Slashdot Mirror


Australia Says No To Spyware

PrivateDonut writes "Australian parliament introduced a bill on Thursday that would 'make it illegal for anyone to install a program without informed approval and attract a fine of $10,000.' Is this doomed to fail as many other anti-spam/spyware bills have failed? Or has Australia finally hit the mark?"

195 comments

  1. So? ...without international agreement? by beh · · Score: 5, Insightful

    I think, this proposal is a bit of a lame duck - much like other laws.

    If I am under the danger having to face $10.000 for installing spyware on a PC in my own country - then I'll do it in another country. Do you really think there will be extradition for installing Spyware?

    As long as I am willing NOT to visit the country where I hijacked some PCs, where's the problem? I can still do an awful lot of damage anyway...

    I think, such laws will only become effective, once we will have international agreement on such laws to make them easily punishable across country borders. Internet criminals have the big advantage that they can BE in a non-extradition country even at the time they commit the crime in an entirely different country.

  2. Traceback by fembots · · Score: 4, Insightful

    Is it correct that spyware works for its master? So at some stage it must try to communicate with its master to relay any information back right?

    I believe if a lab (open, sponsored or even MS) can do the traceback and tie every spyware to its owner, then it'll be easier for those who want to take action to do whatever the law allows.

    For example, if credit card numbers or PayPal logins are purposely fed to the spyware, and whoever uses that information will be linked directly to the spyware.

    1. Re:Traceback by benjamindees · · Score: 4, Insightful

      Yeah, but that would require "police work". It's much easier to just write broad, vague all-encompassing laws so that the party in power can use them against their enemies.

      --
      "I assumed blithely that there were no elves out there in the darkness"
    2. Re:Traceback by Renraku · · Score: 1

      Lets assume its adware/malware instead of some kind of virus or worm.

      Some lab traces the spyware..back to the spyware company. A court order is dropped on the spyware company to reveal its operation to the authorities.

      Spyware company says..oh..ok..we were advertising for (insert giant company, or spyware removal company). Said company says..oh sorry..we're not responsible for what our hired guns do. We pay them for their help in generating revenue for our product, which they do.

      Nothing changes.

      --
      Job? I don't have time to get a job! Who will sit around and bitch about being broke and unemployed then?
    3. Re:Traceback by 91degrees · · Score: 1

      Said company will probably say, "Yes. We do record personal information. And we make it quite clear in clause 40397 of the EULA of the unrelated program we were installed with", or words to that effect.

  3. Hmm... by Kufat · · Score: 5, Insightful

    Seems like most spyware has the same level of "informed approval" that store-bought commercial software does: An EULA that nobody reads.

    It's a feel-good law.

    1. Re:Hmm... by Adelbert · · Score: 1

      I've always thought the most serious viruses should have a EULA. Once people realise that they'd still have all their files if they'd just read a few paragraphs of text before the virus was installed, they might pay a bit more attention to the notices they are agreeing to on a regular basis.

    2. Re:Hmm... by Anonymous Coward · · Score: 0

      Okay Mr. Smartypants, just *how* do we force virus writers to put an EULA in their viruses? Oh, right...

    3. Re:Hmm... by Anonymous Coward · · Score: 0
      well he may have been suggesting that virus writers and anti-MS, EULA hating folks were one and the same.

      :P

    4. Re:Hmm... by Sycraft-fu · · Score: 2, Insightful

      No there's plenty of it that tries to sneak on your system. Also once it installs itself, much of it tries to install other spyware. Plus, if you remove it, it tries to reinstall without asking. A well written law would be effective against all these. Require an informaed shoice EACH time EACH peice is installed, which means that an installer would need to activete, a disclaimer appear, and it would need to respect a "no" choice.

      Now that would still leave spyware that comes in normally and fully discloses itself, but I'm actually fine with that. If you are willing to install spyware, that's your choice and I respect that. However it needs to be like a normal program in that it doesn't attempt to install other software, and if you tell it to uninstall it does so.

      My problem with spyware isn't that it spys on people, many will willingly trade that for something. My problem is it causes massive system problems, and then refuses to be removed.

    5. Re:Hmm... by spectre_240sx · · Score: 1

      Agreed. I actually wouldn't have much problem with a "legit" spyware program. As long as I knew what it did, could remove it whenever I felt like it and knew that it wouldn't corrupt my system, it might be worth trading that for certain thigns.

    6. Re:Hmm... by psyco_path_industrie · · Score: 1

      That was my first thought. However, going to a "Gaming" website and ending up with a keylogger installed on your system isn't exactly honest or clear. I think enforcement is going to be impossible so the end result is nothing has changed.

  4. Problem by mboverload · · Score: 4, Insightful

    The problem is that most spyware IS INSTALLED BY THE USER. Users are idiot!

    1. Re:Problem by luvirini · · Score: 1

      {this reply posted by automated advertising agent x-buyme} Your post indicates that you would want to visit our excelent site, taking you there automatically now.

    2. Re:Problem by Anonymous Coward · · Score: 0

      r u caling mi an idoit?

    3. Re:Problem by Agret · · Score: 1

      I accept you insensitive clod!!!!

      --
      Have you metaroderated recently?
    4. Re:Problem by LukeWebber · · Score: 1

      When I was still using IE, I got hit on a regular basis by various malware infections, and I certainly didn't install any of it.

      Thanks God for Firefox.

    5. Re:Problem by Mancat · · Score: 1

      ME TOO!

      --
      hello dear sirs my name is jamesh i are india (bihar) can u guide me install red had linux 9?
    6. Re:Problem by Marko+DeBeeste · · Score: 1

      That's "User be idiot," you insensitive clod!

      --
      Faith: n. -- That human impulse that drives them to steal appliances when the power goes out
    7. Re:Problem by Anonymous Coward · · Score: 0

      Thanks God for Goatse.

  5. YAY! by Anonymous Coward · · Score: 1, Funny

    Ammazing! Let's hope that this works.

  6. Effective solutions: public executions by Anonymous Coward · · Score: 0
    Is this doomed to fail as many other anti-spam/spyware bills have failed?
    Not if it is enforced by a firing squad...
  7. Maybe it will work by Anonymous Coward · · Score: 0

    If the companies who made the Spyware live there...

  8. Informed? by Renraku · · Score: 5, Informative

    If this were in the US, 'informed' would mean "Well, he was getting great offers..so in effect..we're practically putting money in his pocket!"

    --
    Job? I don't have time to get a job! Who will sit around and bitch about being broke and unemployed then?
  9. "Informed approval" by benjamindees · · Score: 4, Interesting

    Not just 'consent', but 'informed' as well.

    Does this include automatic update features? If an update breaks something, is it malware?

    --
    "I assumed blithely that there were no elves out there in the darkness"
    1. Re:"Informed approval" by Spudley · · Score: 1

      That was my first reaction as well.

      It's going to be very difficult to distinguish between a legitimate auto-update and an unwanted spyware application.

      How would you tell the difference legally?

      --
      (Spudley Strikes Again!)
    2. Re:"Informed approval" by say · · Score: 1

      Because normal software updates are initiated by software, which is installed sometime, and therefore can inform the user. Not difficult at all.

      --
      Roses are #FF0000, violets are #0000FF, all my base are belong to you
    3. Re:"Informed approval" by ozmanjusri · · Score: 1

      How would you tell the difference legally?

      The opportunity to easily and permanently remove it.

      --
      "I've got more toys than Teruhisa Kitahara."
  10. Informed Concent..... by Manip · · Score: 5, Insightful

    A lot of spyware (via the licence agreement) *do inform the user that they are about to be installed. Even those that install themselves via an ActiveX control do so... So this new law will help very little in this war against spyware.

    On that note, look how much good the anti-virus laws have done in cutting them down (nothing). We need to find technical solutions to technical problems, not social solutions to technical problems.

    1. Re:Informed Concent..... by luvirini · · Score: 2, Interesting
      Informed consent means a lot in some countries.

      Like if you take a loan, the bank actually has to go through with you every paragraph.. maybe they mean the same thing?

    2. Re:Informed Concent..... by Hockney+Twang · · Score: 3, Insightful

      I don't see it as an overtly technical issue. There is a technical solution to most spyware, don't install it. Of course there are some really sneaky bastards, and you can use anti-spyware progs for them. These are solutions that exist in the technical realm.

      The problem really arises from users who are unaware of how to make proper use of their computers, or who are unaware that by purchasing the products that popup on their screen, they're making the problem worse. This requires social remedy. We need to promote education about how to avoid spyware, then it will become less useful to marketers, and eventually decrease to a mostly harmless level.

      However, the idea that we could litigate spyware out of existence is ridiculous. Laws in this vein are ultimately unenforcable in the real world.

    3. Re:Informed Concent..... by Anonymous Coward · · Score: 0

      Amen. Well said. Unfortunately an awful lot of people think legislation is the answer to everything.

    4. Re:Informed Concent..... by Spudley · · Score: 1

      Hehe. I'd like to see that happen with click-thru licenses. :-D

      --
      (Spudley Strikes Again!)
    5. Re:Informed Concent..... by Greg@UF · · Score: 3, Insightful

      Most non-geeks will install just about anything with the hope that some program they're trying to install will work ok. It's hardly informed consent.

      On the other hand, I'm just as bad. When, for example, Debian's Apt tells me to install package "Email" I also need to install library "meaningless letters" and package "obscure joke reference" and 20 other weird libraries, I don't go look up every one of those, and their dependencies. Who's got the time for that? Even if you do, half the time the package description makes no sense to me.

      --
      -- You can't give it, you can't even buy it, and you just don't get it!
    6. Re:Informed Concent..... by Geoffreyerffoeg · · Score: 1

      Isn't lack of "informed consent" the rule that makes statutory rape a crime?

      So will we now ban under-18s from installing any software under a "statutory spyware" law?

    7. Re:Informed Concent..... by Ponzicar · · Score: 3, Insightful

      The amount of deception and misinformation in those license agreements is astounding. Some of them have 54 screens of legalese in a tiny box. Others bring up the activeX install box saying "hit yes to install critical media player 9 update". Others are on sites for children, who are too young to legally enter a contract: http://www.benedelman.org/spyware/installations/ez one-claria/details.html#1c Quite frankly, if someone were making contracts like these for real life goods and services, lawyers would be brought in in nanoseconds. Plus there's the fact that quite a lot of them *don't* ask for consent, and install via one of the many IE exploits.

    8. Re:Informed Concent..... by Vitus+Wagner · · Score: 1

      It is fine. Next time we should make a law which makes user responcible for all spam from his hijacked machine. This would motivite user to learn and think about what he is going to confirm in this dialog box.

      What IT industry need is the end of principle "NO WARRANTY".

    9. Re:Informed Concent..... by ArsenneLupin · · Score: 1
      So will we now ban under-18s from installing any software under a "statutory spyware" law?

      Ha! And if the spyware author himself is only 19 years old, it would be ok again, because of the small age difference.

  11. The old bullet versus armour story by Anonymous Coward · · Score: 5, Insightful

    Although I applaude the efforts of the ozzie goverment, I can't help but wonder how many hours it will take a lawyer to find the first loophole. Thus placing the advantage back in the malware authors hands.

    1. Re:The old bullet versus armour story by Obiwan+Kenobi · · Score: 1

      Yeah because, really, I'd rather just lie down and take it like we do now.

    2. Re:The old bullet versus armour story by Anonymous Coward · · Score: 0

      Ozzie Osbourne has a country?

    3. Re:The old bullet versus armour story by collinl · · Score: 1

      What about cetain forms of remote support, IT admins who install software on behalf of users ( both company IT staff, and 'friends who help out' etc) and Windows auto-update et al?
      Do I have to get the user to read and approve each EULA before I install?

  12. Bundling spyware with other applications? by Mr+Smidge · · Score: 4, Interesting

    Some free applications include spyware in their main installs, to provide ad revenue or whatever.

    Kazaa used to be one of those, is that right?

    Can this make any impact on those programs who refuse to install unless you also allow numerous pieces of malware to go with it?

  13. Arn't most spammers in the usa? by Anonymous Coward · · Score: 0

    lets see them extradite all the spammers to Australia

    1. Re:Arn't most spammers in the usa? by Elvis77 · · Score: 1

      Excellent, after 200 years we'll be a penal colony once again...

      --

      The man in black fled across the desert, and the gunslinger followed (SK)
  14. Should be a bounty system by CrazyJim1 · · Score: 4, Interesting

    Violator gets $10,000 fine.

    Austrailia govt gets $5,000.

    Bounty Hunter who finds the product gets $5,000.

    All the spyware on the internet would be rooted out in less than a week if Australia could smack down fines to people across the world.

    1. Re:Should be a bounty system by luvirini · · Score: 1

      Fines are not unfortunately enforceable across countries normally.

    2. Re:Should be a bounty system by Anonymous Coward · · Score: 0

      Mod parent up. I won't repeat the comments elsewhere that point out the need for an international body of law, but this is one of those things that that body of law should put in place as soon as it's formed.

    3. Re:Should be a bounty system by the+pickle · · Score: 1

      There's more than a little pun in your choice of words there, but I'm betting you're not Australian and it wasn't intentional. :)

      Let's just say there might be some "rooting" in prison after these guys get sentenced.

      p

  15. Re:So? ...without international agreement? by Hockney+Twang · · Score: 5, Insightful

    I think the idea of a worldwide anti-spyware alliance is more than a little silly. In fact, I shy away from any push for international policy beyond the protection of basic human rights.

    The solution to spyware problems is either technological(although I have no idea how, using an non-Widnows OS isn't really "the answer") or social(teach people how to 1. Avoid spyware and 2. Avoid giving any kind of financial incentive to any company associated with spyware).

  16. Re:So? ...without international agreement? by luvirini · · Score: 3, Informative

    computer criminals have been extradited.. and it is sometimes possible to follow revenue streams and such depending on the exact wording on the bill.

  17. The Australian parliament asks..... by Anonymous Coward · · Score: 5, Funny

    ...that to help them with the task of collecting evidence that you install this helpful program which automatically remembers login IDs/passwords and fills in online forms with just one click.

  18. There is only one solution by Umbral+Blot · · Score: 0, Flamebait

    The death penalty.

    1. Re:There is only one solution by Stonent1 · · Score: 1

      The crying liberals of the world would shoot that one down.

    2. Re:There is only one solution by Anonymous Coward · · Score: 0

      The obvious solution is to first shoot them.

    3. Re:There is only one solution by Anonymous Coward · · Score: 0

      No, No. You mean the long, slow, excruciatingly painful, death penalty.

    4. Re:There is only one solution by ggvaidya · · Score: 1

      There is only one solution (Score:1, Flamebait)

      Yes, either being burnt alive or bear baiting would be fine :). Thank you mods!

    5. Re:There is only one solution by Anonymous Coward · · Score: 0

      Only a crying liberal would deem the death penalty to harsh a punishment for installing malware on someones PC. We should also chop off the hands of those guilty of copyright infringement.

  19. Yee haa! by Anonymous Coward · · Score: 0

    This one will work! That's for sure!

    Thank God FOr Oz!

  20. Sue Microsoft? by ikekrull · · Score: 2, Insightful

    So if you plug an XBox into XBox Live, and it downloads a new version of dashboard without your consent, or even informing you it is doing it, can you get $10,000?

    --
    I gots ta ding a ding dang my dang a long ling long
    1. Re:Sue Microsoft? by Monkeman · · Score: 0

      I'm sure if this was put into law, Microsoft would get your legal consent for everything when you sign up for XBox Live. [Obligatory M$ Joke]

    2. Re:Sue Microsoft? by fuyu-no-neko · · Score: 1

      Depending on the exact wording of the bill, that's similar to what I was thinking.
      I'd be hoping that a bill would be worded in such a way that computer retail must offer to sell a customer a computer without Windows preinstalled if the customer so wishes. After all, that copy of Windows would then have been installed without the customer's informed approval.

      Yep, it's probably just wishful thinking on my part, but I would like to see it made easier to buy computers without being forced to buy Windows, and if the law in question does so by classifying Windows as spyware, then that's just icing on the cake ;o)

      --
      Don't take the above poster too seriously. He doesn't.
    3. Re:Sue Microsoft? by Monkeman · · Score: 1, Interesting

      Well, wait a second. When you buy a computer with Windows on it, you are buying {a computer with Windows on it}, not just {a computer}. And you don't own the computer before you buy it, and Windows has been put on the computer before you buy it, so technically you wouldn't need to give any consent because the computer isn't yours until you buy it. That didn't make any sense.

    4. Re:Sue Microsoft? by FunFactor100 · · Score: 1

      Where do you live that you can't buy a computer without windows? I think with the exception of my first PC, a 386, all of my computers have come without any OS...and I have had at least 20 or so over the past 15 years.

    5. Re:Sue Microsoft? by fuyu-no-neko · · Score: 1

      That's why it would depend a lot on the wording of the new law, and involves a fair bit of wishful thinking ;o)
      Don't worry, you made sense.

      --
      Don't take the above poster too seriously. He doesn't.
    6. Re:Sue Microsoft? by 91degrees · · Score: 2, Interesting

      "Certainly, sir. This computer costs AU$700 with Windows preinstalled. If you would prefer the version without Windos pre-installed, we can sell you that for AU$700."

      It is wishful thinking. Vendors are entitled to choose their own prices and are not obligated to sell components for a reasonable price.

    7. Re:Sue Microsoft? by fuyu-no-neko · · Score: 2, Interesting

      I live in the UK, and whilst it's not impossible to buy a new prebuilt computer without Windows installed, it's pretty much the standard for retailers to offer "a computer with windows preinstalled" rather than just "a computer".

      This is pretty much a moot point for me personally on the desktop front seeing as I build all my computer's from components, but on the laptop front there's only been a couple of places I've found where I can buy laptops without Windows preinstalled, and they have been web-based retailers only with a pretty limited selection.
      Pretty much everywhere I've found with a halfway decent selection of laptops uses the principle of "You will buy Windows, and we won't give you a copy of the Windows CD, and you'll damn well like it! Oh, and if we find out that you've put an alternative OS on your laptop, the warrenty is void even if the problem is that we've supplied you with shoddy hardware rather than the software causing a problem."

      How I wish building your own laptop was as easy as building your own desktop...

      --
      Don't take the above poster too seriously. He doesn't.
    8. Re:Sue Microsoft? by say · · Score: 3, Informative

      A _slight_ difference between someone being fined $10k and you being paid $10k. OTOH, if you live in Australia, the money goes to the State - and you are the State! So, you do get the money.

      --
      Roses are #FF0000, violets are #0000FF, all my base are belong to you
    9. Re:Sue Microsoft? by BrokenHalo · · Score: 1
      OTOH, if you live in Australia, the money goes to the State - and you are the State! So, you do get the money.

      Err, if you can believe that, then I guess you don't live in Australia. Our illustrious leaders do not even blush when large swags of government (i.e. taxpayers') money end up in the coffers of private companies, in most cases with little or no net return to the Australian people.

    10. Re:Sue Microsoft? by Anonymous Coward · · Score: 0

      This came up the other day. Sony want to reflash PSPs to remove the "security hole" that allows you to run homebrew software.

      So if you bought a PSP to run homebrew software, they've disabled it.

      They need your permission to do this, and if they don't ask, $10,000 seems fair enough.

  21. Wrong Focus? by Adrian+Lopez · · Score: 2, Insightful

    If the summary is correct then it seems to me the law is focusing on the wrong problem. The problem with spyware is not so much the installing of software without permission, but rather with the sending of information without user intervention or at his implied permission according to the software's clear intended function.

    --
    "In prison you just have to shut your eyes and take it. Here you have to shut your eyes and give it."
    1. Re:Wrong Focus? by thebigmacd · · Score: 2, Informative

      I disagree. The biggest problem with spyware is how it trashes people's machines. Whether a program sends "personal" (debatable whether the data is usually personalized) information over the Net beyond its stated intention is secondary to a machine that has been rendered unuseable.

      Users only care about what they experience, and that happens to be computers that don't function. I don't spend hours slaving away trying to prevent personal information from being sent over the Net, I spend hours slaving away to rid friends' computers of "spyware" viruses that conveniently install themselves and break the operating system.

    2. Re:Wrong Focus? by Adrian+Lopez · · Score: 1

      I've had to remove spyware programs myself and I agree they can cause lots of damage to the system, but such damage is motivated by the desire to hide the software's existence, and the desire to hide the software stems from the fact that it's meant to collect and ultimately transfer information without the user's permission.

      Software is often bundled with other software and the user won't know this unless he opts for a "custom" install. This shouldn't be illegal unless it causes damage to the user such as intentionally messing up your system (like viruses and trojans, already illegal) or hijacking system files to do things it shouldn't be doing (like collect information from your system).

      --
      "In prison you just have to shut your eyes and take it. Here you have to shut your eyes and give it."
    3. Re:Wrong Focus? by randmairs · · Score: 1

      The author sig'ed: "If you hear a person say it's illegal to yell "fire" in a crowded theater, douse him in gasoline and light a match."

      And let's hope he gives you a big long hug!!!

  22. I see by Anonymous Coward · · Score: 0

    Because that worked so well with pornography, yes?

  23. Correction by Adrian+Lopez · · Score: 1

    I should have clicked on the preview button. Here's another attempt...

    If the summary is correct then it seems to me the law is focusing on the wrong problem. The problem with spyware is not so much the installing of software without permission, but the sending of information without user intervention or at least his implied permission according to the software's intended purpose.

    --
    "In prison you just have to shut your eyes and take it. Here you have to shut your eyes and give it."
  24. Internet Credit Report by adamdewolf · · Score: 5, Interesting

    Fines, BAH.
    An blacklist of people that develop or use mal/spyware. Something that ISP's can check before they give internet access or hosting services.

    I can hear it now, "Oh sir. I'm sorry, but you have a high Internet abuse score. We are unable to aprove your e-mail account at this time."

    --
    Ignorance is amusing, stupidity is annoying.
    1. Re:Internet Credit Report by Draknor · · Score: 1

      You mean like the TSA "terrorist watch list" for airlines?

      <sarcasm>Oh yeah, that's *real* effective - I feel much safer flying now!</sarcasm>

      Repeat after Ben: "They who would give up an essential liberty for temporary security, deserve neither liberty or security". And, I would add, will get neither liberty nor security.

    2. Re:Internet Credit Report by bairy · · Score: 1
      An interesting idea but it wouldn't work, people on the internet can be anyone they want to be. To truly make sure would take a massive database of something unique about them

      + there will always, always be one hosting company that would pop up and charge over the odds to these bastards so they can get online.

      --


      Get paid to search..It's geniune and
  25. ISP Blacklisting by AtomicSnarl · · Score: 2, Insightful

    Having the law on the books is one thing, applying it is another. Allowing that SpamHaus Ltd is convicted (in abstentia or other), and is outside the nation (that pesky extradition thing), one possible next step would be a national (international?) blacklist of SpamHaus's ISP. If local ISPs continue to allow access to SpamHaus, the law would then treat the next case as treating the Local ISP of aiding and abetting SpamHaus.

    Yes, this would be shooting the messenger, but it would also put the screws to the ISP serving SpamHaus as other ISPs cut them off on a national level. The Common Carrier status of ISPs may not provide full protection when they've been told about known criminal acts using their service. This could be an end run to force ISPs to keep their house clean (enforcing all those user agreements) or be isolated. And if the ISP host nation doesn't care about SpamHaus operating there, then it could find itself in the dark as a consequence.

    Yes, the Great Firewall of China is a good example of bad intent, but the theme is appropriate to fight back at spammers on their own ground. The application of an anti-spam/spyware law has to apply pressure on the source, either from inside (with national support), or from the outside (isolation due to host nation indifference).

    --
    Pacifist paratroopers yell, "Ghandi!" when they jump.
  26. Re:So? ...without international agreement? by fm6 · · Score: 3, Insightful

    If writing spyware is illegal in the country you live in, then it doesn't matter where your victims live. Prosecutors just have to show that your software is designed to invade people's computers.

  27. Re:So? ...without international agreement? by Nasarius · · Score: 1
    The solution to spyware problems is either technological(although I have no idea how, using an non-Widnows OS isn't really "the answer") or social(teach people how to 1. Avoid spyware and 2. Avoid giving any kind of financial incentive to any company associated with spyware).

    I think some kind of system, like a "web of trust", would be useful in distinguishing between good and bad software. You could use a hash of the installer EXE or source tarball as a unique identifier for each piece of software.

    Any serious flaws to this idea, besides the fact that it requires widespread adoption before it's really useful?

    --
    LOAD "SIG",8,1
  28. Re:So? ...without international agreement? by rco3 · · Score: 2, Insightful

    using an non-Widnows OS isn't really "the answer"

    Why not? It's worked perfectly for me for years.

    --

    Ce n'est pas un vrai mouvement de robot!
  29. Funny? by Anonymous Coward · · Score: 4, Insightful

    Not all spyware is installed directly by the users, but I've seen it happen in many cases, and sometimes even PAY for it (eAnthology stuff and the like).

    I've seen people who had a completely crashed PC every week, were told that spyware (lots of-) was the cause, were explained everything, but didn't mind if their daughter was going to reinstall spyware-infested kazaa on it again, and kept using IE anyways.

    A lot of people don't care, and some even pay for the previlege of having more spyware on their PCs. Users ARE idiots! It's insightful - not funny!

  30. Re:So? ...without international agreement? by AlephNot · · Score: 1

    "Any serious flaws to this idea, besides the fact that it requires widespread adoption before it's really useful?"

    P2P apps require "widespread adoption" before becoming useful, so I'm inclined to think that it's at least *theoretically* possible to overcome the initial barriers. I'm also inclined to think that spyware hatred is enough of a force to do it. :-)

    --
    "Feel a glory in so rolling / on the human heart a stone" --E. A. Poe, "The Bells"
  31. Don't like Spyware? Don't choose it by xiando · · Score: 5, Interesting

    At the end of the day we all know that local laws like this have no effect in a global place unless every country connected to the Internet agrees on such laws. Spyware software is a matter of education and choice. The best way to fight it is to educate people on software and the importance of knowing how it works so consumers can make choices based upon facts and information. Some operating systems allow spyware to be installed, others do not. People need to learn that they can choose operating systems that do not allow Spyware. And they also need to learn how to avoid the pitfalls in the operating systems that allow spyware to be installed easily by clicking on the wrong advertisement banner in the wrong browser if the wrong configuration is in use. Knowledge = power....

    1. Re:Don't like Spyware? Don't choose it by ZorbaTHut · · Score: 1

      . . . platforms that do not allow spyware? Like, say, a tin can? Or maybe a dead badger. I can't think of any way to install spyware on a dead badger.

      Seriously - the day you know Linux is a major force is the day people start writing spyware for it. Hell, I could write spyware pretty easily - just run at login and pull the URLs out of any Firefox processes I see . . .

      (Note: Firefox is a major force now. You can tell because people are explicitly working around the popup blocking.)

      --
      Breaking Into the Industry - A development log about starting a game studio.
    2. Re:Don't like Spyware? Don't choose it by Anonymous Coward · · Score: 0

      This is yet another example of law makers who do not understand technology and think that passing a law will actually reduce the problem. In the end the law makers look foolish and inept with laws of this kind. Spyware and malware are not the same. As previously pointed out spyware functions by sending information somewhere while malware may or may not. Using an os that enforces user permissions by default may be inconvenient but in addition to security measures such as properly configured firewalls greatly reduce the problem. Unfortunately a certain level of user sophistication is required. Again the primary contributor, although not the perpetrator, is M$. The only real hope is that OSX, BSD and Linux can achieve a sufficient percentage of use that M$ will produce more secure products. And don't even think Treacherous Computing will reduce spyware/malware as long as M$ continues to regard software security with anything more than a "head fake".

  32. Hey! by Anonymous Coward · · Score: 0

    You, just leave porn alone.

    The last thing we need is Yet Another Hypocritical Piece Of Shit(YAHPOS) trying to "stamp out porn".

    1. Re:Hey! by Monkeman · · Score: 0

      But the children! Think about the children!

  33. Informed approval... by Francis85 · · Score: 5, Insightful

    As long as people won't read disclaimers, they'll end up installing lots of spyware "legally". w00t for 250 pages disclaimers!

    1. Re:Informed approval... by Monkeman · · Score: 0

      Disclaimers and such that make any claims to install software other than the software listed at the beginning of the install should be required to have a Find tool, and the names of any extra softwares should be bolded, highlighted and underlined. Or something.

    2. Re:Informed approval... by mysterystevenson · · Score: 1

      Yes, 100%. If fine print or legal jargon, can keep you from realizing what you are agreeing to , then the law is just another game.

      --
      MYSTERY
  34. Private member bill == Joke? by gvc · · Score: 2, Interesting

    In Canada, Private Member Bills are a joke. Is Australia different?

    1. Re:Private member bill == Joke? by SupaZeph · · Score: 3, Informative

      Not really.

      The Democrats are fairly impotent - the chance of any of their collective private members getting up in Au is pretty slim.

    2. Re:Private member bill == Joke? by rainman_bc · · Score: 1

      I don't think a private member bill right now would be a joke; it would all depend where it came from. Everything's up in the air in a Minority govt.

      --
      09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
    3. Re:Private member bill == Joke? by Anonymous Coward · · Score: 0
      it would all depend where it came from.

      Very much so.

      In a short while the government will have unprecedented control of both houses. Which means they can pass what they like. But it's a very slim majority - 1 vote in the senate.

      Right now we are seeing the first rumblings of dissent within the governing Liberal party, which has been run in a rather authoritarian fashion for the past couple of terms. The backbench government senators know they can derail the party program if they like, so the government will likely pander to a few private members bills and such from them. There are some eccentric old fools in there too - Lightfoot and Heferman spring to mind.

  35. Just one more bucket.... by zappepcs · · Score: 1

    trying to keep the tide from the beach.... Every attempt at regulating the Internet or its use will fail. The only successful prosecutions are when it is proven that the user's use of the Internet violated another law that has nothing to do with the Internet. Of course this will fail, they have little if any power to enforce this law, and this is probably something related to other, unrelated, political interests anyway. I wish the world would wake up and start openly and vociferously laughing at public figures that believe they can enact laws to stop people from expressing themselves or trying every means possible to take advantage of other simply by making a law that says its illegal to do so. If there is no teeth in the law, then it is just a waste of taxpayer's money, and the governments time and resources. Geez Beaver, do you really think you're mom will find out? Lunacy, that's what it is. I cannot believe that anyone would think it is possible to regulate the Internet. Some countries may be able to stop access to sites deemed 'not good' but in the end, all they are doing is denying access to information... hmmm lets see, what happened the last time that people thought burning books was a good idea? As for making it illegal, every country (almost) already has laws against fraud and theft, or anything else that spam and spyware can do. Why not just enforce those laws? The reason? I will suggest it is because government find themselves impotent to do anything about something they have no clue how it works, and they want to find a way to garner votes in the next election... so it looks good if they seem to be doing something about the latest Internet threat.... Like has already been said, the real threat to user's information is themselves. Most user's gladly give away their information without a second thought because they trust anyone that has a website, OMG, they have a website on the Internet, they must be legitimate..... There is no law, or even book of laws that will protect a fool or foolish people. A fool and his (or her) personal information, like their money, are soon parted. Lets all just enforce the laws that are already in effect. Spyware, that gives the author or originator information required to steal from a user without their consent is illegal already, it is called theft, scam artistry, and other names. Whether the scam artist used the Internet or e-mail matters not, they are guilty of crimes. These 'new internet laws' are only evidence that our governments are both impotent to do anything and clueless as to how to do so. Its time we all started voting smarter? Hey, no comments on how I voted... my preferences have changed 6 times since 911.

    1. Re:Just one more bucket.... by say · · Score: 1
      Every attempt at regulating the Internet or its use will fail.

      So, I take it you're against this "regulation" imposed by the w3c to enclose paragraphs in <p> tags?

      --
      Roses are #FF0000, violets are #0000FF, all my base are belong to you
    2. Re:Just one more bucket.... by zappepcs · · Score: 1

      ROFLMAO, sorry, I hit submit before preview.... my right hand has a twitch sometimes... LOL

  36. No Spies by paulkoan · · Score: 2, Informative


    Having a decent application firewall is a solid preventative for spyware. Spyware can only be of value if it can report back the data it collects.

    XP has an "incoming" application firewall - it would be of greater value if it had outgoing controls too.

    --
    This signature intentionally left blank
    1. Re:No Spies by suitepotato · · Score: 1

      XP has an "incoming" application firewall - it would be of greater value if it had outgoing controls too

      Outgoing calls home from software are still figured (in some quarters) to be a great tool against piracy. Sooner or later Microsoft would undoubtedly backdoor their outgoing firewall app with a way for their own apps to call home to prove their authenticity and of course with MS security and code stability being what it is, how long till malware writers crack it and use that backdoor to get around it?

      We've already seen viruses that disable well known anti-virus spyware. Any software that the system doesn't peg and the user is stupid or unlucky enough to install thinking it is okay when it isn't will have cart blanche on Windows to fubar any anti-spyware and antivirus apps it finds. When your AV, AS, and firewall software gets trojaned, you're well and truly farked.

      Let's not place any hopes on false solutions from MS until they get it through their heads that user access levels are for nothing as long as most of the system runs essentially as root and code either malicious or buggy can break the security model and convince the rest of the system that it is part of it.

      --
      If my grammar and spelling are off, I am [distracted/tired/careless] (take your pick)
    2. Re:No Spies by argent · · Score: 1

      A firewall can't protect you from actions by programs inside the protection domain of the firewall. A spyware program could communicate with the outside world by techniques as subtle as coding them in the name if HTTP fetch requests, so even if the firewall was a hard proxy and didn't do more than a lookup of the name (say, to see if it's a blocked IP range), it could still call home through the DNS requests the proxy made.

    3. Re:No Spies by paulkoan · · Score: 1


      I don't see a reason for a spyware program to be given permission to do http or any other requests to machines outside of my PC.

      I use a application firewall right now to achieve this. This is why MS Help and Winword and Search and all the other MS phone home applications do not get to access the internet.

      It is the permissioning system that is flawed. Rather than treat all applications executed in user space as having the same rights to folders and network access as the user, each application should have a defined permission set.

      --
      This signature intentionally left blank
    4. Re:No Spies by argent · · Score: 1

      I don't see a reason for a spyware program to be given permission to do http or any other requests to machines outside of my PC.

      That's nice. You can probably do a really good job of keeping well-behaved applications from getting to the Internet that way. You have absolutely no chance of keeping a malicious applicaton in check that way. "Hey, I can't get to the Internet", thinks the application. "Let's see, there's Internet Explorer, it has access to the Internet. I know! I'll install myself as an internet plugin" (pause for special effects as the application hides itself in your web browser) "ah, that's better, now that I'm Internet Explorer, I can do anything again..."

      So long as there's not many people using tight firewalls like this, you'll be OK. Once a lot of people start doing it, though, the spyware authors will notice, and they'll just add tricks like this to their collection. Or they'll turn the firewall off. Or they'll hide themselves in a driver and talk to the real TCP stack beneath the firewall, inside the kernel. Once they're executing on your computer, the only protection is to be a little bit tougher to exploit than average...

      It's like the joke about the two hikers who are attacked by a bear. One of them starts running, while the other yells "you can't outrun a bear!" The first one answers, "I just have to outrun you!"

      As long as you run faster than MOST people, you're OK. But to solve the spyware problem, so that people won't even TRY to get into your computer whether they can actually do any spying or not, you have to arrange things so that MOST people are running faster than MOST people.

      "And this is, of course, impossible"

      The goal, then, isn't "keep it from phoning home". It's "keep it out of the computer in the first place". Luckily, that's an easier problem... IF you're prepared to forgo the pleasure of installing every random game or applet you run across on FilePile...

    5. Re:No Spies by paulkoan · · Score: 1


      Yes, the primary goal would be to keep spyware out in the first place, but if it were contained to the point it was useless, then it wouldn't happen in the first instance.

      So layered protection is required as usual. An application firewall, anti-virus, anti-spyware.

      Of course you are right, you end up with an arms escalation.

      Please everyone ignore my recommendation for using a application firewall.

      --
      This signature intentionally left blank
  37. Autoupdates? by ZeroExistenZ · · Score: 1

    I can see it now..

    "Microsoft has been charged for uninformed installation of software by numerous individuals in Australia."
    "I saw this icon in my taskbar, but didn't know what it was, before I could take a decent look at it this was gone! I called my more technical savvy friend in fear for a virus, so he explained me it was Microsoft installing software onto my computer." a victim said. Microsoft claimed it to be a "feature" and declined any further comment.

    --
    I think we can keep recursing like this until someone returns 1
    1. Re:Autoupdates? by cwensley · · Score: 1

      I don't think there would be a problem with that, as I believe Windows asks the user to turn on auto-update first, which you have the option not to.

  38. Hmm by TheShadowzero · · Score: 1

    I think Australia has a good idea, but this may never work as if you look at the amount of viruses out there (they are illegal as well) and the amount of damage caused, just making something illegal does not cause it to stop, just slow down. Crime and organized crime have very high rates, even though they are illegal.

    --
    If history repeats itself, why can't we study the future?
    1. Re:Hmm by nighthawk127127 · · Score: 1

      Also, the creation of new rules is an action practically begging new exploits. People will find new ways to circumvent the law, rendering old processes obsolete.

      --
      10100111001
    2. Re:Hmm by TheShadowzero · · Score: 1

      Also, true, as more and more intelligent and malevolent lawyers and loopholes are "discovered".

      --
      If history repeats itself, why can't we study the future?
    3. Re:Hmm by Anonymous Coward · · Score: 0

      Laws against stealing or murder never stopped shoplifting, car theft, or murder but they are still useful. As of right now it is perfectly legal in the US for a buisness to set up a website that uses browser exploits to install spyware unless $5,000 in damages can be proven. Just like with other laws, you can bet it would reduce the worst of what goes on considerably. Just think of how many murders there would be if killing someone whenever you want was perfectly legal.

    4. Re:Hmm by TheShadowzero · · Score: 0

      Don't know why you were AC on that, that was a perfectly good post. I agree 100%. At least we have laws in this society.

      --
      If history repeats itself, why can't we study the future?
  39. Re:So? ...without international agreement? by xQx · · Score: 2, Informative

    "Do you really think there will be extradition for installing Spyware?"

    IIRC Australia has extradited an Australian citizin from a large warez group to the US for copyright after relasing Windows 95 or something.

  40. Re:So? ...without international agreement? by the+pickle · · Score: 1, Insightful

    using an non-Widnows OS isn't really "the answer"

    Sure it is.

    The problem lies in convincing the People Who Decide(tm) that there are real alternatives.

    p

  41. In related news... by Jozer99 · · Score: 1

    In related news, the crime rate in Australia went up 23,453,464,356% today...

    1. Re:In related news... by TheShadowzero · · Score: 1

      I'm guessing your implying the fact that when something is deemed "wrong" or becomes illegal, more people (especially teens) want to do it? This has a bit of truth to it. Generally "rebels without causes" do things just because they are wrong. I'm sure there would be peope that would learn how to infect computers with malware just because it's now illegal.

      --
      If history repeats itself, why can't we study the future?
    2. Re:In related news... by Anonymous Coward · · Score: 0

      I know it seems like there are a lot more of us around at times but there are only around 20 million aussies. http://www.abs.gov.au/ausstats/abs@.nsf/94713ad445 ff1425ca25682000192af2/1647509ef7e25faaca2568a9001 54b63?OpenDocument This bill is introduced by one of the minor parties and the current conservative party in power will soon have a majority in both upper and lower houses. Who knows what will happen then. .... Resistence is futile

    3. Re:In related news... by StratoChief66 · · Score: 1

      In response to this recent spike in crime, the Australian authorities have doubled the size of their spyware taskforce to four detectives, sports at eleven.

      --
      Frylock: "We should have cloned twenties, Jackson wouldn't have given a fuck."
  42. bloatware by POds · · Score: 1

    I'm one of those people who must find the right way to do everything and do it in a clean, efficient way. This bill seems like added bulk to me. I'm certain there must be another way around these problems, rather then just rehacking legislation.

    With all the new bills and laws being added, does this have some effect on the effectiveness of the justice system? It seems governments these days are in competition with Microsoft to see how many patches/hacks they can add to an already bloated system.

    --


    Giving IE users a taste of their own medicine since 2005 - http://pods.-is-a-geek.net/
  43. Re:So? ...without international agreement? by Farmer+Tim · · Score: 5, Insightful

    "...(teach people how to 1. Avoid spyware and 2. Avoid giving any kind of financial incentive to any company associated with spyware)"

    That's on the list, right after we teach people the following:

    1) MS Word is a word processor, not an operating system;
    2) Nobody in Nigeria really wants to give them $millions;
    3) Their bank hasn't really lost their details, and they don't need to go to a website to re-enter them;
    4) Passwords shouldn't be something as blindingly obvious as the name of their cat/favourite band/significant other; ...and so on. A strategy that involves educating everyone is doomed because not everyone is willing to be educated (sad but true).

    --
    Blank until /. makes another boneheaded UI decision.
  44. Re:So? ...without international agreement? by Farmer+Tim · · Score: 2, Interesting

    "Do you really think there will be extradition for installing Spyware?"

    If the number if installations pushes the fines into the multi-million dollar range, then quite probably.

    --
    Blank until /. makes another boneheaded UI decision.
  45. Two words: user error by suitepotato · · Score: 1
    This one phrase undercuts the entirety of this law and everyone who does support of whatever kind down to cleaning the porn spyware off of their siblings' computers knew it the instance they read it.

    Politically, Australia is pretty left of center compared to the American middle of the road. I note that a similarly aligned Clinton administration put the DMCA into place. I'm not sure whether I want to be buggered subversively by the left or openly in my face by the right, but either way we seem to be losing with government around the world where digital anything is concerned. They:

    • ...don't get the ephemeral nature of ideas and information and we're not asking for Ghost in the Shell navel contemplating here either...
    • ...still go for the quick fanfare with no substance non-solutions despite being proven wrong every single time...
    • ...claim to be working on behalf of "the people" (who to judge by the legislation are some nefarious group as sinister as the Tri Lateral Commision but certainly not "we the people") and yet everything they do is slanted towards the interests of the few or the one and never the many...


    I expect that we'll take a reaming here in the US from the present administration, albeit an open one, and then the next admin will likely be Dems and they'll glad-hand us to the face while shafting us from behind with DMCA2 ("it's fun to circumvent the D-M-C-A... it's fun to fight against D-M-C-A-A...") or something like that. AVP has new meaning, All Versus Politicians, but the tagline hasn't, Whoever Wins, We Lose.
    --
    If my grammar and spelling are off, I am [distracted/tired/careless] (take your pick)
    1. Re:Two words: user error by drsmithy · · Score: 1
      Politically, Australia is pretty left of center compared to the American middle of the road.

      I think you'll find Australia is pretty much "middle of the road" compared to America's "well and truly right wing".

      I note that a similarly aligned Clinton administration put the DMCA into place.

      It's worth noting that in Australia the Clinton administration would probably have been considered right wing. The "similarly aligned" - as you put it - Liberal Party currently holding power in Australia is considered about as far *right wing* as mainstream politics here gets.

    2. Re:Two words: user error by child_of_mercy · · Score: 1

      And our "Right Wing" Liberal party supports abortion, opposes the death penalty, and are real nuts for gun control.

      But the times they are a changing, cultural conservatism is on the march and the churches are filling up fast.

      --
      'There is a Light that never goes out.'
  46. Re:So? ...without international agreement? by Draknor · · Score: 5, Insightful

    Spyware, like viruses, are not solved by simply moving to a different platform. Once enough people migrate then malware writers will start to include that platform.

    Will other platforms have a better security model then Windows? Sure.

    Will other platforms still have security vulnerabilities? Yes.

    Will malware writers do everything they can think of to get a user to install their software (so-called "social engineering")? You bet.

    The user is the weak link in the chain, and I think user education is the only real way to solve that problem in the long run. IE/ActiveX have really brought the problem to the public consciousness and made it easier for malware to get installed & propagate much faster than ever before. But fixing Windows (or moving away from it) won't eliminate malware.

  47. So what? by cuteseal · · Score: 1

    They also said that it's illegal for people to distribute copyrighted music, and it's still being done...

  48. Re:So? ...without international agreement? by Big+Mark · · Score: 1

    According to your sig, that's all that's worked in that time.

  49. We have a saying for that here in Aus... by SupaZeph · · Score: 1

    well a few actually...

    this will do as much good as pissing on a bushfire, it's as useful as tits on a bull, and as useless as a one-armed shearer... etc.

  50. Democrats? by Anonymous Coward · · Score: 0

    Uh oh!

  51. Re:So? ...without international agreement? by rco3 · · Score: 1

    According to your sig, that's all that's worked in that time.

    Yes, thank you. In fact, my wife is due to deliver our daughter in August. Yes, the child is mine. Yes, I'm sure. Thanks, though.

    --

    Ce n'est pas un vrai mouvement de robot!
  52. Underestimating the power of annoyance by Anonymous Coward · · Score: 0

    Your underestimating the power of the annoyance spyware as on anyone eand evryone who use computers.

    This would be a case where everyone from everywhere would be on board an on agreement ...

  53. Realistic? by t_allardyce · · Score: 2, Insightful

    Governments should be careful to make laws that can be enforced, otherwise the law looses respect, it becomes a joke.

    --
    This comment does not represent the views or opinions of the user.
    1. Re:Realistic? by Kadmos · · Score: 1

      "Government... becomes a joke."

      Objection! It's been a joke since 1901.

  54. Re:So? ...without international agreement? by Anne+Thwacks · · Score: 5, Interesting
    Worded correctly, it could work.

    For example, if , under the proposed law,, action can be taken against the (American owned) banks which process the money for all spamware sales, then it would stop.

    If the Australian government says to American Express: "If, after being informed that one of your clients is using your service to process payments for items promoted by spyware, you continue to make payments to that client, then the Austrailian branch of your company will be fined $10,ooo for each transaction" it would stop.

    If the American government threatened to withdraw banking licences from banks that provided services to those who use spyware/spam to promote their goods and services, there would be no spam. They could do this using existing anti-corruption/money laundering legislation. But they don't.

    Unfortunately, the US government has sold its soul to the devil.

    --
    Sent from my ASR33 using ASCII
  55. I do not agree by Lord+Apathy · · Score: 1

    I do not approve this bill so I cannot allow it to pass. There are no provisions for ass beating with a cain pole in here. So until I see these changes I cannot approve it.

    --

    Supporting World Peace Through Nuclear Pacification

  56. Finally? by ta+bu+shi+da+yu · · Score: 1

    We've had spam legislation longer than the United States has, and our legislation covers all Australians. The U.S. cannot say as much.

    --
    XML is like violence. If it doesn't solve the problem, use more.
    1. Re:Finally? by Anonymous Coward · · Score: 0

      They can't say much, but they tend to.

    2. Re:Finally? by Anonymous Coward · · Score: 0

      spam legislation does not cover all australians, the legislation has a loophole which allows chairties and (yes get this) political parties to spam without any legal repercussion.

  57. "Australia Says No To Spyware" by DrScotsman · · Score: 0

    You mean some countries say yes to spyware?

    1. Re:"Australia Says No To Spyware" by Anonymous Coward · · Score: 0

      No, by "Australia says no to spyware", the poster did NOT mean "some countries say yes to spyware".

      It is basically impossible to explain it further, you just have to have some vague grasp of English to be able to understand it. Please go away until you do.

    2. Re:"Australia Says No To Spyware" by Anonymous Coward · · Score: 0

      uh... your attempt to be funny failed. Most countries say nothing about spyware. och aye!

  58. Re:So? ...without international agreement? by Anonymous Coward · · Score: 3, Informative

    Ummm... you're right. But you're not reading between the lines.

    The main "purpose" of these laws in Australia is to allow the executive arm of government to make treaties with other countries to deal with these problems.

    In Australia, the government cannot domestically ratify a treaty unless
    1. it passes a law through Parliament (which is uncertain because Bills can be rejected); or
    2. the executive makes regulations to give effect to the treaty (which is immediate)

    SO...
    IF
    there was no Spam Act 2003 or no Spyware Bill
    THEN
    Australia could not easily ratify international agreements

    Furthermore, a lot of Asian countries copy Australian law. Therefore, it provides an example for them and they usually do the same.

  59. so in effect by nounderscores · · Score: 1

    You're saying "Bounty Hunters? We don't need that scum."

  60. Missing the point.. by StikyPad · · Score: 1

    The point of laws like this, and others (viruses, spam, etc) isn't to solve the problems legally. Obviously nobody except perhaps the very naive expects stealing to stop just because there are laws against thievery. Rather they provide some means of justice (or retribution, or whatever you want to call it) when people are caught. Will some people be deterred? Maybe. But I don't think anyone breaks the law expecting to get caught.

  61. in soviet russia by Anonymous Coward · · Score: 0

    the spyware installs YOU!

  62. Re:So? ...without international agreement? by BrokenHalo · · Score: 1
    Well said. But successive Australian governments seem determined to turn the country into a nanny state, in a misguided attempt to protect people from their own stupidity.

    That said, however, it could be argued that someone who knowingly commits an intrusion or act of vandalism against an individual's property (which is what spyware essentially does) should be subject to legal redress. The fact that Australia is just one country among many, and the fact that statistically the majority of these exploits seem to originate in the US makes no difference. There is no real reason why similar laws should not be applied under other jurisdictions.

  63. PRIVATE MEMBER'S BILL by child_of_mercy · · Score: 5, Informative

    OK, I relaise that very few people understand Australian Parliamentary procedure (including whoever posted this)

    This is a Private Senator's Bill which means it is going no-where in our system.

    Even more irrelevant is it's introduction by the Australian Democrats, a fringe party in the process of disapearing completely.

    (proving that having progressive ideas about computers is no guarantor of electoral success)

    Very, very rarely a Government will look at a Private Bill, say "hey that's a good idea" and then re-introduce it as a Government Bill (yes, about three years ago a PMB was passed into law but it was notable for being an exception).

    That's the day for headline stories on Slashdot.

    Even if the proposals in the Bill are workable (enough spyware is made by companies operating in Australia to have some enforceable merit) the Bill itself is not likely to become Law.

    --
    'There is a Light that never goes out.'
  64. I don't get this line of reasoning by Sycraft-fu · · Score: 2, Insightful

    Why so many people here seem to think that if you can't find a perfect, 100%, uncircumventable solution, well just thorw it all out and pretend like there's not a problem.

    Most things in life don't have nice, neat little solutions that are all encompasing. Generally there are flaws, espically when you deal with laws which are a field of human interactions.

    That does not, however mean you should just throw in the towel and let asshole run rampant. While a law like this won't stop spyware cold it can and will make an impact, if properly written. I mean if they made it illegal to make spyware that sneaks in without asking to install, and spyware that will not uninstall and/or reinstalls itself, I'd call that progress. Those are teh ones I ahve a real problem with.

    Rather than taking a defeatist attitude about problems like spam and spyware, we should be looking for solutions. Even if the solution isn't a perfect one, it's better than no solution. The real way we'll cut back on this stuff isn't with a magic bullet peice of technology or legslation, it'll be through a combination of laws, technological improvements, and user education. IT won't solve the problem, but it can help a whole lot.

  65. Re:So? ...without international agreement? by mike518 · · Score: 1

    umm yes i do think this *could* make a difference. remember the N.C. spammer who was charged with breaking the virginia anti-spam law-- and convicted.

    most spam and spyware originates from the USA right now -- so yes, i dont see why the USA would not send those guilty of breaking a spyware law in Austrailia to Austrailia, what with extradition treaties. I mean who would defend them, everyone hates spyware -- no one will try to keep them from being convicted i assure you.

    Also you have to assume english spyware is more commonly created in English speaking countries, like Austrailia the USA etc -- so this law can make a difference, assuming they put the funds needed to actually track spyware makers down. The virginia spam law's only problem was that they only went after big fish due to resource limitations.

    --
    Mike
    I heart the RIAA & MPAA, im sure its mutual...
  66. Re:So? ...without international agreement? by conchobar0928 · · Score: 4, Interesting

    In addition to not using obvious passwords, there is a rampant problem on the side of websites: requiring the user to choose a question and answer in case of a lost password. Stuff like, "What city were you born in?" Such a question may foil a criminal on the other side of the world from his victim, but if a criminal is targeting locals, perhaps even acquaintances, friends, and family, then it's trivial. Personally, I just respond to the questions with a random string of characters that only leet hackers could guess.

  67. Re:So? ...without international agreement? by MyLongNickName · · Score: 1

    Congratulations!

    --
    See my journal for slashdot ID's by year. Mine created in 2005. http://slashdot.org/journal/289875/slashdot-ids-by-year
  68. Nothing can be prevented, even murder by anti-NAT · · Score: 4, Informative

    People seem to assume that laws should only be enacted if they can "perfectly" prevent what is made illegal. People then seem to say a law that doesn't perfectly prevent the act that is made illegal is a waste of time.

    Laws don't work that way.

    Prevention of "illegal acts" is actually an intended side effect of the law. Murder, for example, is commonly prevented because of the consequences of the laws against murder, not purely because of the existance of the law itself. The significant punishment for murder hopefully makes people think twice about committing it. Of course, people sometimes still commit murder, irrespective of the law against it. Murder could be declared illegal, with no punishment attached. Law abiding people should therefore not commit it, however the significant punishment attached is what gives the law it's "teeth".

    Laws primary goal is to create a significant level of discouragment to commit the illegal act. In most cases, that discouragement then has a resultant effect of preventing most cases occuring. Laws are actually a form of behaviour control.

    Laws such as this one are an attempt to make spyware authors think twice about creating it. It certainly won't perfectly eliminate it. However, if there is a significant reduction in spyware, then the law can be considered to be effective.

    --
    The Internet's nature is peer to peer - 20050301_cs_profs.pdf
    1. Re:Nothing can be prevented, even murder by LiquidCoooled · · Score: 1

      When do we hear about chewbacca?

      --
      liqbase :: faster than paper
  69. eh... by Robocoastie · · Score: 1

    doomed to fail because all they have to do is either a)in the case of active-x ones - claim that use of their web site constitutes consent to install and/or b)bury it in tiny print of EULA legalize that few if any read anyway.

    It does however, show government finally listening to the people as I've said for some time that if we did the same thing to them we'd be branded a hacker, fined or imprisoned but they do it to us everyday (or try).

  70. No, legislation does help by MikShapi · · Score: 3, Insightful

    It puts yet another country off-limits for ad-scum, not only to operate from, but even to live there while operating an ad company in zimbabwe.

    It's not a silver bullet and shouldn't be treated as such. It won't make adware vanish. But if more and more counties say "NOT ON OUR SOIL" to this (and same goes for anything from child porn, to snuff films, to terrorist camps), it make it harder for said scum to operate (especially when they live in those counties and are subject to being sued). Consider this - some of the people who live in those countries, do this and do not look to relocating will look away from such practice (same as they do from, say, theft), thus such legislation *will* decrease the scale of the problem.

    They're correct by looking at it as any other form of crime, assuming that completely killing it is not within our means, but instead looking at mitigating it through legislation.

    --
    -
  71. Re:So? ...without international agreement? by Farmer+Tim · · Score: 2, Interesting

    Personally, I regard protecting individuals from unfair/unethical/violent treatment being one of the principal roles of government, which is why I support some laws that have been decried in the past as being a push to a "nanny state" (like occupational health and safety, minimum wage requirements, or reduced speed limits in school zones). Mostly its a matter of perspective, I find; but I'm hard pressed to think of a piece of legislation passed in the last ten years that fits the bill apart from the internet porn ban (a spectacularly successful law, just ask Abbey Winters...). Some might cite the more stringent gun laws, but since lethal shootings have gone down since the law was passed it could be argued that it had the desired (or at least the stated) effect.

    I'm in favour of this law, like any law that prohibits destructive antisocial behaviour. By itself I don't think it will make a scrap of difference, since (almost?) no spyware originates in .au, but if it can be used to show best practice and inspire similar legislation in other countries then it will do some good. And like any law, this won't stop someone determined to behave in an antisocial manner, but it will stop the 99% of people who only behave antisocially because its convenient. Not perfect (what is?), but definitely an improvement.

    --
    Blank until /. makes another boneheaded UI decision.
  72. Re:The Australian parliament asks..... use that by Anonymous Coward · · Score: 0
  73. Numbers in the Senate? by Malfourmed · · Score: 1

    Quite aside from the virtues or flaws of the bill itself how much support for it is there in the Australian parliament?

    IIRC the Australian Democrats have only a handful of senators in the upper house and zero or one MP in the lower house so unless I'm misunderstanding how Australian bills become law they'll need substantial support from the mainstream parties to get this through.

  74. Re:So? ...without international agreement? by Anonymous Coward · · Score: 1, Insightful

    Unfortunately, the US government has sold its soul to the devil.

    That's interesting, because the Australian government has sold its soul to the US.

  75. this bill is going nowhere - mod parent up by indaba · · Score: 1
    The parent's comments are spot on.

    Without the sponsoship of a major party, this bill will go exactly nowhere.

  76. Re:So? ...without international agreement? by An+Ominous+Cow+Aired · · Score: 1
    Like hell that would work.

    It would fix the spam problem MAYBE, but it would also cause many problems.

    I doubt the US has exclusive license to corrupt government officials. All it takes is for some Aussie gov't official to claim he doesn't like person/company/product XYZ. He tells AmEx to cut them off, or else.

    Either they comply and harm some (probably innocent) person, or they ignore the law, get it repealed, whatever.

    And that's not even considering the fact that most any malware-producer is going to claim that they are innocent (framed!), or that their product does ABC which makes it legal.

    HOW do you tell a truly innocent person from someone producing malware???

    This won't work! THINK! Please!!!

    --

    Become A Real Millionaire, in 10 seconds, on your computer! (rf=really fast) Read manual, YMMV.
    rm -rf *
  77. strengthens current laws by pbjones · · Score: 1

    IIRC Oz has laws that prevent people for changing data on your PC without concent, like changing the default homepage on your browser, this moves to stop non-intrusive virii, which is really what spyware is. It is a start and better than nothing, now if they could stop spam from Goverment bodies and political orgs!!

    --
    There was an unknown error in the submission.
  78. Re:So? ...without international agreement? by truthe · · Score: 1

    doesn't a lame duck refer to a president or other elected official who sits in office after losing re-election, but still has power to do what he wants between the election and the end of his term?

  79. This is the Democrats people by miskate · · Score: 2, Informative

    Australia is not America - the Democrats are a minor party and fading fast, and all members of both houses of parliament are required to vote on party lines. They don't get a choice. In other words this Bill is probably going nowhere. The Democrats may continue to hold onto the title of "most important minor party" but they're rapidly losing even that honour to the Greens. Introducing bills like this is political posturing pure and simple - they're rarely taken up and can sit in the lists for years. The minor parties and independants, particularly the Dems, were once important as the two major parties rarely had a simple senate majority - the minors could use their votes as bargaining chips to get their own agendas some real attention. That's no longer an option - Little Johnny will have his senate majority from July 1 and can do whatever the hell he wants. Now would be a good time to move to New Zealand. That doesn't mean the Democrats, Greens and sundry others don't still have an important role to play in the senate. It just means that they're losing whatever power they once had.

    1. Re:This is the Democrats people by child_of_mercy · · Score: 1

      "all members of both houses of parliament are required to vote on party lines."

      Actually only ALP members are "required"

      But to face this monolithic block the rest of the Parliament has over the years calcified into a monolithic block of its own.

      Very few Lower House members have the personal following to risk losing their official pre-selection.

      In the upper house it's even worse where the parties can assign the flow of preferences within each state.

      So you're right in practice but the theory is a little different.

      --
      'There is a Light that never goes out.'
  80. Re:So? ...without international agreement? by Elvis77 · · Score: 1

    Hope it gets in but unfortunately there are only seven out of 76 Australian senators that are Democrats (and from the 1st of July 2005 they lose three of them). They have no members in the lower house and are a minor party unlike their US namesakes - flamebait???

    They'll love slashdot, this is probably the most attention that they've had for a while.

    --

    The man in black fled across the desert, and the gunslinger followed (SK)
  81. Re:So? ...without international agreement? by Foolhardy · · Score: 2, Funny
    1) MS Word is a word processor, not an operating system;
    Yeah, everyone knows that Emacs is the only proper word processing operating system.
  82. Re:So? ...without international agreement? by child_of_mercy · · Score: 1

    Well you'd want that kind of punishment to be reserved for sentencing, after the due process of a trial and a finding beyond reasonable doubt.

    --
    'There is a Light that never goes out.'
  83. Re:So? ...without international agreement? by child_of_mercy · · Score: 2, Interesting

    Foreign Affairs explain Treaty-Making here.

    Basically the Government can sign any treaty they like, but to have any effect in Australia it has to legislate those effects. (I think you might have been implying that)

    Regulation (subordinate legislation) is useless because:

    a) it can only be made under an existing Act giving power to a Minister to make Regulations in that matter

    b) it can be disallowed in the Senate within 14 sitting days of the making of the Regulation

    Basically if it's controversial then it's easier to legislate than it is to regulate.

    --
    'There is a Light that never goes out.'
  84. License classifications might do the job better by nomentanus · · Score: 1

    How about a few classifications for software licenses, determined by law, and the requirement that each license identify where it fits in that scheme of things right up front. The highest classifications would specify no spyware (and admit penalties for violation). Then I could tell at a glance what I was agreeing to, on all sorts of fronts, including privacy.

    Sort of the equivalent of film classification, or games classification. Licenses are now simply too long to read as a practical matter. Classification would largely solve that and is a proven solution.

  85. Political grandstanding by Captain+Sensible · · Score: 1

    This bill is not a serious piece of legislation. Its just a chance for a minority party to grab some media attention.

    Don't be misled by their name. The Democrats are a minority party. No seats in the House, and only three senators. There is not a snowball's chance in hell that this bill will pass; it may not even be read.

    The Democrats are esentially an opportunistic party. If the Liberal/National coalition is in power (as is the case now) then they are centre-left. If the Labor Party is in power, they are centre-right. They never achieved more than 10% of the vote and get much less than that these days.

    1. Re:Political grandstanding by Anonymous Coward · · Score: 0

      You've got that back to front:

      The Liberal (big l) party is Centre-Right.
      The Labor party is Centre-left.
      Just so people don't get confused :)

  86. aussie is unfortunate by timmarhy · · Score: 1

    in that our current government thinks they can solve technical issue using legislation. these spyware people are criminals, they dont' CARE about the law

    --
    If you mod me down, I will become more powerful than you can imagine....
  87. Did you actually read it? by Anonymous Coward · · Score: 0

    "The Australian Democrats today called for software companies to face $10,000 fines for spreading malicious computer programs known as spyware."

    I think that last line is written wrong. It has nothing to do with the USER being fined. They are goona charge the companies that secretly insert stuff into software.

    If the company doesn't have a national presence then of course they can't sue them, but if they have offices in Australia they can. What's the problem with that?

  88. I agree, but disagree... by Khyber · · Score: 1

    I can agree that installing spyware without someone's consent onto their computer is wrong, especially when that spyware, which I can bet those companies never internally tested to make sure nothing else that was harmful (like Dyfuca/related crap) would end up on the computer in the same fashion due to their own software.

    On the other hand, I can still see and understand the need for advertisement.

    Yet I still do not see how companies (like AOL, which installs crap that I don't need like the viewpoint media player, etc) can get away with forcing software onto your computer without your permission, especially when the software you're downloading is FREE TO ACCESS/DOWNLOAD/INSTALL. What I think should be done is that for every piece of unwanted software that gets installed on your computer, without your permission (like bargain buddy, 180 solutions, etc.,) you should have the legal right to charge this company for the usage of your hard drive space, system resources, etc, and have the legal right to sue them for damages that their spyware/adware/malware/etc., causes due to the companies not checking the reliability of their partner's sites/software. Say.. fifty dollars for every kilobyte of space you consume, and for evry copy that is found of said software on your computer, another 500 bucks for trying to violate the privacy and security of your computer.

    On a side note, anti-spyware companies that fail to recognize these threats should also be able to be held accountable, on an individual case-by-case basis, to pay reparations/punitive damages done to the computer in question, whether by performance degradation, or even (in some rare cases) the loss of connectivity due to you removing that software (I've had this happen twice using Lavasoft's Ad-Aware SE which requires a full format and re-install of an OS.

    Just my thoughts, it'd make companies more liable across the world in any international court if something like this were to take effect. This would make them more responsible for their unwanted advertising, and would make them liable for ANY problems it causes due to negligence.

    --
    Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
  89. Did you read it? by Anonymous Coward · · Score: 1, Insightful

    They aren't talking about users but companies. They can't extradite a company and extradition is for criminal offenses. This is not the same as breaking copy right law. It is a civil offense.

  90. The Australian government look stupid AGAIN! by AbRASiON · · Score: 1

    Hey maybe they should introduce a system where anyone who is "naughty" or "bad" get's a fine too! -instantly!

    Honestly this country has the most ass-backwards politicians, they have _NO_ idea how the hell a computer or the internet works!

    Argh.

  91. MOD PARENT UP! MOD PARENT UP! by Anonymous Coward · · Score: 0

    MOD UP. MOD UP! funny as

  92. Re:So? ...without international agreement? by Anne+Thwacks · · Score: 1
    I agree that thre are corrupt government officials everywhere. I never asserted otherwise.

    However, I maintain my assertion that the US government is one of very few that believe that the rights of corporations who make huge campaign corporations LEGITIMATELY exceed the rights of voters.

    How is taking action against large corporations who conspire to commit fraud and deception, or profit from fraud and deception, going to affect the innocent?

    My proposal is toseverely punish BANKS for their involvement in illegal activity. There is no way that the BANKS are (a) innocent or (b) citizens.

    I concede that you might not agree with my view that most of the major BANKS (everywhere) are unpardonable scum, and involved in conspiracy to defraud, but I can only assume that is due to lack of experience in dealing with banks.

    There is NO POSSIBLE DOUBT that all the money recieved for sales of pruducts promoted by spam/spyware go through american owned banks If you doubt me, just try to find any other way to get payment and then market fake "vihagra". It can't be done!

    --
    Sent from my ASR33 using ASCII
  93. Isnt' Kazaa an Australian company? by Ricardo · · Score: 1

    I don't know if you have ever seen a machine which has had Kazaa installed on it, but it is renedered almost unusable by the spyware/sellware/notusefultoolbarware etc etc etc.

    Surely Kazaa is responsible somehow being at the end of the chain. The friend whose PC I just spent cleaning up had no idea what all the programs were, or how they got there, and certainly had no idea they were hiding in the boot (car analogy not partition) when he installed Kazaa.

    I like Kazaa only because the RIAA hate them.
    Apart from that, I would love to see them tarred and feathered for all that garbage software.

    --
    Move along... there is no sig here.
  94. Re:So? ...without international agreement? by Anonymous Coward · · Score: 0

    you live in C1ca60, also? nice

  95. Pretty legislation solves everything. by davidperry · · Score: 1

    Would this be the same parliament that passed anti-spam legislation? And yet, behold, SPAM!

  96. some it "specialists" don't take it seriously by smittyman · · Score: 1

    I have noticed that even IT personel can be unbelievably naive, at least that is what I have noticed. Opening very obvious Email harvesting games etc. Also "internet is not a dangerous place, you are over reacting". Now I may be a little paranoid sometimes (I am not alone in my head you know ;-) But to say such a thing as IT-er is plain stupid.

    So when it comes donw to the facts, only the IT-ers considered as Nerds seem to worry about things like spyware, email harvesting etc. Has anybody noticed it too??

    --
    Message from god, Please logoff, rebooting the Universe
  97. Re:So? ...without international agreement? by Anonymous Coward · · Score: 0

    It doesn't matter.

    This is the right law to have. We all need this law. Someone has to pass it first amidst cries of "it won't work until we reach critical mass".

  98. Re:So? ...without international agreement? by BlueUnderwear · · Score: 1
    They could do this using existing anti-corruption/money laundering legislation.

    As far as money-laundering is concerned: For a very long time, most anti-money laundering laws worldwide were worded in such a way that they only applied to hiding the origin of money coming from drug-related crimes. "Laundering" money coming from other crimes, such as extortion, theft, fraud,... was not considered to fall under these laws! The reason for this was that most of these laws were enacted in the framework of the US "war against drugs".

    It's only rather recently that European anti-money laundering laws have been expanded to apply to the proceeds of all crimes. However, AFAIK the US aml laws still only apply to drug money...

    --
    Say no to software patents.
  99. Re:So? ...without international agreement? by Fred_A · · Score: 1
    1) MS Word is a word processor, not an operating system;


    Of course, after all, if they wanted a real operating system they'd run Emacs :)
    --

    May contain traces of nut.
    Made from the freshest electrons.
  100. Re:So? ...without international agreement? by Anonymous Coward · · Score: 0
    Passwords shouldn't be something as blindingly obvious as the name of their cat/favourite band/significant other; ...and so on.
    ...I should be so fortunate. Our company has Officer level employees whose password is "cat" (or some assinine variation of that) because of the number of times they've locked themselves out when we let them make it anything else.

    And, of course, these are also the people who are most curious about pop-up ads.

    Famous last words: "I just clicked on one..."
  101. Re:So? ...without international agreement? by Anonymous Coward · · Score: 0

    This is only a private members bill it is going nowhere it was introduced by a minority party it wont ever be passed as law, once again journalistic sensationalism at its best.

  102. It only limits activity to 'pro's by jtpalinmajere · · Score: 1

    Average Joe Schmoe who wants to make a quick buck by helping out with some advert company and decides to go the spamalot route. He gets fined $10,000 for the software he installs to make it easier to do thus... but only makes $1000 for all his trouble over the next 3 months.

    The 'pro' who makes well above the initial cost of $10,000 really won't be affected by it... that $10,000 only constitutes a baseline starting cost of doing business... kinda like getting a license for spamming. It then becomes a win-win situation... the big-time spammers now get to work as usual and the government gets a small boost in revenue.

    ... Now if the language stated something to the effect of "the creators are liable to pay a $10,000 fine for every machine infected", that just might halt operations... assuming they get caught... and they're doing it in the country.

    The question I have is that IF this was the case, and creators were liable, how would this affect Open Source software... particularly licensing models. Most licenses essentially say "Be nice, and give credit where its due." What happens when spam companies take open source software as a platform... make minor modifications to serve their spamming activities... would the original creators be liable in part? They would technically be co-creators of X company's spam software... albeit unintentionally.

  103. AU TO US's spyware laws by Anonymous Coward · · Score: 0

    "You call that a law mate? THIS IS A LAW!"

  104. MS? by AnotherBlackHat · · Score: 1
    ... illegal for anyone to install a program without informed approval and attract a fine of $10,000.'


    Would that make it illegal to pre-install Microsoft Windows?

  105. Re:So? ...without international agreement? by rco3 · · Score: 1

    Thanks!

    I'm really excited. Not looking forward to getting rid of my car, but you gotta do what you gotta do.

    --

    Ce n'est pas un vrai mouvement de robot!