Slashdot Mirror
Sears Installs Spyware
Gandalf_the_Beardy writes in with news that's been around a while but is getting more attention lately. Last month Benjamin Googins, a security researcher at CA, determined that Sears Holding Corp. installed ComScore spyware without adequate disclosure. Sears said, yes we tell people about tracking their browsing. On Jan. 1 spyware researcher Ben Edelman weighed in, noting that Sears' notice occurs on page 10 of a 54-page privacy statement, and twits Sears because its installation identifies the software as "VoiceFive" and later claims it's coming from a company called "TMRG, Inc." even though a packet sniffer confirms the software belongs to ComScore, adding "These confusing name-changes fit the trend among spyware vendors."
My dad worked for Sears as an appliance repair tech for 25+ years. The stories he's told me about their tracking their employees, their customer "service" practices, sales approaches, etc... is just plain wrong. He was constantly intimidated by "the boss" to perform better or he would be fired (even though he was the top performing tech in the area). It was nothing but stress for him and I wish he had never worked for them.
Now he works for a small appliance/TV repair shop, and he absolutely loves it. Just another reason to flip the bird to big corporations - they don't care about people, they care about money. The spyware installation on their own customers' computer systems is just one small example.
It is pitch black. You are likely to be eaten by a grue.
StopBadware should hear about this. It's exactly the sort of thing that gets a company a big red X on the StopBadware site. Plus some really bad publicity.
StopBadware is sponsored by Harvard Law School, Oxford University, and Consumers' Union. There's heavy legal firepower available if needed.
If you're buying screwdrivers and wrenches and pliers anywhere else, then you're going to the wrong place. You can take a 25 year-old pair of (Craftsman) pliers back to Sears and go "I broke it" and they'll give you a new one.
No folly is more costly than the folly of intolerant idealism. - Winston Churchill
My guess is that morality never crossed their mind. The thinking probably went something like this:
Spyware company: "We'll pay you $5 per machine to install this software on all the computers you sell."
Sears exec: "Oh, like AOL or Symantec do. Are you legit? Is this legal?"
Spyware company: "Yep look we're a big company, and you just need to disclose its presence somewhere in your EULA. Here's some example text to include."
Sears exec: "Done deal."
IDK about identity theft, but you should read the comment that "heather" left on the CA blog about "managemyhome.com," another Sears web site. Apparently all you need is a name, address, and phone number and you can log on as that person and view purchase history from Sears for, what I would surmise, is the big ticket items like refrigideezers and washers.
Now that's almost criminal.
Mit der Dummheit kämpfen Götter selbst vergebens.
That's actually not universally true. I've sat in a lot of meetings with very senior, very well paid people (and their associated lawyers) and have heard them literally say "we wouldn't be breaking the law, but it wouldn't look good in the press". Many companies value their image and reputation extremely highly and doing something which leads to the company being embarassed, even if it's 100% legal, would be a firing offence.
---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"
And now with this story, maybe it's time to stop even trying. (I had a minor loyalty to Kmart because I'm originally from their part of the country; and to Sears because the Craftsman guarantee policy is good.)
"with their freedom lost all virtue lose" - Milton