Free Technology Newsletters
» All 33 InfoWorld Newsletters
Technology & Business Daily
 
InfoWorld
 
   

Spyware and the Ghost of UCITA

By Ed Foster, Section Columns
Posted on Fri Apr 15, 2005 at 12:45:04 AM PDT

While we tend to think of UCITA as being dead outside of a few jurisdictions, its evil spirit is still very much with us. It's haunting us in the form of the spyware problem, as I think spyware researcher Ben Edelman's latest piece on spyware installation methods amply illustrates.


Edelman provides a step-by-step examination of all the deception that can lie behind one "I agree" click to an innocuous-looking license agreement. 3D Desktop's Flying Icons screensaver is initially presented to the user as shareware available for a 15-day free trial. Only by scrolling down in the little text window to the end of the EULA does the user find a hint that there's another component to the deal. If you install the software, you're also agreeing to the terms of something called Blazefind. The only way to find out what that means is to follow a link to Blazefind's EULA.

When Edelman followed that link, the Blazefind license turned out to be the EULA for "Windows ControlAd" software from CDT. Of course, in order "to give surfers a rich Internet experience," CDT was going to install programs from 180Solutions and others. And by agreeing to the CDT EULA, one in turn is also agreeing to the license terms and privacy policies for 180search Assistant, Internet Optimizer, TopRebates.com, and Target Saver. (The Blazefind license and the mix of programs it says it will download have changed slightly since Edelman conducted his research, perhaps due in part to 180Solutions' takeover of CDT.) So, with just one click, one "contractually" agrees to not only the 3D Desktop license but six different EULAs and the installation of a whole bunch of spyware. Or adware, if you think there's a difference.

It probably won't come as a surprise to you that Edelman found that those four weren't the only programs that were loaded on his computer in the process. But that's covered too, since the CDT EULA grants the company permission "to install new applications, at any time, in its sole discretion with or without your knowledge and/or interaction." And, just to add to our growing list of outrageous terms, Edelman pointed out this little gem in the arbitration section: "You also agree to pay CDT $300 per hour to attend arbitration including transport time."

In other words, click OK to a shareware screensaver's cryptic little license, and you have given away control of your computer and your privacy. It's your fault you didn't spend hours and hours typing in URL after URL to read thousands and thousands of obfuscating words to decipher who and what you're really dealing with. And if you were to try to get some redress, well, you have to pay them more for their time then you could possibly win.

When 180Solutions, Claria/Gator, or any of these other outfits claim their software is only installed with the "consent" of the user, they actually are echoing the arguments always made by UCITA proponents. By the way, as I foretold, those same old arguments are now being advanced by some of the same old folks to say that EULA terms must trump fair use in the Blizzard case -- another place where the UCITA phantoms are taking all too corporal shape. Businesses must have "freedom of contract," they claim, no matter how one-sided that freedom is. The spirit of UCITA, like the essence of today's spyware business, is that what's buried deep in the sneakwrap is all that counts.

Of course, some of the same software companies who made UCITA a reality now see fighting spyware as a marvelous business opportunity. I wonder if they understand how much they helped to create this monster that now consumes so much of the time, money and energy of so many of their users? At some point, though, these firms are going to have to choose whether they are still on the UCITA side or if they are really sincere about fighting spyware. If not, eventually the anti-spyware business will be all that's left of the software business, and then they'll be haunted by some ghosts that are even more frightening than the specter of a semi-dead law.

--------------------

Post your comments about this column below or write me directly at Foster@gripe2ed.com. To receive this column every week in my free e-mail newsletter, please go to my subscription page and follow the instructions to opt-in for the EdFoster mailing list.

< Getting Rid of EULAs While Keeping the GPL | Bentley's Cover-All or Surrender Maintenance >


Display: Sort:
Spyware and the Ghost of UCITA | 23 comments (23 topical) | Post A Comment
Shareware[ Reply to This ] (none / 0) (#1)
by glenn354 on Fri Apr 15, 2005 at 08:32:42 AM PDT

Why would the big Shareware sites post garbage such as this program? If Twocows, PCWorld, ZDNet and others would not include software that installed spyware, the problem would be largely eliminated. They check for viruses on the shareware, why not check of spyware also. It would be an advertizing boon. "None of your software will install spyware unless our description says so." Don

[ Reply to This ]


download.com taking action here[ Parent | Reply to This ] (none / 0) (#2)
by bedelman on Fri Apr 15, 2005 at 10:03:38 AM PDT

Don, I think you're right that legitimate software download sites should hesitate to be in the business of distributing software that tricks users into accepting bundles they don't want and don't fairly understand. Note that download.com recently announced precisely this policy: No more adware bundles at download.com. Reference: http://www.upload.com/1200-21-5143026.html

[ Parent | Reply to This ]


Like this ?[ Parent | Reply to This ] (none / 0) (#3)
by Anonymous User on Fri Apr 15, 2005 at 02:59:53 PM PDT

Cleansoftware.org claims to be something like that.

[ Parent | Reply to This ]


Just another reason not to run Windows[ Parent | Reply to This ] (none / 0) (#9)
by whatsburning on Wed Apr 20, 2005 at 06:18:33 AM PDT

The subject title says it all.I still run OS/2 (yes it still lives in the business world) and have never understood why people use an OS that can run stuff like this un-noticed in the background - and make it near impossible to find and eradicate.

[ Parent | Reply to This ]


Did this boggle your mind?[ Reply to This ] (none / 0) (#4)
by spocko on Fri Apr 15, 2005 at 06:36:05 PM PDT

"You also agree to pay CDT $300 per hour to attend arbitration including transport time."

Wow! I hate shit like that. So I guess if I'm going to take them to arbitration I better kick their ass and make a lot of money. Whose going to do this?

I think that the big companies like Google that are loosing ad revenue from companies that hijack the brower during search should sue these folks for restraint of trade. Or the advertisers should sue. You type in trips to hawaii on google and your browswer is hijacked to Hawaii A Go Go airlines instead of the Search Ad from United, United is going to be pissed. I would be.

Spyware (and even adware) is different from viruses. They are put out by companies that have assets and staff. They can and should be sued for doing illegal things. Nobody REALLY cares about the endusers, but they do care if some other company is coming and stealing their revenue stream.

This is business and we have rules, the spyware people think they have a loophole because most users don't know the score, but as Ben's website proves, when money is being lost and revenue being redirected people finally sit up and take notice. We need to sicc the big ad players on these spy ware makers.


Spocko. Author of www.spockosbrain.com the blog that is sweeping the nation! Now with 19 readers!
[ Reply to This ]



Under 18's are the solution...[ Reply to This ] (none / 0) (#5)
by Anonymous User on Sat Apr 16, 2005 at 03:14:06 PM PDT

So what happens if someone under 18 installs one of these adware/spyware/malware apps on mom's PC?  (It seems these EULAs have to be agreed to by those 18+).  By definition, such a program is illegally installed on mom's PC by the vendor, which means that all of their arbitration and other such rules are void.

So, how hard would it be to get a group like the EFF or someone else, to find a pissed-off mother with kids all <18 y/o, and back her in filing suits against every such company?

(And isn't the "age of majority" 21 in Mississippi?)

[ Reply to This ]



Thought the same thing[ Parent | Reply to This ] (none / 0) (#6)
by Anonymous User on Tue Apr 19, 2005 at 01:35:32 PM PDT

That was my very first thought about the EULA. From now on I am going to let my 12 year son install all of my software which basically will make the EULA's non-binding

[ Parent | Reply to This ]


Won't Work[ Parent | Reply to This ] (none / 0) (#7)
by srynas on Wed Apr 20, 2005 at 05:13:15 AM PDT

To my knowledge, the parents of a minor child would be responsible (liable) for their actions.

[ Parent | Reply to This ]


Depends[ Parent | Reply to This ] (none / 0) (#8)
by Jarulf on Wed Apr 20, 2005 at 06:16:39 AM PDT

>To my knowledge, the parents of a minor child
>would be responsible (liable) for their actions.

That vary a lot with country. No idea about USA for example, but here in Sweden, a person can  never responsible for someone elses actions, not even their children. One do, as a parent however, have a certain supervision responsability. It is of course effected by age of the child.

When it comes to contracts, at least purchases, the law is basically that the parent can approve of it (or dissaprove of an allready made purchace). The same goes for other types of contracts, the approval of the parent is needed. If you deliberately approve your child to agree to a EULA for example, it WILL be ok and enforcable. As I said, no idea about other countries though.

[ Parent | Reply to This ]



That's good[ Reply to This ] (none / 0) (#11)
by Anonymous User on Mon Apr 25, 2005 at 07:14:11 PM PDT

That's good, seeing as what you post is utter nonsense -- just a bunch of numbers and punctuation. Are you insane or merely retarded?

[ Reply to This ]


spam[ Parent | Reply to This ] (none / 0) (#12)
by Mason on Mon Apr 25, 2005 at 11:31:51 PM PDT

It's just comment spam.  Plague.

[ Parent | Reply to This ]


It's Chinese. n/t[ Parent | Reply to This ] (none / 0) (#13)
by foxyshadis1 on Tue Apr 26, 2005 at 02:12:49 AM PDT

(Literally, not figuratively. :p) You probably don't have the fonts.

[ Parent | Reply to This ]


Link Spam Removed[ Parent | Reply to This ] (none / 0) (#14)
by Ed Foster on Tue Apr 26, 2005 at 04:14:44 PM PDT

The good news at least is that one didn't leave as many posts in recent stories as he has in the past. Perhaps the controls we're using now are making it a little harder for these jerks to spam our whole site. -- Ed

[ Parent | Reply to This ]


Why...[ Parent | Reply to This ] (none / 0) (#15)
by Anonymous User on Tue Apr 26, 2005 at 09:30:33 PM PDT

Why do they bother? Nobody reads irrelevant junk, and certainly nobody follows any links in irrelevant junk.

[ Parent | Reply to This ]


Why?[ Parent | Reply to This ] (none / 0) (#16)
by sconeu on Wed Apr 27, 2005 at 07:52:47 AM PDT

It's an attempt to boost google rankings.

--
I am not merely a "consumer" or a "taxpayer". I am a Citizen of the United States of America.
[ Parent | Reply to This ]



Eh[ Parent | Reply to This ] (none / 0) (#17)
by Anonymous User on Wed Apr 27, 2005 at 12:59:28 PM PDT

Won't work -- unless people search for "??????573???" and the like on Google regularly, that is.

[ Parent | Reply to This ]


Google spam[ Parent | Reply to This ] (none / 0) (#18)
by sconeu on Wed Apr 27, 2005 at 01:22:09 PM PDT

It's not the link text, but the link itself that's being googlebombed.

--
I am not merely a "consumer" or a "taxpayer". I am a Citizen of the United States of America.
[ Parent | Reply to This ]



eh...[ Parent | Reply to This ] (none / 0) (#20)
by Anonymous User on Thu Apr 28, 2005 at 04:53:39 PM PDT

but what's the use of the page having a very high rank for a search query term it's utterly irrelevant to? People will do that search, see that the link is garbage of zero relevance, and move on. And get annoyed at Google.

[ Parent | Reply to This ]


Google-bombing[ Parent | Reply to This ] (none / 0) (#19)
by ekuns on Wed Apr 27, 2005 at 04:16:20 PM PDT

To add to the previous reply, Google ranks pages in part based on the number of links to that page. If you can create a large number of links to a page from a large number of web forums and blogs, then you can artifically increase that page's Google rank.

See http://www.microcontentnews.com/articles/googlebombs.htm, for example.

Also, many of the Google Bombs we see here are using Chinese and other character sets, and will affect people using localized browsers searching in Chinese.

[ Parent | Reply to This ]



What google says on this subject.[ Parent | Reply to This ] (none / 0) (#21)
by warnold on Fri Apr 29, 2005 at 08:29:05 AM PDT

If Ed's willing to update his software, he can make these attempts to manipulate google inefective. http://www.google.com/googleblog/2005/01/preventing-comment-spam.html
has the instructions.

--
-billy-

[ Parent | Reply to This ]



yes[ Parent | Reply to This ] (none / 0) (#37)
by maderikapapa on Fri Jun 27, 2008 at 08:58:59 PM PDT

出会い出会い系サイト出会い喫茶出会い掲示板ナンパ出会いカフェ人妻出会い無 009;系サイト優良出会い系攻略 完全無料。アダルトビデオアダルト動画アダルトアニメアダルト画像アダル 488;サイト無料DVDアダルト風俗サンプル無料風俗優良アダルトサイト比較海 806;。人妻画像人妻パラダイス知合い人妻援護会人妻コレクション風 439;告白。熟女画像東京熟女掲示板動画熟女ビデオおまんこオナニーエロ画像エロフラッシュアニメ 456;ロ動画エロゲームエロ漫画無料エロサイト。エッチ画像エッチ動画エッチ小説写真エッチ 450;ニメエッチ0930。セックスアナルセックス画像セックス動画セックスフレンドスワッピングSEX写真セックスボランティセ 483;クス体位東京セックス仕方 SEX。おっぱい画像おっぱい村長おっぱい楽園掲示板お 387;ぱい命おっぱいゲーム。巨乳動画巨乳画像アイドル巨乳 522;示板風俗。セフレ募集セフレ掲示板セフレ画像掲示板セフレの作り方出会い無料素人セフレ。童貞狩りエロ漫画童貞狩り童貞喪失童貞オークション素人童貞逆援不倫パートナー不倫出会い人妻不倫不倫を楽しみたい方にはお薦め 154;妻画像など満載出会いサイトを楽しむならココ無料出会いで一緒に遊ぼう出会いはLOVEアゲインで決まり

[ Parent | Reply to This ]


Koralle[ Reply to This ] (none / 0) (#26)
by Anonymous User on Wed Jun 21, 2006 at 01:30:47 PM PDT



[ Reply to This ]


Hi[ Reply to This ] (none / 0) (#36)
by Anonymous User on Thu Aug 03, 2006 at 05:08:23 AM PDT



[ Reply to This ]


Spyware and the Ghost of UCITA | 23 comments (23 topical) | Post A Comment
Display: Sort:
Recent Entries
Bill Gates and PC history
17 comments

Borderline searches and seizures
15 comments

Reader voices: Angry at eBay
11 comments

Teleblend's terrible terms
2 comments

Spyware bill cloaks a mini-UCITA
9 comments

Reader Voices: Autorenewal Defenses
21 comments

More The Gripelog...

Submit a gripe
About the Author
Email Ed Foster

Help Ed and his readers build these projects:
The Gripewiki
The EULA Library

Login
Make a new account
Username:
Password:

Live Gripes
Has AOL Changed Their Ways?
12 comments

A Nestle SweeTarts Conspiracy
13 comments

AT&T Kills "Bad" Username
26 comments

DESPERATE! AOL HAS TAKEN OVER MY COMPUTER
47 comments

parkingticket.com SCAM on refunds
22 comments

Don't let Net Enforcers Ruin Your Day.
14 comments

More Live Gripes...

Sign up for my newsletter

To have my column automatically e-mailed to you, submit your email address in the form below. Of course, I will not turn your address over to any other party or send you any unrequested e-mail.

Infoworld Blogs

Recomended Sites
The AFFECT Coalition
Electronic Frontier Foundation
Electronic Privacy Information Center
Free Software Foundation
HearUsNow.org
Public Knowledge
StopBadware.org

Jeff Angus
Ben Edelman
Dan Gillmor
Bob Lewis
Brian Livingston
Freedom to Tinker
Lawmeme
PC World's Techlog
SunBeltSoftware Blog
Troubleshootsers.com

Rss Feeds
How this works
 Top News 
 Columnists 
 Tech Watch 
 Test Center Reviews 
 Applications 
 App Development 
 E-Business Solutions & Strategies 
 End-user Hardware 
 Networking 
 Operating Systems 
 Platforms 
 Security 
 Standards & Protocols 
 Storage 
 Telecommunications 
 Wireless 
 Web Services 

 

create account | faq | search