Slashdot Mirror


Secret Kazaa Documents Revealed in Court

Dan Warne writes "A fascinating range of Kazaa's internal documents were revealed in Federal Court in the ongoing court case against the Australian-based company today. One extraordinary philosophical manifesto by the company's chief technical officer showed that he was aware that Kazaa's activities were a huge legal risk. He also feared being 'out-innovated' by other P2P programs that didn't come bundled with adware. "if consumers can connect to FT (as well as Gnutella 2, eDonkey and Bittorrent) and it has no ads or adware then it would seem a good choice," Philip Morle says in the his manifesto. The documents are full of all sorts of other admissions-that-you'd-be-crazy-to-put-on-paper like how Kazaa employees "hate" installing the Kazaa Media Desktop on their machines because all the bundled adware slows your machine down and can hijack your web browser."

62 of 273 comments (clear)

  1. Shock News Just In... by tabkey12 · · Score: 5, Funny

    Kazaa contains Spyware! Lock up your daughterboards!!!

    1. Re:Shock News Just In... by Bigthecat · · Score: 5, Insightful

      It's one thing for it to have spyware; it's something else for one of the company's head honcho to admit it.

    2. Re:Shock News Just In... by DrEldarion · · Score: 2, Insightful

      ... and for company employees to admit it's horrible.

  2. Currently... by gandell · · Score: 5, Interesting

    If you go to Kazaa right now, however, you'll note that they say that there's no spyware bundled with the software. Thanks, but no thanks...I'm sticking with bittorrent and Winmx.

    --
    Mercy was given to me by Christ...I must give the same to others.
    1. Re:Currently... by Ninjy · · Score: 5, Insightful

      Always be careful, thanks to the language ambigiouty, even the simplest statements can be turned around to form the opposite instead.

      Even in saying "Kazaa does not come with spyware bundled", followed by "Kazaa and the bundled software do not collect personal information" still leaves quite a large hole for them to just walk straight through. What if one of the bundled applications reroutes your HTTP traffic through third-party servers? All the application does is re-route your traffic, it doesn't collect any information at all. The information collecting may just as well happen elsewhere.

      Again, always remain on the look-out for these things, however minor they may seem.

    2. Re:Currently... by dioscaido · · Score: 5, Informative

      Because they have "adware", not "spyware". A ridiculous distinction that allows many companies to morally justify their inclusion of such horrible pieces of code in their products.

      Just peek at Messenger Plus v3 (an add on for MSN Messenger) -- they include LOP in their installer, which hijacks your browser, your searches, adds a toolbar, and adds icons to your desktop, and is one of the most annoyingly difficult things to clean on your own. The Plus 'company' justifies it in that it's "adware", not "spyware", and that the user opted in when installing by not un-checking the default install option. What comes next is a hellish exercise of peering into the most obscure parts of the registry to kill the re-spawners that make the spyware^H^H^H^Hadware come back on reboot when things look clean. /end rant

    3. Re:Currently... by Durzel · · Score: 5, Informative
      Straight from the installer's mouth.. What you agree to install...

      Step 1 of 4

      Kazaa file sharing application with: Bullguard Virus Protection, Altnet Topsearch.

      Kazaa is a free download supported by advertising from Cydoor, the GAIN Network and InstaFinder.

      Altnet PeerPoints Manager Package, an application that rewards you for sharing on Kazaa including My Search Toolbar and P2P Networking Application.

      Sharman Networks respects your privacy. Read the privacy policy. You must also agree to the user license agreements linked from below before continuing.

      [ ] I agree to the Kazaa Media Desktop End User License Agreement and Altnet PeerPoints Manager Package End User License Agreements.

      Seems it's just as polluted with spyware as it has always been.

    4. Re:Currently... by Spl0it · · Score: 2, Informative

      Actually you have to click yes or no. They do not 'assume' yes or no for you. So your comment implying that you have to uncheck something is completely untrue.

      --

      No, this is
  3. Practice what you preach by Dark+Coder · · Score: 3, Funny

    With regard to forcing their spiteful employees using their own products, KaZaa ain't no preacher for the general populace.

  4. It just goes to show... by DaHat · · Score: 5, Insightful

    Never write anything in a letter, e-mail, diary, memo or any other quotable medium that you don't want the other guys lawyer holding up in court.

    1. Re:It just goes to show... by Eminence · · Score: 5, Interesting
      This sounds very rational. And this is probably what people should do. However, both the original poster and you assume that other fellow's lawyers' right to read anything that you've written is natural and obvious. But shouldn't there be a limit? If that would be technologically possible to subpoena someone's thoughts would you see it as natural and right? I really don't like the idea that anything I write or draw might be used against me - I thought this rule applied only to testimonies after being arrested.

      I understand that from the court's point of view such memos and letters are an important evidence that would allow them to judge not only the actions but also the intentions. Maybe that's what we should worry about? After all, it is really hard to prove intentions in cases like this - and even harder to judge them. An intention to rape & kill are obviously bad, but it is not as obvious with intention to develop a way for people to freely share files over the network. Here it depends on one's beliefs and interests whether he would see it the way I put it or as an intention to develop a way for people to steal precious and highly valued intellectual property of media companies. Are beliefs to be tested in court?

    2. Re:It just goes to show... by dutky · · Score: 3, Informative
      Eminence wrote:
      This sounds very rational. And this is probably what people should do. However, both the original poster and you assume that other fellow's lawyers' right to read anything that you've written is natural and obvious. But shouldn't there be a limit? If that would be technologically possible to subpoena someone's thoughts would you see it as natural and right? I really don't like the idea that anything I write or draw might be used against me - I thought this rule applied only to testimonies after being arrested.

      It is currently techologically possible to subpoena a person's thoughts: A witness can be subpoenaed to testify regarding their thoughts, and they are required by law to tell the truth. The only time your thoughts are protected (under the U.S. constitution) from testimony are when their revelation may incriminate you. If you commit your thoughts to physical form, however, they are subject to discovery just like any other physical object: should we be prevented from using a bloody knife as evidence simply because it is personal property of the defendant? If not, why should we exempt a written note?

      You may not like the idea that your scribblings may be used against you in court, but it is the case, and has been for many, many years. If you commit a crime, then write about it in your diary, or send a letter to a friend confessing to the crime (or bragging about it, or whatever), those confessions damn well aught to be able to be used against you: they are directly material to the prosecution of the case and there is no state interest in protecting such communication (as there is in protecting communication between spouses, doctors and patients and lawyers and clients).

      In the prosecution of almost any crime, there are two vital aspects that must exist: the actus reus (guilty act), and the mens rea (guilt mind). If the legal system can't attempt to substantiate mens rea, then we must either accept that no crimes can be prosecuted without a direct confession (completely unacceptable) or that intent is irrelevent to the crime (meaning that simple negligence would become criminal, also unacceptable).

  5. article text by Anonymous Coward · · Score: 4, Informative

    just incase of the slashdot effect:

    The Sale of Kazaa

    Team Sharman came to court today with a strategic shift in direction: the revolution would now be a secret.

    Their legal team presented a draft set of undertakings designed to suppress non-confidential documents from the media. It could have been a great plan if the Judge didn't think it was so crap, and with no supporting evidence for the basis of claim to confidentiality, Judge Wilcox swept away the majority of the claims for confidentiality by Altnet and Sharman.

    There were 30 Altnet documents and four Sharman documents they didn't want publicised. We'll go through the Sharman documents today, and the Altnet documents later in the week.

    The first item for discussion here at the Daily Dispatch is a 28 page contract between Kazaa B.V and Sharman, titled: Agreement for the Sale and Purchase of the Business and certain Assets of Kazaa B.V.

    Buried within the most standard legal contract that makes you want to stab your eyeballs out, are the following nuggets of information.

    When Kazaa's original Dutch owners got the jitters from pending US litigation by the music industry, the company was sold to Sharman for 600,000 Euros (about $1 million) to be paid in three installments. The purchase price included all company assets for the provision of p2p enabled software (which includes advertisement space for display advertising) to let users search and download files from other users.

    Plus, all business and registered intellectual property rights, confidential information (defined as processes, methods, formulae, financial data, customer and supplier lists, marketing information, test results and reports, project reports, testing procedures, development manuals, training manuals, market forecasts, sales targets and stats, price sensitive information, research reports, business development reports), and all Internet domain names.

    Bored yet? The sale took place in the Amsterdam offices of Van Doome at De Lairessestraat, and following the sale, Kazaa BV would have to change its name. Sharman was indemnified against all debts and liabilities and blah blah blah standard contract stuff. All employees were sacked after the sale (nice). Kazaa B.V ensured there was no Trade Union agreements or disputes in place at the time of sale. If there was, the leftie bastards would understand anyway, because every revolution starts a bit nasty. Of course, today Sharman enjoys the full support of a devoted staff that would never be treated so shoddily by their benevolent bosses if there were cause to up and move from a jurisdiction under legal duress. It's a revolution, it's Us against Them, it's Mabo, it's the vibe of the thing.

    The Sales Agreement further confirms that when all employees were sacked, there was no way anyone could come back and haunt them to "assert any moral right in respect of any Business Intellectual Property Right." And if they did, then Zenstrom and Friis would be stung for it, not Sharman. So I'm guessing all employees were made to sign a contract as thick and dense as this one to make sure they kept quiet.

    The original owners, Niklas "Skype" Zennstrom and Janus Friis were forbidden from competing with Sharman in any way for 3 years.

    The deal was to be kept secret and not announced without the written consent of Sharman. The Sales Agreement was construed in accordance with the laws of England and subject to the non-exclusive jurisdiction of the English courts.

    There were two clauses that seemed a bit odd. Under Schedule 3 of Vendor Warranties is the subheading Litigation. Clause 5.1 says:
    Save as disclosed in the Litigation Letter, the Vendor (Kazaa B.V) is not a plaintiff or defendant in or otherwise a party to any litigation relating to the Business, which are in progress or threatened in writing or pending against the Vendor. So far as the Vendor is aware, no governmental or official investigation or inquiry concerning the Vendor is in progress or pending.

    Th

  6. How much does this matter? by mistersooreams · · Score: 3, Interesting

    I can't see that this is going to blow major holes in Kazaa's legal defense, although I do think they'll lose anyway.



    I don't think Kazaa's argument was ever that they "didn't know" about all the illegal P2P traffic they were generating. Surely their argument is the old "Common Carrier" one, where they aren't responsible for anything Kazaa transports and responsibility is shifted to the software user? Maybe I've misunderstood, feel free to correct me.



    Now, this is clearly embarrassing for the company, and the CTO especially, but I can't see that it's of much legal importance. Everyone knows about Kazaa and spyware by now, don't they/

  7. No, really by Ignignokt · · Score: 5, Funny

    People would prefer programs without adware? What a stunning concept. At what point did "manifesto" replace "common sense"?

    1. Re:No, really by EvilTwinSkippy · · Score: 2, Insightful

      If it was comon sense you wouldn't need to spin it in a "Manifesto", would you?

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
  8. Anyone get the feeling... by MosesJones · · Score: 4, Insightful


    That maybe this chap wasn't -entirely- on side with the business strategy of the company.

    To me this sounds like a techy complaining that the business is subverting the idea. In many cases this is because the techy doesn't understand the business model, but here it sounds more as if the business didn't understand the market.

    --
    An Eye for an Eye will make the whole world blind - Gandhi
  9. Re:Sure there ain't no spyware... by tabkey12 · · Score: 5, Informative
    Note that their Skype website says: No Spyware, Adware or Malware
    Kazaa says: No Spyware

    Spot the difference, people!

  10. suprising, or is it? by Syini666 · · Score: 5, Insightful

    When your own employees hate installing the very software of their employeer you know its a recipe for disaster. With those kinds of feelings flowing around the office its suprising the documents werent 'leaked' earlier. For some odd reason I don't see anybody coming to Kazaa's defense in court now like Napster saw when they were up on the chopping block.

    1. Re:suprising, or is it? by chrish · · Score: 2, Funny

      Can you download these documents on Kazaa?

      --
      - chrish
  11. Trial lawyers must not run Australia's economy by Nova+Express · · Score: 2, Insightful
    Otherwise he's know that it's always a bad idea to tell the truth rather than CYA in a memo.

    Which is not to excuse his spyware-infested piece of crap. But where ever business memo must be written in such a way that you csn't tell the truth because it might be used against you in a court of law, your have a big problem with your tort system.

    --
    Lawrence Person (lawrencepersonh@gmailh.com (remove all "h"s to mail)

    http://www.lawrenceperson.com/

  12. Still... by DoubleDangerClub · · Score: 4, Interesting

    I'm still amazed that the people in charge of companies like Sharman, etc. think that chocking their software full of crap programs that infect and make peoples' pcs run poorly (to say the least) is the correct way to go. I guess it just shows that in the end, a proper p2p program needs to be open sourced. It seems the only way we'll get something people will want (want is emphasized) to use. It takes real people to make software to be used by real people I guess.

    --
    Ubuntu, the way linux should be.
    Try Ubuntu FREE! --
  13. Re:And slashdot keeps advertising skype, by Anonymous Coward · · Score: 5, Informative

    It's hard to take the word of someone who is stating incorrect information.

    Skype is created by the original developers of Kazaa, but the original developers did not include any spyware/adware in KaZaa. The spyware/adware was added to Kazaa after it was sold to Sharman.

  14. OK, bear in mind by ArbiterOne · · Score: 2, Informative

    Bear in mind that these aren't the Halloween Documents. The article, for those who refuse to RTFA, is basically a summary of the documents- not the documents themselves. They don't say "we're selling a product which we know is poisoning people's computers", that's sort of implied across the board. But they still don't come right out and say it.

  15. Hoisted... by EvilTwinSkippy · · Score: 3, Funny
    Hoisted by their own petards.

    One nice thing about any devious plots. People always have to write them down to either keep their lies straight, or to justify it somehow to themselves.

    --
    "Learning is not compulsory... neither is survival."
    --Dr.W.Edwards Deming
  16. Why not much free software innovation? by br00tus · · Score: 4, Interesting
    I develop a Gnutella p2p application (Gnutizen) and have often wondered why so much of the popular and innovative products are propietary, and not more open. Napster was the first. Kazaa was the first to have "superpeers", but its network is now totally locked. Edonkey was the first good program for downloading big files, but it is propietary (there are decent Windows clients, but I haven't found any on Linux I like yet). And now eXeem has a propietary on may levels network technically superior to Edonkey in terms of speed.

    I don't know the answer, but I guess I'm more qualified to answer than many because I've been coding one on and off for the past three years. I guess the answer is it's hard work. You're also not "following head lights", as even the eDonkey clones do. And the programming is not easy - with C language it's socket programming, which means all kinds of strange things can come over the network which have to be defensively coded against, and since you're using multiple sockets that means threading. And it takes a lot of code to just get a decent app, never mind cool bells and whistles. One reason mine is GPL is, aside from liking the GPL, this is my first big software project so I don't feel I'm at a level where I can sell my code yet. I've also borrowed GPL code from a program called gnut which helped. I would borrow from one called GTK-Gnutella but it's so big and complex it's hard to directly borrow from.

    Of course there are exceptions - Gnutella (although AOL/TW killed the eponymous one, leaving only the protocol clones), and Bittorrent. With the Gnutella protocol, Limewire and Bearshare are commercial companies, but they agree on an open protocol, which they share with some free clients (like mine).

    There are so many innovations possible - Bittorrent is one of the recent ones - it built on what Edonkey did, allowing hundreds of megs of files to be transferred, except with Bittorrent, it added speed to the picture. So because Bittorrent exists, people now have a better chance of getting ISOs of Linux distros, Indymedia videos or whatnot. It's such a cool area I wonder why the propietary folks so often beat the free ones in terms of innovation. I guess it's a wash now with who innovates more. And also, with sockets, trheading and protocols that obsolete older versions as time goes on (ay de mi!), it takes so long to get a decent app together that innovation seems a long way off.

    I suppose another reason is the RIAA/MPAA is suing p2p developers left and right - that might explain why people are hanging back somewhat. It's unfortunate this fear is stifling p2p innovation. In many ways it seems ridiculous to me - on BBSs in the 1980s you had a file section and a message board system. Sometimes you didn't even have a message board - just a file section. People have been trading and sharing files on computers for decades, all of a sudden such communal practices are tainted, with accusations flying on Slashdot on how people use p2p to break some new laws that the big corporations passed recently in Washington DC that protected their soi disant intellectual property. It's ridiculous - there were normal BBSs and warez BBSs back then, just as there is an equivalent nowadays on the Internet. It would be insane for US-legal (for now) things such as sharing ISOs or Indymedia videos is crushed by the evil capitalist bourgeois corporations.

    1. Re:Why not much free software innovation? by timmyf2371 · · Score: 2, Insightful
      Which is why today "gnutella" is synonymous with p2p file sharing, and people say "Napster Who?".

      I don't see how you can make this statement - Gnutella is in no way synonymous with P2P file sharing; having used it myself and knowing others who have tried it the only thing I would associated the name Gnutella with is a software application which getting any file will take a relative lifetime.

      Napster however is a different story. They had a product which was used by many and had an immense amount of content available to download and I bet in a survey of 100 people Napster would be the name they associate with filesharing moreso than Gnutella.

      --

      Backup not found: (A)bort (R)etry (P)anic
    2. Re:Why not much free software innovation? by Kjella · · Score: 4, Interesting

      I think I can come up with a few more reasons.

      1. Lack of goal cohesion. In a proprietary company, you have a few people who design, and many who do as told. There are far too many variables around, often contradictory, like anonymity vs speed, centralization vs searchability, trust vs open network, leeching vs entry barrier and so on. Many networks have become not only a jack, but a deuce of all trades that way.

      2. Lack of vision. Those capable of coding a network application are rarely the same ones who can imagine a working concept of a million nodes. In OSS, it is my distinct impression that those who can do, and those who can't are ignored. Such a network can never be simularted properly in a test lab, you have to do it in your mind. Which means others will disagree, and badly.

      3. Standing on the shoulders of the wrong giant. By OSS's cross-breeding nature, it is much easier to keep building onto what is, than to change the fundamentals. In a proprietary network you're starting from scratch anyway, might as well do it "right", for whatever you believe is right. In networks, scaling is everything. If the way you construct the network is putting a ceiling on your app, the only thing you'll do is hit the roof again and again.

      And what experience do I have about that? :) Let's just say that there might be a few surprises left...

      --
      Live today, because you never know what tomorrow brings
  17. Re:Sure there ain't no spyware... by nilenico · · Score: 2, Informative

    But Skype isn't Kazaa! Skype are the folks who invented the basics (or whatever) of Kazaa, before it was sold out by a "friend" to the current bloatware Kazaa company... (See earlier thread about Skype.) And yes, this is probably Off-Topic.

    --
    .sig? No.
  18. Re:VMware! by William_Lee · · Score: 4, Insightful

    At the risk of inflaming passions, ANY OS is only as secure as its user. With a little common sense and attention to detail, it is relatively easy to keep a Windows XP installation spyware/malware/virus free.

    It's even easier in the workplace where XP can be locked down on the security front.

  19. Re:Sure there ain't no spyware... by elleomea · · Score: 2, Informative

    " Note that their Skype website says: No Spyware, Adware or Malware"

    Except it's not their Skype website. The creators of Kazaa and Skype sold Kazaa off to the current owners quite a while ago.

  20. Eat your own dogfood by EvilTwinSkippy · · Score: 5, Informative
    Eat your own dogfood might be a better expression to describe it.

    A lot of tech companies use it to describe th practice of using their own products in house. That's also where to discover many of the problems that infuriate customers.

    --
    "Learning is not compulsory... neither is survival."
    --Dr.W.Edwards Deming
  21. Kazaa _must not_ fail by kahei · · Score: 5, Insightful


    <grumpiness size="extreme" style="curmudgeonly">

    If Kazaa goes down, there could well be a flood of low-quality Britney_Spears_naked111.mpg traders and leeches coming onto the good p2p systems. I don't think I want that.

    It'll be like AOL day all over again.

    Support Kazaa -- or America's highschoolers will be trading on your network!

    </grumpiness>

    --
    Whence? Hence. Whither? Thither.
    1. Re:Kazaa _must not_ fail by Jugalator · · Score: 2, Interesting

      It's hard at least on BT since the trackers can be moderated. And it's work for the highschoolers to create .torrent files and upload them unlike just clicking to share a 1,000 file directory of junk. I'd think their attention span is often short enough for them to just settle with leeching from BT trackers. ;-)

      --
      Beware: In C++, your friends can see your privates!
    2. Re:Kazaa _must not_ fail by AndroidCat · · Score: 2, Funny
      It'll be like AOL day all over again.

      Do not underestimate the power of the September side of the Force.

      --
      One line blog. I hear that they're called Twitters now.
  22. Re:Sure there ain't no spyware... by ajs318 · · Score: 2, Insightful

    If they want me to believe their product contains no malware, spyware or adware, there is exactly one way they can convince me. And that's the same way that RMS, Linus and ESR convinced me that their software is clean.

    If you have nothing to hide, you have nothing to fear.

    --
    Je fume. Tu fumes. Nous fûmes!
  23. I think this is irony... by signingis · · Score: 3, Funny

    Haven't secret government documents appeared on Kazaa? ;)

    --

    I prefer a void in conversation to a vacuous one.
  24. I really don't understand this by elliotj · · Score: 4, Insightful

    1) People install Kazaa because they want to pirate music, pictures, video and software from the Internet
    2) Kazaa puts spyware crap in their product
    3) Users think this is unfair
    4) Kazaa is in court because of what they did

    Am I crazy? Is there someone out there forcing people to install Kazaa? How many people were installing it for legit legal use?

    You don't want spyware crap? Don't install shady programs.

    This is like sueing a drug addict because he let you share his needle and you contracted HIV. I really don't get what all the fuss is about.

    1. Re:I really don't understand this by oirtemed · · Score: 5, Insightful

      no, this is like suing a gun dealer because the gun he sold you had a gps device on it and the bullets were faulty. It doesn't matter that you were going to commit a crime with the gun. Kazaa purports to provide a legitimate product and service. If they are lying about it, they should be held responsible. Whether or not P2P is legal or illegal, or more importantly moral or immoral isn't relevant.

  25. Re:VMware! by vadim_t · · Score: 4, Informative

    Ha.

    I'd say I'm far from stupid - not a genius of course, but I do enough knowledge to administrate Unix and Windows systems, and write software. Yet I can't keep a Windows box spyware and virus free, unless that's specifically my objective.

    I mean, it's certainly possible, if what you aim for is a spyware free box. Yes, I can use vmware, every virus and spyware scanner, try to make sure everything I install is 100% safe, and perhaps get a clean and hopefully useful box out of it. But no normal user does that, myself included. I'm certainly fairly paranoid and won't install random crap from the net, but nice looking useful tools can have spyware too.

    If you want a real example, here's one. Go to this Azureus page. Well, actually that's not the Azureus page. It's a page that some jerks set up where you download spyware. The real page is on SourceForge.

    The cost of forgetting to look with a critical eye at the fake page is to have your system infected with all kinds of crap that will then pretty hard to remove. And it's pretty hard, mind you. I could fairly easily have fallen for it, if I hadn't seen the official one before and wondered why they changed their design so much. Normal users don't run strings(1) on suspicious executables and google for information, though.

    Now, you could argue that this kind of thing applies to Linux as well. True. However, there's a critical difference: On any sane Linux distribution, the official release of Azureus will be a package. And if the user downloads the software on their own, it'd be installed in their home directory. At least, while running under your account such crap is limited in what it can do, and has it much harder to wedge into your system as to make it hard to remove.

  26. Re:Intellectual "property" by phats+garage · · Score: 2, Informative
    Intellectual property is similar to any other sort of property, ie., ownership. Its only an unnatural right if you look at programs and data as being meaningless streams of bytes. Once you realise that programs and other media like audio and video actually have a demand then you can make the leap that there is opportunity for supplying this demand. When ever there is demand that is met by a supply, you have a market. Since producing digital media is often considered a decent way to earn a living, society of course will support mechanisms that allow for rewarding media producers.

    Now this market for programs and media implies that there is a product or service, and in this case the product is in the form of copies of programs and media. The big hitch is of course that the cost of production is mostly in design, ie., producing the first copy. This is of course the biggest stumbling block intellectually for folks because they neglect to consider that often this design costs money which is then often recouped via sales of the published copies.

    The right to exclusively produce published copies is otherwise known as intellectual property.

  27. Re:Out of curiosity... by Xoo · · Score: 3, Informative

    If you install Kazaa with MS Antispyware running, it will install all of the spyware, but MS Antispyware will pickup about half of the spyware immediately after installation. To get rid of the rest, a thorough system spyware check will kill it.

    It's important to note that while you can kill the spyware bundled with Kazaa, if you modify the Cydoor installation, then Kazaa will cease to function.

    Here is a good website if you want to install "dummy" files to trick Kazaa and other adware software into thinking you have the spyware on your system, but really don't.

    --
    Karma police, arrest this man, he talks in maths....
  28. Re:Sure there ain't no spyware... by nanoakron · · Score: 2, Informative

    Just a heads-up on another program that says it doesn't come with spyware or adware:

    Mercora free radio client.

    MS anti-spyware spotted it trying to install the grokster adware bundle. Good catch.

    -Nano.

  29. Re:Sure there ain't no spyware... by Phisbut · · Score: 4, Interesting
    Note that their Skype website says: No Spyware, Adware or Malware
    Kazaa says: No Spyware

    Funny when companies have to explicitly mention they're not evil. Funnier is that Microsoft also says: "We're not saying there's no virus or malware in our product". Seriously... The MSN-Messenger license states that :

    disclaimer of warranties. to the maximum extent permitted by applicable law, microsoft and its suppliers provide to you [...] as is and with all faults; and microsoft and its suppliers hereby disclaim [...] all warranties and conditions, whether express, implied or statutory, including, [...] lack of viruses, [...]

    --
    After 3 days without programming, life becomes meaningless
    - The Tao of Programming
  30. It's simple, real by Moraelin · · Score: 4, Insightful

    Some people, simply put, don't give a rat's ass about "correct" or about damage done. They only care about making money. Period.

    If it weren't explicitly illegal, they'd even poison a town's water supply just for some money. Not an exaggeration: companies dumped toxic stuff into rivers right until the law forced them to stop. Or into the air. And even then, every time someone told them to use filters, there was endless moaning and bitching and lobbying about it.

    Spam, tele-marketting, link-spam, spyware, etc, are just a symptom of the same thing: if it makes money and it's not illegal, hell yeah. Let's pollute and destroy another resource.

    There was an interview with a link-spammer on The Register this week. Dunno, I found it surrealistic how the guy basically had _zero_ morals. Not even an "eh, it's wrong, but I need the money" kinda attitude. Nope. The general tone all over was along the lines of "who the damn has time to care about collateral damage? It makes money and it's not illegal. Period. If you have a problem with it, tough shit. Sucks to be you."

    Basically it's the same with spyware. These people don't care, that's all. As long as it makes them a buck and isn't explicitly illegal, they'll clog your computer without thinking twice. If it was possible and made them a buck, they'd even make that computer explode without thinking twice.

    --
    A polar bear is a cartesian bear after a coordinate transform.
    1. Re:It's simple, real by Moraelin · · Score: 2, Insightful

      No, I'm not implying that poisoning a river is the _goal_. Of course, money at all cost is the real goal.

      I do however claim that _some_ people, even if they _knew_ they're poisoning others, they'd still just not care at all. If you gave them a choice explicitly along the lines of "do we do X, and gain nothing, or do Y and gain 10,000$ at the expense of killing 100 people", they'd choose Y every single time.

      Not because they like killing people, of course. Because, worse yet, they just don't care. The only factor in choice Y they see is "and gain 10,000$".

      And indeed, they are not comic-book super-villains. In comics, evil is a purpose in and by itself. Super-villains do evil stuff for no other reason than because they enjoy doing it.

      Real life "evil" is more like the corporate kind.

      It's Al Capone who killed people just for money and power. No hard feelings, nothing personal, just business. I want the extortion money from your half of town too.

      It's the Third Reich planning in cold blood to exterminate every single citizen of Poland until the 70's to make room for German colonists. Nothing personal mate, we just want your land. And, totally incidentally, this means you all must go to the gas chambers. It's result, not motive, honestly.

      It's the 19'th century factory owners sending armed men to _shoot_ workers on strike. And also those men who took arms and shot starving workers, just for money. Of course, neither was a super-villain, and neither did it just because they liked killing people. Nothing personal, really, just business. Awfully sorry that we must do something as messy as shooting you, really. Will just cost us even more to whitewash those blood stained walls again, you know. But between your life and a few thousands dollars profit, the few thousand dollars win every time.

      In a sense, the real life "evil" is not the kind that hates all humanity and wants to cause pain, for pain sake. That makes for at most an idiot going psycho, gunning down 2-3 people, and then getting gunned down himself by SWAT. Not much of a super-villain.

      The real life "evil" is the kind that doesn't care. If someone dies or suffers, it's merely result, not motive, but still no reason to stop making money that way.

      --
      A polar bear is a cartesian bear after a coordinate transform.
  31. So you've done your own audit then, yes? by Sycraft-fu · · Score: 5, Insightful

    You've gone over every line of the source code you use? All of it? The entire kernel, all the drivers, all the utilities, all the apps and so on? You've checked carefully, to ensure that there's no backdoors spread across a number of functions (you can have some thigns that are innocent and harmless on their own, that work together to do something bad)?

    Are you also sure about your compiler, have you checked it? Not the source I mean, but do you know that the binary is a faithful reproduction of the source? The problem with a compiler, is that you compile it with an old version of itself. What if it has a backdoor that exists only in binary form, never in the source, but propagates on compile (see http://www.acm.org/classics/sep95/)?

    There's nothing about OSS that inherantly protects you. This is espically true since I'm guessing indeed you have NOT done the audit I described. Few people have the programming skills necessary to do so in a useful way and even fewer have the mountain of free time it takes. Rather, you are taking it on faith that others have audited the software you use, done a good job when doing so, and have spoken the truth and been heard if a problem was found.

    A more realistic way to check to see if the software is all above board, and one that works equally well on closde source software, is to check the install. By that I mean log everything that is added, modified, or deleted. Then, when running the software, look for anomalous behaviour, like loading modules it shouldn't, trying to establish network connections, spawning other processes, etc. If you do that correctly, it's not hard to tell if something is acting evil or comes with stuff that does. It's also something that you could realisticly spend the time to do for all the programs you use.

    Even then, I doubt you'd bother unless you are super paranoid. I'm sure you generally trust that others have looked in to it, and you'd have heard about it if there were problems. I personally only check the install and operation of a program that I find suspicious. Retail software, OSS, and 99% of downloads I don't bother since experience shows that there's nothing to worry about. I take on faith that there's nothing bad in there, and if there is one of my cleaner tools will catch it soon enough.

    But my point here isn't to attack OSS, if that's what you are thinking, just to point out that this warm, fuzzy feeling that many people get from the openess is a false sense of security. They think because the code is open, and able to be checked, it means that there's nothing bad in there. Well, that's probably true, but only in the same way it's probably true that if you buy retail software it's also free of malware. Neither is a gaurentee of anything, and since 99.999% (or more) of people aren't actually using the openness to do their own audit, it's a false sense of security.

    Basically, when you get down to it, you can never be sure there isn't something lurking there, unknown to the general population. The only way you could feel confident is if you wrote your own assembler from machine code, your own basic OS and compiler from that, audited every line of code in the OS, compiler and apps you were going to run, and then proceeded to build them 100% from source using your own tools. Even then, you still might miss something. Remember: We find holes in software all the time, we call them bugs or exploits, meaning they weren't intended by the developers. This happens even to OSS, even to major peices of OSS that have been looked at thousands of times over. Sometimes, you just miss things.

    And none of these exploits were trying to be sneaky or hide on purpose.

    I'm not trying to say grab the AFDB and trust no one, that's pretty stupid clearly. I'm just pointing out that you should put the same amount of stock in OSS you haven't audited as in CSS you can't. Consider the source, and if it's suspicious, do a checked install, and have programs setup to watch how it runs. With 30 minutes of work you can generally tell if it's safe or not.

    1. Re:So you've done your own audit then, yes? by drinkypoo · · Score: 2, Insightful

      What you should really be asking is whether you believe that more white hats have studied the code than black hats. The formar group, upon finding a vulnerability, makes it known. The latter group uses it to compromise systems/networks. The common user is somewhere in the middle getting dragged around by these two extremes. So is the uncommon one :)

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re:So you've done your own audit then, yes? by peg0cjs · · Score: 5, Insightful
      There's nothing about OSS that inherantly protects you. This is espically true since I'm guessing indeed you have NOT done the audit I described. Few people have the programming skills necessary to do so in a useful way and even fewer have the mountain of free time it takes.

      I love this argument. Of course the vast majority of people haven't pored over the source to find every detail. Similarly, few have opened their car engine's manual and pored over the specs to see if the Ford engineers got it right. But guess what, I can go to my mechanic and ask him: "What does this alternator thingy do?" and he can tell me. Not only that, but he can tell me how it does that. Not so with closed source.

      I sincerely doubt many people have even looked at the gcc source (I'm guessing under 1%). But you _CAN_ look at it. That says a lot, both about the people who wrote it and about the people who package it. Writing code that you know people will see is a lot different than writing code that will forever reside in some closet somewhere in the bowels of Redmond...uhh...Sydney.

      Do open-source bugs exist? Sure. Do open-source deliberate exploits exist? Unlikely. For one thing the exploit would have to be as you descibed, split over multiple calls & deliberately obfuscated to avoid casual detection. This level of complexity reduces the probability that such a thing exists and has avoided detection. It's not impossible, just unlikely. And that's good enough for me, cuz it's more than those closed source derivatives can say.

      --
      Karma: Excellent (Mainly due to Bill & Ted's Karma Adventure)
    3. Re:So you've done your own audit then, yes? by jdavisp3 · · Score: 2, Insightful
      You wrote:
      But my point here isn't to attack OSS, if that's what you are thinking, just to point out that this warm, fuzzy feeling that many people get from the openess is a false sense of security. They think because the code is open, and able to be checked, it means that there's nothing bad in there. Well, that's probably true, but only in the same way it's probably true that if you buy retail software it's also free of malware. Neither is a gaurentee of anything, and since 99.999% (or more) of people aren't actually using the openness to do their own audit, it's a false sense of security.
      I didn't read the parent so I don't know just how much faith it put into OSS as opposed to CSS, but I think your argument goes too far in the other direction.

      Neither OSS nor CSS can guarantee the abscence of malware, but to suggest that, if you do not do your own audits, that OSS and CSS are excactly equivalent in terms of malware risk is absurd.

      Even if 99.999% of users are not auditing, as long as some users are auditing then OSS will be safer than CSS since auditing OSS is easier than auditing CSS and removing OSS malware is easier than removing CSS malware.

      The difference may be small, but it is there. And I suspect it is not nearly so small as you suggest. Malware authors have a large incentive to use CSS to make their software harder to detect and remove and to protect their work from competitors.

      So you are certainly right that OSS is no guarantee of safety, but definitely wrong that, without personal audits, it makes no difference at all.

  32. Your rightie provisional assumptions are showing by ianscot · · Score: 2, Interesting
    But where ever business memo must be written in such a way that you csn't tell the truth because it might be used against you in a court of law, your have a big problem with your tort system.

    Um, wherever putting details about your business model down on paper would result in serious legal liability, you have a big problem with your business model. Yes? The problem with Enron wasn't that they might get caught, it was that they used fundamentally dishonest accounting practices -- whether they wrote those practices down or not.

    I have no problem with talking about tort reform, but the idea that trial lawyers are "running" anyone's economy is ludicrous. It's ludicrous on the same level that "trial lawyers are jacking up our medical expenses" is a ludicrous overstatement of the effect of malpractice suits.

    Behind your post lies the assumption that basically anything goes for businesses, as long as they don't get held accountable for their unsavory actions. I'll take a balanced economy, thanks. Regulation of industry for the public interest, checks and balances in the legal system... It's all radical communism by you, I'm sure, but I'll choose it all the same.

    --
    "Fundamentalism" isn't about divine morality. It's about human authority.
  33. Re:Out of curiosity... by stinerman · · Score: 2, Informative

    Kazaa Lite K++ is still floating around the internets somewhere. I believe the last version was 2.4.3e (or something to that effect). One possibility is to install the latest Kazaa and try to download Kazaa Lite. Of course, you'd then want to uninstall the adware version and do a cleanup then install Kazaa Lite.

  34. Re:BitTorrent is dying?! by zwei2stein · · Score: 2, Insightful

    Sorry, but few brave sites don't make difference to me. Theyll be shut down soon enought, no matter how they laugh. riaa will simply force peers stop peering with their ISP. money can do a lot thnings

    And torrent was MADE with intention distribute LEGAL material ... whole mechanics of torrent download is made to ensure that
    1] Host (Trackes) is easily indetificable and shut down should someone wish to do it thus killing all donwloads
    2] File is verified upon downloading and you download using .torrent file you gout somewhere so you are sure you are loading legal/ilegal material thus noone can spit out "i didnt know what i was downloading, thus im incocent" bullshit
    3] there is zero privacy a no attempts to hide users are viable.

    thus making it perfect for distros etc, but impractical for illegal stuff

    Y know, greatest offensive on whole torrent sites is for me that it devalues torrent as legal way to distribute files and that IT GOES AGAINST WISHES AND INTENTIONS OF ITS CREATOR (sorry for caps, but its important)

    thus based on above i as avid downloaders and p2per say that illegal torrents are dying, are destined to die and should die

    --- this is to damned ot now

    --
    -- Technology for the sake of technology is as pathetic as eschewing technology because it's technology.
  35. Re:Sure there ain't no spyware... by B'Trey · · Score: 5, Insightful

    I'm assuming you're trolling but for those who may not recognize the fallacy in your comparison, I'll point it out.

    Kazaa says "Trust me. My software is clean. Please install it on your computer." I say "Ha! Prove that your software is clean and then maybe I'll think about installing it to my machine. If you're clean, yous shouldn't have anything to hide by showing me your source code." Kazaa says, "No, I don't won't to show you my source code." I say "Cool. You keep your source code secret and I'll keep it off my machine."

    Ashcroft says "We think you might be a terrorist. We want to come in and search through your hard drive for incriminating files." I say "I'm not a terrorist. I don't have to prove anything to you. You may not search my hard drive unless you have evidence and get a warrant." Ashcorft says "If you're not a terrorist, you have nothing to hide. The Unpatriotic Act III says I don't need a warrant. So when my secret agent takes his knee out of your back and lets you get up, please stay out of our way. You might be able to get your hard drive back in a year or two when we're done with it. Have a nice day!"

    Do you see just a tad bit of difference in those two scenarios?

    --

    "The legitimate powers of government extend only to such acts as are injurious to others." Thomas Jefferson.

  36. Re:VMware! by brianber · · Score: 3, Informative

    A dead give away that Azureus.org isn't legit is that EVERY link on their page tries to install their software. What scares me is I'm sure a lot of people aren't experienced/ intelligent enough to catch that.

  37. You'd Really Think, Wouldn't You... by Nom+du+Keyboard · · Score: 3, Insightful
    Kazaa employees "hate" installing the Kazaa Media Desktop on their machines because all the bundled adware

    You'd really think, wouldn't you, that if your employees hate your product your customers might too?

    Oh, right. They're just stupid kids intent on killing off the music industry throught their own needs for immediate gratification.

    This CEO is not someone I'd ever hire to run my company.

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  38. Re:Sure there ain't no spyware... by stfvon007 · · Score: 2, Informative

    Sharman's No Spyware Commitment * Kazaa does NOT install or delete software from your computer without your permission. * Kazaa does NOT contain software that gathers personally identifiable information about you. * Kazaa and its partners securely process any credit card or transaction information you may give. * Kazaa does NOT contain software that monitors keyboard strokes. * Kazaa does NOT deceptively install software that centrally records your personally identifiable internet usage. * Kazaa does NOT prevent your efforts to remove Kazaa. Note their careful wording. It does not say anything about changing your homepage, redirecting your searches, and the "personally identifiable" in the monitering of internet usage and information gathering. And authough kazaa dosnt prevent your efforts of removing it, it can make your computer have networking issues if it is removed, and even when removing kazaa, its so-called "not spyware" remains. The top one is a blatant lie, however they would probably say somthing allong the lines of "you gave permission by accepting the EULA"

    --
    All misspellings and grammatical errors in the above post are intentional and part of my artistic expression.
  39. Ways around Kazaa spyware by jownz · · Score: 3, Insightful

    Option 1
    kazaa lite is like the holy grail of windows p2p clients. If you search near and far then you just might be able to get your hands on this piece of p2p goodness.

    Option 2
    grab giFT! This is the most amazing p2p client I've come across because you can install modules that allow it to connect to all the p2p networks! gnutella, fast track and others at the click of the mouse!

  40. Exaggerating "aware" of the "huge legal risk" by rkischuk · · Score: 4, Insightful
    One extraordinary philosophical manifesto by the company's chief technical officer showed that he was aware that Kazaa's activities were a huge legal risk.
    Why should this be damning evidence? Any sane executive should be aware of any and all legal risks associated with their activities.

    Is your company using Linux? You could be at legal risk to a SCO lawsuit. Collect personal data on your customers? You could be at legal risk if that data gets hacked. Run a bungee jumping business? Legal risk. It doesn't say "he was aware they were performing illegal activities", it says he was aware of a risk. That is simply awareness that a) there was a real chance a lawsuit would be filed against them, and b) there was a non-trivial chance that, if sued, they would lose. Risk awareness does not imply guilt.

    --
    Seen any BadMarketing lately?
  41. Re:Intellectual "property" by cpt+kangarooski · · Score: 2, Interesting

    The reasoning behind IP law is to encourage creation of IP.

    No, that's a fatally overbroad statement, and incorrect anyway.

    I mean, the purpose of trademark law is absolutely not to encourage the creation of more trademarks. It is, again, to protect customers from being misled as to the source of goods or services. It's basically like the laws that mandate lists of ingredients on food products. Where ingredients are truthfully listed, customers will be able to know what's in the things they're eating. Where a trademark indicates that all marked goods come from one place, with whatever degree of quality that place has, customers won't be misled.

    What you're really thinking of, I bet, are patents and copyrights, which are really among the least numerous and least financially important of forms of 'IP.' But even there, you're still wrong.

    Yes, one of the purposes of patents and copyrights is to encourage the creation of inventions and works. But another, equally important purpose is to have those inventions and works to be unencumbered. Where it is unencumbered, it can be used to the maximum extent possible, for the least possible cost. This means having works enter the public domain immediately, or at least as soon as possible. And it means that the exclusive rights should be as minimal in scope as possible.

    People love to jump on the argument that theres no different between "The Matrix" on DVD and a random string of bytes on that same DVD

    Maybe so, but I'm not one of those.

    how do we encourage the kind of society that invests effort into producing things (or intangible streams of desireable bytes) that we want?

    Again, not good enough. Getting things that we want requires them to be useful to us. If I have to pay for a copy of a book, it is less useful to me than one that is free. If I cannot make and give away copies of a book, it is less useful to me than one that I can. If I cannot write a sequel to a book, then it is less useful to me than one that I can.

    Freedom to use the things we want is necessary, or else why the hell do we want these things in the first place? Just to admire them from afar?

    Ideally we would have the maximum possible production of inventions and works, and no restrictions at all on them.

    What we make do with is to get as close to that as possible by trying to get as much production of inventions and works as we can while having the fewest restrictions placed upon us. It is a balancing act, and the point at which the balance is optimal is determined by reference to the public interest.

    at least I'm not mystified on why society has decided on having laws supporting the concept of intellectual property.

    I'm not mystified. I just don't think you have even defined what you mean by intellectual property, I don't think it is property, and I think that there are many different reasons for each of the various doctrines that have been clumsily lumped together under the 'IP' label. I think that there are perfectly good underlying reasons for these bodies of law, but that they don't mesh with much of the law as it is implemented now, and that you haven't gotten all that close to identifying those reasons.

    Remember: I'm in favor of copyrights, patents, tradmarks, trade secrets, etc. But I'm upset about the specific implementation of these things. Your misinformation about why we have these laws at all only serves to keep our screwed up implementations. Better consideration of the policies behind these laws would, I think, produce better laws.

    --
    -- This and all my posts are in the public domain. I am a lawyer. I am not your lawyer, and this is not legal advice.
  42. I like Kazaa.. by srcosmo · · Score: 2, Insightful

    If it weren't for Kazaa, there would be no Kazaa Lite, one of the most convenient filesharing apps around.

    --
    free speach
    Did you mean: free speech
  43. Who cares? by t_allardyce · · Score: 2, Insightful

    Who here actually uses Kazaa? No not 'lite or another cracked client but the actual original Kazaa client? I think I tried it once about 3-4 years ago, fact is, only idiots are using Kazaa (i was young and foolish), lesser idiots use Kazaa Lite Resurrection, and really you should be using something else as a primary P2P client or network.

    --
    This comment does not represent the views or opinions of the user.