[20148] in bugtraq
Re: AudioGalaxy Satellite - SPYware
daemon@ATHENA.MIT.EDU (David Johnston)
Wed Apr 11 03:55:04 2001
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Message-ID: <20010410.19473800@grandmother.littlebald.com>
Date: Tue, 10 Apr 2001 19:47:38 GMT
Reply-To: David Johnston <david@JOHNSTONS.NET>
From: David Johnston <david@JOHNSTONS.NET>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <401449193.20010409082904@columbus.rr.com>
Content-Transfer-Encoding: 8bit
Derek Reynolds wrote:
> Installing Audiogalaxy automatically installs a small tracking or "spy"
> program called Webhancer. This program not only tracks where you go on
the Internet
> but also reads files on your hard drives and sends info to some company.
Even
> after completing Audiogalaxy Satellite's rudimentary recommended
uninstall method
> which involves manually deleting it's file folder, Webhancer was still on
up
I asked Audio Galaxy about this, and got a polite letter from Michael
Merhej <michael@audiogalaxy.com>. According to Mr. Merhej, the install
screens tell you that you're about to install WebHancer. I also checked
out the WebHancer site; they have a very clear privacy policy, and a PDF
of a Deloitte & Touche audit of it. They say that they only collect
timing data, no personally identifiable information, do not allow third
party correlations, and keep the data protected.
I'm not sure that Audio Galaxy or WebHancer deserve vilification; they
both seem to have taken reasonable steps to protect privacy and to warn
users of what they are doing.
Regards,
David Johnston
Little Bald Consulting
david@johnstons.net
References:
Privacy policy at www.webhancer.com/site/products/privacy/
Deloitte & Touche audit at
/site/products/privacy/assert/Report-final2.pdf
