Maker of Web Monitoring Software Can Be Sued (cio.com)
Reader Presto Vivace shares a CIO report: The maker of so-called spyware program WebWatcher can be sued for violating state and federal wiretap laws, a U.S. appeals court has ruled, in a case that may have broader implications for online monitoring software and software as a service. The U.S. Court of Appeals for the Sixth Circuit rejected WebWatcher vendor Awareness Technologies' motion to dismiss a lawsuit against the company. The appeals court overturned a lower court ruling granting the motion to dismiss. The appeals court, in a 2-1 decision rejected Awareness' claims that WebWatcher does not intercept communications in real time, in violation of the U.S. wiretap act, but instead allows users to review targets' communications. While plaintiff Javier Luis' lawsuit doesn't address real-time interception of communications, his allegations "give rise to a reasonable inference" of that happening, Judge Ronald Lee Gilman wrote. Awareness pitches WebWatcher as monitoring software for parents and employers. "All WebWatcher products install easily in 5 minutes or less, are undetectable (thus tamper proof) and all recorded data is sent to a secure web-based account which allows you to monitor kids and employees at your convenience from any computer," the company says.
Realize what this is, and what it isn't. It's not setting aside a jury verdict. The lower court through the case out entirely because, as the lower court interpreted the laws, there was no reasonable case to be made that the actions of WebWatcher could be shown to violate the specifics of wiretapping law.
The appeals court ruled that the lower court interpreted the statue too narrowly, and there was at least a dispute over whether WebWatcher's activity could be held to violate certain portions of the statute.
That is NOT THE SAME as the appeals court ruling that WebWatcher DOES violate the wiretapping statue, or that they won't prevail eventually on their interpretation of the statute. It means that it's not a sufficient slam dunk that we can dispense with a trial.
Read the case: Suspicious person installs software (yeah, we all know if you suspect it's probably true but we are taught to live and love).
Catches husband meeting up with some other woman.
Expected marital troubles ensue.
Angry guy gets mad and files a suit against people because they got caught.
Now, take all that and replace it with a man catching his cheating wife. I wrote it in the opposite gender because some people are simply idiots and this makes it harder for them to be idiots.
Harm was not caused by the company, but harm was caused to the company. I'm fine with the company being sued but a counter for damages due to both litigation and libel are well within reason.
Time to wear the big boy pants and be responsible for your actions. Welcome to equality!
-The wise argue that there are few absolutes, the fool argues that there are no probabilities.
I would submit that Packet Capture is either Wiretapping and Wireshark (and other tools, like proxies, firewalls etc etc) are all in violation, or they are not, which would excuse this particular example. It would be a simple case.
In this case, I would suggest that the ONLY reason they are being sued isn't because of what it does(Technically), but because "Spying" (histrionics)
Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
It makes a difference whether:
1. You're running Wireshark on your own network to capture traffic sent to or by you (not wiretapping)
2. Your service provider or employer is running Wireshark on its network (for network management purposes, not wiretapping)
3. You're running Wireshark on someone else's network (um, yes, wiretapping)
4. You're running Wireshark on your own network to capture traffic sent to someone else, like your non-consenting spouse (guess what, it's wiretapping!)
18 USC 2511. Read it. Then read the definitions in 18 USC 2510. Or find a lawyer to explain all this to you.
It's not an either or situation. Also, proxies, firewalls, etc. are simply are not interesting -- you've agreed to those in your terms of service, your decision to work for an employer and use their communications resources, etc, and they're using in the ordinary course of providing service, and they don't "acquire" content for the operator (ordinarily)..
On the other hand, your spouse probably hasn't contractually submitted to your dreams of communications totalitarianism where you log and review everything they do, so yes, the same tool can be in violation or not.