Slashdot Mirror


Spyware or Researchware?

prostoalex writes "When the story of Firefox Web site visitors being predominantly male was published, many questioned the methodology used to acquire such research data. This MSNBC article talks about another research company, ComScore Networks, using a free antivirus utility to lure the Web users into downloading a small utility to their hard drives. The catch? The software watches not only sites visited, but even locations of the mouse clicks. ComScore swears the final data does not contain any personal information, but, as the article states, anti-spyware utility manufacturers are still thinking whether to include it on their list."

244 comments

  1. Gendericator by fembots · · Score: 5, Funny

    To find out the gender of a visitor, just create a site which requires visitors to hold one key while moving the mouse.

    1. Re:Gendericator by Anonymous Coward · · Score: 0

      That doesn't help.

    2. Re:Gendericator by mfh · · Score: 5, Insightful

      To find out the gender of a visitor, just create a site which requires visitors to hold one key while moving the mouse.

      Or you can ask... most people are honest about their gender unless they are in a chat room. But without any social interaction nobody has a reason to lie.

      --
      The dangers of knowledge trigger emotional distress in human beings.
    3. Re:Gendericator by Anonymous Coward · · Score: 0

      Is that the one key above the normal letters, the one key on the keypad, or the o, n and e keys all at once?

    4. Re:Gendericator by Anonymous Coward · · Score: 3, Funny

      But without any social interaction nobody has a reason to lie.

      i'm a hermaphrodite, i have to lie, i'm never an option to them!

    5. Re:Gendericator by eric76 · · Score: 5, Funny
      most people are honest about their gender unless they are in a chat room. But without any social interaction nobody has a reason to lie.

      On the other hand, if they had a slashdot poll asking what is your sex and the possible choices were "male", "female", "none", "both", "not applicable", and "i ate a pizza for supper last night", the "male" and "female" would probably be on the low end of the answers.

    6. Re:Gendericator by NoGuffCheck · · Score: 0, Flamebait

      To find out the gender of a visitor, just create a site which requires visitors to hold one key while moving the mouse.

      or ask them to right-click.. ive never met a female who could master that one....

      --
      serenity now!
    7. Re:Gendericator by NanoGator · · Score: 1

      "or ask them to right-click.. ive never met a female who could master that one...."

      Oh yeah, we aaaaaaallllll believe your range of experience is all encompassing.

      --
      "Derp de derp."
    8. Re:Gendericator by lheal · · Score: 1

      Ask them to stand and hold their mouse. If after 30 seconds they shake it and put it down, you have your answer.

      --
      Raise your children as if you were teaching them to raise your grandchildren, because you are.
    9. Re:Gendericator by OneArmedMan · · Score: 3, Funny

      http://www.bash.org/?100796

      where the men are men
      the women are men
      and everyone under 18, has a .gov ident!

    10. Re:Gendericator by Trejkaz · · Score: 5, Funny

      In Soviet Russia, the Cowboy Neal option forgets You!

      --
      Karma: It's all a bunch of tree-huggin' hippy crap!
    11. Re:Gendericator by rjelks · · Score: 4, Funny

      I lie about personal information all the time. It's my small way of messing up the statistics.

    12. Re:Gendericator by houghi · · Score: 1

      Or you can ask... most people are honest about their gender

      Or give them at least the option NOT to answer that question. What does it matter if I read a page like this one if I am a man or a women? Even more when I have to enter an apply for hotmail.

      I am so much emancipated that these things should NOT matter. Do they ask you for your skincolour? No, because that is racism, yet asking what your sex is is allowed and normal.

      --
      Don't fight for your country, if your country does not fight for you.
    13. Re:Gendericator by thegamerformelyknown · · Score: 1

      I'm much like that, except I lie to keep any info on-line about me straight. So, if a bunch of sites hand out my info to people, and someone makes a search engine for it, I will be Male, Female, and ages 1-200 :D

    14. Re:Gendericator by 123abc987 · · Score: 1

      He's on slashdot, the only females he'll meet IRL are the ones made out of latex. or whatever those blow-up dolls are made of.

    15. Re:Gendericator by Saanvik · · Score: 1

      And you are just as likely to get a correct response as the psuedo-spyware company got when they asked their users what their sex was.

    16. Re:Gendericator by Anonymous Coward · · Score: 0

      I don't get it.

    17. Re:Gendericator by roman_mir · · Score: 1

      You forgot one:
      -Bite my shiny metal ass!

    18. Re:Gendericator by Pyr05x · · Score: 1

      "Cowboy Neal" - 44% *shudders*

    19. Re:Gendericator by dtfinch · · Score: 1

      So you're saying that in chat rooms less than half are honest about their gender? Where have you been chatting?

    20. Re:Gendericator by Anonymous Coward · · Score: 0

      You missed the 'boobs' option...

      It being covered by some of the above wouldn't stop it from ranking high on the list.

    21. Re:Gendericator by Anonymous Coward · · Score: 1, Funny

      Ahem. Forgetting the "Yes please" option are we?

    22. Re:Gendericator by xtracto · · Score: 1

      Man, you now what is the correct answer to that poll....
      Breast!

      --
      Ubuntu is an African word meaning 'I can't configure Debian'
    23. Re:Gendericator by xtracto · · Score: 1

      Correction, it is You KNOW. it seems SpellCheck can not fix stupidity... for now

      --
      Ubuntu is an African word meaning 'I can't configure Debian'
    24. Re:Gendericator by Anonymous Coward · · Score: 1, Funny

      Bite my shiny metal ass!

      You have a robotic donkey?

    25. Re:Gendericator by Anonymous Coward · · Score: 0

      or ask them to right-click.. ive never met a female who could master that one....

      Something gives me the impression that you could have stopped typing before "who".

    26. Re:Gendericator by Anonymous Coward · · Score: 0

      It has. I always say female because they send ads for females which
      1) Are really uninteresting and I can safely ignore without bothering my mind
      2) You see nice chicks in the ads pictures
      3) You learn what women consider interesting and have higher chances to have sex some day
      The facts behind BK

    27. Re:Gendericator by fgl · · Score: 4, Funny

      Me too, Im a 99 year old grandmother of 30 from Albania, who also owns a multi-million dollar IT company that survived the .com bubble & employs over 1000 people.
      I still get porn spam though.

      --
      Go Away! Not for Sale
    28. Re:Gendericator by daikokatana · · Score: 1
      or ask them to right-click.. ive never met a female who could master that one....

      Then again, you've never met a female...

      --
      http://jcsnippets.atspace.com/ - a collection of Java & C# snippets
    29. Re:Gendericator by Anonymous Coward · · Score: 0

      "or whatever those blow-up dolls are made of."

      You should know.

    30. Re:Gendericator by sumdumass · · Score: 1

      you would think it could.

      as many people's misspellings generate the attacks of the spelling nazis. Thier main comment if ever questioned is somethign to the extent that they put more wight on posts that have corect grammar and spelling.

    31. Re:Gendericator by bluGill · · Score: 1

      I'm much the same. Except that I try to be a 6 year old girl, because there are laws to protect the privacy of children that do not apply to adults. As soon as websites solve the Y2k issue I will be a newborn, but everyone assumes that I must have been born in the 1900's.

      Mental note, write a book about how to survive this in 12 years, just in time for those first children to start turning 18.

    32. Re:Gendericator by roman_mir · · Score: 1

      Yes.

      Yes I do.

    33. Re:Gendericator by hawk · · Score: 1

      >most people are honest about their gender unless they are in a chat room

      Really? If asked for information, I lie about *everything*. And in the case of exit polls, I agree with the late Mike Royko that there is a moral obligation to lie.

      hawk

    34. Re:Gendericator by MoogMan · · Score: 1

      I bet you still say you're a 14 year old bum living in your mothers basement with only $3.42 pocket money a week, you tax evasionist you!

    35. Re:Gendericator by jacoby19 · · Score: 1

      >>I still get porn spam though.

      You're lying!

    36. Re:Gendericator by sdnin · · Score: 1

      And with social interaction, nobody has the chance to lie.

      (well some bodies maybe...?) ;-)

  2. Depends... by LewsTherinKinslayer · · Score: 5, Insightful

    The difference between Spyware and Usage Statistics pretty simple: is it clearly stated to the End User and is optionable. Essentially, its not spyware if you know about it up front and have the ability to (actually,) turn it off.

    1. Re:Depends... by B'Trey · · Score: 3, Insightful

      Absolutely. This is sheer paranoia. If you go to the AV utility linked above, it clearly states:

      Marketscore is part of an online market research community with over 2 million members worldwide. Marketscore relies on its members to gain valuable insight into Internet trends and behavior. In exchange for having their Internet browsing and purchasing activity observed, members have access to free email virus scanning and other benefits. Marketscore DOES NOT sell personal information; nor do members receive any advertisements as a result of their participation.

      Unless there is evidence that they're lying and ARE actually collecting personal data or the program tries to hide itself and prevent you from uninstalling it, this is a non-issue. Absent some sort of incriminating evidence that isn't immediately apparent, the company is doing nothing wrong.

      --

      "The legitimate powers of government extend only to such acts as are injurious to others." Thomas Jefferson.

    2. Re:Depends... by pete6677 · · Score: 5, Insightful

      Most importantly, is it overly difficult to remove? If the software was either carelessly created or intentionally designed to resist uninstallation, it could cause problems for the user and should be avoided.

    3. Re:Depends... by rjelks · · Score: 4, Informative

      Remember, Gator(or whatevertheyswitchedtheirnameto) isn't spyware either...they said so.

    4. Re:Depends... by Dead+Kitty · · Score: 5, Interesting

      A new question is exactly which parties does the software need to be upfront with? The Marketscore software has just recently changed it's tatics, it's no long just an issue with the End User anymore. They now are actively hiding themselves from end servers. The implications?

      Banks with online banking services have long banned authentication attempts coming from customers using known Marketscore proxies for obvious security reasons. This is due the violation of the terms & conditions presented when setting up an online banking account. The traditional Marketscore setup had client traffic sent to their proxies which was then forwarded to the intended site. This made it easy for us to track customers with "compromised" machines (Marketscore would never admit to compromising anything).

      Lately (last 1 or 2 weeks), we noticed in our server logs that connection attempts from Marketscore proxies suddenly dropped to nothing (from 100's to 0). After some investigation, we learned that the new Marketscore spyware now installs its proxy locally on the user's machine. It accumulates data in a local cache which is then sent back to Marketscore for their anaylsis. Because of this, we can no longer filter compromised machines running Marketscore shitware. Of course there's the other garbage like secretly installing their own root cert on the victim's machine, harder detection by anti-spyware programs, etc.

      Yes, maybe the user knows the benefits (and the world of hurt) they can expect from using this software...but what about the banks (or other businesses) who are actively trying to protect its customers? We're still trying to figure out how to deal with this on our side while individually informing the affected customers.

    5. Re:Depends... by Urusai · · Score: 0

      Malware is malware...don't prevaricate in the face of evil.

    6. Re:Depends... by Tim+C · · Score: 2, Informative

      But that's true of *any* software, no matter what its intended purpose is. Hell, I know people who avoid using Firefox, because the update mechanism (used to) leaves multiple entries in the Add/Remove Programs control on Windows.

    7. Re:Depends... by MaDeR · · Score: 1

      FF 1.0.3 still leave garbage in Add/Remove Programs. Pitful. What the hell they think?

      --
      What modern Obelix would say today? Of course, "Those crazy Americans!".
    8. Re:Depends... by Anonymous Coward · · Score: 4, Interesting

      Nice to see someone else notice.

      How much do I hate ComScore/MarketScore, let me count the ways...

      1/ I *think* they use OpenSSL without giving any credit as required by the license. Evidence: http://groups.google.com.au/groups?q=comscore+open ssl&hl=en&lr=&c2coff=1&selm=bcqfh4%24mo9%241%40Fre eBSD.csie.NCTU.edu.tw&rnum=1

      2/ They actively seek little apps to install their software with. Evidence: http://groups.google.com.au/groups?q=comscore+spyw are&hl=en&lr=&c2coff=1&selm=x%25M3d.8204%24n16.579 6%40newsread2.news.atl.earthlink.net&rnum=3

      3/ They go out of their way to hide their identity from their "Panellists". Try and find a reference to Comscore on http://www.marketscore.com/

      4/ They do not care about the security of the information of their panellists. Do some research on how they previously "Broke" SSL sessions and effectively proxied all "SSL Protected" information up to their proxy servers.

      5/ They actively try to disguise thier immoral practices to gather information. Try to find any mention of "Marketscore" on this page which is the sales site to sell their services to Marketing companies. http://www.comscore.com/metrix/xpc.asp

      6/ They got Ernst and Young (I hate that company too) to "Certify" them. Read the report. It is laughable. https://cert.webtrust.org/ViewSeal?id=383

      7/ They ONLY stopped proxying SSL sessions about 3 days AFTER the New Zealand banks went public saying they were blocking their software. Other banks were doing it just less publically. How much would their customer base have been eroded if everyone who does internet banking stopped using their software. That is, I believe, why they changed.

      8/ Now they just copy your data to servers. Not sure what. The SSL stuff is encrypted. Noone knows what they send but them.

      9/ Their software silently updates without telling the user. That's nasty.

      10/ They have only JUST added an "Add/Remove" control panel. Previously there were no visible clues that it was installed.

      11/ They marketed themselves as an Internet Accelerator. They did this by using proxy technology. This is horribly slow from overseas.

      The conspiracy theorists I know believe they are a front for the NSA. :-) Reston Virginia known for this sort of stuff?

      I just know they are evil. :-)

    9. Re:Depends... by Anonymous Coward · · Score: 0

      Because, like, my entire identity and self-worth are tied up with how tidy the Add/Remove programs dialog is! I spend half my working life scrolling through that list, so it really matters if there's one entry too many! And I care far more about having an extra Firefox entry than about all those pointless "Windows Hotfix #133151505150" entries!

    10. Re:Depends... by muzzmac · · Score: 2, Informative

      They USED to (2 weeks ago) collect ALL data. Even SSL traffic (Internet banking passwords and all). Now they don't do that any more. They state they throw away personal information but do state they look at Credit Card numbers. Do a five minute Marketscore Google search. They've stopped doing that recently. I'm guessing because banks have started blocking their proxy servers. Now they let the users go straight there and send the info back. (Who knows what SSL info they send. They do use some SSL)

    11. Re:Depends... by m50d · · Score: 1

      But they *are* known to sell personal information and prevent themselves being uninstalled. "Some spyware companies claim X" does not mean "All companies who claim X make spyware".

      --
      I am trolling
    12. Re:Depends... by Photon+Ghoul · · Score: 1

      I know that wasn't perfect and looks bad, but is that really a deciding factor in using one browser versus another? I would think there are more important things to consider than a few extra entries in Add/Remove Programs.

    13. Re:Depends... by Anonymous Coward · · Score: 0

      Personally, I have absolutely zero faith in some corporate entity espousing their innocense about their software...

      Want to prove your point Marketscore? Simple, just release the source code :-)

    14. Re:Depends... by Himring · · Score: 1

      Boxers or briefs?

      depends....

      --
      "All great things are simple & expressed in a single word: freedom, justice, honor, duty, mercy, hope." --Churchill
    15. Re:Depends... by Laebshade · · Score: 1

      Gator(or whatevertheyswitchedtheirnameto)
      Claria.

    16. Re:Depends... by Anonymous Coward · · Score: 0

      Absolutely. This is sheer paranoia. If you go to the AV utility linked above, it clearly states:

      Marketscore is part of an online market research community with over 2 million members worldwide. Marketscore relies on its members to gain valuable insight into Internet trends and behavior. In exchange for having their Internet browsing and purchasing activity observed, members have access to free email virus scanning and other benefits. Marketscore DOES NOT sell personal information; nor do members receive any advertisements as a result of their participation.


      Right in the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying 'Beware of The Leopard

    17. Re:Depends... by Daedala · · Score: 1

      They aren't lying. They're just not explaining that their observations include all of your encrypted transactions, because they install their own root certificate. Suddenly, all your SSL transactions go to MarketScore. They are decrypted and read, then reencrypted and sent on to their destination. This means that they have access to credit card numbers, CVV2, passwords, PINs, social security numbers -- anything you type into a website, whether or not that website is "secure."

      They claim they don't keep that information. If you believe that, and believe that they have sufficiently secured the process that no one else can read and keep the information, then sure. But would Gramma understand what I just said? And would anyone get that from their "Terms of Service"?

      --
      What I say does not represent the views of my employers, my friends, my cats, or myself.
    18. Re:Depends... by Daedala · · Score: 1

      My bank doesn't. Which banks do ban Marketscore?

      --
      What I say does not represent the views of my employers, my friends, my cats, or myself.
    19. Re:Depends... by Anonymous Coward · · Score: 0

      Marketscore redirects all of your web communications to their proxy server and decrypts your SSL sessions. Do they disclose that they have the ability to read all encrypted traffic including your passwords and credit card numbers? Of course they claim that they don't use that information for evil... I'm sure my passwords and credit card numbers are needed for important research. They also claim to be an antivirus solution with previous claims that they were associated with Norton. Intersting in that Norton lists Marketscore in their Jan 05 update as a threat. I'm not against marketware/adware in general. But I'm surprised at the number of people supporting a business model that collects their passwords and credit card numbers. Good luck with your credit in case of identity theft. Who do you want to hold responsible when someone access your personal accounts? Can I borrow your wallet? I won't take anything - I just want to look... trust me. People who see the net through an untrusted proxy server are living in the Matrix. You don't know what is real and what is altered.

    20. Re:Depends... by Anonymous Coward · · Score: 0

      Just because you're paranoid doesn't mean they not out to get you.

      There is ample evidence that most businesses cannot be trusted with any information you give them.

    21. Re:Depends... by Anonymous Coward · · Score: 0

      Marketscore DOES NOT sell personal information

      Does not sell != does not collect.

    22. Re:Depends... by KingKurly · · Score: 1

      I notice you said '(used to)' but just in case, I thought I'd point out that this got fixed in 1.0.3. Hurray!

      --
      It was recently discovered that research causes cancer in rats.
    23. Re:Depends... by Old+Man+Kensey · · Score: 1

      I assure you, comScore is not a front for the NSA. Or wasn't as of mid-2001, at least.

      --
      -- Old Man Kensey
    24. Re:Depends... by Arvo · · Score: 1

      I just want to emphasise here - this software spies on your SSL sessions. It can capture all of your credit cards transactions, usernames and passwords, including those for internet banking, sharetrading etc. What if an employee of MarketScore uses this data for fraud? Or worse, what if they sell it to those organised crime gangs running the online banking frauds and scams? How can ComScore protect against that? No doubt they are just a shell company

  3. Choice by mfh · · Score: 5, Interesting

    The beef I have with spyware is that it's never given me a choice; it installs without me knowing and lurks like a drooling Rutterkin in the corner -- waiting for me to spill my drink or drop The One Ring. But this research program is optional, right?

    I have no problem with optional programs that record data to be used in a study. My wife also participates in allgery studies. So?

    --
    The dangers of knowledge trigger emotional distress in human beings.
    1. Re:Choice by NanoGator · · Score: 1

      "The beef I have with spyware is that it's never given me a choice..."

      "Mr. Bond, we didn't invite you here!"

      --
      "Derp de derp."
    2. Re:Choice by Unnngh! · · Score: 1

      Well, 'research' may really just be the same type of marketing 'research' that regular spyware companies do, and sell. The above-boards approach sits a lot better on my stomach though than gator software silently installing itself in the background. I don't think that the anti-spyware groups should flag it as spyware--you presumably know what this one's doing when you download and install it. Maybe just flag it as a warning?

  4. Oh boy by NanoGator · · Score: 3, Funny

    Well, that story had all the right buzzwords to get the pitchforks wavin!

    --
    "Derp de derp."
  5. With a name like that.... by thegoofeedude · · Score: 1, Funny

    With a name like ScamCore, er, ConScore, woops, I mean ComScore, no wonder people are suspicious!

  6. Antivirus software, huh? by FlyByPC · · Score: 5, Funny

    Isn't that sort of app supposed to be CHECKING for trojans? Sheesh.

    --
    Paleotechnologist and connoisseur of pretty shiny things.
    1. Re:Antivirus software, huh? by Anonymous Coward · · Score: 1, Funny

      Takes one to know one.

    2. Re:Antivirus software, huh? by Ilgaz · · Score: 1

      I don't know if it still exists but I remember a "free" antivirus (NOT AVG!) which is advertising supported (spyware)

      It also gave loads of false positives and people lost their files.

      Where? Download.com of course

    3. Re:Antivirus software, huh? by cp.tar · · Score: 1
      Isn't that sort of app supposed to be CHECKING for trojans? Sheesh.

      That's right.

      Do you have a Trojan installed? Download and install this software to check!!!

      Downloading...

      Installing...

      Checking...

      Well, now you do!

      --
      Ignore this signature. By order.
  7. spyware (noun) by weighn · · Score: 5, Insightful
    any software that covertly gathers information about a user while he/she navigates the Internet and transmits the information to an individual or company that uses it for marketing or other purposes - http://dictionary.reference.com/search?q=spyware

    The software watches not only sites visited, but even locations of the mouse clicks.
    add the use of the word "lure" and it makes me think that this is, indeed, spyware.

    --
    Mongrel News all the news that fits and froths
    1. Re:spyware (noun) by Tim+C · · Score: 1

      But no-one is being lured or tricked - the pag elinked to very clearly states what the software does:

      "In exchange for having their Internet browsing and purchasing activity observed, members have access to free email virus scanning and other benefits."

      (Sentence 6 of 7, all of which are in the same font and the same size)

      If someone installs it without realising that it's going to collect marketing data, well, frankly I think they have bigger problems, like a serious need to improve their reading comprehension skills.

    2. Re:spyware (noun) by jafiwam · · Score: 1

      Marketing data !== Online banking logins and CC numbers.

      Marketing data !== Location of mouse clicks

      Free email virus scanning, does it REMOVE anything? Somehow I think the stuff probably sucks rotten donkey balls at virus prevention...

      Walks like spyware, talks like spyware, smells like spyware... this thing is one step above OpenOrriface as far as it's trojan qualities.

      I hate asshats like you that blame the user for something, same logic the spammers use. Jerk.

  8. What's to think about? by GoodbyeBlueSky1 · · Score: 4, Interesting
    as the article states, anti-spyware utility manufacturers are still thinking whether to include it on their list.
    How would this not be spyware, exactly? It's not like this "research" will cure cancer.
    --
    why? forty-two.
    1. Re:What's to think about? by Spiffae · · Score: 2, Insightful

      How would this not be spyware, exactly? It's not like this "research" will cure cancer.

      If it's not curing cancer it's not research? I'm not sure about that...might want to check your sources.

    2. Re:What's to think about? by damiangerous · · Score: 4, Insightful
      It doesn't at all meet the commonly accepted definition of spyware. If it were bundled as part of some other software and you didn't know about it, sure, that's very spyware and scummy. But to get this program you have to explicitly go to their web site and choose to install this one program that's very explicit about what it does. If you're not tricked, lied to or treated in any way dishonestly, there's no way you can consider it spyware. Go look at the page and tell me how they "trick" you. There are seven sentences of normal size type in the body of that page (and three headers) and one of those seven sentences explicitly states:

      "In exchange for having their Internet browsing and purchasing activity observed, members have access to free email virus scanning and other benefits."

      If that page "tricked" you, turn off your computer now and back away.

    3. Re:What's to think about? by kfg · · Score: 1

      In the same manner that a reporter you give permission to follow you around is not "spying" on you, but some guy who follows you around without your knowing about it is.

      In the same way that using the key to her apartment a woman gave you to let yourself in when she isn't home and leave her a gift is not stalking, but breaking and entering to put a hidden camera in her shower is.

      In the same manner that the NSA choosing to share antiterrorist intelligence with the Russians is not spying, but the Russians installing a mole in the NSA is.

      It's all about the knowledge and acquiescence of the subject.

      How you make the logical leap to "cure cancer" is beyond me.

      KFG

    4. Re:What's to think about? by BalDown · · Score: 1

      That wasn't always the case with this software. This company has always been shady in their distribution of this software. The first generations of their SPYWARE were distributed with KaZaA and other p2p clients with no notification to the user. The anti-virus is supposed to be a "legitimate" front to their activities but I wouldn't be surprised to find this bundled with other software as it always has been.

      --
      You wasted packets to get this lousy sig.
    5. Re:What's to think about? by zerOnIne · · Score: 1

      It's still software that spys on your network activity.

      --
      09
    6. Re:What's to think about? by damiangerous · · Score: 1

      So does MRTG, is that "spyware"? Nothing you install voluntarily can be considered spyware, otherwise it gets ridiculous. If that's the criteria we're using, VNC must be the epitome of evil, it lets someone control your computer remotely! Ban it!

    7. Re:What's to think about? by Arvo · · Score: 1

      What if someone else who used the computer installed ? It spies on anyone who uses the computer afterwards whether or not they read the terms and conditions or agreed to install it.

  9. Solution by Deliveranc3 · · Score: 1

    Here's the damn solution include it.

    They all pop up a list of software reporting your usage, this list is hand culled by the user.

    By not including it they lose some moral authority.

    1. Re:Solution by Anonymous Coward · · Score: 0

      who says they should have moral authority in the first place? slashdotters are so self-centered, think they have all the answers...

  10. Well, doh! by frovingslosh · · Score: 1, Insightful
    anti-spyware utility manufacturers are still thinking whether to include it on their list."

    It takes information without my knowing or permission and steals my bandwidth to send it somewhere. It's spyware. Next question?

    --
    I'm an American. I love this country and the freedoms that we used to have.
    1. Re:Well, doh! by StikyPad · · Score: 4, Insightful

      It takes information without my knowing or permission and steals my bandwidth to send it somewhere.

      I know it's not hip to RTFA, but it doesn't install without your knowing or permission. It clearly states that you will allow the program to monitor your internet usage in exchange for the free antivirus software. It's easy to uninstall and doesn't leave its hooks all over the OS.

      Stealing your bandwidth? If you consent to installing it, that hardly constitutes theft.

    2. Re:Well, doh! by complete+loony · · Score: 4, Interesting

      Ah, but lots of software that clearly state in their EULA's that they collect and submit information are also considered spyware. Yes they said it on their web page, but in a PR friendly way, most people will read it and not think about the privacy implications. Remember most people will give away their identity for the chance to win a chocolate bar.

      --
      09F91102 no, 455FE104 nope, F190A1E8 uh-uh, 7A5F8A09 that's not it, C87294CE no. Ah! 452F6E403CDF10714E41DFAA257D313F.
    3. Re:Well, doh! by Florian+Weimer · · Score: 1

      It clearly states that you will allow the program to monitor your internet usage in exchange for the free antivirus software.

      "Monitor your Internet usage" sounds a bit too harmless. Among other things, they eavesdrop on your online banking sessions (including your authentication credentials) and analyze your financial transactions. Consequently, quite a few banks filter access from the MarketScore SSL proxies (yes, they carry out a MITM attack on SSL, by installing new root certificates). However, this provides only limited protection to customers because MarketScore can switch to more stealthy eavesdropping schemes.

    4. Re:Well, doh! by bluGill · · Score: 1

      Really? Let me see... Looks like I'm safe as all the software I use doesn't have the provisions. Even software that I refuse to use because of the license doesn't have such provisions. Where are you getting you software that you see lots of software with such a provision?

    5. Re:Well, doh! by Pyrowolf · · Score: 1

      Remember most people will give away their identity for the chance to win a chocolate bar. Regardless of the argument spyware vs not-spyware, why do we continue to protect idiots that cannot and/or refuse to read! You give the impression that because people would give away personal information for a chocolate bar, that we should have some anti-chocolate bar legislation to protect those that don't know what they could be doing when they agree to recieve a chocolate bar from someone?!? Kids should have to sign a waver when they bag some candy in October right? Geesh! Just because it has some kind of marketing spin on the verbage doesn't mean that it's not clearly stating what the product you are downloading will do. Privacy concerns or not - if you agree to download a product that monitors what you do, obviously it's going to be a privacy concern. Who gives a flyin crap about if people can't read. This is not something burried in a EULA that NOBODY reads, and it is clearly stated multiple times on the pages that you download the software. What more could you ask for? If this is spyware, it's an example of how this software and the companies who make/distribute it should be required to disclose what you are getting when you download the software.

    6. Re:Well, doh! by Arvo · · Score: 1

      ComScore are very agressive about anyone calling their software spyware. It clearly is spyware, but any US company who calls it spyware (eg Antivirus companies and Universities get sued by ComScore's agressive lawyers. Microsoft is the only company standing up to them at present. Is this a case unstoppable force meets immovable object? It's a farce that any spyware writer with enough money can stop their rubbish being called spyware.

  11. If you give choice, there's no research by nigham · · Score: 5, Interesting

    Unfortunately, if they give the users a choice to turn it off, you can't qualify the statistics obtained from users who allow information to be logged as good - e.g. who's to say whether guys may be more inclined to turn it off than girls - or conversely, women feel more threatened about privacy... in either case your stats will be skewed.

    In any case most users (myself, certainly) would turn it off - I am supremely uncomfortable with some random company knowing anything about what I do on my computer.

    --
    I don't want to read /. I want to go home and re-think my life.
    1. Re:If you give choice, there's no research by erikharrison · · Score: 1

      This is horseshit.

      There is no 100% representative sample. You just do some research to determine who doesn't participate.

      For example, I recently presented a paper at a psychology conference. When I presented my research, I offered up my sample - mostly female, all culled from undergraduate psych courses, a majority not psych majors, between ages 19 and 42.

      There is no reason my data is only relevent to this sample, though there is always the possibility that, in fact, there is a subtle selection bias. So, my research can be presented as being relatively valid.

      These guys also only select people who use their AV software, thus skewing their data again. The question is if that bias matters. It may well not.

    2. Re:If you give choice, there's no research by WoBIX · · Score: 1

      If you give choice, there's no research?

      Lucky for us you're not running the FDA. I've been in a clinical drug trial before and you have to fill out surveys, knowing you're taking part. Those surveys are used to collect data on everything from the side effects, to how many times a day you eat, defecate, watch the Simpsons (how long you sit on your ass), etc.

      There's a really simple way to make sure that you get fairly accurate results on surveys or market research... don't offer incentives.

      People will lie their asses off to get free stuff. You can be honest and give someone a survey with no benefit to them and you'll get mostly honest answers back.

    3. Re:If you give choice, there's no research by nigham · · Score: 1

      Lucky for us you're not running the FDA. Yeah, I sure hope the FDA has a slightly more expansive policy than one paragraph. Come on. Drug trials are (for the most part) targeted at a general human populace, with expected responses being quite similar across the board. And when they're not, as you say, they pay people of the right background to participate in surveys. Nobody's paying anybody here... its just a program that installs on your computer.

      --
      I don't want to read /. I want to go home and re-think my life.
    4. Re:If you give choice, there's no research by nigham · · Score: 1

      You just do some research to determine who doesn't participate.

      Friend, what we're talking about is a program that allows a choice to be turned off. If the results are reported, they'd have to be reported as "nnn people came to this website, 50% of which allowed gender tracking, out of which 80% were male." Thats FINE, and says that 40 out of 100 said they were male, 10 said they were female, 50 we don't know. What is skewed research is claiming that 80% of website visitors are male - based on the 50% who allowed their gender to be tracked.

      --
      I don't want to read /. I want to go home and re-think my life.
    5. Re:If you give choice, there's no research by dvdeug · · Score: 2, Insightful

      in either case your stats will be skewed.

      There are strict disclosure rules that psychologists have to follow before they can do a test with human subjects. It doesn't matter if your results will be skewed by warning them that they will be dumped in a vat of maggots, you still have to tell them. The rights of people to choose is more important than your right to gather information about them.

    6. Re:If you give choice, there's no research by zambuka · · Score: 2, Insightful

      Knowing the type of people that won't participate in such an experiment is just as important as the final reactions of the people who will participate.

      Thats what makes the difference between a good psych project and "just a bunch of wierdo's dunking people in nasty gunk"

    7. Re:If you give choice, there's no research by Dorm41Baggins · · Score: 1
      So I guess that must be why Nielsen Media Research always has to break into people's homes under cover of darkness and hide black boxes on the rear of their TV sets in order to get legitimate reasearch data.

      Oh, wait...

  12. No... by damiangerous · · Score: 4, Insightful
    Unless it starts getting buried as part of other installs, it's not spyware. They're very upfront about what they do. There's very little text on the linked page, and one paragraph (of three) reads in the same size type as the other text:

    Marketscore is part of an online market research community with over 2 million members worldwide. Marketscore relies on its members to gain valuable insight into Internet trends and behavior. In exchange for having their Internet browsing and purchasing activity observed, members have access to free email virus scanning and other benefits.

    You have to draw the line of reasonableness somewhere. If that site isn't clear enough for you to understand what they do, you probably shouldn't be on the Internet (or at least not from a computer configuration you could hurt yourself with).

    1. Re:No... by Tuxedo+Jack · · Score: 1

      As I recall, Marketscore also sends SSL traffic through its servers, decrypting it, sending it, then re-encrypting it to gain speed.

      http://www.spywareinfo.com/newsletter/archives/1 20 4/1.php

      When Lavasoft rates it as a ten out of ten threat rating, I'll start to get worried - oh, wait, they DID.

      --

      Striking fear in the authors of godawful fanfiction, I am here, appearing in darkness, Tuxedo Jack!
    2. Re:No... by damiangerous · · Score: 1

      What are you worried about? Did you plan on installing it? Are you concerned about VNC too, because someone might start controlling your computer remotely? Really, people, you have to choose to install it. If you install things from the internet that tell you they're going to observe all of your web browsing and then get upset about a breach of privacy there's nothing a third party can do to protect you from yourself.

  13. mod parent FUNNY! by Anonymous Coward · · Score: 0

    ROTFLMGDARTFO!!!!

  14. Excuse me... by isny · · Score: 1

    Which way to the riot?

  15. I've Heard This Line Before by Anonymous Coward · · Score: 0
    "ComScore swears the final data does not contain any personal information..."

    This reminds me of those spam messages in which the spammer swears "this is not spam."

    Talk is cheap.

  16. Macs by Johnny+Mnemonic · · Score: 4, Insightful

    This tool then is cutting out the Mac and Linux users from their tracked demographic; together those users represent about 5-10% of the market. And they represent many early adopters of tech, too.

    I would think that the use of a tool of this kind would be enough to skew their information, causing any results to be not credible. I certainly wouldn't use them to research products that I would sell, as I would want to be able to target Mac and Linux users as well.

    --

    --
    $tar -xvf .sig.tar
    1. Re:Macs by Mishura · · Score: 1

      You have a point, however isn't the Mac/Linux/Unix demographics against being spied on or monitored by outside forces, period?

      Here's a question: If this software was released for GNU/Linux (but instead of Anti-virus scanning as the benefit, something like a rootkit detector, or other unix-y malware scanner), would people install it then? Then again, how many would say "fsck that" and go and compile the latest F/OSS version without the monitoring/spying?

      I'm willing to bet something like this would be chased away with pitchforks and torches from the Linux community.

      As far as the Mac community... anything goes. They probably have the same stance about spyware as the rest of us. Voluntary or not.

  17. well.. by Pinefresh · · Score: 1

    the way I see it, if it has a legit use (virus scan) and it let's the user know that it will be doing this. Then even though it may be spyware, it's still acceptable, that's a trade off. but it's still not a valid tool for determining a demographic, since only a certain demographic will download it to begin with.

  18. Oh, come on.. by proteonic · · Score: 3, Insightful
    Let's see.. I need an antivirus utility.
    What shall it be?
    Mcaffee.. no
    Norton.. no
    AVG..no
    Oh, wait! Here's one! Marketscore! That sounds reputable! I've never heard of them before, so they must be good, because they stay out of the "eviil media".
    --end scathing sarcasm--

    The people "lured" into downloading this utility should probably also have their right to vote restricted for lack of ability to critically process information.

    And, by the way, if you've feel vicitmized by this software, I have news for you.. they've recently changed the definition of gullible in the dictionary.

    Interpret that however you please.

    1. Re:Oh, come on.. by Anonymous Coward · · Score: 0

      Sorry, you're wrong.

      I just looked in my dictionary, and the definition was the same as last time I looked.

      Try checking your facts before posting next time.

    2. Re:Oh, come on.. by Arvo · · Score: 1

      In fact a colleague of mine alerted the Antivirus vendor who's logo ComScore splashed all over their site (to advertise the virus scanning feature). And they immediately forced MarkeScore to remove their logo and stop mentioning their brand name. Who can blame them after the way ComScore set their lawyers onto any Antivirus company that labelled MarketScore as spyware? I can't see how MarketScore can offer virus protection, as their latest insidious version doesn't redirect internet traffic through marketScore servers, it just picks out snippets of 'interesting' information about your browsing to send to ComScore's servers. Unless they have AV software embedded in the spyware, then they're lying about that too. If ComScore have AV software in their spyware, where do the updates come from? Do they have an appropraite license to use the AV software like this from the vendor?

  19. If it looks like a duck.... by jadenite · · Score: 2, Insightful

    quacks like a duck, and smells like a duck, then it must be...spyware seriously, people how cn you record where the mouse is clicked on my screen, and what sites I am visiting without being spyware. Saying that there is no personal information logged sounds like splitting hairs to me. This program should definitely be on the spyware list.

  20. MarketScore is included on the Black Hole DNS List by csk_1975 · · Score: 3, Informative

    anti-spyware utility manufacturers are still thinking whether to include it on their list

    If you use the blackhole dns list of spyware domains from bleedingsnort.com its already included based on this submission from doxdesk. Squid ACLs are a great way to stop these parasites and you don't have to wait for anti-spyware manufacturers to decide whether its spyware or not. Also ClamAV lets you create your own signatures so you can setup rules to detect anything you consider to be spyware.

  21. anything that's not obvious by Anonymous Coward · · Score: 0

    Anything questionable in the spyware area that's not super obvious during the install, is spyware in my book. I definitely want the anti-spyware ppl to add that kind of thing to the list of ones to get rid of.

  22. Free anit-virus? by W8TVI · · Score: 4, Informative

    Why not just download AVG Anti-virus?
    Its free, and has no spyware attached.

    1. Re:Free anit-virus? by oldwolf13 · · Score: 1

      I don't think it's free anymore... went to download it today for my mom's computer and all I could find was either pay, or a 30 day trial (the main download section goes to the pay version).

      This seems to have happened since 7.0 came out, which, by the way, they FORCED the upgrade of (6 and below do not work at all it seems). (AVG used to be free for non commercial use, BTW).

      AVG used to be (IMO) the best AV around, quite a few times caught things the other bigger names didn't. Now, I find them average, if not a bit below. Couple this with the forced upgrade/purchase has made me decided to look elsewhere.

      Then again, since I was using a free version, maybe they don't care if they lose a type of customer such as myself :)

      --
      If I can't smoke and swear I'm fucked.
    2. Re:Free anit-virus? by Kevinv · · Score: 2, Informative

      It's still available:

      http://free.grisoft.com/doc/1

    3. Re:Free anit-virus? by Mishura · · Score: 2, Informative

      AVG is still Free/beer. (See other guy's post below mine or beside it for link) You just have to look for it on their website.

      ClamWin (based on ClamAV for Linux) is Free/libre Opensource and GPL'd if you prefer that. I haven't used it (Still using AVG) but I am considering trying it out myself.

    4. Re:Free anit-virus? by Knara · · Score: 1
      You just gotta look a little harder

      http://free.grisoft.com/doc/2/lng/us/tpl/v5

      Linked off the first hit on google for "free antivirus"

    5. Re:Free anit-virus? by will_die · · Score: 1

      Still free as of last month.
      However I stopped using it because the thing does a full virus scan over all files every day. Once a week is enough to capture files. Provided the system is continually monitored.

    6. Re:Free anit-virus? by VStrider · · Score: 1

      yes, but AVG also requires to install a module called Dazuko, on the kernel...

      have a look in http://www.grisoft.com/doc/74/lng/us/tpl/tpl01 go to Documentation -> AVG 7.0 for linux workstation (user's manual), on 2.1 prerequisites:

      The DAZUKO module is necessary for the proper function of the AVG for Linux E-mail Server on-access scanner. DAZUKO is available for free at http://www.dazuko.org/

      I wasn't feeling that adventurous to install this in the kernel...
      However, it's nice to see Grisoft's support for Linux. As far as commercial AVs go, i think AVG is the best, though i prefer open source alternatives like ClamAV. And really, an AV is not that much necessary in linux.

      --
      VStrider.
    7. Re:Free anit-virus? by Anonymous Coward · · Score: 0

      be aware that ClamAV doesn't include "on-access" scanning like most other anti-virus products.
      If this is a requirement for you, then you may want to reconsider.

  23. of course they say its spyware by indy_Muad'Dib · · Score: 4, Insightful

    Symantec, for example, designates the program as spyware on its Web site.

    A major antivirus company saying a free anitvirus program is spyware, that should raise a few red flags right there.

    1. Re:of course they say its spyware by vga_init · · Score: 4, Insightful
      Well, what is spyware? In my mind, it's a piece of software that harvests data from your computer and sends it to someone else for their own personal uses without your explicit knowledge or consent.

      By my definition, that makes the program in the article spyware.

      You're right in suggesting that Symantec may have an ulterior motive, but there exists (what appears to me) the unfortunate fact that the software actually is spyware. It may be a coincidence, or Symantec may have checked specifically on competing software, but they aren't misreporting anything.

      Black (because I like the color red and black seems more appropriate) flags would go up if a) Symantec lied about the software being spyware, or b) Symantec held a policy that only classified that software as spyware because it was competing with them, letting similar, non-competing programs go by unchecked.

    2. Re:of course they say its spyware by Anonymous Coward · · Score: 0

      They don't say Antivir or AVG are spyware and both of those are free. If there was something else going on I would think those would be flagged as well but they are not.

    3. Re:of course they say its spyware by J053 · · Score: 1

      ...but it's not spyware: right on MarketScore web page they state
      In exchange for having their Internet browsing and purchasing activity observed, members have access to free email virus scanning and other benefits.
      They have the user's explicit consent, so by your definition, it's not spyware. Stupid, maybe, but that's a whole other issue.

    4. Re:of course they say its spyware by argent · · Score: 1

      Normally I'm more than happy to lay the smackdown on Symantec, especially after their FUD campaigns to sell antivirus software for systems that have no viruses in the wild, but I think I trust a spyware-supported antivirus distributor even less.

      What surprises me is that Symantec says anything is spyware. They normally don't seem to check for spyware at all.

    5. Re:of course they say its spyware by Arvo · · Score: 1

      Symantec were unaware that Marketscore was using their AV software in this manner. My colleage alerted Symantec to this and Symantec demanded that their brand be removed from the web site. I wouldn't be surprised if MarketScore were breaching their license by running Symantec software on their victim's PC. Why? Because how expensive would an AV license be for a company to be able to run it on all of their 'customers' PCs, losing Symantec many potential customers? They couldn't afford to give away a service like that if they were doing it legitimately.

  24. So... by Anonymous Coward · · Score: 1, Interesting

    Does this mean that more men download firefox, or more men download this spyware?

  25. OT:Re:mod parent FUNNY! by zobier · · Score: 1
    Seriously now...
    RollingOnTheFloorLaughingMyGodDamnArseRightTheFOff
    isn't that a bit overkill?
    --
    Me lost me cookie at the disco.
    1. Re:OT:Re:mod parent FUNNY! by Anonymous Coward · · Score: 0

      ummm.... why did you censor "fuck" but not "G*ddamn"? I would think it would be better the other way around, if at all and not both...

      I know most people don't make an issue of it, but it _is_ still a commandment, and it _is_ distressing for some of us to see.

      Thanks for your consideration in the future.

    2. Re:OT:Re:mod parent FUNNY! by Anonymous Coward · · Score: 1, Interesting

      but why is it distressing to see?

      I can't understand why you'd find it offensive, it's not you, the person reading it who has done anything wrong....

      besides, if you believe there's a God, and you believe He created the world and everything in it, and you believe that He is everywhere, but you don't think he'll see past the * in G*ddamn, then you've got problems of your own.

    3. Re:OT:Re:mod parent FUNNY! by Anonymous Coward · · Score: 0

      they got a little wet thinking about the he/she's junk bouncing around

    4. Re:OT:Re:mod parent FUNNY! by indifferent+children · · Score: 3, Insightful

      I eat pork chops. I eat steak. I treat my wife with respect. I do all of these things in public. Why the hell should anyone cower before the commandments of a religion that is not their own? Don't assume that Christians are the majority on /.

      --
      Censorship is telling a man he can't have a steak just because a baby can't chew it. --Mark Twain
    5. Re:OT:Re:mod parent FUNNY! by sumdumass · · Score: 1

      The reason is typicle. Fuck is one of those words thatstill pretends to offend people. God damn is one of those words that pretends to offends others. For thew last several decades the importance of one or the other has been eroded and most people don't even know why they are bad wordfs when they use them.

      If memory serves me corectly fuck was decided to be bad because it was a noble right to break the virginity of newley wed women in some areas. Braveheart got it corect and when you saw fuck posted in a villiage it meant that someones wife was going to be violated. Thats why "fuck you" doesn't mean i wanna have sex with you and is determined to be a bad word. This isn't realy an issue now but like the new pope being part of the hitler youth program wich was compulsery by the geographic are in wich he grew up, some people remeber what it stood for and still decry it as a word not deemed for general usage.

      God damn is simular in it's orignin. It does describe somethign that is bad happening to others. It isn't realy blaphemy but rather wishing god to damn someone or some actions. In olden times if you asked for someoen to be injured and that actualy happened, i could mean you life was comming to an end. This isn't an issue now.

      The simularities here are that both are asking for somethign bad to happen to someone else. With the modern attack against religious instatutions, the "god damn" is becoming less of a threat then "fuck you" is. The order of this being right or wrong is basicaly an indevidual decision now adays. I have a theory that if you let a general word or term control your reactions, you are doomed to be enslaved by that word.

      Racial slures are simular too. Without creating a flame war that doesn't need to be, I will say all i need to do to control a gropup of people is incite them in a certain way. By personaly offending them with a racial slures like "wetback" or "nigger" we can continue to contol them no matter how many laws are passed saying they are equal or need to be treated a certain way. If there is no reaction to the terms, then the usage doesn't find itself usefull enough to be continued bing used.

      You will find all sorts of examples proving this point. The fact that people objected to the censoring of fuck while not censoring god dam ilistrates this. No doubtley you will recieve plenty of replies blasting you for you opinion in this matter and they now have some control over you. There is however a thin line between standing up for somethign you believe in and conviction and faith slip away. I guess we should pick our battles and be selective on how we interpret others meanings. If they aren't worth the time of day, A responce isn't worth it either. I'm sure the gran parent poster didn't think it was anythign diabolicle when making the post. he is just willing to more offend certain portions of the readers then others.

    6. Re:OT:Re:mod parent FUNNY! by zobier · · Score: 1

      Actually, to the anonymous grandparent:

      • 50 characters is the limit after which SLASH inserts a space to conserve the site layout and the expansion of the great great grandparent's acronym fitted into 50 characters with out the F word having been expanded.
      • As an aside, I do believe the F word is more offensive within the current cultural climate than is blasphemy.
      • By the way, why did you censor the blasphemous remark but not the F word? -- Nice troll!

      Two words to the parent:

      1. spell
      2. check
      --
      Me lost me cookie at the disco.
    7. Re:OT:Re:mod parent FUNNY! by sumdumass · · Score: 1

      I think point three referes to your second point. I;m not sure it was a troll in itself or intention.

    8. Re:OT:Re:mod parent FUNNY! by Anonymous Coward · · Score: 0

      "but it _is_ still a commandment, and it _is_ distressing for some of us to see"

      Which presumably refers to:
      'You shall not take the name of the LORD your God in vain.'

      Ok you pathetic prepubescent fuckwit, I'm only going to say this 18,000 more times: "God" is not god's name. Regardless of your religious beliefs. Really. There is no god in the entire pantheon of human religions whose name is "God".

      Now STFU and go away, safe in the knowledge that you can say "GODDAMN IT" as much as you want without blaspheming the lord's name.

      p.s.- you're welcome.

    9. Re:OT:Re:mod parent FUNNY! by GeckoX · · Score: 1

      Obviously you're christian, so what about this statement?

      Thou shall not judge, lest thee be judged yourself.

      Me not being christian, I'd feel a lot better about christians in general if they'd remember that one more often. (Like ever for christ's sake!)

      --
      No Comment.
    10. Re:OT:Re:mod parent FUNNY! by hartz · · Score: 1

      Incorrect all of you. It does not revolve arround God's actual name, but about respect for Him.

      And if you're not a Christian, then have some respect for those of us who are. Respect towards others shows selfrespect. Swearing and cussing is a method to try to lend some power to your statements, but it means nothing, and only goes to show that you have no selfrespect or morals. (Respect for others and their beliefs is also a moral value.)

      So ease up on yourselves!

      --
      --- Abnormally normal.
    11. Re:OT:Re:mod parent FUNNY! by Winkhorst · · Score: 1

      The term is "goddamned," and I fail to see what this has to do with taking the name in vain. I would think that concept would apply more to those folks who use it to promote their own personal political agendas, like our current simian president here in the US of A. Now there is someone who takes the name of God in vain.

      --
      "Is this Winkhorst a nova criminal?" "No just a technical sergeant wanted for interrogation."
    12. Re:OT:Re:mod parent FUNNY! by slaker · · Score: 1

      Well now here is an interesting question: Is it possible for those of us who don't accept your personal source of moral value to be seen as moral to begin with? Am I a virtuous pagan for censoring myself in order to conform to your standard of behavior, or am I worse for betraying *my* personal beliefs about your mythology and its associated sensibilities? And why should I care about the particulars of your moral judgement?

      Bringing the issue of morals into this discussion simply serves to illustrate that everyone's morals are different, and that your "absolute authority" is my good laugh on a Friday morning.

      --
      -- I wanna decide who lives and who dies - Crow T. Robot, MST3K
    13. Re:OT:Re:mod parent FUNNY! by Anonymous Coward · · Score: 0

      Yaweh damn you.

    14. Re:OT:Re:mod parent FUNNY! by hesiod · · Score: 1

      > I know most people don't make an issue of it, but it _is_ still a commandment, and it _is_ distressing for some of us to see.

      You, sir, are an idiot. "Taking his name in vain" means swearing on his "name" without intending to follow through. Not only that, but his fucking name isn't "God." It's like saying "By Yahweh, I'll kill you" without doing it is taking his name in vain. It is NOT just saying "God damn," goddamnit.

      The "rest of us" do not get offended by seeing a certain arrangement of letters. So kindly stop oppressing us, christian!

      Thanks for your tolerance in the future.

    15. Re:OT:Re:mod parent FUNNY! by hesiod · · Score: 1

      > Respect for others and their beliefs is also a moral value

      You are showing no respect for my belief that people are not cursed by saying certain words. You say I have no self respect because I am not superstitious like you.

  26. Choice Degrades Data Validity by rewinn · · Score: 2, Interesting

    To the extent that something forthrightly discloses what it does and offers the choice to opt-in (...and to opt-out later easily if one changes one's mind ...), the validity of the data is compromised.

    There's nothing *wrong* with giving people the choice of providing information in exchange for an incentive (... I participate in surveys & studies all the time ...) but it is not unlikely that as a result, the sample becomes non-representative (except of itself.)

    How likely is it that the genders differ in their willingnes to risk giving away personal information, such as keystrokes that may disclose physical address? I would not trust gender statistics for web usage at all, except for indicating the gender of people who don't worry much about strangers learning their meatspace location.

    It may be that some data about semi-anonymous servces such as the web is impossible to get. As Johnny Cash sings, "I don't like it, but I guess things happen that way!"

    1. Re:Choice Degrades Data Validity by Pollardito · · Score: 2, Insightful

      oh well, then they should try to make the best of their invalid data. their right to valid data can't trump their subjects' right to privacy, period.

    2. Re:Choice Degrades Data Validity by J053 · · Score: 2, Insightful

      Excellent point. People who would install and use this software are (I hope) a non-representative subset of all computer users. I'd like to believe that more people have a clue than not, and the fact that these guys only have about 1 million members is kinda encouraging - when you think about how many Internet users there are.
      I hope.

    3. Re:Choice Degrades Data Validity by ceoyoyo · · Score: 1

      Market researchers should be held to the same ethical standards as medical (or psychological) researchers. If I want to do a survey, even if I want to reanalyze some old data, as a medical researcher I have to get full ethics approval from a review board, have approved mechanisms for protecting subjects, allow them to opt out at ANY time, etc. Why not marketing? They're doing human research after all.

    4. Re:Choice Degrades Data Validity by rewinn · · Score: 1

      >the same ethical standards as medical (or psychological) researchers

      I agree about the ethics point, although I think this is a different matter than data validity. I understand that researchers in the more classical fields of human research, such as medicine, have serious difficulties getting valid data when the act of ethical disclosure compromises the validity ... but to their credit they almost always recognize and acknowledge the problem.

      Let us hope this is the case with computer usage trackers, but my guess is that the ethic in that field is "data buyer beware!"

    5. Re:Choice Degrades Data Validity by ceoyoyo · · Score: 1

      The review board also assesses both the likely validity and usefulness of your results. There's no point in doing a study, which involves an invasion of privacy or potential risk to your subjects if the results aren't going to be good for anything. That process forces everybody to think about things like scientific method (which this company obviously hasn't), and whether the study is actually contributing something.

  27. Depends...Watch this!! by Anonymous Coward · · Score: 0

    "The difference between Spyware and Usage Statistics pretty simple: is it clearly stated to the End User and is optionable. Essentially, its not spyware if you know about it up front and have the ability to (actually,) turn it off."

    There's the "observer" phenomenon. In other words, will the fact that you know your under observation change the behaviour they're trying to observe?

  28. Just don't by ananegg · · Score: 1

    Just Don't Download it, If your stupided enough to do so, you deserve the Spyware.

    --
    Insert Pithy Quote here.
    1. Re:Just don't by Anonymous Coward · · Score: 0

      "your stupided"?

      Speak for yourself!

  29. Knowing where I'm clicking is one thing, but by Anonymous Coward · · Score: 2, Interesting
    "Security professionals say ComScore dangerously slurps up all manner of personal information, including passwords for online banking services."

    Is the single scariest thing I've read, barring the end of the world that will result from the release of Longhorn.

    And
    ComScore officials said the sensitive data is never at risk.

    "We establish two secure communications. One with you, and one with the bank," Lin said.

    Is the third sariest. Of course the data is at risk, an information research company has your internet banking password, for crying out load! No one should ever have that.
    Besides you.
    And the bank has to have an ecrypted copy to check it against.
    But that's all.
    How secure is the network of a company that sells information going to be compared to a Bank?

    Mind you most people will be using windows at home, so most banking passwords are being collected through vulnerabilities at that end anyway.

  30. Bad Statistics by Morrog · · Score: 2, Insightful

    Anyone remember that common example of bad stats? Some survey was taken by calling people randomly. What's wrong with it? You're excluding everyone without a phone (which is now rare, but the poor didn't have them when this survey was done). Isn't this exactly the same? You're excluding everyone without spyware. Hey, maybe males are more likely to get spyware on their computers than females?

    1. Re:Bad Statistics by AndroidCat · · Score: 1

      In other news, they found that 99.9% of the people running their spyware were .. stupid.

      --
      One line blog. I hear that they're called Twitters now.
    2. Re:Bad Statistics by EXrider · · Score: 1

      "Hey, maybe males are more likely to get spyware on their computers than females?"

      Hell yeah they are, they're the ones cruisin' all the pr0n sites that are loaded with malware.

      Ever got this one: "Sorry, your browser is not Win32 compatable." Hah! I use FireFox on a Mac, spyware whores, you're damn right it's not win32 anything!

      --
      grep -iw skynet /etc/services
    3. Re:Bad Statistics by Arvo · · Score: 1

      I was surprised to find out so many big companies were buying the data collected from MarketScore. One even inlcuded a bank who's customers were being put at risk by the software (it collected their Internet Banking credentials and credit card details).

  31. Can They Collect Data On ... by rewinn · · Score: 3, Insightful

    ... whether people who voluntarily install their program understand that they are agreeing never to shop or bank online with decent security ever again?

    It's one thing to warn someone "If you install our software, we'll monitor your net behavior".

    It's entirely another thing to say "If you install our software, you'll be relying on us never to collect your credit card number, bank password, or the birthdate/mother's name information we'd need to empty your bank account ... and you're relying on us never to be hacked."

  32. In other news... by Anonymous Coward · · Score: 0

    ...Sharman Networks have packaged antispyware software with KaZaA.

  33. Spyware for gender resolution? by Centurix · · Score: 1

    I don't need no stinking spyware to find that out for me, I just use the user agent to help me with that. Everyone knows that real men use Linux.

    --
    Task Mangler
  34. Research Methods by Anonymous Coward · · Score: 0

    Not only does this study not include Mac or Linux users, but it really only gives useful information about the people who chose to install the program on their computers. Perhaps men are more likely than women to install the program, which would then skew their data heavily in favor of males using firefox. As it stands, the "research" is quite useless for generalizing to the population because an entirely different sample of people would even consider installing this thing. However, it isn't spyware because the user knows what they're getting into and it's not sneaky about what it claims to do.

  35. Marketscore has been around for a while by assassinator42 · · Score: 4, Interesting

    It started out being marketed as a way to "speed up" web browing, much like AOL is advertising with "Top Speed" now. According to the article, they even have access to encrypted connections. It also says that your passwords and stuff are visible to them. This isn't good, and they don't really state up front that they do this. I believe marketscore has been considered spyware for a while by some people. Also, the program they give you in exchange only scans emails, or so it appears. Definentaly not worth it.

  36. They should tagged... by jromz03 · · Score: 1

    They should've mentioned it on their website what exactly they collect. Not just bury it in their EULA.

    Who knows what other kind of monitoring trojans they have in there.

  37. Time To Bring Back Whipping by cannuck · · Score: 0

    Although I am typically opposed to corporal punishment - I'm all in favour of bringing it back for people who spy on me (and others) through the internet. Maybe a hundred lashes a day for a week would smarten these people up;) Would like to get a list of the companies who are using this data.

  38. 'Lure' is a loaded term... by One+Childish+N00b · · Score: 3, Insightful

    This is going to nuke my karma to all Hell, but what the hey...

    A lot of Slashdotters are, as usual, not RTFA/web page in question and assuming that this is the usual spyware trick of clandestinely trojanised software pretending to be a legitimate tool - allow me to explain;

    The word 'lure' used in the summary is a loaded term - it implies (in the context the editors used) that they are somehow using this free AntiVirus tool as a means of covertly installing spyware - This company is simply offering a free antivirus product if you accept the *up front agreement* that their little utility can spy on your web browsing habits - they're not doing anything clandestine here, they're just offering their service to you for free, so they can sell the results on to advertisers to recoup costs;

    From the company's website:
    In exchange for having their Internet browsing and purchasing activity observed, members have access to free email virus scanning and other benefits.

    This is just a new way of offering a product - "here, you can have this for free, but in exchange you've got to give us stuff we can sell to our avertisers" (though they promise not to sell personal info, so presumably they'll just be selling 'web trends' data) or rather, it's the same way that a lot of so-called 'adware' operates, only they're rarely this up-front.

    Sure, it's spyware, but the text above is located right on their front page, is in easily-understandable English, and is not hidden, obscured of obfusicated in any way - if people want to give their permission for Marketscore to monitor their browsing in exchange for free software, who are /. to stop them? If you're concerned about web privacy, don't download it, but it's not like they're trying to trick anyone here.

    --
    Dealing with lawyers would be a lot less tedious if they all looked like Casey Novak.
    1. Re:'Lure' is a loaded term... by Anonymous Coward · · Score: 0

      It's hardly a "new" way of offering a product... KaZaA has been using the same bullshit technicality to shovel Gator/GAIN/Claria onto peoples' PCs for ages now.

    2. Re:'Lure' is a loaded term... by Tim+C · · Score: 2, Interesting

      While I generally agree with you, I do have two comments.

      Firstly, the editors didn't use the word "lure" at all, other than in so far as CowboyNeal chose to post this. All of the words in italics are those of prostoalex (unless he speaks up to claim that CowboyNeal changed them, of course).

      Secondly, if I had mod points, you'd be going down for that opening sentence :-)
      (No danger of that though, I've not had mod points for years)

    3. Re:'Lure' is a loaded term... by One+Childish+N00b · · Score: 1

      Editors, original posters... someone's dropped a loaded term in there, and it's the editor's job to pick up on these biases and change them so that hundreds of Slashdotters go off half-cocked at 'teh eval spyware companie' 'luring' innocent webfolk into their den of spying evilness...

      As for the first sentence, it wasn't the usual 'go-on-mod-me-down', 'karma-to-burn' piece, I genuinely thought I'd get a Troll mod there for daring to question the evil of violating web privacy, even with the user's permission... :P

      --
      Dealing with lawyers would be a lot less tedious if they all looked like Casey Novak.
    4. Re:'Lure' is a loaded term... by Anonymous Coward · · Score: 0

      It's more like saying to a kid, "Hey, I'll give you this candy bar if you give me a blowjob." And in an almost inaudible whiper, "By the way, I also have the clap."

  39. Depends...Trust US. by Anonymous Coward · · Score: 0

    "Yes, maybe the user knows the benefits (and the world of hurt) they can expect from using this software...but what about the banks (or other businesses) who are actively trying to protect its customers? We're still trying to figure out how to deal with this on our side while individually informing the affected customers."

    Gee, what do you know? Sounds like the user needs some kind of system that will authenticate everything on their system, from hardware to software, establishing a web of trust. One which spyware will not be a part of.

    1. Re:Depends...Trust US. by Anonymous Coward · · Score: 0

      That might work (in theory). Though if I read the parent post right, he (~the company) is most certainly not in the position to dictate the configuration on _all_ customer owned computers.
      Remember that the 'internet' is supposed to work from everywhere for everybody (assuming your site spits out clean HTML and everybody has a halfway decent browser).

  40. I think it should be okay if... by erroneus · · Score: 1

    ... they made the software open source and available for scrutiny on a source like Sourceforge. More than that, the install should be clean and easy-in and easy-out.

    It would make the thing have a better chance as being used for legitimate research and a better chance and being trusted.

    The whole problem with traditional spyware is that it is often installed in deceptive or undetected ways, that it is difficult to remove and even goes so far as to damage things such as AV software to prevent its removal. Legitimate researchware would not have those characteristics.

  41. can't access it by Anonymous Coward · · Score: 0

    my university banned the marketscore website... i guess that says enough about the website itself. no such thing as researchware.

  42. It doesnt matter... by emjoi_gently · · Score: 1

    If the software is "Spying" on me or not.
    To be honest that's never been much of an issue to me. I dont do much worth spying on.

    What does matter is that there is this program that's hacked into my networking, using my bandwidth and CPU, potentially messing up the networking on my PC. That's the biggest hassle.

    I see plenty of PCs that have their TCP/IP scrambled, or brought to a crawl by things like New.net

    The "Spying" is the least of the troubles.

  43. I do not think it means what you think it means by Anthony+Boyd · · Score: 1

    Hmmm. I wonder... so does the study then indicate that primarily men use Firefox, or does the study actually indicate that primarily men install antivirus protection? Or both, for a double whammy of a skewed number?

  44. INFORMATIVE?! by icedcool · · Score: 1

    COME ON! Thats funny for +2 cliche useage

    --
    Most people aren't thought about after they're gone. "I wonder where Rob got the plutonium" is better than most get.
    1. Re:INFORMATIVE?! by Trejkaz · · Score: 1

      I originally had a "you insensitive clod" worked in there too, but decided against it.

      --
      Karma: It's all a bunch of tree-huggin' hippy crap!
  45. It is still spyware by aggles · · Score: 2, Informative

    Just because you know it a piece of code is spying on you doesn't stop it from being spyware. James Bond was still a spy, even when Goldfinger knew who he was. The threat comes to others who may use the machine without knowing the spyware is running. Companies buy Comscore information and actually believe it represents normal people. No wonder so many Web sites suck -aggles

  46. reminds me of a Cheech and Chong sketch by weighn · · Score: 1
    looks like dogshit, smells like dogshit, feels like dogshit, tastes like dogshit...

    Lucky we didn't step in it!

    --
    Mongrel News all the news that fits and froths
  47. My definition of spyware.... by Anonymous Coward · · Score: 0

    Any software that collects information about my actions and reports it back to the software maker.....

    How much simpler could that be?

  48. Hostile code - forges SSL certs by Animats · · Score: 5, Informative
    It's more than spyware. This thing reroutes all your browser traffic through their proxy. That's how they see what you're doing. It includes rogue SSL certificates so it can capture encrypted connections. Yes, they get to see all your credit card numbers. Major universities, including UCIC, UCLA, UC Riverside, UCSD, Texas Tech, Windsor, UNC, Old Dominion, Michigan, Iowa, McGill, Carlton, Cornell, American University, Stanford, and Columbia are blocking conections to Marketscore for this reason. If you have Marketscore installed at one of those schools, you get a warning page like this.

    Some banks also block online banking sessions coming in via Marketscore's proxies.

    This is the same spyware previously known as "netsetter". There's no question about this being spyware.

    Here's Stanford's Information Security Office's statement on Marketscore.

    • Security Alert: MarketScore Spyware
      11 Jan 2005

      MarketScore (also called NetSetter) is a spyware-like application that compromises the security of all data sent or received by your web browser, even on "secure" encrypted web sites. All external browser communications are re-routed through MarketScore's proxy servers, so they have access to any "secure" traffic/passwords/accounts that otherwise would be encrypted.

      If you have MarketScore installed on your computer and have used your browser for any services that require WebLogin, your password should be considered compromised. After you have removed MarketScore from your computer, we strongly recommend that you change your SUNet password. This advice also applies to any other secure web sites you may have visited with your browser.

      The Information Security Office is directly contacting owners of machines that appear to behave as if MarketScore is present.

      Technical Detail

      MarketScore reconfigures the browser to use a "proxy server" for all non-local connections, including HTTPS connections. A proxy server is a machine that acts as a middle-man, brokering web page requests intended for other sites. So if the browser on machine A wants to visit web sites C, D, and E it makes all those requests through the proxy server B. B then contacts C, D, and E and passes the results back to A. This is usually transparent to the user on machine A after the browser has been configured to use the proxy.

      Web proxies are typically used in a corporate environment where all web traffic must be controlled or inspected centrally, although in the case of secure HTTPS traffic there is ordinarily nothing the proxy can do except forward the connection or refuse it. In this case, the proxy servers belong to a company called ComScore where they collect and analyze the intercepted data.

      While ordinarily an HTTPS connection would simply pass through a proxy securely, in this case MarketScore also installs a new root certificate in your browser so that it can decrypt all intercepted SSL connections (a "man-in-the-middle" attack) without triggering a security warning from the browser. In normal operation, browsers would complain if a site certificate doesn't match the domain of the URL, but the new root certificate tells the browser to trust ComScore's site certificate for any URL.

    This goes well beyond what Marketscore claims their program does.

    That seems to settle the issue.

    1. Re:Hostile code - forges SSL certs by Arvo · · Score: 1

      I confirm that this is the case, as I work at one of the first institutions to identify and block this threat. It is damgerous. Worse, Marketscore have released an update (which is automatically installed without your knowledge), and now the traffic is not re-routed through MarketScore servers. This means it can't be blocked anymore. The new spyware is still sending copies of your web activity to MarketScore though, including contents of SSL sessions.

  49. Big problem by D+H+NG · · Score: 1

    I attempted to access their web site, but was greeted with this scary warning from my friendly DNS server.
    From what it's telling me, it seems like Comscore is rereouting all your web traffic through their server, including all the encrypted data. Seems like a big problem to me.

  50. Confirmed, it's spyware/adware/garbageware by Anonymous Coward · · Score: 0

    "This is no different than what a lot of other market research companies are doing," Lin said.

    Yeah, I regularly give my encrypted banking details to market research companies. What are the rules about spammers and lying? Seems to fit here as well.

    Banks cut off researchware users Not everyone agrees. Security professionals say ComScore dangerously slurps up all manner of personal information, including passwords for online banking services. Several financial institutions have complained about the service, and last month, major banks in New Zealand announced they would no longer do business with consumers who have installed Marketscore.

    A fraud official for one of Canada's largest banks who asked not to be identified told MSNBC.com that his firm had recently begun to reject all traffic flowing through Marketscore servers.

    The last time this hit the news, I did some whois and dig searches and put some of their ip blocks in iptables. But even after googling and checking the sites of the schools mentioned that issued warnings to their students and that started blocking Marketscore, I couldn't find any comprehensive listing of their ip addresses, only what I could find with dig, whois, and grepping the site logs. But they still seem to get through. Anyone have a comprehensive list of their ip addresses that you can post?

    "I think people who download the software don't fully understand how much information is going to be collected," said Larry Ponemon, director of the research firm The Ponemon Institute.

    "They tell you it's a value for value exchange. But as a rational human being, how much would you have to be compensated to take this risk? Their data is incredibly valuable. And there are risks that haven't really been thought about."

    ComScore carefully controls those risks, Lin said. The company's research data has never been stolen, she said,

    I'll bet Choicepoint used to say the same thing prior to the California disclosure law kicking in.

    and the firm regularly submits to outside audits of its privacy and other procedures.

    What, Truste? Yeah, we're going to do whatever we please with the clients data. That's our policy. Truste: Congratulations! You pass! You have a policy, and you are adhering to it!

    ComScore also goes to great pains to avoid storing critical, personal data, she said. "If identifying information exists, we either ignore it or scrub it," Lin said. "We destroy pieces of key numbers and data elements that we think are highly sensitive and that possession of would create a potential vulnerability."

    Malicious spyware, adware, garbageware, ComScore/MarketScore/WhateverScore shouldn't have "identifying" information, shouldn't have "key numbers" (read: credit card numbers and bank account numbers, the numbers that show up in the encrypted transactions that are being discussed in this article). Deleting all this "highly sensitive" info so there isn't a potential vulnerability problem? They shouldn't have it to start with. Remember the AOL insider?

    If you go to a web site and get a 403 forbidden message instead, check to make sure you don't have the above spyware installed. Because I'm blocking and everyone else should be blocking each and every ip address originating from the ComScore/MarketScore/WhateverScore proxy servers. Putting the ip addresses in iptables with the result being the user gets a 403 is the only thing I can figure out to block the Com/Market/Whatever proxy servers. I'd like to send back a selective message explaining why they aren't allowed access, but that's beyond my capabilities and probably beyond current Apache functionality. That being the case, I'll continue blocking outright. Eve

  51. No, I'm here to tell you.... by Anonymous Coward · · Score: 0

    ...Wimmin are stupid. All of them I know use Windows and IE

    1. Re:No, I'm here to tell you.... by Anonymous Coward · · Score: 0

      You're running with the wrong set. The majority I know use iBooks.

  52. It's spyware by PhotoBoy · · Score: 4, Interesting

    If it monitors what I'm doing on my computer it should be classified as spyware. I don't care if it's for research rather than commercial uses, it's still spying.

    The fact that the spying program is included with a free anti-virus program to entice people to download it says it all.

    1. Re:It's spyware by WhatAmIDoingHere · · Score: 1

      But the program says "We will monitor you" up front. It's not being dishonest about what it does.

      It's more like "MonitorWare" if it came bundled with McAfee or Norton, and they didn't tell you it was there, that would be spyware.

      --
      Not a Twitter sockpuppet... but I wish I was.
    2. Re:It's spyware by cornjoelio · · Score: 1

      That is exactly right. It says we will monitor you. But it doesn't tell you what they monitor. Most users will believe that they are just monitoring what websites you go to, not what passwords you're using, what secure sites you'll be visiting. Most users aren't going to realize their traffic will be routed through Comscore's proxy server.

      You don't think they're being decietful. Let me point out that telling half truths and misrepresenting what you are actually doing is still lieing.

    3. Re:It's spyware by jafiwam · · Score: 1

      What a freaking perversion of the English language. Where I come from "we will monitor you" does not imply "gather your credit card number" in any sense.

      That's like saying "I will visit your mom for a chat" means "I will sniff your mom in the cooch."

      It just isn't the same thing.

      The stuff is Evil. Face it. (Yea, lot of credability from a guy using the email address "joe.hacker@gmail.com" about what is good and right on internet. Go crawl back under your futon in the basement, kid.)

    4. Re:It's spyware by WebScud · · Score: 0

      I totally agree. A program that watches my usage without permission is still spyware.

    5. Re:It's spyware by WhatAmIDoingHere · · Score: 1

      Joe.hacker forwards the email to my real email address.. sexwithanimals@gmail.com

      --
      Not a Twitter sockpuppet... but I wish I was.
  53. The difference by Anonymous Coward · · Score: 2, Insightful

    "I have no problem with optional programs that record data to be used in a study. My wife also participates in allgery studies. So?"

    Did your wife's allergy study also reveal how many times she had sex and with who?

    Did it reveal your bank account information?

    Did she have to tell the allergy researchers everywhere she drove?

    My guess is that there were limits to what the Allergy Research people asked, and even if they asked something untowards ("Excuse me ma'am, what is your breast size?"), she could say "I'd rather not tell you".

    You aren't given that choice with this bit of spyware. Its not value for value because you don't get the ability to not reveal certain information about what you're doing.

    Why people put their privacy at risk for $20 of value should be another study, but that's not what's at issue here.

    1. Re:The difference by bluGill · · Score: 1

      My guess is that this study is examined by a medical ethics board and run by legitimate researchers. IF they ask the guys wife what her breast size is, it is because they have a reasonable reason to believe that breast size affects something related to allergies. Since this is unlikely, ethics boards will require proof that there is a reason to ask.

  54. delete instructions by Anonymous Coward · · Score: 0

    Malware is also that program that resists all attempts at removal. If it doesn't have delete capabilities or instructions, it is not proper.

  55. Intercepting a HTTPS-connection : criminal conduct by Anonymous Coward · · Score: 0

    Should not anyone who intercepts a secure transmission be procecuted to the full extend of the law (as being a black hat/evil cracker) ?

    I mean, it's not for nothing that either the sender or the recipient (or both !) have choosen for a secure connection.

  56. Let them know how you feel! by Anonymous Coward · · Score: 0

    Here's a friendly way to contact them!

    Marketscore
    11465 Sunset Hills Road
    Reston, VA 20190
    312-775-6648 Fax: 253-498-1708

    That doesn't sit well with me, so I did a little digging at the same address:
    http://www.openet-telecom.com/contactres ton.htm
    Openet Telecom Inc.
    11465 Sunset Hills Road
    Suite 310
    Reston
    Virginia 20190
    USA
    Tel: +1 703 480 1820
    Fax: +1 703 435 0730
    General information: info@openet-telecom.com
    North America (toll free) +1 866 873-7614 info@openet-telecom.com

    Also:
    http://www.kellogg.northwestern.edu/resea rchcomput ing/comscore.htm
    Which is related to:

    comScore Networks
    11465 Sunset Hills Road, Suite 200
    Reston, VA 20190
    Phone: (703) 438-2000
    Fax: (703) 438-2051

    There's more than meets the eye here.

    Interesting, no?

  57. comScore Netowks and Marketscore are the same by Anonymous Coward · · Score: 0

    According to Registrar.com,

    the info is the same. Here's the whois for Marketscore:

    Marketscore Inc
    11465 Sunset Hills Road, Suite 200
    Reston, VA 20190
    312-775-6648
    fax: 253-498-1708
    domain-admin@marketshare.com

    Which matches comScore Networks exactly.

  58. MOD PARENT UP!!! by Anonymous Coward · · Score: 0

    Why won't the press dig into this stuff???

  59. President/CEO's contact info right here by Anonymous Coward · · Score: 0

    Abraham, Magid (PhD, June 1988)
    President and CEO
    comScore Networks
    11465 Sunset Hills Road
    Reston, VA 20190
    (703) 438-2052
    mabraham@comscore.com

    Isn't this great? You can let the president of the company know how you feel?

  60. RedHerring says that... by Anonymous Coward · · Score: 0

    comScore Networks

    Address: 11465 Sunset Hills Rd. Suite 200, Reston, VA 20190

    Phone: 1-703-438-2000

    URL: www.comscore.com

    Founded: 1999

    CEO: Magid Abraham

    Employees: 220

    Funding: $88 million, 5 rounds

    comScore Networks is known for its in-depth reports and surveys about consumer behavior on the Internet. Using a panel of 2 million consumers across seven continents and patented data capture technology, comScore monitors everything from what people are buying online to the habits of Latino web surfers. Although comScore has an established presence in web metrics, the company will have to stay nimble as technology advances, if it is to maintain its lead over competitors.

  61. Re:Gendericator - Alpha males by eltasia · · Score: 1

    We need a new definition. Malware is any application that resists removal and doesn't provide instructions for deletion. It provides internet connection for access out of the control of the user. Only Alpha males have complete control of a computer. We certainly need stats on that.

  62. Open source by Carnil · · Score: 1

    I wouldn't believe a program like this not being spyware as long as it's code is closed and it can do anything, and send any info that it's creators desire.
    I think that this is the perfect case of a kind of programs that must be open source. Surely the code of a program that just collects information can't be of an incredibly complexity, so there's no reason for hiding it's code (other than doing a different thing than what it claims).
    If they claim that their program doesn't send any sensitive information, let us check it by ourselves, otherwise I won't believe it.

  63. READ PARENT. INTERESTING. :-) by Anonymous Coward · · Score: 0

    Sorry... Hard to advertise...

  64. I hate this kind of thing. by C0d1ngM0nk3y · · Score: 0

    Regardless of the intent, these companies are installing software on PCs without peoples knowledge a lot of the time and they're probably in a serious grey area when it comes to the 'data protection act (1998)'.

    We need the law changed so that these data-collecting software leaches are opt-in rather than opt-out.

    Who actually wants to install software that's piggy-backing onto other stuff, soaking up processor time, bandwidth, potentially opening up your system to security vulnerablities and retransmitting your private data (personality identifiable or not)?

  65. IMHO you miss the point by Moraelin · · Score: 1

    It's not really about the stance on spyware, but about the validity of their market statistics.

    E.g., if you exclude all Mac users, you'll get the very clear (but very false) image that there is exactly zero market for Tiger or for anything Mac-related.

    E.g., if you base your sample on people who took it for the free anti-virus, surprise, your statistics will say that noone buys anti-viruses.

    So that's the problem and the question: is such a skewed sample even capable of producing meaningful results?

    --
    A polar bear is a cartesian bear after a coordinate transform.
  66. "still thinking" ?? by Anonymous Coward · · Score: 0
    anti-spyware utility manufacturers are still thinking whether to include it on their list.

    Hey, supposed anti-spyware makers.... WAKE UP. This is EXACTLY the stuff you're supposed to be PREVENTING. Who paid you off this week?

    Considering that Lavasoft was already paid off to stop including some manufacturer's things in their ad-aware, Yahoo's "anti-spyware" toolbar doesn't notice things from Yahoo advertisers, and now ANY sort of hesitation on this front, makes me think that the Anti-spyware makers have gone down the same road of payoffs and kickbacks that the antivirus people have.

    1. Re:"still thinking" ?? by Anonymous Coward · · Score: 0

      I agree with you.

      1. It's an anti-virus program.
      2. If it does anything beyond anti-virus and updating itself, it's spyware. Period.

  67. You don't understand how it works by Moraelin · · Score: 1

    Drug testing is based on the assumption that you're dealing with a human kind of biology. That's what they're testing. It's not like you have a major biological difference between those who opt to take part, and those who don't.

    And if someone did discover that, say, the resistance in antibiotics is higher in those who take part in drug trials than in those who don't, that would indeed be reason enough to doubt that testing.

    That's the whole point: for your results to be any use, the sample you use and the data you collect has got to be representative. A sample and a data set that are massively skewed, becomes of very limited use and credibility.

    So let's get back to this particular research.

    1. The data itself may be skewed, if you let people decide which data they submit.

    Some data is considered confidential, and rightfully so. E.g., I'd rather not do my bank transactions through some fly-by-night company's proxies. (Same applies to your drug testing surveys: if your survey relied on people giving you their banking data, you can bet that you'd get lies.)

    Some data carries a certain stigma. E.g., if I were to buy a subscription to a paid porn site, I probably wouldn't want someone collecting _that_ data about me.

    2. There's also no indication that the sample is actually representative for anything.

    E.g., in your drug testing research, if you're testing a drug that acts on the prostate, you'll want at least some of your test subjects to actually have one. If you're testing a contraceptive pill for women, you'll want at least some of your test subjects to have a womb and ovaries.

    If there is strong indication that your sample is in fact not representative at all for what you're trying to study, then the relevance of the result is at best questionable.

    --
    A polar bear is a cartesian bear after a coordinate transform.
  68. Going on an anthropology tangent by Moraelin · · Score: 1

    I figured it's a different topic, so I've split it into a different message. You say:

    "You can be honest and give someone a survey with no benefit to them and you'll get mostly honest answers back."

    Actually, anthropology studies say people will lie like there's no tomorrow in surveys.

    Or let me rephrase that: they won't consciously "lie". They'll subconsciously skew their answers towards those they consider "right".

    See, each of us likes to think he/she/it is a better person. In fact, we actually honestly believe we _are_ better than we are. (E.g., if you ask a bunch of Christians, _noone_ thinks they're personally among those going to Hell.) We think we're more moral, better workers, and more socially acceptable to boot.

    So any answers in a survey will reflect that idealized self-perception, rather than reality.

    E.g., if a community's ideology is that everyone is helping each others, the results you'll get in a survey will illustrate that. Yeah, we all work our fields together, help build each other's house, etc. Even if in reality the last time anyone helped another build a house was in '47 or so.

    E.g., if a tribe's culture values hunters and warriors more than anything else, everyone will declare themselves a warrior and hunter in a survey. Even if 90% of their food actually comes from agriculture, and half the rest is imported.

    "There's a really simple way to make sure that you get fairly accurate results on surveys or market research... don't offer incentives. People will lie their asses off to get free stuff."

    Well, that's very insightful, but that's the problem. Their own incentive and free stuff may still exist anyway. Self-respect is a very valuable thing to get as "free stuff" there.

    Plus there also is the factor of picking the answers that you think will please the guy/gal doing the survey. We're social beings and most of people have been educated to "be nice".

    --
    A polar bear is a cartesian bear after a coordinate transform.
  69. No OpenBSD Version of the Spyware? by putko · · Score: 1

    I wish they'd make this useful software available for OpenBSD users like myself.

    I miss out on such good stuff.

    --
    http://www.thebricktestament.com/the_law/when_to_s tone_your_children/dt21_18a.html
  70. Logic? by Anonymous Coward · · Score: 0

    So if you lie about personal information all the time, and what you are saying is about you, then that's personal information and thus you must be lying. Except that you lie about you all the time. But if you're lying about lying, then you must be telling the truth. About lying.
    Argh, head hurts. Does not compute.

    I was never very good at logic...

    1. Re:Logic? by rjelks · · Score: 1

      "Now, a clever man would put the poison into his own goblet, because he would know that only a great fool would reach for what he was given. I am not a great fool, so I can clearly not choose the wine in front of you. But you must have known I was not a great fool, you would have counted on it, so I can clearly not choose the wine in front of me." - Vizzini

  71. Research vs spying by Eminence · · Score: 1

    The difference between the two is quite clear I think. Research is being conducted openly, with full consent of the subjects who freely and with full understanding agree for given data to be collected (or answer certain questions asked by the researchers). Spying is done in secret, without the subjects knowing data about them is being collected, without being able to review it and agree to it consciously.

    And, obviously, tucking some small print into a lengthy "agreement" written in lawyer-lingo that no one reads is clearly aimed at concealing the true character of a given software from the user. While it might probably save the spyware peddlers in court a very simple test could easily show that "users" of those packages are being spied on: I bet no one of them knows that some information about him or her is collected and what that information is.

    Calling spyware researchware must be a bright idea of PR-type aimed at removing negative connotations from a given product. Pathetic but will probably work on general public.

  72. its still spyware by HTL2001 · · Score: 1

    even if I agree to install it, its still spyware. if someone tells me "this is a trojan" and I install it, does it mean its not a trojan anymore?

    --
    By reading this, you have given me brief control of your mind.
    1. Re:its still spyware by Anonymous Coward · · Score: 0
      if someone tells me "this is a trojan" and I install it, does it mean its not a trojan anymore?


      exactly. it is then known as a Remote Administration Tool (server side).

  73. Re:WAY OT:Re:[still]mod parent FUNNY! by ender- · · Score: 3, Insightful

    I know most people don't make an issue of it, but it _is_ still a commandment, and it _is_ distressing for some of us to see.

    First of all, *if* god gave us free will, who gave you the right to complain about how and when we use that free will? If he wants to use god's name in vain then that's his god-given right. Get over it. If you don't want to see things that offend you, maybe you should stick to Christian Safe sites. Don't try to force us to curb our speech/actions based YOUR beliefs.

    Secondly, where is the commandment that says not to use the word god/God? Oh I see, you mean this one: "Thou shalt not take the name of the Lord they God in vain: for the Lord will not hold him guiltless that taketh his name in vain".

    I hate to have to be the one to tell you this but 'God' isn't god's name. 'God/the Lord' is the substitute that the translators of the bible used to keep people from saying god's name, which is actually 'Yaweh'. They could have just as easily used "snickerdoodle".

    If you are going to follow the faith of a pointless mythology, you might as well learn it properly. Sheesh.

    Ender-

    PS. Thank you for instigating my first ever religious flame/troll post in 14 years of BBS/Internet useage. Too bad you're anonymous.

  74. Spyware for Linux by rjshields · · Score: 1

    Is there such a thing? Where can I get some open source spyware? I'd hate to miss out on all the fun.

    --
    In this world nothing is certain but death, taxes and flawed car analogies.
  75. check out the anti-spyware factory by hdh · · Score: 2, Funny

    Anti-spyware manufacturers? Is that like steel manufacturing? Is anti-spyware drop-forged, hammer forged, or die cast? Maybe it's extruded like cheerios.

    --
    I like toast!
  76. not really informed consent by Anonymous Coward · · Score: 0
    If comScore were to say "In return for this free anti-virus tool, you give us the right to observe and record all internet activity of all users of this computer, including their credit card numbers, social security numbers, all financial and health data about themselves they access, in addition to other information. Use of such information is carefully controlled by us", how many users would you think will actually download this?

    The fact of the matter is that this is ignorance arbitrage, disguised as informed consent: they are relying on the "average user" not understanding the implications of the permanent loss of very private information they are agreeing to.

    It is not for you or me to dictate what contracts persons can engage in. However, we can certainly watchdog, monitor and inform, and let in sunshine into yet another dark corner of the online world.

  77. Personal Information by ZeroVerteX · · Score: 2, Insightful

    I consider my computer usage habits (i.e. where I click, and what I look at) PERSONAL INFORMATION! A rose is a rose, and spyware is spyware!

    --
    If it can go wrong it wnetscape: Segmentation Fault, Core dumped
  78. Verdict in: by LittleBigScript · · Score: 1

    Spyware.

    Was that hard?

  79. Wow... Ohio State Blocks it by Mattwolf7 · · Score: 3, Interesting

    Marketscore is Spyware
    You have been redirected here because your computer attempted to contact a Marketscore proxy server. While it is undetermined whether or not you intended to sign up for the Marketscore service, you should be informed of the following:

    * Your communications through Marketscore are not secured:

    Even though your browser displays a lock or key and indicates that you are using a secure connection (the URL begins with https://), your traffic is being tunneled through a Marketscore proxy which has direct, unencrypted access to your "secure" connections. Secure connections should always be made directly to the intended target. The Marketscore site certificate could be used to masquerade as any domain, even after being uninstalled.

    * Proxying could threaten University security:
    Your confidentiality, and that of other OSU services, students, staff and faculty could potentially be compromised since usernames and passwords could be recovered from data collected by Marketscore (previously Netsetter) or its future owners or management. As a student or staff member of The Ohio State University, you are granted access through your login name and password, which could be accessed by unauthorized third-parties through your use of a proxy such as Marketscore.

    * Proxying does not improve internet connection speeds: While Marketscore or any similar service may claim to improve connection rates, this is not shown in research.

    * It can be construed as a violation of Resnet and the University's Acceptable Use Policy: "Users will not attempt to circumvent the ResNet firewall or any other established network services" [AUP, ResNet]. Proxying through a third party such as Marketscore does just that.

    * Marketscore can update itself: Marketscore software can quietly (without user notificatation/intervention) update itself. This means arbitrary code can be executed on your machine at any time.

    In order to resume normal web browser activity, you must remove Marketscore from your computer. Below is a guide for removing this Spyware. To be certain that Marketscore is fully cleaned from your system, these instructions must be completed in their entirety.

    Remove Marketscore:

    Uninstall Marketscore
    Open the Control Panel
    Click Start->Control Panel (or if Control Panel does not appear, Start->Settings->Control Panel), click Add or Remove Programs
    Find the Marketscore (OR Netsetter) item in the list, and click to Remove it.
    Note: If Marketscore/Netsetter do not appear in the Control Panel, then you are infected with a self-installing variant of the spyware which you will have to remove using a "hidden" uninstall feature:
    ResNet marketscore removal batch tool
    Download and run MSremove.bat

    If, after following these instructions, your machine has not been cleaned of Marketscore, please contact the ResNet Support Center at 2-HELP (2-4357).

    Equip your computer with software to protect against other Spyware and remove possible lingering elements (registry entries, etc.) of Marketscore:

    In order to assure that your computer is free of other elements that can compromise your privacy and security, ResNet highly recommends that you install software that will detect and remove Spyware.

    The two leading applications are:
    Ad Aware - The personal edition is available for free download at http://www.lavasoft.com
    Spybot Search & Destroy - This software is freely available at http://security.kolla.de
    Install one of these (installing both can cause conflicts), be sure that the spyware definitions are up to date, and scan your system periodically. Doing this, in addition to protecting your privacy and security, will help keep your computer clean and running efficiently.

    This lameness filter really sucks.... I'm not sure how i feel about OSU blocking it. I guess they do it because it hurts their network, but what if they block something else?

    1. Re:Wow... Ohio State Blocks it by Politburo · · Score: 1

      It can be construed as a violation of Resnet and the University's Acceptable Use Policy: "Users will not attempt to circumvent the ResNet firewall or any other established network services" [AUP, ResNet]. Proxying through a third party such as Marketscore does just that.

      Uh, what? How exactly does using a proxy outside the university network circumvent the firewall? Do they teach some sort of alternative computer networking at OSU?

  80. Like, duh! by Anonymous Coward · · Score: 0

    Of course women don't use Firefox as much. It's a good browser, but it doesn't have that cute little butterfly like MSN. Besides, it might block one of those cute little popup adds asking them a question about some celebrity in exchange for a pink cell phone.

  81. He's lying by hawk · · Score: 1

    He only lies about them 92% of the time, which required him to lie here, too . . .

    hawk

  82. Firewalls are not just packet filters. by adb · · Score: 1

    The term "firewall" includes any application-layer filtering they may be doing. For example, they might be running a transparent caching/censoring proxy. People in the business of selling things called "firewalls" will, in fact, insist that mere packet filtering doesn't even deserve the name.

  83. Since you opt in... by Captain+DaFt · · Score: 1

    I wouldn't consider it spyware, but OTOH, Why in the hell would I want to help someone gather info that'll be used to pigeonhole me to a marketing demographic?
    The last thing I need is more advertising online, offline, any-freakin'-where because "The numbers say *YOU* *WANT* *THIS!!*" so it's worth our investment to advertise the crap out of it to YOU!

    --
    The U.S. really needs an English to Wisdom dictionary.
  84. Re:WAY OT:Re:[still]mod parent FUNNY! by iminplaya · · Score: 1

    PS. Thank you for instigating my first ever religious flame/troll post in 14 years of BBS/Internet useage.

    Wow! You mean to say he has telekinetic power over your fingers? Is this a Jedi mind trick? Cool! He blind-sided you so well that you didn't have a word to say on the subject at hand. Ahhh..the power of distraction. Ok...now...forget about all that. I think this stuff should be included into the spyware lists. How 'bout you?. Even if this company is up front, somebody else could conceivably install it surreptitiously. I want the anti-spyware program to catch it. I'm tired of digging through the registry every week.

    --
    What?
  85. Thank God by f0rt0r · · Score: 1

    I run Linux( not as root ), surf with Firefox, and keep the "install software" option turned off.

    Perhaps there is a way to set up a system ( install and configure everything ), then mount the filesystem as 'readonly' to keep spyware off? :)

    --
    I can't afford a sig!
  86. Spyware by Arvo · · Score: 1

    Software is spyware if it installs itself without your knowledge or misrepresents its purpose, and monitors what you do. Marketscore software used to be promoted as an internet accelerator. It never accelerated internet performance, instead re-routing all of your internet usage through it's spy servers. It contains software that allows the company to update the software without your permission. The latest version just sends a copy of your private web browsing details to Commscore, reducing your internet bandwidth, giving you no benefit (not that it ever was beneficial). What if you installed it as an accelerator and read and accepted the terms and conditions? Now it's spying on you and not doing what it said it would when you accepted the agreement. What if someone else installed it (ie your child) and now it spys on what you do, even though you didn't accept the agreement or even know it was on your computer?

  87. This software is a real threat by Arvo · · Score: 1

    I disagree, this software has been observed in a security lab environment transmitting very sensitive information back to MarketScore eg all the credit card details needed to make a credit card payment online. MarketScore store all of this information and more. They can say what they like, but they can't 100% protect the information (what about a crooked employee?), and if this continues, one day their 'customers' will be the victims. MarketScore is just a shell company anyway, and although their parent company is cashed up, when this goes bad the victims can forget about compensation.

  88. OT: I have a question ... by Anonymous Coward · · Score: 0

    You have interesting things to say - are all the spelling mistakes deliberate?

    No disrespect intended - just wondering.