Slashdot Mirror


FTC Threatens Spyware Distributors With Prison

Federal regulator Mark Pryor, in a Senate Commerce Committee hearing, has stated that spyware distributors should face harsher penalties than fees. His solution: imprisonment. "Federal Trade Commissioner William Kovacic said most wrongdoers in the spyware arena 'can only be described as vicious organized criminals. Many of most serious wrongdoers we observed in this area, I believe, are only going to be deterred if their freedom is withdrawn,' so it's important for the FTC to collaborate on its cases with criminal law enforcement authorities, Kovacic said."

36 of 126 comments (clear)

  1. Windows?? by Mukunda_NZ · · Score: 3, Insightful

    So what about the developers that put spyware in Windows XP and I'm assuming Vista also contains spyware. Will they go to prison? Will Microsoft be forced to strip the spyware out of it's operating system?

    --
    Free software, free thought, free society.
    1. Re:Windows?? by timmarhy · · Score: 2, Interesting

      i'm certainly no fan of windows or MS, but MS products are one of the few things you can count on not containing spyware as such. yes they do have activation, no it doesn't spy on your personal information.

      --
      If you mod me down, I will become more powerful than you can imagine....
    2. Re:Windows?? by cpaglee · · Score: 3, Insightful

      Therein lies the rub. Should the husband / boyfriend who spies on his partner be faced with jail time? What if they are using his computer? Or should the developer who designs the keystroke logger go to jail? But do we trust the government to define precisely what is Spyware? I have a utility on my computer that remembers old clipboard entries. Is that Spyware? What about 'History' in your browser? What about a cookie that tracks what web site you visit before and after you visit their website? Will legislation mean the end to all Affiliate Programs like Utah's legislation outlawing keyword advertising? It sounds like a pretty slippery slope and personally I'd prefer if the government focussed on other things like balancing the budget.

    3. Re:Windows?? by Walt+Dismal · · Score: 4, Funny

      Send them to something far, far worse than a Turkish prison. Chain them in the RIAA lobby with no pants, clutching a pirated CD of Bing Crosby singing Christmas carols.

    4. Re:Windows?? by Mukunda_NZ · · Score: 2, Informative

      Well actually when you update Windows, an encrypted list of all installed software is sent to Microsoft, at least with XP, and I'm sure Vista would do they same. I believe also, though I'm not sure, that Windows Media Player reports on you too.

      --
      Free software, free thought, free society.
    5. Re:Windows?? by mwvdlee · · Score: 5, Funny

      Why the pirated CD?
      Since when does the RIAA need evidence to screw people?

      --
      Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
    6. Re:Windows?? by Nightspirit · · Score: 2, Informative

      I don't have the link on hand, but a quick google should find it. I believe the info sent to MS is an xml with actually very little information.

    7. Re:Windows?? by walt-sjc · · Score: 2, Informative

      Oh it's pretty clear. The partner / boyfriend should be faced with jail time if it is not his computer. If it is, then it's not so clear. If the keystroke logger (A) is installed automatically with no warning or the installer's knowledge as part of another application (B), then the publisher of B should be liable. If the BF/partner installs the logger with full knowledge of what it does, then the onus falls on the BF. Cookies are not applications and wouldn't fall under the category of "program" or "application."

    8. Re:Windows?? by Rob+the+Bold · · Score: 4, Funny

      Why the pirated CD?

      Since when does the RIAA need evidence to screw people?

      Ya, but you gotta admit that Bing Crosby gives it a romantic touch. What a voice . . .

      --
      I am not a crackpot.
  2. no congical visits here... by timmarhy · · Score: 3, Funny

    "kick someones ass on the first day and you'll be ok"

    --
    If you mod me down, I will become more powerful than you can imagine....
  3. Interesting challenge. by Zadaz · · Score: 3, Insightful

    So how do you throw a corporation in prison again?

    1. Re:Interesting challenge. by karmatic · · Score: 2, Insightful

      Since a corporation is (in fact) merely a collection of people, with a little legal trimming.

      Remove the trimming, and put the people in jail.

    2. Re:Interesting challenge. by asninn · · Score: 4, Interesting

      Easy: throw the CEO in prison, or the board of directors, or other folks in upper management who're responsible for the crimes the company committed.

      FWIW, this seems like a good idea, too. I'm not a fan of prison terms in general, but I also think that they're quite good at deterring white-collar crime (fraud etc., as opposed to blue-collar crime where you actually have to get your hands dirty - armed robbery, battery, and so on). The problem with penalty fees is that they're paid by the company, not the individuals who're actually responsible - so even if worst comes to worst and if the company will go bankrupt, they'll just go and start another one.

      It's like punishing mafia hitmen but letting the actual dons go free - they'll just hire new hitmen and continue like before. But as soon as the directors of a spyware company are *personally* threatened with punishment for their deeds (and let's face it, it *is* upper management that is responsible for these things: the company does not have a life of its own that goes beyond the people working in/for it, and doesn't just decide to commit crimes on its own), most likely will stop and comply with the letter of the law, at least.

      --
      butter the donkey
    3. Re:Interesting challenge. by Profane+MuthaFucka · · Score: 2, Insightful

      Part of the benefit of being a corporation is that the actual people inside are shielded somewhat from the actions of the corporation. The corporation is its own person sometimes. A few things will actually land executives in jail or cause them personal penalties. For example, OFAC violations can cost the CEO some millions of dollars personally. But mainly it's the corporation that is in trouble and not necessarily the execs.

      I think a lot of people forget this fact when they think that corporations deserve to get even more tax and regulatory breaks. The deal has already been made where some rights were traded for other rights, and the cost of that is government charter and regulation. If you want a different deal, then keep your company private. Nobody's forcing anybody to capitalize themselves in the public markets.

      The penalty for corporations, which is not used much, is the death penalty. Revoke their charter for violating the law. We might make business more efficient by enforcing the existing laws. Just one fortune 500 company with a revoked charter might work wonders for fighting corruption.

      --
      Fascism trolls keeping me up every night. When I starts a preachin', he HITS ME WITH HIS REICH!
  4. I like this guy by Talgrath · · Score: 3, Insightful

    All I can say is that it is about damn time. I worked for a summer as a tech support agent and spyware caused us more headaches than anything else; and it results in stress, time lost and possibly even monetary loss for individuals with infected computers. The fact that spyware and malware writers can usually avoid punishment (particularly considering that many spyware and malware applications are used to steal people's identities) is simply ridiculous. Good on the senator, and I hope that spyware and malware writers get what is coming to them.

  5. Making the punishment fit the crime by chebucto · · Score: 5, Interesting

    This is a really good idea. Spyware makers are the worst in terms of computer crime.

    I remember, not too long ago, when pricks around the world wrote dialers for people with dial-up connections. Dialers, once installed, would route someone's call to their ISP through some insanely far-away place (usually pimples in the pacific) with insanely high long-distance costs. The people who wrote the software would then split the profits made from the long-distance call with the corrupt operator of the far-away places' phone company. The effect was to leave people out-of-pocket by a huge amount (hundreds or thousands of dollars). If the target got the long-distance charge removed by the local phone company, the local phone company would have to eat the charges.

    The point of the above is to underline the character of crimes committed: it's pure theft. Modern spyware either seals people's browsing habits or personal information, so it's a little less direct, but it's still a theft.

    I think spyware writers are more foul than virus writers: while virus writers do what they do for the technical thrill and bother a lot of people in the process, spyware writers do it just to get money.

    Their motives are base, their methods are underhanded, and they should go to jail.

    --
    The English word fart is one of the oldest words in the English vocabulary.
    1. Re:Making the punishment fit the crime by daterabytez · · Score: 5, Informative

      I think spyware writers are more foul than virus writers: while virus writers do what they do for the technical thrill and bother a lot of people in the process, spyware writers do it just to get money.
      Actually, there was a time when this was probably true, but no longer. A great many viruses and exploits today, well over half, are purely for financial gains. The recent ANI exploit is just one example.

      -Carl
  6. What! by dragonquest · · Score: 5, Insightful

    So right, I hate spyware, adware, and the likes. But sending people to jail may be a little on the heavy side. Reason being, who'll decide quantitatively about the severity of the malicious code? And will there be a difference of punishment between individuals and corporations who make spyware? If a corp makes it, they'll be dragged to court resulting in a lengthy legal battle ultimately only resulting in financial loss of the corp, not necessarily prison. There cannot be a very fair system of deciding this since its a very grey area with no clear black and white lines. What some people think of as invasion of privacy could be regarded as a useful convenience by another. The best protection you could have is your common sense.

    --
    "Never try to tell everything you know. It may take too short a time."
  7. Re:Ubuntu has spyware in it.. by J0nne · · Score: 5, Informative

    How is that spyware? It sends anonymous statistics on what packages you have installed throught apt, and you have to choose to enable it.

    It does exactly what it claims it does, and you really have to go out of your way to enable it (add/remove software>preferences>statistics>enable popularity contest )

    Right under the checkbox there's a clear explanation of what it does:

    To improve the user experience of Ubuntu please take part in the popularity contest. If you do so the list of installes software and how often it was used will be collected and sent anonymously to the uubuntu project on a weekly basis.
     
    The results are used to improve support for popular applications in the search results

    Compare that to Windows update, which 'inspects your system' every time you update, and you have no way to know what exactly it's inspecting, and what it's sending back to MS.

    You're probably trolling, and I'm probably wasting my time, but someone modded you up, so I guess at least one person believed you.

  8. Re:Ubuntu has spyware in it.. by asninn · · Score: 2, Informative

    That doesn't make it spyware. I assume most distros (desktop-oriented ones, anyway) also install things like Firefox by default, which - suprise! - sends information on my system to websites when I visit them. But that doesn't make Firefox spyware, simply because it only does so when I tell it to; the situation would be quite different, however, if it did so on its own in the background.

    Without knowing anything about popcon really, I think it's safe to say that as long as it has to be EXPLICITELY enabled and/or started by the user, it's not spyware.

    --
    butter the donkey
  9. Re:Ubuntu has spyware in it.. by eMbry00s · · Score: 2, Informative

    Does it do things without the users consent? If it doesn't (and it obviously doesn't since it is disabled) then it is not spyware. The Last.fm music tracking is similar to spyware in function, but users install it willingly and it is therefore not spyware.

  10. Mod parent up .. this isn't a troll! by jkrise · · Score: 3, Insightful

    By definition, spyware is one that sends 'personally identifiable information' to a target server without the user's explicit consent. It is reliably established that Windows Genuine Advantage and so-called Critical Updates from Microsoft can be classified thus...

    Also data from 'crashed programs' etc.

    So why is the parent modded troll?

    --
    If you keep throwing chairs, one day you'll break windows....
    1. Re:Mod parent up .. this isn't a troll! by gsslay · · Score: 5, Insightful
      By definition, a troll is a post that is principally designed to provoke argument without any real concern for the topic of the discussion.



      The article is clearly about people who write and distribute malicious programs for the criminal purpose of stealing information, and thereafter actual property and/or money. We can all complain about some aspects of Microsoft's software (yes, really), but its 'spying' is nothing like the same. Legislation may yet change their behaviour here, but suggesting they are in danger of prison is hyperbole.



      So introducing the subject is going to divert discussion off-topic, and either just another attempt at starting a fan-boy argument, or yet another boring round of Microsoft bashing.

    2. Re:Mod parent up .. this isn't a troll! by fishdan · · Score: 2, Insightful

      Au contraire mon frere. Microsoft is on example of a company who LEGITIMATELY and ILLEGITIMATELY collects information. The nature of privacy is that you are in control of who knows what about you -- and even if you're doing "illegal" things, you should be free from "unreasonable searches."

      Now, even though Microsoft is not taking your information for malicious purposes (I'll concede that), they are violating your privacy by accumulating data on you. The question is, should what they do be considered illegal. Currently it is not. I believe the OP's point was that what MSFT is doing IS currently legal, but if you put a law on the book stating "Software which transmit information off of your computer without the operators knowledge will be illegal" you are getting onto a very slippery slope. Where will AJAX come into this? What about advertising cookies? What about that damn doubleclick gif? The latter 2 are spyware in my book, because they enable people to spy on me. If there were a law on the book against spyware, it would have to be incredibly well crafted to not make most of todays web advertisers liable.

      The point of course is, that just because someone mentions MSFT, doesn't mean that the OP is not on topic. Very Theoish of you to suggest otherwise. =)

      --
      Nothing great was ever achieved without enthusiasm
  11. Has to be said by Guppy06 · · Score: 5, Insightful

    /cough Sony /cough

  12. Re:Ubuntu has spyware in it.. by jrockway · · Score: 4, Funny

    By your logic, you are spyware. Since you know about popularity-contest, you obviously use Debian or Ubuntu. IMFORMATION LEAK! YOU ARE SPYING ON YOURSELF.

    Wait. Does that argument make me sound like a complete and utter idiot? Now you know how you sound.

    --
    My other car is first.
  13. Re:Threathen? by aadvancedGIR · · Score: 2, Insightful

    Because, contrary to normal citizens, corporations still have rights.

  14. It's a good idea, but... by Lunarsight · · Score: 2, Interesting

    .. in order for this to work, they need a clear, concise definition of what Spyware is. As somebody else already said, it gets kind of murky when they have end user agreements which trick the user into agreeing to accept the spyware as a stipulation for using the program. Realistically, 3/4 of people don't sit there and read all the fine print in the end user agreement. If I wanted to legally get spyware onto somebody's computer, all I would have to do is make the end user agreement longer than a War and Peace novel, and then put the 'spyware clause' somewhere in the middle. One final note: I don't agree with the prison time part - this seems too kind to me. Why can't we bring back cruel and unusual punishments? If you were to threaten to flog the people responsible for spyware, that would be an even bigger deterrent.

  15. Mark Pryor is a Senator . . . by Dausha · · Score: 3, Informative

    We need better fact checking here. Mark Pryor is the junior senator from Arkansas. The FTC official is William Kovacic.

    --
    What those who want activist courts fear is rule by the people.
  16. Re:Threathen? by Rocketship+Underpant · · Score: 3, Insightful

    "Why only threathen?"

    Because this is Slashdot, where lately no one bothers paying attention to the article, or even the blurb (which is incorrect as usual anyway), and just tries to get their opinion in as quickly as possible for moderation.

    This William Kovacic dude is a bureaucrat for the FTC. He has no authority whatsoever to make laws or throw people in jail. All he can do is threaten, much like the drunk guy on the corner (except that he's more likely to get a Congressman to listen).

    --
    He who lights his taper at mine, receives light without darkening me.
  17. Re:Ubuntu has spyware in it.. by WrongSizeGlass · · Score: 3, Informative

    it does absolutely nothing unless you turn it on. If I had a nickel for every time I've used that line on a date I'd be a happy man ;-)


    warning: The above content tests positive for sarcasm and/or is a failed attempt at humor and should be taken with a pound of salt.
  18. It'll never fly by DynaSoar · · Score: 3, Insightful

    My Dell computer calls home regularly. I didn't ask for this and I don't want it. Until my warranty expired I didn't dare remove it.

    I have to keep a copy of IE available because Firefox chokes on the tracking cookies MSNBC shoves at me. And still Zonealarm reports spyware being blocked from time to time.

    With this level of white collar participation, business will tell its entertainment branch, government, that this is all perfectly legal. The FTC people are great, and more power to them, but nobody is going to go to jail over it.

    On the other hand, I get spyware blocking reports from Zonealarm when I use a couple of well known bittorrent sites. Now THEY should be afraid. They don't own any congresscritters.

    --
    "I may be synthetic, but I'm not stupid." -- Bishop 341-B
  19. Re:Interesting challenge.Not for Direct Revenue by Anonymous Coward · · Score: 2, Informative

    It will be a long time before it comes to that. The FTC can't even assess a decent fine for clear violations of existing spyware laws. Think about it, these guys got off with a measly $1.5m fine total after pocketing $6m to $10m for each of the four partners (see Ben Edelman's site for the details). They're laughing all the way to the bank. So forget about the risks of prison. Quite the contrary, start a spyware company and rake in millions.

  20. Re:Good, spyware sucks. by computational+super · · Score: 3, Funny
    Any company can pull money out of their ass to pay a fine, but prison?

    Oh, there's some pulling out involved... although as I understand it, you don't have to actually be an active participant.

    --
    Proud neuron in the Slashdot hivemind since 2002.
  21. Put the CEO In Prison by sconeu · · Score: 2, Insightful

    And let's start with Howard Stringer as a thank-you for the Sony Rootkit.

    --
    General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
  22. Fees, Fines, Foes, Fun by HTH+NE1 · · Score: 2, Insightful

    Federal regulator Mark Pryor, in a Senate Commerce Committee hearing, has stated that spyware distributors should face harsher penalties than fees.
    Spyware has regulatory fees? Well there's your problem right there! Fees condone; fines penalize.
    --
    Oh, say does that Star-Spangled Banner entwine / The myrtle of Venus with Bacchus's vine?