers and what was happening to them they would learn it. THEY DON'T CARE. THEY DON'T READ SLASHDOT. THEY DON'T SPEND 8 HOURS A DAY SURFING THE WEB. I think it's fine to exploit consumers weaknesses like this. Every other industry does, why shouldn't software?

    There is not a box on the front page of the New York Times that says "Certain stuff written in this paper is false." Normal people assume everthing in there is true, and smart people know to take it with a rock of salt.

    The same with computers. People SHOULD just assume the software works and is safe, and if you're smart, you won't and you will read the EULA.

    Then, when the conseqences occur, hire a professional to fix it. If people shouldn't be expected to learn, why should we be expected to protect them out of the goodness of our hearts? I am a home computer "consultant" and I make good money fixing people's computers. People who don't give a flying F what's running on it, so long as they can look at their porn and write their emails and print their Word docs. People who screw up their computers and are totally fine with paying someone to fix it. Real consumers. Realists. Not cheapskate wannabe good citizens who like to spout off about "protecting the consumer". You've obviously never had a real job or you'd know there are no friends in business.

    So, I'm glad companies take advantage of consumers, and I'm glad computers screw themselves up. Because it gives me a job. Don't try to take it away from me.

    Cheers.

    --
    Cool! Amazing Toys.
  23. Re:MS by galaga79 · · Score: 3, Insightful
    People should realize that EVERY MS product is spyware.
    While Microsoft doesn't having a gleaming reputation in these parts it's a big claim to say that all Microsoft products contain spyware. The only cases I have read is of Media Player and perhaps Product Activation but both of those are open to contestation. Plus the only spyware that Ad-Aware detects after a clean Windows 2000 install is some IE registry thing, whose name evades me but that is trivial in comparison to KaZaa.

    So until you back up your claim with some credible links I am skeptical.

  24. Re:And the public cried... by Saib0t · · Score: 2, Interesting
    I've always wondered if the "click if you agree" thing is enough. I remember learning once in my highschool law class that when it came to contracts etc, both parties had to fully understand the extent of the wording - in order to protect people from "fine print" trickery.

    This raises an interesting question in my mind. My mother tongue is french, I have enough technical knowledge of english to figure out what the menus of a program are and what the use of the program is. But I don't understand english legalese (nor french, for that matter). So would a court consider that they tricked me into clicking the I agree button by intentionaly obfuscating the agreement?

    You could of course complain that I should have clicked the "I don't agree" button then. But what in the case I give this software to my mother (who has no knowledge whatsoever of english), she tries installing the software and by trial and error, finds that the "I agree" button is the only one that installs the program. Can she still be considered tied by the "contract"?

    --

    One shall speak only if what one has to say is more beautiful than silence
  25. jeebus! by xarfel · · Score: 4, Insightful

    This is so ridiculous. Trust is soon to become a thing of the distant past. The last shreds of it are slipping away. Modern cannibalism for the sake of the dollar. So sad.

    "Brilliant, whose Altnet peer-to-peer software piqued consumer fears, says it is committed to telling people exactly how their computers will be used via new agreements and pop-up boxes as it loads more software and starts using consumers' computer resources."

    If they were so committed to telling people, why the hell didn't they? All of these companies set out to decieve, then lie and manipulate to cover their asses. I can't even imagine the discussions that these people had to plan such an underhanded ploy.

    You can't even hum two bars of a song without someone looking for royalties. Do you think these companies intent to pay up when they use your computer to solve a million dollar math problem? hell no! damn the man..haha

  26. Hillarious by Kenshiro · · Score: 4, Funny

    "... I would hate to think we could reach a point that, whenever a dialog box comes up and says, 'Do you want to do this,' bells go off and people become worried." (Robert Regular, vice president of sales and marketing at New York-based digital advertising firm Cydoor)

    Oh yeah, wouldn't want that...

    1. Re:Hillarious by 0xA · · Score: 2

      Damnit, I was gonna say that!

      Dear Mr. Regular,

      I send you this file to ask your advice....

  27. TextArc Revelation? by limekiller4 · · Score: 2, Funny

    I'll bet you a nickel that if they run the Kazaa TOS through TextArc, Bill Gate's face will appear. =)

    --
    My .02,
    Limekiller
  28. msconfig by The+Ape+With+No+Name · · Score: 5, Interesting

    Part of my job is to configure students machines for use on a dorm network. Very often we get complaints about service ranging from no connectivity to slow performance. Of course the slowness can be directly attributed to P2P apps and their tendency to hog bandwidth, but Gator and its ilk are notorious in our circles as poorly written programs that not only do all the privacy violation, etc that they should be reviled for, they also have the unique ability to mung Winsock on machines running ME, 98 and 2000. The fix requires a young priest and old priest and a silver sword (read: edit the registry and rebuild the TCP/IP stack). So now when I get a machine with Gator, etc. I edit the system startup to shut it down. Invariably the performance of the machine and its network connectivity rebounds. I don't ask permission to do this as we are not removing the program, but simply preventing having the prolematic software do what it does -- start.

    --
    Comparing it to Windows will be a moot point, since El Dorado is going to have a 40% larger code base than XP.
    1. Re:msconfig by duffbeer703 · · Score: 2

      Just curious.

      How exactly do you do when you "rebuild the TCP/IP stack"? Does Gator and it's ilk tip the stack over or something?

      --
      Conformity is the jailer of freedom and enemy of growth. -JFK
    2. Re:msconfig by The+Ape+With+No+Name · · Score: 3, Interesting

      Delete tcp/ip from the network config and delete all the winsock keys from the registry as well as the dhcp keys. reboot. reinstall the tcp/ip in the network config. reboot. Worky.

      --
      Comparing it to Windows will be a moot point, since El Dorado is going to have a 40% larger code base than XP.
  29. A little more like Snowcrash by dachshund · · Score: 2, Interesting
    I fully support a system that requires all users to read the entire EULA, by monitoring their scroll bar usage and ensuring that they take a certain amount of time before hitting the "Accept" button. They could present the EULA one sentence at a time. Or perhaps they could even provide a little multiple-choice quiz at the end.

    If the company failed to take these actions and allowed the user to click through anyway, they could rest assured that their EULA would be unenforceable. That would certainly shorten EULAs fast.

    1. Re:A little more like Snowcrash by Pxtl · · Score: 2

      Heheh, that'd be something. Maybe, just in case the user can't read very well, the ULA should be read alloud audibly by the speakers. The amount of time is then limited by the amount of time it takes the machine to clearly (meaning slowly) read the ULA alloud. This'd really shorten them.

  30. We're supposed to trust them by Skidge · · Score: 5, Funny

    "I'm not an extremist," said Robert Regular, vice president of sales and marketing at New York-based digital advertising firm Cydoor. "But all this talk of spyware is the equivalent of elevating one bad seed, and it's having negative consequences on the good software. The public doesn't have time to investigate if it's negative software; they'll just stop downloading...I would hate to think we could reach a point that, whenever a dialog box comes up and says, 'Do you want to do this,' bells go off and people become worried."

    So we're supposed to trust them. These spyware folks are just a few bad apples among the wonderful adware crowd. Damn you, Brilliant, you're keeping me from all this good adware software.

    1. Re:We're supposed to trust them by HamNRye · · Score: 2

      "I'm not an extremist," said Robert Regular, vice president of sales and marketing at New York-based digital advertising firm Cydoor. "But all this talk of spyware is the equivalent of elevating one bad seed, and it's having negative consequences on the good software. The public doesn't have time to investigate if it's negative software; they'll just stop downloading...I would hate to think we could reach a point that, whenever a dialog box comes up and says, 'Do you want to do this,' bells go off and people become worried."

      As I recall, wasn't Cydoor originally Radiate which was initially Aureate, etc... These f**ks have consistently been one of the worst companies out there for being spyware. Can anyone name the program Cydoor makes?? No, cause it just sits there logging the URL's you go to, and serving ads in games like Drug Wars etc...

      These were the people who turned me off to spyware from the beginning. Or should I say "The Bad Seed"....

      Hammy

  31. IANAL, BMWISTBO!?!? by mekkab · · Score: 5, Funny

    (I am not a lawyer, but my wife is studying to be one)
    While she was taking her contracts class, she pored over EVERY single contract (Wedding coordinator, photographer, hotel where the wedding was held, DJ, etc.) with a fine tooth comb. That is the lawyer in training method.

    But when I speak with friends of the family who are lawyers, many simply sign every document thrust in front of their face becuase they know that no matter how you phrased it, they can wiggle out if need be!

    That explains why I sign legally binding documents as I. P. Freely

    --
    In the future, I would want to not be isolated from my friends in the Space Station.
  32. It could be a valid business model... by Lobsang · · Score: 5, Insightful

    This *could* be a valid business model. Think about it: Company X offers services for free in exchange for a few of your CPU cycles. The same client could be used for both distributed processing and, say, file downloads. Company X makes money by selling CPU power to third parties (your spare cycles) and you, the user, enjoy free service.

    Unfortunately, KaZaa wants to do it *without* telling you. That's just unacceptable...

    1. Re:It could be a valid business model... by Rogerborg · · Score: 2
      • KaZaa wants to [use your CPU cycles]*without* telling you. That's just unacceptable

      Wait... you're too lazy to even read the article that tells you that you were too lazy to read the EULA that tells you that they're going to use your CPU (and bandwidth)?

      What do you need, a huge popup? Oh, wait, Brilliant are going to give you one of those as well.

      There's no issue here. If you want to download a binary and not read the EULA to find out what you've just installed, you have no grounds for bitching about what you've just installed. None.

      --
      If you were blocking sigs, you wouldn't have to read this.
    2. Re:It could be a valid business model... by jgerman · · Score: 3, Insightful
      there are certain rights you cannot waive, for example, you can't be legally bound to a stipulation in a contract that allows someone to kill you. In the case of software it's possible for a comapany to practically rape an end user because either 1) they didn't read the quasi legal EULA, 2) didn't understand the EULA. There are laws in this country expressly for preventing corporations, and individual, from unfairly taking advantage of people who are ignorant of certain facts. This should be no different. As more and more spyware get's installed on Joe Shmoe's computer, the value he's getting from the computer he just laid out his hard earned money gets progressively smaller. Using spare cycles is a deceptive term. I don't have spare cycles in my single processor machine. If you start firing off processes using "spare cycles" my machine slows down, it's as simple as that. The memory you're using is unavailable to me as well. Joe Schmoe, (I as well for that matter) did not pay for a computer to have spyware companies gradually take it over, regardless of an EULA.


      This entire attitude is bordering on hypocrisy. The common reaction, of techies, to RL law being applied unchanged to the digital world usually erupts into cries of "The internet is not the real world, the existising laws don't fit". But your attitude is just the opposite. A contract is binding in RL, we'll assume a click thorugh is a real contract (regardless of the absurdness of this assumption) and apply RL laws to it.

      --
      I'm the big fish in the big pond bitch.
    3. Re:It could be a valid business model... by TrevorB · · Score: 2

      What about a peer to peer model that had karma?

      To pull from the community, you also had to contribute to it.

      Resources you could request from the community could consist of files, CPU time, the ability to place ads on others computers, streaming video or request for recorded program in another city from TV tuner cards, paypal type money transaction, etc...

      Resources the community could request of you could include downloading files, CPU time, ad placement, bandwidth redirector (taking a single popluar stream and restreaming it to multiple users), TV tuner streams or files from your city, data storage of a popular file (that you don't necessarily want), paypal type money.

      Assign each of these resources a karma value, make sure it's VERY explicit to the user what resources they are providing at any particular time (and give them the option to NOT offer certain resources, or only at certain levels like bandwidth caps) and let the computers trade away. Leeching no longer becomes an option, but if everyone realizes how much larger the network could grow, this network could be quite interesting.

      The Karma values would have to fluctuate over time, like a free market.

      I'm actually surprised with the boom in TV tuner cards no-one has tried to make a p2p program to stream or request recordings from peers in a different city. Sort of a p2p TivO. Depends on the rebroadcast rules in your country, I believe this might actually be legal here in Canada.

      Add in a "Favorites" and let your computer download stuff you MIGHT find interesting, much like a TivO.

      It might be possible to allow certain amounts of leeching, giving people a daily karma credit, for instance. You'd have to tweak this value to see how scalable the network should be.

      I wonder what other resources computers with bandwidth can provide on their own.

      I've been thinking along these lines (next generation p2p apps) for a while. If anyone finds them interesting, give me a buzz... :)

  33. Re:And the public cried... by dryueh · · Score: 2, Insightful
    Whoah!

    If reading Slashdot, surfing the web, and thinking newspapers are nothing more than corporate whores makes you a demi-god, then you take the cake!

    I wonder if these poor fucks to which you're referring bring any value into the world at all? After all, the internet, computers, software, etc all have intrinsic value, right? All other focus is folly.

    Sanitation engineers (that's right, garbagemen) probably exploit me in some way too...but I don't have a way to get that garbage away from my house (in the city) without their help. If I see my friend downloading and 'agreeing' to an obviously sketchy program, I'll probably tell him to think twice--cause I can help him out with places that I know a thing or two about.

    It's called 'learning'

  34. Too much backlash by asv108 · · Score: 2

    KaZaA should of predicted the amount of backlash it would face when adding distributed spyware to it's installer. Consumers are willing to tolerate some level of spyware, as we have seen with the variety of P2P apps with "bundled apps", but KaZaA has not just stepped over the line, they flew over it. Now look at where they are at, the name KaZaA is synonymous with spyware, but more importantly KaZaA has been removed from download.com, I can't think of a worst fate for a windows app.

  35. How to install software... by smagruder · · Score: 5, Insightful
    1. While installing software, don't bother with reading the EULA (unless that gives you kicks, or you're required to), but run the installation as you normally would, making sure that whenever you have the option to *not* install adware or spyware, take it.
    2. Scan your system with Ad-aware or other comparable software. Note: I don't work for Lavasoft.
    3. If the previously installed software still works, Great! If not, uninstall it.
    --
    Steve Magruder, Metro Foodist
    1. Re:How to install software... by jgerman · · Score: 2
      Even better start a project to replace spyware binaries with benign, or even annoying replacements. Send them back total crap.


      Of course that's where the DMCA and UCITA work together to fuck you up the ass as a consumer. EULA's are legally binding, you've allowed this software to exist on your machine, and the DMCA basically says you can do nothing about it. A company could even attempt to prosecute you for circumventing their protection schemes that prevent you from deleting the spyware. Corp's are rapidly jumping on the bandwagon to homestead my machine. If they want it, they have to pay for it.


      I have a website on my box that says that by installing their software on my machine they must pay me $100 per hour that the process is running. what they didn't read it? That's too bad, this is my property, I set the rules.

      --
      I'm the big fish in the big pond bitch.
  36. Morpheus just gateway drug? by Aerog · · Score: 2

    So I've been thinking more and more about this as I still can't download Farscape on the "new" Morpheus (Curse it's infernal codes), and I'm starting to come to a a conclusion that should get thrown out to see if it's not off base. . .

    So KaZaa (which still sounds like 'l337 Skr1pt k1dd13' speak) lets Morpheus use their network, since it'll pull in those people who want to use peer-to-peer and also know enough that spyware is out there and it's bad, mm'kay? One day, when Morpheus has something like a few million users, they pull the plug. Question: Where will these newly-deprived users go? For the most part, KaZaa. Now how many 'new things' are suddenly added to KaZaa and not mentioned? Seems to me like the main purpose of Morpheus in the beginning was more of a "gateway drug" to get otherwise intelligent people to use KaZaa. I think if the management at our favorite spyware-headquarters didn't know that they were using it to drag people in when they would eventually shut it down, they would have never let it run at all.

    One giant user grab? I think so.

    --

    - Relativistic? That's barely Newtonian!
  37. GREAT! MORE LAWS! by inKubus · · Score: 3, Redundant

    Hey, let's just pave the way for lawyers to have further control of the fucking world! That's exactly what we need! To have this issue debated and decided by computer ILLITERATES who will end up fucking us all straight up the pooper! YAY! HAVEN'T WE LEARNED, FOLKS?!

    If you are too LAZY to learn the facts, to learn how to compile your own open source software, to learn how to fix your own plumbing, YOU ARE GOING TO BE GETTING SCREWED BY SOMEONE WHO DOES KNOW.

    So please. Don't ask for new laws. Learn the facts. And then make money off the people who don't know them.

    --
    Cool! Amazing Toys.
    1. Re:GREAT! MORE LAWS! by karmawarrior · · Score: 5, Insightful

      Except that the current system is great for lawyers: You're forced to accept an EULA to use a piece of software, if you don't want to, you have to (somehow) negotiate your money back. And in order to understand the EULA, you probably should consult a lawyer anyway: Even if it apparently reads like plain English, there will be clauses that are likely to be invalid, or ambigious, or have hidden repercussions.

      Simply outlawing them, or offering a basic "If someone pays you for the right to use the software, you MUST offer them the ability to install and use the software without agreeing to any conditions beyond those implied by copyright law and first-use/right of first sale doctrines." is not going to help the lawyers. It removes them from the process, and a good thing too.

      --
      KMSMA (WWBD?)
    2. Re:GREAT! MORE LAWS! by mwa · · Score: 2
      You're forced to accept an EULA to use a piece of software

      No, you don't. Someone may have to click "I agree", but it doesn't have to be you. It could be your minor child. Since minors have not authority to enter a contract, the EULA is void. If the vendor cannot prove that you clicked on it, you're not bound by it. Nor does it have to mean that you really agree.

      Fight the meme! If you don't agree to something before you it's given to you, especially in over the counter software sales, it's not a contract, it's a sale. (I'd make the same argument even if that sale is a "free" download. If you don't agree prior to the transaction, your agreement is not required as part of the transaction.)

      IANAL, just pissed off that this crap keeps going on and we keep taking it

  38. Yes, it might be enforcable by Jugalator · · Score: 5, Informative

    is a yes/no button a legally binding clause?

    From http://www.techlawonline.com/internet.htm#about3:

    The Internet variant of "shrinkwrap" licenses are "clickwrap" licenses which are standard-form contracts entered into online; for example, Terms of Service posted on a web site, under which the purchaser signifies his assent to the terms simply by clicking on a box marked "I Agree." Like shrinkwrap licenses, the terms are non-negotiable. Unlike post-payment shrinkwrap licenses, however, the purchaser's consent to the posted terms is usually obtained before the exchange of funds.

    While the courts have not explicitly upheld the enforceability of clickwrap licenses, in at least one recent decision, the U.S. District Court for the Northern District of California implicitly ruled that such an agreement was enforceable. Hotmail Corporation v. Van$ Money Pie Inc., 47 U.S.P.Q. 2d 1020, 1998 WL 388389 (April 1998, N.D.Cal.). It remains to be seen whether other courts will similarly find these types of agreements enforceable.

    The court's decision in the Hotmail case above can be found here:

    http://eon.law.harvard.edu/h2o/property/alternat iv es/hotmail.html

    --
    Beware: In C++, your friends can see your privates!
    1. Re:Yes, it might be enforcable by Jburkholder · · Score: 2

      >If someone was to program some sort of work around [...] would it apply?

      Hmm, that seems as unlikely as

      "hey honey, come click 'ok' here while I leave the room. Why? so I won't be bound to this crappy EULA, that's why!"

    2. Re:Yes, it might be enforcable by Rinikusu · · Score: 2

      What about for financially obligations?

      For example, my university has this policy of when you register for classes, you have to click a button that says "By registering, I agree to pay money, even if I don't attend classes." There's no statement of fees (you can access them,though), there's no credit check, there's no proof of ability to pay, etc. It's really akin to putting a button on my webpage that says
      "Hey, by visiting my site, you agree to pay me $2000, please enter your billing information below:" with no real identity check other than an assigned "pin number", etc. Is a click a legally binding signature? In the past, I've had to sign documents (ostensibly called "loans"), etc. Now I can just click. Is this legal? Maybe I should post this up on Ask Slashdot...

      --
      If you were me, you'd be good lookin'. - six string samurai
  39. Open source scanning solution ? by sh0rtie · · Score: 3, Interesting


    I think the general concensus amonst us all is that spyware is bad, yet the only reliable (and free) solution seems to of been delegated to our friends at Lavasoft, while they are doing a *great* job, their project is unfortunatly closed source and therefore people/programmers cannot really contribute to its success (other than donate cash which is reccomended but not convienent to everyone)

    if people feel so strongly on this issue why hasen't anyone started an open source solution to this scurge so the talented programmers amongs us can improve the scanning and detection techniques ?

    at the moment the spyware companies only really have to make their product beat lavasofts Adaware and they are in business (at least til/if Adaware picks it up)

    sure spyware seems to be only targeted to Windows users but as other operating systems become more widespread it is only a matter of time before they spread to these alternative platforms too

    while closed source could be argued as a good thing (stop spycompanies seeing how it works) could they beat 100's of programmers all working to make the scanning engine more robust and secure, this obviously works in regards to computer security on *nix platforms as viruses are not more prominent than closed source platforms
    so would beating spyware benefit from these same techniques ?

    While i agree that these spyware programs should be regarded as viruses/trojans i think once you bring a commercial element into the equation you open yourselves up to attacks of perpetuating the products life/success (ie: rumours that virus detection companies create viruses)

    so would an open source spyware detection solution work ?

  40. Re:And the public cried... by mpe · · Score: 2

    I've always wondered if the "click if you agree" thing is enough. I remember learning once in my highschool law class that when it came to contracts etc, both parties had to fully understand the extent of the wording - in order to protect people from "fine print" trickery.

    Wonder if anyone has tried an "envelope contract" on a software company and got it enforced..

  41. Znet Instructions by vagnerr · · Score: 2, Informative

    When all this blew up znet produced some manual removal instructions which are here

    --
    -- Vagnerr - (www.vagnerr.com) Never attribute to malice that which can be adequately explained by stupidity.
  42. Re:What do you expect when its free? by blankmange · · Score: 2

    Free = questionable ethics? I haven't found any problems/spyware in WinMX...

    --
    ...we are from the government - we are here to help...
  43. A legal virus? by The+G · · Score: 5, Insightful

    I know that it's a mistake to think of legal documents as if legal language were source code or machine instructions for the legal system. None the less, it does seem as if we are beginning to see legal documents employing the same sort of "social engineering" and "viral behaviour" that we encounter daily in code.

    What Kazaa has done is no different from what the Mellissa virus did: It presented people with a choice (install this software for Kazaa, open this document for Mellissa) that appeared to most to be benign. The means of knowing the choice was not benign were available (the license agreement for Kazaa, the actual contents of the document for Mellissa), but were obfuscated (in complex and opaque legal language, in obfuscated macros in an opaque document format) and chaffed (in one small part of a very large file/document in both cases).

    Perhaps, then, we need to look upon trojans written in legal "code" the same way we look at trojans in software: As malicious and probably illegal. It is no more sensible to expect people to be able to fully comprehend a complex (and deliberately obfuscated) legal document than it is to expect people to read the binary code of every program they run. Yet our legal system presumes that you are responsible for your agreement to "run" the legal code but that you are the victim when you run the binary.

    We need to treat contracts and licenses written in legal language the same way that we treat compiled code: as opaque and, when they are harmful, as malicious "exploits" of user vulnerabilities.
    --G

  44. Re:And the public cried... by tenman · · Score: 5, Funny
    So if the contract of the lease specifies that they have "the right to access and use the unused horsepower and trunk space in your car/s and/or the highways for the aggregation of sales staff and use in distributed a convoy. The leasee acknowledges and authorizes this use without the right of compensation.", they can put a guy in a trench coat in the back seat, and a black bag in the trunk. Because I signed the agreement, i understand that they plan on using my car once I park at work.

    That's fine, but here is my issue.

    • Said man in trench coat gets pulled over (hacked).
    • Goverment offical searches contents of the car (computer).
    • Finds contraban and/or dismembered bodies in that bag in the trunk (childporn/warez/etc).
    • Government disables car, and then empounds it.
    • Leasing company doesn't have to "compensate" the leasee


    So you say "that would never happen", and I say take another look at the lows that internet companies will go to to turn a buck. especially companies that will use a another program to slip your install script onto users programs.

    Oh wait... I'll have to wait until "Brilliant Digital Entertainment" is done with my CPU to finnish this post....

  45. Re:And the public cried... by SlamMan · · Score: 2

    Yeah, but tthats why we have these pesky things called laws to protect us from a) companies, b) each other, c) our own ignorance. Cerrtain things in society you take on faith, like that fact that eacting a bowl of cheris in tthe morning won't cause spontaneous combustion in every person who eats it. This is why we have the sickinging amount of laws and regulations we have, to limit people from screwing each other over.

    --
    Mod point free since 2001
  46. Re:And the public cried... by elefantstn · · Score: 5, Funny

    If you want to convince a court that your knowledge of English is limited, I suggest you refrain from using phrases like "intentionally obfuscating the agreement."

    --
    If it ain't broke, you need more software.
  47. Understandable EULA by stinkydog · · Score: 3, Funny

    1. We have the right to use your computer, drink your beer and sleep with your sister.
    2. You agree to binding arbitration, which means our representitve "Bubba" will tie you up and have his way with you until you stop whining.
    3. You agree to purchase additional hardware as we deem necessary to run our software.
    4. Your rights: NONE

    Accept Yes/NO

    SD

    --
    âoeWho knew something as harmless as willful ignorance could end up having real consequences?â
  48. Why's Kazaa getting hammered for this? by Combuchan · · Score: 2
    • They post a EULA. If you can't read a EULA, get a lawyer or learn legalese. People need to take responsibility for themselves, and people ultimately need to be accountable for the software they install on their computer. It'll be a cold day in hell and a dark day on the surface if some judge ruled in favor of the plaintiff if anybody sued over this.
    • This is actually a good idea: Kazaa provides a free service for its users and a free download, and in exchange for this the users give up some CPU time. Maybe you all who think everything on the Internet should be for free (*glare at T(H)GSB*) should take your altruism back to 1999.
    • If you don't know what software does, don't install it. I know what I have installed on my computer, I know what it does, and I don't get surprised when I do (pkg_info|dpkg -l).
    • My favorite part from the article: "76 percent of respondents said they were "concerned" about having their privacy violated on the Internet. Only 22 percent admitted to reading privacy policies." No comment, this quote speaks for itself.
    • The 1040EZ is less of a read than the EULA? I should hope so. That's not even saying much.

    If you disagree, reply.
    --
    "[T]he single essential element on which all discoveries will be dependent is human freedom." -- Barry Goldwater
    1. Re:Why's Kazaa getting hammered for this? by LL · · Score: 2

      Non Est Factum

      A legal rule for voiding contracts based on
      - (computer) illiteracy
      - (program) radically different from what it is
      - failure to understand due to complexity (not carelessness)

      The key item is #2, that the program is in fact radically different in intent to what the person downloading it believes it to be (file fetching v P2P node). Fact is that computer literacy is so absymally low that items 1) and 3) would apply to 99.9% of the population.

      This is the same reason why we retain accountants. The complexity of the legal code is such that we trust professionals to interpret it for us. Perhaps in some far off day, we ask open source advocates to help audit/secure software instead of picking up viruses and trojan horses willy-nilly.

      LL

    2. Re:Why's Kazaa getting hammered for this? by Combuchan · · Score: 3, Insightful

      Saying that people should get a lawyer before installing software is ridiculous.

      My initial comment was originally posted a bit tongue in cheek, but if you hit "I Agree" and you don't agree nor make any attempt to understand what you agree, that's not the fault of the company. If you hit "I Agree," you'd better agree.

      Why aren't you thinking? Any lawyer worth his or her salt would look at any EULA, and tell you not to install the software.

      Lawyers provide legal advice and break down the legal process for the average person. If I wanted to incorporate a business or get married, the lawyer would look at the forms I have to sign, and tell me what it is I'm signing. They don't say, "This form's too hard. Why are you wasting your time getting married anyway?" Lawyers are not just binary evaluators that say Do this/Don't do this and stop at that.

      >I know what I have installed on my computer, I know what it does, and I don't get surprised when I do (pkg_info|dpkg -l).

      Do you seriously expect anyone to believe you when you say this? I can guarantee that you do NOT know exactly what you have on your computer.

      Uhh, I would say a lot of people who have been running BSD/Linux for a while could agree with this statement.

      Your pkg_info paragraph is way off-base. I didn't say I know exactly what I have installed, but I have a fair understanding of what each program does based on what the author of the program has written about it. This is reinforced because a) I can trust the author as he or she is most likely not part of some greedy business and don't stoop to unethical behavior to match a profit margin, b) a vast majority of the software I have is open-sourced, and especially that which is in the FreeBSD base has gone through a fair amount of auditing, whereas Kazaa is a closed-source app that has probably not recieved any comprehensive security analysis, and c) if there were issues, I'd be alerted about them immediately as I'm seeing more 3rd-party auditors more interested in keeping whatever UNIX software secure rather than some silly windows utility.

      If the trojans of which you speak are delivered by some cracker, than it's my fault for not keeping up to date on patches. If the trojans are delivered by the author, a highly unlikely event especially with a commonplace app like ftp, that author would essentially be commiting developmental suicide as I and many others wouldn't use software from this author anymore. I do not expect this level of quality in Windows.

      Wouldn't you be pissed if it did? But, as you suggest, you only have yourself to blame.

      I sure would be, and yup, I'd blame myself. I'm glad that we see eye to eye on this issue, and it's settled. :P

      Besides, Kazaa alerted its users to some extent, and that's the whole point of this damn thread. Your questions of my knowledge of trojanned software is wholly irrelevant as trojans by definition are totally silent about their duality. And no 'Well, the obfuscation of the EULA sections on spyware is analogous to a trojanned program' because I don't see rootkits coming with click-through agreements that the legitimate sysadmin has to click "I Agree." to step through the installation process.

      Gee, you can dog me on my misuse of the word altruism but when it comes to trojan, you're the one in the dark ... :)

      If you disagree, reply.

      --
      "[T]he single essential element on which all discoveries will be dependent is human freedom." -- Barry Goldwater
  49. Re:And the public cried... by inKubus · · Score: 2

    True. Limit. But not prevent. I mean, no one would make any money if everything was fair. If it was FAIR, everyone would have the same stuff, and we'd all be Marxists.

    But that just doesn't work :) Some people are better suited to the enviroment than others; not that we shouldn't help the less fortunate. But it's ok to make a living also.

    NoBODY gets filthy rich being honest. I AM honest about my work. I tell people what their problem is because I'd rather not come back to fix a little thing 10 times, even if I'm making 75 bucks to do it. There's just no CHALLENGE to it.

    So maybe it's all a question of honor. I mean, without problems, I wouldn't have a job, so I like problems. But you can't take TOO much advantage of people. Then you start being evil.

    I've got my Karma to worry about :)

    --
    Cool! Amazing Toys.
  50. for the same reason we have clear lang laws by gelfling · · Score: 4, Insightful

    IF you want to make a big deal about the legality of EULAs don't forget that something is either a contract or it is not. In which case it may have to conform to readibility statutes including being in a language you can actually read. Time and time again, legally speaking oh libertarian one - obscurity for the sake of obscurity has been struck down in the courts under the general principal that if you have something to hide you are probably committing fraud or trying to commit fraud.

  51. If you need help convincing people... by TDScott · · Score: 3, Informative
    ...then I've written an under-600-word guide to the problem and how to fix it, designed for the uninitiated.

    Pointing people there could save hours of explanation...

  52. Re:And the public cried... by Combuchan · · Score: 2

    If you don't understand the EULA of the software, don't install it. Who's forcing you to put this software on your computer?

    Besides, shouldn't some warning bell be going off in your head if the legalese in the EULA is overly obfuscated?

    Ask yourself: What else could this incoherent block of text mean other than what am I inferring it to be? What are the Company's interests in my installing the Software? What is the ulterior motive? What did I just read? What is the point of each and every single section of text?

    --
    "[T]he single essential element on which all discoveries will be dependent is human freedom." -- Barry Goldwater
  53. Re:Eugh by analog_line · · Score: 3, Insightful

    If your computer is your castle, YOU are the only person responsible for defending it, and YOU are the only person who is to blame when YOU install something without reading the license agreement.

    You, you, you, you, you, you, and only you.

    I install stuff from the internet all the damn time. I click through just like everyone else, but I don't complain that the devil made me do it. If its yours, take some responsibility for it. If you refuse to, then deal with it pal, 'cause only you are to blame. People don't say "read the fine print" because it's something nice to say. People say it because it's good advice.

  54. See, not l33t by inKubus · · Score: 2

    I can't even proofread my posts or put in a /i to delimit the comment. what a lamer.

    --
    Cool! Amazing Toys.
  55. Software licenses and FAQs by Midnight+Thunder · · Score: 3, Interesting
    I am starting to really believe that all software licenses should include a FAQ, so people don't have read the whole unreadable text of a software license. I know that many companies write software licenses to protect themselves, but more and more are also doing it to gain additional rights.

    Other ideas that come to mind are standardized liability levels to which you can associate a logo. Something like 'MC' = Mission Critical, we pay if it breaks, 'NL' = No liability, you assume all the risks, and probably other more fine grained categories? The idea is that a software purchaser should know where they stand when buying a piece of software, rather than having to resort to hiring a lawyer or screwing themselves royally because they don't have the time for the fine print.

    Just imagine having a license written on the wrapping paper of every present you get at christmas. I am not sure anyone would check what it had to say, since they just want to get to the goody inside - software is the same.

    --
    Jumpstart the tartan drive.
  56. Re:And the public cried... by inKubus · · Score: 2, Insightful

    "It's smart to ALWAYS know what you are signing for. Because you could be signing away the life of your child." That's what I get from this post.

    Not "everything should be spelled out in 20 different languages to be fair" "we should all get everything for free." "I'm a worthless communist" as you intended to say.

    I'm sorry to be acidic, but I never said I don't support consumer advocacy. I said I don't support LAWS governing what software CAN and CANNOT do. There are ALREADY laws prohibiting viruses and malicious, destructive software. Most people don't care if their spare computer cycles are used by some company if, in return, they get a good piece of software. And if it screws up their computer, they are happy to have it fixed.

    There does not need to be LEGISLATION in this matter. There needs to be education. People should not just download and run software from untrusted sites. EVERYONE knows that. So in this case, I do not shed a tear.

    No pity for the majority.

    Cheers.

    --
    Cool! Amazing Toys.
  57. Pinnochio flashback by Dr.+Bent · · Score: 2, Insightful

    Whenever I read articles about this I think about the free amusement park in the movie "Pinnochio" that turns you into a donkey. Moral of the story: There's no such thing as a free lunch.

  58. No new laws by inKubus · · Score: 2

    Simply outlawing them, or offering a basic "If someone pays you for the right to use the software, you MUST offer them the ability to install and use the software without agreeing to any conditions beyond those implied by copyright law and first-use/right of first sale doctrines." is not going to help the lawyers. It removes them from the process, and a good thing too.

    Yes, this sounds like a good idea on the surface, yes? But it is just asking for trouble. The laws as they are can be screwed up. And sure, some change might be due. But who are you asking to institute this change? CONGRESS?! heh, I think not.

    Perhaps this is a good idea: State laws, a proposition or referendum proposing to void EULA validity? Then at least the PEOPLE get to write the law, etc.

    Because you know congress will sneak in some backdoor that just makes us all worse off than we were before.

    --
    Cool! Amazing Toys.
  59. Pree Installed Software by ThePilgrim · · Score: 2

    Most of what I've read so far in this discussion is about click through licences, which is fair enougth.

    However what I'am wondering is, am I bound by any licencing aggrement on any software that comes pre-installed on my PC.

    I never signed or clicked an agrement, nor did I openn a package, so do I have to abide by any licence agrement I find with the Machine.

    --
    Wouldn't it be nice if schools got all the money they wanted and the army had to hold jumble sales for guns
  60. Making lawyers look good by inKubus · · Score: 2

    Yeah, I love lawyers. They have the right idea. They make a lot of money and don't work hard. If you're smart enough, you can not work hard and make a lot of money too.

    I can't believe, for instance, people get paid 65k a year to write "Visual Basic" "code". But someone has to I guess. I guess.

    --
    Cool! Amazing Toys.
  61. Re:And the public cried... by ergo98 · · Score: 5, Insightful

    Most people don't care if their spare computer cycles are used by some company if, in return, they get a good piece of software.

    Then how about distributing the software with "price: The Idle time of your PC"? Why are these "ways you pay for the software" always hidden away, usually installed silently in the background, and controlled via a checkbox that was careful placed outside of the visible range on one part of a 30 part install wizard? The reality is that most of this insidious software doesn't state its true intentions, because they know if they did many people would forgo using it, but instead they put "FREE!" all over the product.

    There does not need to be LEGISLATION in this matter. There needs to be education. People should not just download and run software from untrusted sites. EVERYONE knows that. So in this case, I do not shed a tear.

    Uh, we're talking about mainstream, very popular software : Not software from warez sites. So if Netscape 8.2 read your financial information and sent it on to banks, that's ay okay?

    No pity for the majority.

    And you work in computer configuration and repair? I feel pity for your customers. I'll guess that you're the type of guy that always has the raised eyebrow, exclaiming about how dumb the average Joe is, while at the same time wallowing in your own ignorance.

  62. Audiogalaxy!! by GePS · · Score: 2, Informative

    I don't understand why someone would use a large general-file-sharing app when all they want is music. If you download the audiogalaxy client, you get access to a far superior collection, and with creative searches, find anything for download.

  63. Re:And the public cried... by ergo98 · · Score: 2

    If you don't understand the EULA of the software, don't install it. Who's forcing you to put this software on your computer?

    Because extensive EULAs have become the norm, and even minimal freeware apps have 40 page licenses. If one local store started making you sign a EULA to shop there, I'd stop shopping there, but if they ALL started doing it then what choice do you have? It's at that point that legal protections are the balancing factor.

    Besides, shouldn't some warning bell be going off in your head if the legalese in the EULA is overly obfuscated?

    Ambiguity that is a fundamental aspect of language led to the creation of "legal-speak": A barely comprehensible, but understandable by lawyers, babbletalk that holds up in court, but has little meaning to the Average Joe that doesn't deal with it day in and day out. Obscurity is the norm in EULAs. The GPL states in 3000 words what I could easily reduce down to 3 sentences.

  64. Grrrr... by BlackGriffen · · Score: 2

    From the article: "Congress is examining bundled software and related issues. In 1999, and again in 2001, Sen. John Edwards, D-N.C., introduced legislation to force spyware distributors to get permission and notify people with a detailed description of the information they're collecting. No committee has picked up the bill, but broader consumer notice and privacy concerns are showing up in a compromise Internet privacy legislation soon to be introduced by Sen. Ernest "Fritz" Hollings, D-S.C."

    Watch this jack-@ss like a hawk! Who here wants to bet he's going to tack the SSSCA on to this thing, call it a, "Consumer privacy bill," and try to sneak it in that way? I wouldn't trust that man to be a janitor in city hall.

    Another thing that I just love that they mention are the, "modify without notice or consent," clauses. Does that mean that if they change the contract to, "By clicking I agree, you agree to be an indentured servant for not less than 10, and not more than 10000 years," it's legally binding? An agreement, by it's very nature, cannot be modified without consent of both parties involved, or it isn't an agreement.

    BlackGriffen

  65. Just get drunk by CoreyG · · Score: 3, Insightful

    If it's true that you can't enter a legally binding agreement while drunk, just pound a few brews before clicking "I agree." Time to go install some more software...

  66. On The Article's Mention of Gator... by SloppyElvis · · Score: 2, Interesting

    The article seems to want to make the distinction between spyware and adware, stating that adware has legitimate purposes, and that it informs users of its intent in a clear manner.

    As one example, they describe in brief the software Gator uses to obtain marketing demographic information about you:

    Does an uninvited guest keep knocking on your door saying, 'Hi! I'm here!'?" he asked rhetorically, describing Gator's multiple disclosures and the icon of alligator eyes that appears whenever the program is running. "No. We are invited guests on the desktop and even pop up a fourth modal screen saying, 'Your Gator software is here.' And since our e-wallet software helps users every day fill out forms, we constantly come back and have an ongoing relationship with our customers."

    Well, the other week I ran RegMon on my XP box (wait, RegMon uses system-level hooks, doesn't it? That might be against the XP EULA) Anyway, I monitored my registry access, and aside from seeing expected system activity, I noticed a number of references to www.gator.com, checking for the presense of various applications of my computer. I have never knowingly agreed to have gator software installed on my machine (though I may have clicked Agree in some agreement where it was buried in legal speak). It does not appear in the "Remove Software" control in XP. Further, despite what the above quote suggests, gator eyes do not appear in my taskbar, and I have not seen a single modal dialog telling me gator is looking through my registry.

    My guess is that gator was either bundled with my machine (Sony Vaio), or entered my machine piggy-backed onto another app that I did agree to install.

    The app that believe sold my info to gator is AudioGalaxy satellite, a file sharing app ala Kazaa.

    As an aside, I also noticed some registry activity from bundled virus software on my machine that I supposedly disabled; has hijacking my machine become an industry standard?

    The question is not if you're being watched; the question is who is watching you!

  67. Testing EULA by ruvreve · · Score: 2

    Has anybody ever contested the 'legal' wording of a EULA? I realize that legal mumbo jumbo can be extremely hard to decipher for non-hardvard graduates but could these EULAs be so 'complex' that even lawyers have trouble determining what is actually being said and what is legally binding by said EULA?

  68. Thank god... by peter_gzowski · · Score: 2

    From article:

    broader consumer notice and privacy concerns are showing up in a compromise Internet privacy legislation soon to be introduced by Sen. Ernest "Fritz" Hollings, D-S.C.

    Thank god somebody the /. community trusts is on the case...

    The Federal Trade Commission has received complaints about the software, though it won't say how many or for which programs.

    Why on earth not? Why wouldn't the FTC notify consumers of potentially dangerous software?

    The article recommends Ad-Aware (that's good), but doesn't say anything about KaZaA Lite (ooh, that's bad).

    --
    "Now gluttony and exploitation serves eight!" - TV's Frank
  69. Many people download Kazaa at work by SIGFPE · · Score: 2
    What happens to the contract that employees apparently agree with Brilliant?

    The computer I use at work belongs to my employer. I have no rights to offer its use to another company. IANAL, but presumably

    1. as I have no right to give away my employer's CPU time I am in violation of the contract if I download the application and
    2. whether or not I'm allowed to agree to the contract I will be offering my employer's CPU time by downloading the app

    so it seems to me that both Brilliant and my employer would have good cases against me.


    Would a lawyer care to comment?

    --
    -- SIGFPE
    1. Re:Many people download Kazaa at work by SIGFPE · · Score: 2

      If you have no right to give away your employer's CPU time, you can't download a filesharing application anyway

      1. Many employers are happy to allow employees a limited amount of time for recreational use. Employees don't have a right but it may be tolerated. However that privilege may not extend to granting complete strangers use of your CPU.
      2. It may turn out that I legitimately need to obtain a file for my work duties and that the easiest way to obtain it is by using Kazaa.
      --
      -- SIGFPE
  70. Spyware by stud9920 · · Score: 2, Interesting

    I think I have discovered yet another effect of cydoor. As you know, cydoor is installed with kazaa. Once some months ago, I noticed that IE6 and or OE6 crashed when I tried to use the keyboard under unknown conditions. I decided to reinstall windows XP without further looking. Some reinstalls later, I found what was responsible for the crashes : they occured ONLY when kazaa was running, and yet more often when kazaa was not running minimized. One month ago, I found a dummy dll to replace cydoor's cd_clint.dll but only returning dummy values, without spying on me. Since then, not once did IE6 or OE6 crash ever again. To me it is obvious that cydoor is trying to keylog on me, and gets blocked by either windoze XP, either by zonealarm. Do you have more info on the matter ? Isn't this perfectly illegal ? (I do netbanking from that computer). Hasn't the boss of cydoor been involved in creditcard fraud ?

  71. What a shame by Ed+Avis · · Score: 2
    From the article:
    Negative publicity in the wake of the Brilliant-Kazaa controversy has some industry veterans worried that consumers will switch from mindlessly clicking "I agree" to staunchly refusing to accept terms of service.
    All together now: boo hoo.
    --
    -- Ed Avis ed@membled.com
  72. Re:And the public cried... by Lumpy · · Score: 2

    what is NEEDED is a judge, a federal judge to rule that click through agreements are non-binding. Now I can hear the microsoft employees here screaming "OMG!!! the software industry will collapse!!" Lies....

    everything will operate as before, they will just have to make the lawyers screw the user another way.

    --
    Do not look at laser with remaining good eye.
  73. Did anyone else notice the reference to the CBDTPA by MrEfficient · · Score: 2
    Congress is examining bundled software and related issues. In 1999, and again in 2001, Sen. John Edwards, D-N.C., introduced legislation to force spyware distributors to get permission and notify people with a detailed description of the information they're collecting. No committee has picked up the bill, but broader consumer notice and privacy concerns are showing up in a compromise Internet privacy legislation soon to be introduced by Sen. Ernest "Fritz" Hollings, D-S.C.

    Oh, so now it's "Internet Privacy Legislation"? They make the bill out to be a good thing and completely skip over it's real purpose. Please, while you're educating people about the dangers of spyware, educate them about the real purpose of this bill and why it should be stopped. See the EFF webiste for more information.

    --
    Check out AbiWord.
  74. Re:And the public cried... and Kazaa listened. by Combuchan · · Score: 2
    If one local store started making you sign a EULA to shop there, I'd stop shopping there, but if they ALL started doing it then what choice do you have? It's at that point that legal protections are the balancing factor.

    At that point, one store could of course come up and have you sign no EULA or perhaps one that is comprehensible by Agnes End-Shopper. And this Store will reign Supreme o'er Stores that confuse their Shoppers, demonstrating once again the Power of Capitalism. That is, until the other stores realise the idiocy of their moves and abolish the EULA or work something else out entirely.

    Which brings me to my next point: Companies that do stupid things (like Kazaa is doing now) ultimately pay the price for their idiocy (Enron, et. al.) and either change their policies accordingly or nothing happens, proving that their userbase might just not care about what's going on with their own software. Never underestimate the apathy of people, and don't gauge their concern on what a vocal minority says.

    And Kazaa is learning, but nowhere in this story do I see the following quote from Kazaa's front page about their "new pledge."
    Your privacy is important to us. Read this easy overview of the things we are working on to make what you do on the Net your business.

    If you disagree, reply.
    --
    "[T]he single essential element on which all discoveries will be dependent is human freedom." -- Barry Goldwater
  75. This.... by SomeOtherGuy · · Score: 2

    Reminds me of the corrupt taxi cab driver that (upon a getaway ride) drives the bank robber to a secluded area and holds him up....

    --
    (+1 Funny) only if I laugh out loud.
  76. Nice job... by rnturn · · Score: 2
    ``The result is a three-paragraph statement that Chief Marketing Officer Scott Eagle calls a "kindergarten version" of the full policy.''

    Say, Scott, I wonder how many of the customers that your company depends on would appreciate your insult? If you can't get people to accept using your product unless it's real purpose is hidden in umpty-ump pages of legalese then you have a problem. Don't insult the computer user who hasn't got the time or the inclination to decypher the dense verbiage in your EULA.

    Of course, perhaps you need to resort to legalistic trickery buried in your EULA since you have problems actually marketing your product any other way. Probably has something to do with referring to potential users as ``kindergarteners''.

    Jeez...

    --
    CUR ALLOC 20195.....5804M
  77. Beating a dead horse: a karma bonfire. by tempest303 · · Score: 2

    I'm still amazed at the "outrage" over this stuff. I mean, people download this software for *free*, so you can use it to TAKE songs/movies/etc without paying for them, against the wills of the creators!

    Kazaa users, cry me a fucking river about your privacy... this whole thing reminds me of the guy who sucessfully sued the people whose house he broke into because he broke his leg falling down the stairs because of some crap he tripped on... The people he sued were ruled "negligent" because they left stuff on the stairs. Please.

    1. Re:Beating a dead horse: a karma bonfire. by rnturn · · Score: 2
      ``...sued the people whose house he broke into because he broke his leg falling down the stairs because of some crap he tripped on...''

      Yah. The rule of thumb is (I think) that when you shoot the guy who's broken into the house and is raping your daughter, make sure you empty the revolver into him. If all you do is wound him and he survives he'll sue you.

      I wish I could find a reference for my favorite legal atrocity: Inmates escape from prison. They're at large for weeks. When finally caught, at least one of them sues the state for the `mental anguish' he suffered while on the lam. (I guess the fear of being captured would be awfully stressful.) The state loses the suit.

      I guess we can't expect all judges to have the wisdom of Solomon. But why the heck do so many seem to have less common sense than Homer Simpson?

      --
      CUR ALLOC 20195.....5804M
  78. in other news... by tongue · · Score: 2

    Consumers today realized the sky is blue. Film at 11.

  79. however... by edrugtrader · · Score: 2

    ...general public still not exactlly sure what spyware is...

    --
    MARIJUANA, SHROOMS, X: ONLINE?! - E
  80. Thieves and Eavesdroppers can't complain by Dragoness+Eclectic · · Score: 5, Interesting


    I wonder if anyone has reverse-engineered BDE's protocols yet? It would be a damn shame, wouldn't it, if their surreptiously installed thiefware should inadvertantly retrieve data containing a destructive worm as a payload, or if their computations were all skewed just enough to still be plausible, but uselessly wrong, or if the client on some computer that their server connected to wasn't quite the client they originally installed, and had unfortunate effects on said server....

    Eavesdroppers can't complain if what they hear is unflattering, and thieves can't complain if the stuff they stole is dangerous to them.

    --
    ---dragoness
  81. Re:And the public cried... by DrNibbler · · Score: 2, Insightful

    Yes they own the software but _you_ still own the machine. If the software is doing something other then the intended purpose whether that's gatering data about you or turning your machine into a node in a distributed processing network you should know about it. In clear, plain English (or whatever your native language is). It should not be burried in a multiple page document that can be understood if you have a J.D.

    --
    Sean.OutaHere()
  82. Re:And the public cried... by bnenning · · Score: 3, Insightful
    If you read many of your EULA's carefully, you'll find that you have a right to use the software, but you don't actually own the software


    No, you'll find a bunch of words saying that the publisher claims that to be the case, but that doesn't make it so. Using software you have legally obtained is not a violation of copyright law, so you don't need to agree to a EULA. In fact, since a EULA (usually) gives you no rights that you didn't already have, it should be invalid on its face for lack of consideration. (IANAL, yada yada yada).

    --
    How to solve most of our problems: 1.Lots of nuclear plants. 2.Cure aging.
  83. 65-year-old Kazaa user? by ChaosDiscordSimple · · Score: 4, Interesting

    I think the fact that Kazaa has 65 year old users is the real news here. Clearly file sharing has become mainstream if grandmothers are using it.

  84. Re:And the public cried... by jgerman · · Score: 2
    Forget not knowing the language. What if I as a rule do not read little boxes that pop up on my screen. My procedure is to try clicking on the leftmost button (without reading it) if that doesn't seem to work start over and click the button next to that.


    The point is click through licenses have no way to prove that the person who installed the software read any part of the license, that anyone using the software clicked through the licens, or even that the person who installed the software is the person who is in charge of that particular machine. The click through license should not be a legally binding contract. It's whole basis is on assumed consent. I could have my kid install all my software, click through, and not be legally bound as a minor.


    If a software company wants to impose these ridiculous caveats on me, they should be required to get an actual contract, notarized, with my signature on it.

    --
    I'm the big fish in the big pond bitch.
  85. EULAs by ZaneMcAuley · · Score: 2

    EULAs arnt written for the CONSUMER, they are written for the LAWYERS and ENTERPRISES.

    --
    ----- Whats wrong with this picture? http://www.revoh.org:1234/whatswrong
  86. Re:And the public cried... by aozilla · · Score: 2

    what is NEEDED is a judge, a federal judge to rule that click through agreements are non-binding.

    I can see how EULA might not be fully binding, but they have to at least be able to limit liability. Without that ability there will be no free (aib) software. Certainly no peer-to-peer software (which by definition relies on CPU/bandwidth sharing) without a signed contract.

    --
    ok then your [sic] infringing on my copyright! Could you as [sic] me next time before STEALING my comments for your own?
  87. Retaliate? by upshift · · Score: 4, Funny

    Wouldn't it be great to take AdAware to the next level? I'd call it retaliation-ware. Figure out what the scum-ware is looking for and send bogus data. I wish I had the time for it.

    Upshift

  88. Define "unused" by Xunker · · Score: 3

    ..I as because I, like so many others, have a client for a distributed computing project installed on the PCs that I use regularly. In my case it's the Dnet OGR client, and it runs in super nice mode, sucking up any spare cycles that fall through the other processes. In this scenario, techically, almost all of my CPU time (with the exception of a micron here or there) is used.

    Not, I don't know how brilliant's distributed system works, but if it's like any others it will do the same thing as my Dnet client and put itself in the lowest priority group, right next to my Dnet client which means that they will be splitting the remaining cycles -- yet these are not cycles that were unused, they are cycles one client too from another I had previously installed!

    --
    Hilary Rosen's speech was about her love of money and her desire to roll around naked in a pile of money.
  89. Instead of more laws, education. by tshak · · Score: 2

    Why not educate consumers so that they can PROTECT THEMSELVES instead of relying on the government every time?

    --

    There is no longer anything that can be done with computers that is nontrivial and clearly legal. -- Paul Phillips
  90. Re:And the public cried... by Kailden · · Score: 2

    The POINT is for all the license agreements and papers you sign in your lifetime, you better have a lawyer on retainer to review them all or your quality of life is gonna suck.

    --
    I need a TiVo for my car. Pause live traffic now.
  91. That Nefarious part of the Terms by ahde · · Score: 2

    [tapping into] "unused computing power and storage space"

    is specifically what Kaaza is designed to do.

    " they had unwittingly agreed to install software that could help turn their computers into nodes for a peer-to-peer network controlled by another company. "

    that's the same as saying someone who installs IIS unwittingly agreed to install software that could publish documents on the internet for everyone to read. Of course most people do install IIS unwittingly, and thanks to the many vulnerabilities, you'll probly be publishing more than you intended to.

    That specific part of the Terms that cnet holds up as bad is the *necessary* and desired part of kaaza. Granted, they do some sneaky stuff on the side, but they don't call it a "file sharing" program for no reason.

  92. Re:And the public cried... by ahde · · Score: 2

    The most important thing to do is to click "I accept" or "next" or "continue" or "install" or whatever the button says without reading some legaleze bs. It isn't a contract and it isn't binding. Click-through and shrink wrap licenses aren't real and the fact that 99% of people ignore them should be enough case to invalidate them in court.

    Before you start worrying about "GPL" violations, remember that the GPL is protected by copyright law. The GPL protects redistribution. Anyone can download a GPL program for free and do whatever they want to it. They just can't redistribute it without agreeing to the GPL. Kazaa or anyone else can enforce the same rules.

  93. Re:MS -- spyware verified? by Reziac · · Score: 2

    You don't believe M$ makes spyware? Read this:

    I recently bought and installed TurboTax on my Win98 machine. TTax forcibly installed IE5.5, want it or not. (Making that the LAST Intuit product I'll *ever* buy. IE5.5 has since been evicted, along with TTax.)

    When I finally got the mess straightened out (it hosed all my internet settings in the process) and went online (using Netscape as always; IE is *never* allowed outdoors), guess what the FIRST ding reported by ZoneAlarm was:

    FWIN,2002/04/13,18:47:40 -8:00 GMT,207.46.203.94:28801,67.219.145.160:2364,TCP

    For the benefit of those who don't speak ZA logfilese, that's type,date,time,source,destination,transport

    Check out 207.46.203.94 at your neighbourhood WHOIS -- that IP is owned by Microsoft.

    Now, would anyone like to explain what business M$ has probing MY computer? Or why it happened within seconds of the first time the system went online AFTER this forced install of IE5.5??

    Not to mention that IE5.5 had apparently gone around ZA -- never did IE (nor any Win98 component) *ask* to access the net. Tho I've previously *caught* Frontpage98 going around ZA, so am not really surprised :(

    --
    ~REZ~ #43301. Who'd fake being me anyway?
  94. Sen. Fritz Hollings Wants to protect our privacy? by fahrvergnugen · · Score: 2

    In 1999, and again in 2001, Sen. John Edwards, D-N.C., introduced legislation to force spyware distributors to get permission and notify people with a detailed description of the information they're collecting. No committee has picked up the bill, but broader consumer notice and privacy concerns are showing up in a compromise Internet privacy legislation soon to be introduced by Sen. Ernest "Fritz" Hollings, D-S.C.

    Does anyone know what this paragraph is referring to? Is this more unadulterated evil, a "compromise" version of the SSSCA-type bills, or is this (*snort*) something that could actually be beneficial? Can someone point me to more information about this legislation-to-be?

    --
    Even Jesus hates listening to Creed.
  95. Comet Cursor and Movie Networks by Renraku · · Score: 2

    I was sitting here on Slashdot, Tom's Hardware and AntiOnline, reading up on my usual sources of info. Comet cursor pops up. I wait for the cancel button to appear as I curse at it for being lame. No cancel button. A progress bar. The comet cursor icon appears in my task bar. It didn't even ask me if I wanted to install. It just installed. No licence agreement or anything. Movie Networks did the same thing with their software. And some antiviral program did that as well, and yet, there's no licences that I see before they install, do they just assume that I've said yes? Is this even legal at all? That's like a company breaking into your house and inserting its dangerous products, such as, "Gasoline-In-A-Coke-Can" and "Bag-o-Rattlesnakes! (tm)"

    --
    Job? I don't have time to get a job! Who will sit around and bitch about being broke and unemployed then?
  96. How Much Can You Find Out? by 4of12 · · Score: 2

    Ignoring for the moment all of the justifiable outrage about invasions of privacy, etc. I got to wondering:

    How much information and profiling can you do with Spyware?
    It seems that with microphones and webcams it should be possible to assemble quite a profile on a household.

    Even the easy stuff, like checking the audio to see if Joe Consumer has his TV tuned into OurAdvertiser's station, when they change the channels, whether they answer that SpamPhoneCall, what time of day people take a dump, etc.

    You could find out more about a person's life than they themselves could consciously remember.

    --
    "Provided by the management for your protection."
  97. He's The SNL Computer Guy by krmt · · Score: 2
    I feel pity for your customers. I'll guess that you're the type of guy that always has the raised eyebrow, exclaiming about how dumb the average Joe is, while at the same time wallowing in your own ignorance.

    sigh... Move!

    Maybe he enjoys being a stereotype though.
    --

    "I may not have morals, but I have standards."

  98. A sample by RzUpAnmsCwrds · · Score: 2

    Here's a sample of what the "privacy" agreement sounds like:
    "If we decide to change our privacy policy, or practices whether or not they effect our handling of personally identifiable information we will post those changes to this privacy statement, the homepage, and other places we deem appropriate so our users are always aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it."
    (Yes, that is a 62-word sentence. No wonder it's impossible to understand)

  99. Re:Ummm... by shyster · · Score: 2
    Maybe you're not familiar with the notion of capitalism, but the only point of ANY company is to make money (not-for-profit companies aside, obviously).

    That's why laws are and should be passed to protect consumers from companies...not the other way around.

  100. and you would be able to use by Archfeld · · Score: 2

    that data in any way you'd like I would imagine..There HAS NOT been a click thru license upheld in court YET...

    --
    errr....umm...*whooosh* *whoosh* Is this thing on ?
  101. Re:And the public cried... by darien · · Score: 2

    > > No pity for the majority.
    >
    > And you work in computer configuration and repair?

    Actually, he seems to be in a German industrial band. "No pity for the majority" is the English translation of Kein Mitlied Für Die Mehrheit. Strange, and barely relevant, but true.

  102. Re:And the public cried... by plover · · Score: 3, Insightful
    I almost always agree with this particular argument. We almost never need new laws, we have plenty of old ones. But not this time. Here are some back-of-the-envelope computations I came up with for what Brilliant Digital is asking for when I click on "I Agree":

    First, unused cycles are ordinarily "optimized out" by my CPU. In other words, it runs slower and consumes less electricity when not being used. Most modern CPUs go into a low-power-consumption mode when not actively performing real processing. (If you doubt this, check your CPU temperature while it's been sitting idle with a blank screen for an hour or two. Compare that to the temperature after playing an hour of Quake III or even just running a graphics intensive screen saver for an hour. I know I could certainly feel the difference when I was running the distributed.net client at home. I just wish I had metered it.) So, I "hereby grant BDE the right to access and use the unused computing power" is another way of saying I will freely donate my electricity. Let's find out just how "free" that is.

    First, let's assume that I pay $.0816/kWh for electricity (the 1999 national consumer average (page 14).) Let's also assume that I leave the computer powered on constantly (because I do.) Finally, let's assume that my computer consumes 60W when idle, but 120W when actively crunching numbers (because it's an Athlon.) So that's an extra 60W/hr I would unknowningly consume on behalf of Kazaa.

    • 60W/hr x 8766 hours/year = 525960 watt-hours per year.
    • 525960 / 1000 = 525.960 kWh per year
    • 525.960 * $.0816/kWh = $42.91 per year.

    Look at it a different way: Assume there are 2,000,000 KaZaa users.

    • 60W/hr * 2,000,000 = 120,000,000 watt-hours.
    Thats 120 megawatts per hour. We're talking California-rolling-blackout-sized consumption of energy here. It's Environmental Impact Statement time.

    Is it still so unreasonable to ask them to say "Click here to agree with the above and oh, by the way, we're going to use about $40 worth of your electricity per year", or does something a bit more drastic have to happen?

    --
    John
  103. Re:Kazaa Lite is still KaZaA... by Rakarra · · Score: 2
    Not installing the spyware costs them like a few pennies at most, but you being on their network improves it and helps them attract like 50-100 more users.

    Users only cost them money. Users generate no revenue by themselves.