CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Is this invasion of privacy

 
Post new topic   Reply to topic       All -> FavForums -> Privacy [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
old_wrinkly

Trooper
Trooper


Joined: Feb 01, 2008
Posts: 11
Location: UK

PostPosted: Thu Feb 07, 2008 5:20 pm    Post subject: Is this invasion of privacy
Reply with quote

I have a general point of interest I would like comments on.

Whilst browsing another forum I have used for a number of years I came across a sticky by one of the moderators which stated

You should also know that some software you may be asked to run will identify pirated software and cracks. Additionally, in the event of a complaint or legal action arising from any message posted by you, we may be forced to reveal your identity (or whatever information we know about you).

I find it very disturbing that the site might ask me to run software in order to resolve a problem I have reported, which will provide information without my knowledge. Whatever the justification, I question the legality of such action.

If a warning is posted telling the user of what information may be uploaded that's one thing but to do it secretly is a step too far.

As I said, I have used this particular forum for a number of years but I don't feel happy about doing so in the future without knowing in detail what information their diagnostic software may be fleecing from my PC.

Perhaps I am being paranoid, but I would welcome the views of others on this, especially whether this is a general practice on support forums such as this.

Thanks

Back to top
View users profile Send private message
k027

Special Response Team
Guest Forums Host
Guest Forums Host

Joined: Aug 25, 2003
Posts: 8479

1st Responders SRT

PostPosted: Thu Feb 07, 2008 6:07 pm    Post subject:
Reply with quote

Without knowing the specifics (web site, your particular problem, the software you may be asked to run) its difficult to provide a definitive answer.

When you go to a web site like CastleCops for help with a specific problem, you are often asked to download, install, and run certain diagnostic tools. None of these tools automatically report back to the web site. It is up to you to collect the information reported by the tool and then post the information back to the forum, usually in text format. No one is forcing you to go the the web site with your problem, use the tools, or report back the information.

You used the expressions "provide information without my knowledge" and "but to do it secretly is a step too far". Obviously I can't speak for the unknown web site you refer to but the things you refer to just aren't done here at CastleCops or other reputable web sites.

As a consumer, it is in your best interest to become knowledgeable about the goods and services you use, even computer help forums. Before you use download any software or use any diagnostic tool, take the time to learn whether the web site you are downloading from is reputable and that you know how the tool works and what information is provided. Search tools like Google and the software developer's web sites are great information sources for those purposes. You should also review the information before you supply it to the web site.

If you have any doubts, just don't do it - take your computer to your local, reputable repair shop.

Back to top
View users profile Send private message
old_wrinkly

Trooper
Trooper


Joined: Feb 01, 2008
Posts: 11
Location: UK

PostPosted: Thu Feb 07, 2008 8:16 pm    Post subject:
Reply with quote

Thanks for the reply. The forum in question is a very reputable one that has been around for years.

I accept that it is for users to decide whether or not to follow any advice offered and as yet, I have never conciously detected any of the support sites, who do a wonderful job helping people, uploading information directly, and anyhow I would hope my firewall etc would block any hidden transmission.

I can't be certain exactly what is meant by You should also know that some software you may be asked to run will identify pirated software and cracks [perhaps it's just being used as a frightener]but I am assuming it means a generated report could have information identifying suspect software.

In my mind this is the secret part. I don't believe it is their function to collect such information without a prior warning to the user of the potential ramifications of posting such a report. I.E that it will contain information identifying suspect software etc. The user then has the option to proceed or withdraw.

It also begs the question as to what they would do with the information if gathered.

Although the sticky exists I doubt that many people would be aware of it. I myself only came across it by chance.

I'm pleased to see that CastleCops doesn't indulge in such gray practices.

For my part I will be more inquisitive in the future if I am asked to run any diagnostic utility so that I know what information it contains.

Back to top
View users profile Send private message
k027

Special Response Team
Guest Forums Host
Guest Forums Host

Joined: Aug 25, 2003
Posts: 8479

1st Responders SRT

PostPosted: Thu Feb 07, 2008 9:22 pm    Post subject:
Reply with quote

Quote:
I can't be certain exactly what is meant by You should also know that some software you may be asked to run will identify pirated software and cracks [perhaps it's just being used as a frightener]but I am assuming it means a generated report could have information identifying suspect software.

In my mind this is the secret part.


The fact that they give you a warning means that they are not doing it in secret.

As to what they might hypothetically do with any such information, you can first look to the site's privacy policy. However, you must remember that most privacy policies allow the site to change that policy at any time and that the site, in response to a court order, may be required to turn over to law enforcement agencies or private parties any such potentially incriminating information.

There is a legitimate reason for diagnostic tools that identify cracked/pirated software since it often causes many reported computer problems. Removal of the cracked software and replacement with a legitimately licensed version usually corrects this problem. Please note that many legitimate web sites, including CastleCops, have a policy which prohibits providing assistance to anyone who has cracked/pirated software on their computer until such software is removed.

Back to top
View users profile Send private message
Mister2

SRT Team Lead
SRT Team Lead
Premium Member

Joined: Oct 28, 2004
Posts: 7326

Moderators MVP Premium SRT Team F@H

PostPosted: Thu Feb 07, 2008 9:24 pm    Post subject:
Reply with quote

old_wrinkly wrote:
You should also know that some software you may be asked to run will identify pirated software and cracks
As I read it, that clause does not imply collecting any data from you or passing any data on to a third party. There are many ways to identify pirated software. Should someone on a forum assist with a problem involving such software then they, and thus the forum they work on, are technically in breach of the End User License Agreement (EULA) for that particular piece of software and so are breaking the law.

I would expect any reputable forum or help site to be vigilant for illegal activity of this nature (and indeed other types of illegal activity). It is certainly the case here - if there is a strong suspicion of illigitimate software being used or illegal activities practiced then we cannot assist. Full stop.

old_wrinkly wrote:
Additionally, in the event of a complaint or legal action arising from any message posted by you, we may be forced to reveal your identity (or whatever information we know about you).
Again, I read this as an advisory notice. If, for instance, someone took legal action against me for posting libel (not that I would knowingly do so) then it is possible for the court to demand my personal information from the owner of the site. Better to state the fact than to hide it away.

I would interpret the statements as advisory messages. As K027 said, make sure you know what is happening and if you are unsure then choose an alternative method of getting the results you need.


_________________
Never stop learning
Back to top
View users profile Send private message
old_wrinkly

Trooper
Trooper


Joined: Feb 01, 2008
Posts: 11
Location: UK

PostPosted: Sat Feb 09, 2008 9:50 am    Post subject:
Reply with quote

Thanks for the replies.

I don't want this to become a protracted thread as I raised it just as a point of interest.

I accept all that you have written and would expect any forum to refuse to help if it was KNOWN that the request involved help with pirated software. I think that stands to reason.

As for the notice. This is in a sticky, which to be fair can be read at anytime by a user, but it is unlikely most would take the time to do so as the actual topic is somewhat vague in it's title. The onus may be on the user to be familiar with all the stickies but in the real world this is unlikely to happen.

As for disclosure of information. I again accept that if a court should request the site provide information as part of some legal process then of course the site would have no choice but to comply.

Perhaps as I said earlier I am a bit paranoid on what information diagnostics software may gather, but it's interesting to know how others view things.

Thanks for your input.

Back to top
View users profile Send private message
Mister2

SRT Team Lead
SRT Team Lead
Premium Member

Joined: Oct 28, 2004
Posts: 7326

Moderators MVP Premium SRT Team F@H

PostPosted: Sat Feb 09, 2008 8:35 pm    Post subject:
Reply with quote

You're welcome Very Happy

It is better to ask these things than wish you had asked.

Your point about that sticky is a very valid one - many times we see only what we want to see (and I'm as guilty as anyone for this).


_________________
Never stop learning
Back to top
View users profile Send private message
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1087
Location: USA

PostPosted: Fri Feb 22, 2008 8:10 pm    Post subject:
Reply with quote

Since the forum, or software being requested to download has not been provided, I could give you an example.

A CD-burner help forum.

You have a problem with your burner, and say, using software such as "Nero"

Nero has (afaik anyways, I dont use it anymore) a "Log" ability, and the mods/helpers there may ask for a "Diagnostic log" generated by Nero, which could aid in showing the error.

Back when I _used_ Nero, at the top/header of the .txt log file it generated, it also included your "serial"

Some smart users would/could obfuscate and/or "munge" the serial, but "novice" users may simply blindly Copy and paste this "log" to the public CD-Burner Tech Support forum.

If this novice happened to be using a pirated serial (Enter it in Google...?) - this would/could point to the use of "pirated software"



This is just one example of what this could detail; but I've NEVER heard of anything like this happening; under most circumstances, a mod will simply step-in, and quickly edit the Post if/when the post gets "reported" (using a similar "blue card" system such as CastleCops).



I'd be interested in knowing this site too, as this sounds kinda "shady"

But who knows, perhaps someone up above with money and power (I shall not mention names...lol, but it starts with an M and ends with "soft") is requested such disclaimer to be posted?

But again, it could/would be beneficial to know what forum this is.

What software they are requiring you to run, etc...

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Privacy All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer