Slashdot Mirror


Anti-Spyware Bill up for Vote in Congress

paul_friedman writes "According to Reuters - The U.S. House of Representatives will vote as soon as next week on a measure to crack down on deceptive "spyware" that hides in users' computers and secretly monitors their activities."

39 of 176 comments (clear)

  1. Won't this legalize Spyware? by erick99 · · Score: 5, Insightful
    The bill approved by Barton's committee would require software makers to notify people before loading new programs on their machines that can collect information about them. Violators could face millions of dollars in fines.

    A lot of these programs do tell you that they are going to load Gator or some other piece of sh*tware. However, it is buried in the middle of the EULA which most people "pagedown" through rather than read 10 or 15 screens of fine type legalese. I do read them or at least scan them for the part about giving me even more

    "free productivity"

    software. This legislation like the spam legislation (CanSpam), will simply embolden those who have been hesitant. Now that they can legally load your system up with spyware as long as tell you somewhere, no matter how hard it would be to actually find it, they will do so. I just wonder what these politicians are smoking when they come up with these "solutions."

    -erick

    --
    http://www.busyweather.com/
    1. Re:Won't this legalize Spyware? by Carnildo · · Score: 4, Insightful

      The anti-spyware bill is to spyware as the CAN-SPAM act is to spam.

      In short, it's a bunch of feel-good legislation that legalizes a few shady practices, and add further laws against others. Nobody will bother to enforce it, and in a few years, it will have been forgotten.

      --
      "They redundantly repeated themselves over and over again incessantly without end ad infinitum" -- ibid.
    2. Re:Won't this legalize Spyware? by techno-vampire · · Score: 3, Insightful

      Getting rid of spyware will take time, and may not be possible. Just being able to nail the worst offenders, those that install without notice or any reasonable way to remove, is a start.

      --
      Good, inexpensive web hosting
    3. Re:Won't this legalize Spyware? by gr8_phk · · Score: 4, Insightful
      "It appears that the house bill is very simple and just disallows installing without notice."

      Installing software on someones computer without notice is already a crime - especially if the installed software sends data back to the party who installed it. People go to prison for that type of thing, but apparently it's different if a corporation hacks an individual instead of the other way around.

    4. Re:Won't this legalize Spyware? by Tony-A · · Score: 2, Insightful

      There are already laws about unauthorized use of computing facilities. Rather strong criminal laws.

      To be effective, any new legislation should better define what constitutes authorization, specifically that any authorization burried deep down in anything expected to clicked through constitutes fraud.

      from Windows is the 'biggest beta test in history' - Gartner "Victor Wheatman, Gartner security veep, told delegates at the IT Security Summit in London that the most secure organisations spend less than the average and that the lowest spending organisations are the most secure."
      More legislation to help out a few favored scammers at the expense of the populace is not a good idea. CAN-SPAM? Spammers: Sure we CAN!

  2. diebold.. by DraKKon · · Score: 4, Insightful

    I would be prudent to put spyware in diebold's voting machines though.,.

    --
    "It's not like your minds are as open as the source you love..." - Me to the majority of Slashdot.
  3. Oh whatever by screwedcork · · Score: 5, Insightful

    As if the people who write spyware care about the law and doing what's right

    1. Re:Oh whatever by Shnizzzle · · Score: 2, Insightful
      But at least companies who are located in the United States and who profit from use of said software can be held legally responsible.

      I know that we all feel a little joy when we hear that spammers have been arrested and the same can now happen to spyware authors.

  4. Yeah,Sure by rainman_bc · · Score: 5, Insightful

    It's probably going to be as effective as the CANSPAM act.

    How are they going to nail people in Russia and China?

    --
    09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
    1. Re:Yeah,Sure by Carnildo · · Score: 2, Insightful

      They're not even making a serious effort to use the CAN-SPAM act against spammers in the United States. Why worry about people in Russia?

      --
      "They redundantly repeated themselves over and over again incessantly without end ad infinitum" -- ibid.
  5. politicians and technology do not mix by loose+electron · · Score: 5, Insightful

    More useless laws that can not be enforced.

    Just like attempts to make P2P filesharing illegal, it will be virtually impossible to regulate or control.

    --
    www.effectiveelectrons.com "chips that work" Analog, RF, Mixed Signal
  6. Sweet.... by bizpile · · Score: 3, Insightful

    Nice, more unenforceable legislation. Go Congress!

  7. Screw fines... by TWX · · Score: 2, Insightful

    ...it's time to get the tree trimmers out, heat them up to temperatures that will cauterize, and then truncate something important to the spyware authors...

    Of course, if the dominant web browser weren't vulnerable to installing trojan software on a user's computer in the first place this would be a moot point.

    --
    Do not look into laser with remaining eye.
    1. Re:Screw fines... by TWX · · Score: 2, Insightful

      Thing is, though, Internet Explorer has sucked from the first release that was bundled with Windows NT 4.0, which was called v2.0. It has never been properly fixed. After the debacle of MS forcing IE on to computers with the OS I decided that I'd never use their browser again for my own computers, and I've stuck to that. I've watched countless exploits for the browser come out and wreak widespread havoc on Internet users, while I've been very safe using Netscape or Mozilla, depending on my fancy. My computers have never had spyware/trojans/hijacks or any of the like.

      Microsoft's web browser is a piece of shit. It allows Internet-based stuff to invade down to a service level on the workstation. It allows massive quantities of unsolicited popups, a problem that the Mozilla team fixed at least two years ago. It has been documented to have "arbitrary code execution" security holes on a regular basis.

      I haven't had these problems with the Mozilla/Netscape strain. My friends with Safari and Opera haven't had these problems. How hard is it to code a fucking layout interpreter and display program?

      --
      Do not look into laser with remaining eye.
  8. Isn't this already illegal? by halivar · · Score: 5, Insightful

    Isn't this already illegal? Lately I'm afraid of legislation banning things that are already illegal. Take the DMCA, for instance; copyright violations were already punishable, but all of a sudden a whole slough of other things are, too.

    I say, let's strengthen our ability to enforce laws we already have on fraud and invasion of privacy. It seems new laws, making more things illegal will simply become another "gotcha" for folks using legitimate software.

  9. Nothing can be done by economan · · Score: 4, Insightful

    There is really nothing that can be done. It is called social engineering. The end user does let them into the computer, not by choice, just by staight ignorance. This is just another set of laws that will mean nothing.

  10. Re:Finally! by savagedome · · Score: 4, Insightful

    Might not solve it, but at least people will know it exists.

    And there probably lies the difference between 'average person' and 'average /.er'. What is spyware for you and I might not even be spyware for them. There are people who willing install Bonzi Buddy on their systems because its cute but I would not touch it with a ten feet pole.

    And if these legislators were even half serious, their act should have included not the installation but the 'uninstallation' part. A lot of programs/utilities/helpers capture sensitive information (Google Toolbar anyone?) but the difference lies in getting the crap out of somebody's machine. Anybody who ever had to use HijackThis to figure out the fscking process eating up your machine knows what I am talking about.

    Till then, just another stupid law and the life continues as always.

  11. What the Gov't NEEDS to do by TheUnFounded · · Score: 4, Insightful

    What really needs to be done: have the gov't put in place a formal pricipal that states THIS. Maybe then they'd actually accomplish something.

  12. Re:NO! by Pig+Hogger · · Score: 5, Insightful
    80% of what I do at work is cleaning spyware. I would be out of a job if it stopped existing.
    Then, you are a part of the problem. Vested interests that benefit from the status quo.
  13. Sorry but by needacoolnickname · · Score: 5, Insightful

    I think governments really have more important things to think about than spyware and spam - oh, I don't know... wars, the economy, health care, education, ways to spend the money they make off the tobacco industry for everything possible except for the health issues they are saying they nede the money to pay for...

    If someone installs spyware it is their fault. Nothing is free on a Windows machine. Take some personal responsibility for jebus sake.

    Here's a question. Why are all the spyware programs written for Windows rather than Mac or Linux. There are perfectly good freeware programs for the other OSs and they aren't laden with the crap?

    1. Re:Sorry but by rainman_bc · · Score: 2, Insightful

      Why are all the spyware programs written for Windows rather than Mac or Linux.

      Simple market share dude.

      Businesses (shady or not) look at the cost/benefit analysis of writing this stuff. The benefit is higher when you write the stuff for windows than any other platform.

      --
      09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
    2. Re:Sorry but by __int64 · · Score: 3, Insightful
      "Why are all the spyware programs written for Windows rather than Mac or Linux."

      B/c first these things work by volume, windows has a farlarger userbase to attack than any of the others. Second, there are alot more, less knowledgeable users on windows than on other platforms. So statistically its far easyer to doop them into installing your garbageware than users of other systems.

    3. Re:Sorry but by Anonymous Coward · · Score: 1, Insightful

      Why are all the spyware programs written for Windows rather than Mac or Linux.

      Because Windows has the dominant OS market share. If Mac or Linux was the dominant home user OS then there would be plenty of spyware programs written for those platforms. That should be obvious to anyone with even the slightest bit of common sense.

  14. Re:Poor guys by Obliterous · · Score: 4, Insightful

    Not a damned thing...

    they do tell you that their stuff is being installed. it's in the EULA for whatever program you actually wanted to install, that it hitchiked in with...

    Word to the wise: if there is more than one EULA, then there's probably spyware. if there's only one, read the bloody thing...

  15. yes by killua · · Score: 3, Insightful

    Being the honest, law abiding, trustworthy corps these spyware companies are. I'm sure they will comply! Expecially when the law in question will be virtually uninforcable. We can trust them! Really!

  16. Not that good of a law... by chrispyman · · Score: 3, Insightful

    As many others have pointed out, this will probably be as effective as a law as CAN-SPAM was. What they really need to do is to make it illegal for companies to profit from the selling of the data that these spyware/adware programs collect.

    1. Re:Not that good of a law... by pilgrim23 · · Score: 4, Insightful

      When law is not the answer, yet law is passed to address it. the law, and all laws, looses respect.

      --
      - Minutus cantorum, minutus balorum, minutus carborata descendum pantorum.
  17. Re:What I don't understand.... by TykeClone · · Score: 3, Insightful

    They don't care about controlling problems - they just want to look like they're doing something about an issue.

    --
    A fine is a tax you pay for doing wrong and a tax is a fine you pay for doing all right.
  18. How about a bill... by mabu · · Score: 3, Insightful

    that guarantees X amount of money to be put into enforcement/education efforts against existing cybercrime?

    We don't need any more laws. We need law enforcement of existing laws. The current anti-computer tampering laws are effective in most cases.

  19. Anti spyware legislation by serenak · · Score: 2, Insightful

    Like so many things Govt's do isn't it "bolting the stable door"? Spyware is out there, asking for people to "agree" to have it is just asking for a whole flood of "legalised" versions to infest PC's worldwide. Biggest problem is *obviously* that like spam this stuff usually comes from outside the "controlled" zone eg China, Russia, Papua New Guinea etc. Harden your security or change to a more secure system or get a better firewall! Then again I run OS X so I don't have to deal with this day on day...

  20. Mandatory computer education? by Sarcastic+Assassin · · Score: 2, Insightful

    I think the government should require people to obtain an Internet license, to get access to the Internet. It could be not only preventional (eg, avoiding spyware, how to remove it), but educational (incorporating a bit of HTML, possibly). It'll probably destroy the essence of the Internet (eg, a kind of virtual library), but people will be more educated.

    1. Re:Mandatory computer education? by LincolnQ · · Score: 2, Insightful

      Argh, mod you down, please. That makes no sense, I'm sorry. Are you being serious?

      An Internet License would hurt much of what makes the Internet the Internet (anonymity, free speech, etc.) And how would you enforce it? Would you have somebody watching over your Internet usage, and, if it seems erratic, "pull you over" and ask for your Internet License and Registration? I'm sure everyone here will love that idea.

  21. They will blow it. by BCW2 · · Score: 3, Insightful

    Just like can-spam. Because they make it too complicated. It is really a case of illegal electronic surveillance, just like an illegal wiretap. You shouldn't be allowed to do it without a court order. The last I heard that was already a felony.

    As usual they would rather pass a new pile of crap than enforce whats already on the books.

    --
    Professional Politicians are not the solution, they ARE the problem.
  22. Oh, so it's just like.. by Gadgetfreak · · Score: 2, Insightful

    the Assault Weapons ban? Feel-good indeed, and unenforced.

    It's a PR stunt for the people who live in fear of what they do not understand.

    --
    "No fair, you changed the outcome by measuring it!" - Professor Hubert J. Farnsworth
  23. Immunity for Some? by ObsessiveMathsFreak · · Score: 2, Insightful

    Yet how many loopholes will be present to allow law inforcement to install keystroke loggers and port sniffers with any sort of warrent from a judge.

    No doubt they'll justify any blatent breach of personal rights with a big 'fight terror' or 'freedom police' sticker and a grin.

    I'll bet some spyware companies are already passing on data they collect in 'suspect' countries to higher powers. I mean, if there are spyware infected PCs in say... France, don't you think that greasy agents are taking advantage of that now. Expect exemptions, official or otherwise, for spyware companies that jump into bed with enforcers looking to get around the law.

    --
    May the Maths Be with you!
  24. Remeber kids by the+real+darkskye · · Score: 2, Insightful

    Just because something is legal doesn't mean it is ethical.

    --
    Music is everybody's possession.
    It's only publishers who think that people own it.
    Fuck Beta
    ~John Lenno
  25. EULA legislation? by Wino · · Score: 2, Insightful
    What I'd really love to see is some sort of regulation that tames the one-sided nature of EULAs themselves.

    For instance...

    Ability to opt-out (or must opt-in) to tracking/privacy related features.

    Non-solicitation agreements.

    Use of personal information. etc.

    Also, force companies to have a brief overview of the EULA so consumers can actually determine what it is they are actually agreeing to without having a law degree.

    A man can dream...

  26. Modify existing laws by Lesrahpem · · Score: 2, Insightful

    I have always sort of wondered why adware and spyware have not been lumped into the same category as malicious viruses. It is easy to say that they're not malicious, in that they don't delete files or make damaging configuration changes to a computer. However, they do create a huge performance decrease.

    From what I have seen the average Windows user who uses Internet Explorer seems to have between 100 and 600 spyware items (according to ad-aware) on their computer. I see this because I do computer repair in my area and almost all of the times a computer is brought to me for repair it is spyware that is causing the problem. There's usually nothing else wrong.

    In light of that, I think congress would do better just to redefine the laws already in place which deal with computer viruses. How about classifying any piece of software which installs on a person's computer without prompting them, or which has a primary function other than the one stated, as a virus (I mean in legal terms, not technical).

  27. Re:Poor guys by stephanruby · · Score: 2, Insightful
    Word to the wise: if there is more than one EULA, then there's probably spyware. if there's only one, read the bloody thing...

    Assuming it's actually a product you're trying to download, and not just a random activex popup. It's usually easier to google whatever name of the product plus add the word "spyware" to it. Reading the EULA is too damn difficult these days.

    It's the corollary of the Slashdot effect. Never read the primary source, someone else will already have done it for you.