Discussion Locked

Will the FTC's spyware study create new problems?

0 helpful
20 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Is spyware a major concern for your organization? How do you detect and remove spyware? Do you think the FTC's investigation will help improve the issue? Do you agree with Jonathan Yarden that it will also create new problems? Share your comments about dealing with spyware in your organization, as discussed in the March 22 Internet Security Focus e-newsletter.

If you haven't subscribed to our free Internet Security Focus e-newsletter, sign up today!
http://nl.com.com/acct_mgmt.jsp?brand=techrepublic

20 replies

by jimaaa6

With 50,000 servers destroyed on Saturday and millions of PCs infected by Phatbot, it's time for action. Spammers, virus writers and spyware authors are terrorists and should be treated as such by law enforcement.

by ahc7

Yes, Spyware is a very major concern. Should governemtn regulate the internet?, no. What best is for the commerence? Not the FTC, but pressure from the industry to prohibit spyware before the government is forced to take action. Maybe the Antivirus developers and scan for spyware as a part of an install? Lots of possibilities, let's explore as many feasable solutions before we make a quick knee-jerk reaction.

by jyotko

SPyware is a problem on the internet but I fear that the government's solutions may be worse than the problem in the first place. Additionally a large portion of these programs orginate outside the US where the FTC has no regulating authority. What is needed is tighter security practiced at the corporate and personal level. Many IT departments and indicviduals do not update security patches as they come out. Many home users are unaware that spyware is running on their computers or installed with many of these so called "free" internet features like desktop weather, news and file sharing software. People need to maintain vigilance or it won't be long before there will be a new "fee" imposed on our internet service to provide for "increased" security from the government.

by bewolf5

Before the FTC passes further regulation, they should look at enforcing consumer laws already in place. Off-the-shelf or on-line purchased software should clearly list "all ingredients" on the package. The consumer is able to make an informed decision long before being confronted with the license agreement for "opened" software they can not return. If other products were sold like software seems to get away with, our courts would be up to our arses in fraud and misinformation suits. I can't imagine if my child's cereal didn't include the simple "may contain nuts" statement. Oh, by the way, if you want to force more simplified EULA's, force these companies to print the EULA on the side of the package and/or on the on-line sales page in a font size equal to the sales description for the product. At least it would be a start.

by robwaybro

While the existing laws mentioned don't specifically apply to software, this approach does have merit. I especially like the comment:

"force these companies to print the EULA on the side of the package and/or on the on-line sales page in a font size equal to the sales description for the product."

Then add to it truth in advertising about what "ingredients" are included upon installation, again, on the OUTSIDE of the unopened package.

May will not like this approach because they make some of their money from the "add on's" that are installed, not just from the sale of their product.

by kieseyhow

Listing all the "ingredients" is a good idea. A smaller "good start" could be just ensuring that when you uninstall the software, it actually removes all the sneaky sub-applications as well. I have seen so many of these so called spyware apps and obviously hidden programs simply remain in the system, and this is not acceptable!

Some people may find that the benefits of the main software title actually balance the installation of the third party "spyware" and such, but when you remove one, all the rest should remove as well, as a complete clean uninstallation. This means, ALL registry traces and registry tagging as well should be wiped away from the OS.

-Kieseyhow

by cbezzy

Spyware is a problem, no doubt. Government interventions should be feared. One cannot expect my mom to purchase a new computer and instantly know how to install virus software, firewalls, run spyware scans, and know they will have to constantly deal with updates. How about offering a discount to buyers that take a course on PC safety and maintenance?

by kieseyhow

How about the PC vendors bundle the required safety applications instead of useless junk and corporate spyware?

So many mainstream hardware vendors install completely unneeded garbage onto their new systems. Compaq being one and IBM another that instantly comes to mind, and there are many others.

Many of my clients have more issues with these so-called "utilities" than with the new system. These utilities that do little or nothing for the end user except to bog down the system, lengthen and corrupt the learning curve, and open remote access ports. These practices are irresponsible and detrimental to the end-user.

It has become so bad that purchasing a new system from some of these vendors requires an immediate reformat of the local disk and reinstallation of the OS with a "good" installation. Hopefully the operating system CD was included with the purchase; which should be a solid law.

by web guru

I think that spyware should not be tolerated. Not without my consent (ie. "Do you want to register?" and automatically opting Yes after a period of no user response).....and certainly NOT without my knowledge!!!! Thank goodness for products like ZoneLabs' Zone Alarm that alerts admins when a program tries to connect to the internet....Bravo ZoneLabs. The license agreements shouldn't be protecting the companies butt by telling a person that if you want to use our software, you must agree to this SPYWARE...and there is no other option (ie. to agree not to share the software) and still install/use it, you either agree to it or you can't install it..... NOT FAIR Corporate America!! Get the lawyers out of your heads and do what we (the consumers) want...rid the spyware!!!

by samuel_pepys4

Look Gentlemen. You are wasting your time. The Government will take over whether you like it or not. The spyware will be theirs. The so called war on terrorism will be the excuse. Remember there are madmen out there running around with weapons of Mass destruction who are responsible for the deaths of thousands of innocents. Luckily George Bush and Tony Blair will have to answer to God.

by bjc_199

Yes, I think that the FTC should study the use of spyware and I think that there should be a mandatory click through license agreement that still allows one to install the software but yet lets the consumer say no to spyware.

Furthermore, I think that if a company, like for example, Iwon keeps installing spyware or adware on one's computers a consumer should have the right to get some sort of injunction blocking these companies from doing so. Furthermore, yes, you say go to windows updates and install security patches, but, yet, doing so, corrupts other files on your computer. So, yes, the FTC should ennact legislation that would require a click through license agreement meaning that a consumer only has to aggree to not violating copyright laws or the terms associated with illegal copyright practices, however, these companies must also in their license agreements must put a clause and a radio button marked yes/no to the question of whether the consumer wants to install other bundled software and they also must detail what that other software is.

I think that they do need to move on it quickly because some of the spyware and even trying to remnove it is damaging people's computers thus mnakinbg other programs not work well.

I think that the consumers should stand up to the FTC and say that we want something done about the spyware problem and maybe, to get a move on on the issue, let them know that they will be held responsible for any damages caused by private company's spyware to the personal or company computer. And yes, if these companies have hackers hacking into people's computers, these companies must also be required to turn them over to law enforcement officials.

Yes, companies should be allowed to advertise their products, but consumers should also be allowed the option of opting out. Spyware can lead to technovandalism. Companies who engage in these practices who cause damage to someone's computers should be held liable for damage caused under the neglegience theory of law.

by thechas

There are 2 problems with your logic here.

First, US law cannot be applied across the internet or across borders. If you download software from a foreign web site, US law will not apply.

Second, most spy-ware is opt-in now.
If you read the End User License Agreement for many free-ware programs, part of accepting the agreement and installing the software is your approval to install the spy-ware.

The next class of spy-ware is cookie related. Again, when you browse to a web-site that requires cookies, you have the option to disable cookies in your browser privacy settings.
If you don't disable cookies, or choose to accept cookies, you have given tacit approval for placing cookies on your PC.

The same arguments apply to spam.
over 90% of the spam that people get comes from web-sites that they gave their e-mail address to in order to get something for free.

If people fail to read the policies and EULA's for web-sites and software, they have no one but themselves to blame for the spy-ware and spam they receive.

Chas

by valis

in the past two years i've NEVER had spyware install after clicking ANY sort of "accept" button. i've NEVER had that option, usually it just installs after i visit the wrong sort of website.

a few public excecutions may send a good message to the likes of gator and xupiter

by cactus pete

If you have used TurboTax, you have installed spyware after clicking the "accept" button. That's a less-nuisance type example, but a big one.

Many free apps, like IM programs, will throw adware at you while some do install spyware. It happens. Congratulations if it's hever happened to you.

by thechas

This is another area of poor judgment that many people make when setting up their systems. They don't take the time to secure IE from installing applications and extensions without asking.

You need to change your Internet options to ask for permission to install software.

Then, add Gator and their friends to the list of sites to block cookies from.

Another VERY good option to stop spy-ware is to run the Mozilla web browser. At least until Mozilla catches on more, it seams that the spy-ware mainly exploits IE code.

Chas

by scrater

Sypware has become a huge problem for our staff - at home, as well as in the office. In the office we use Ad-Aware to scan for and remove spyware.(The personal version is used by some at home, also.)Of course, if we remove all items carte blanche, we could potentially lose legitimate cookies. However, the potential for system slow down and the unwanted tracking of information is by far the greater evil.

by chris.dole

LICEWARE (a.k.a. "adware") doesn't try to hurt or kill you or others like a virus, but it does resemble a parasite like LICE because they are extremely annoying and you have to go to extreme meausres to get rid of them once infected.

The people who write this software should be prosecuted as criminals for the lost productivity and aggravation their software causes, not to mention possibly opening still more security holes through which other unwanted invasions could occur.

I realize that such legislation would possibly set a precedent that could be used for more governmental regulation, but in this case we'd have to weigh the lesser of two evils. My opinion is currently tilted toward the threat of criminal action for writing LICEWARE.

Feel free to present evidence that might change my mind.

by oz_media

Outside of running AdAware on desktops to remove spyware, I have never seen a problem across a couple of networks I manage that can't be simply detected and removed as data miners etc by AdAware.

I write up very strict user policies, NO online email services are alowed at all (hotmail, MSN etc) NO chat software whatsoever is allowed to be installed, nosurfing unless to customer or work related sites. Computer at people's homes are for that junk, not a company network.

If a few things are picked up, very rarely, I just remote in to the desktops and do an inventory of installed apps. If I see, MSN or W.H.Y., I remove it and notify thier employer of the policy breach. From that point it is out of my hands and up to the employer. If the employer doesn't do anything about it and ends up paying me $150.00/hr to do an onsite cleanup, it doesn't take too many invoices before they start acting upon your notifications.

if the employee is bummed, they have the rules, they broke the rules and maybe next time they will think twice before installing MSN chat on thier next employers computer.

It sounds a little harsh, but when a company invests tens or hundreds of thousands inthier network and some $20/hr employee screws it up and costs the company 150/hr, they deserve to be unemployed. There a plenty of others that will do the same job without compromising the company's investment.

So beyond that, I see no need for regulation outside of the company.

If you can't train staff and enforce policies, you shouldn't be in business in 2004.

Why should we let someone else to do something about it when we can take care of this at the company level, which differs by each company involved?

by no-reply

Spyware or Spam? - Sounds the same to me. Both end up on your computer without your wanting it to be there. They both demand time; both in ascertaining what it is and its removal. Both can be a pain in the rear, if not impossible (for some) to get rid of. I'd almost rather be invaded by aliens, but then I'll be careful what I ask for.

And, oh, I'm sorry, a little off key, but I'm paying money for a piece of software I've really been wanting, only to find out I have to click cancel because I'm not willing to agree with Part 3 Sub-Section 2c of the User Agreement? Now, because I don't want this "extra fluff", er, "stuff", I have to go take it back? Something is seriously wrong with that.

by mrinternet

Leave it to the government to create "make work", based upon the doctrine of the military. As if it is not enough to have to deal with change and security at the same time ... now let stir up the pot and have our own side "whitehats" act stupid ! Lead, follow or get the hell out of the way.

This discussion is closed to new replies.