|
<HTML> <head><TITLE>PRIVACY Forum Archive Document - (priv.09.15) </TITLE></head> <body bgcolor="#ffffff" text="#000000" link="#0000ff" vlink="#660099" alink="#ff0000"> <table border=0 cellpadding=0 cellspacing=0 width=100%> <tr> <td width=15%> <center> <table border=0 cellspacing=0 cellpadding=0 width=100%> <tr> <td> <table border=1 cellspacing=0 cellpadding=0> <tr> <td bgcolor="#ffffcc"> <center> <font face="Arial, Helvetica, sans-serif"> <a href="http://www.pfir.org"><b>PFIR</b></a> <b>Perspective</b> </font> </center> </td> </tr> <tr> <td bgcolor="#ccffff"> <img src="/ipissues1.jpg" border=0> <center> <font size=-1 face="Arial, Helvetica, sans-serif"> <b>"CRIME or FAIR USE?"</b> </font> </center> <table border=0 cellspacing=0 cellpadding=2 width=100%> <tr> <td bgcolor="#ffffff"> <table border=1 width=100%> <tr> <td> <table border=0 cellpadding=0 cellspacing=0 width=100%> <tr> <td> <a href="/pfir-p.ram"><img src="/spkr1.gif" border=0></a> </td> <td> <center> <font size=-1> <a href="/pfir-p.ram">Listen<br>RealAudio</a> </font> </center> </td> </tr> </table> </td> <td> <table border=0 cellpadding=1 cellspacing=0 width=100%> <tr> <td> <a href="/pfir-p.mp3"><img src="/spkr1.gif" border=0></a> </td> <td> <center> <font size=-1> <a href="/pfir-p.mp3">Listen<br>MP3</a> </font> </center> </td> </tr> </table> </td> </tr> </table> </td> </tr> </table> </td> </tr> </table> </td> </tr> </table> </center> </td> <td align=center> <table border=1 cellpadding=0 cellspacing=0> <tr> <td bgcolor="#ffffcc"> <table border=0 cellpadding=0 cellspacing=4> <tr> <td> <center> <font face="Arial, Helvetica, sans-serif"> "<a href="/reality">REALITY RESET</a>" </font> </td> <td> <table border=1 cellpadding=1 cellspacing=2 width=100%> <tr> <td bgcolor="#ffffff"> Today: <a href="/reality/2001-03-27">"Spraying the TV Screen"</a> </td> </tr> </table> </center> </td> </tr> </table> </td> </tr> </table> <p> <font size=+2><b>PRIVACY Forum Archive Document</b></font> <A href="/privacy"><h3>PRIVACY Forum Home Page</h3></A> <font size=-1 face="Arial, Helvetica, sans-serif"> <A href="http://www.pfir.org"><b>PFIR - "People For Internet Responsibility" Home Page</b></A> </font> <p> <font size=-1 face="Arial, Helvetica, sans-serif"> <A href="http://www.vortex.com"><b>Vortex Technology Home Page</b></A> </font> <p> <font size=-1 face="Arial, Helvetica, sans-serif"> <A href="/privmedia"><b>Radio, Television, and Press Contact Information</b></A> </font> <p> </td> </tr> </table> <hr> <PRE> PRIVACY Forum Digest Thursday, 18 May 2000 Volume 09 : Issue 15 (<A HREF="http://www.vortex.com/privacy/priv.09.15">http://www.vortex.com/privacy/priv.09.15</A>) Moderated by Lauren Weinstein (<A HREF="mailto:lauren@vortex.com">lauren@vortex.com</A>) Vortex Technology, Woodland Hills, CA, U.S.A. <A HREF="http://www.vortex.com">http://www.vortex.com</A> ===== PRIVACY FORUM ===== ------------------------------------------------------------------- The PRIVACY Forum is supported in part by the ACM (Association for Computing Machinery) Committee on Computers and Public Policy, Cable & Wireless USA, Cisco Systems, Inc., and Telos Systems. - - - These organizations do not operate or control the PRIVACY Forum in any manner, and their support does not imply agreement on their part with nor responsibility for any materials posted on or related to the PRIVACY Forum. ------------------------------------------------------------------- CONTENTS RealNetworks Returns: The "Spy" in "Download Demon" (Lauren Weinstein; PRIVACY Forum Moderator) *** Please include a RELEVANT "Subject:" line on all submissions! *** *** Submissions without them may be ignored! *** ----------------------------------------------------------------------------- The Internet PRIVACY Forum is a moderated digest for the discussion and analysis of issues relating to the general topic of privacy (both personal and collective) in the "information age" of the 1990's and beyond. The moderator will choose submissions for inclusion based on their relevance and content. Submissions will not be routinely acknowledged. All submissions should be addressed to "<A HREF="mailto:privacy@vortex.com">privacy@vortex.com</A>" and must have RELEVANT "Subject:" lines; submissions without appropriate and relevant "Subject:" lines may be ignored. Excessive "signatures" on submissions are subject to editing. Subscriptions are via an automatic list server system; for subscription information, please send a message consisting of the word "help" (quotes not included) in the BODY of a message to: "<A HREF="mailto:privacy-request@vortex.com">privacy-request@vortex.com</A>". Mailing list problems should be reported to "<A HREF="mailto:list-maint@vortex.com">list-maint@vortex.com</A>". All messages included in this digest represent the views of their individual authors and all messages submitted must be appropriate to be distributable without limitations. The PRIVACY Forum archive, including all issues of the digest and all related materials, is available via anonymous FTP from site "ftp <A HREF="ftp://ftp.vortex.com/">ftp.vortex.com</A>", in the "/privacy" directory. Use the FTP login "ftp" or "anonymous", and enter your e-mail address as the password. The typical "README" and "INDEX" files are available to guide you through the files available for FTP access. PRIVACY Forum materials may also be obtained automatically via e-mail through the list server system. Please follow the instructions above for getting the list server "help" information, which includes details regarding the "index" and "get" list server commands, which are used to access the PRIVACY Forum archive. All PRIVACY Forum materials are available through the Internet Gopher system via a gopher server on site "<A HREF="http://gopher.vortex.com">gopher.vortex.com</A>/". Access to PRIVACY Forum materials is also available through the Internet World Wide Web (WWW) via the Vortex Technology WWW server at the URL: "<A HREF="http://www.vortex.com">http://www.vortex.com</A>"; full keyword searching of all PRIVACY Forum files is available via WWW access. ----------------------------------------------------------------------------- VOLUME 09, ISSUE 15 Quote for the day: "All gamblers die broke." -- Bim (Leo Gorcey) "Angels with Dirty Faces" (First National; 1938) ---------------------------------------------------------------------- Date: Thu, 18 May 2000 12:20 PDT From: <A HREF="mailto:lauren@vortex.com">lauren@vortex.com</A> (Lauren Weinstein; PRIVACY Forum Moderator) Subject: RealNetworks Returns: The "Spy" in "Download Demon" Greetings. You'd think they'd have learned by now. After their public relations snafus with the Globally Unique Identifier in their RealPlayer product, and concerns over information being transmitted to Real by their RealJukebox package, one would have hoped that they'd figured out how folks feel about their activities being monitored, even when the monitoring is theoretically anonymous. After all, RealNetworks, Inc. (<A HREF="http://www.real.com">http://www.real.com</A>) takes pains to mention that they're a member of the Online Privacy Alliance, whose stated aim is to "... create an environment of trust and foster the protection of individuals' privacy online." But it's hard not to mutter some choice expletives under your breath upon learning the details of RealNetworks' latest heavily-promoted goodie from their Netzip, Inc. (<A HREF="http://www.netzip.com">http://www.netzip.com</A>) subsidiary--the "Download Demon" package. Actually, Real should win the "honesty in product naming" award for this one--"demon" seems to be a particularly apt description. [ UPDATE (22 June 2000): RealNetworks has recently renamed this product as "RealDownload" throughout their sites, files, and other materials. --Lauren-- ] You may already have stumbled across this little surprise on your system. I found it apparently bundled in with other downloads I had made from RealNetworks. The Download Demon attempts to automate various file downloading functions, to permit downloads to be interrupted and later resumed, plus other related functionality. It attracted my attention since it had silently linked itself into my Web browsers to take over all downloading operations--<B>without</B> my having taken any specific actions to install or enable it--and my system was hanging in the course of various downloads! I removed it with some difficulty. Only later did I discover the much less obvious "feature" of the Download Demon--for all files you download, from <B>any</B> sites, the Demon sends details (e.g. file names and URLs) to RealNetworks/Netzip! Surprise! I'll give them some credit--at least this is all spelled out in their privacy policy (<A HREF="http://www.netzip.com/about/privacy.html">http://www.netzip.com/about/privacy.html</A>). Of course, this assumes that you thought to even bother reading a privacy policy for a "simple" downloading package, or had the time to plow through the entire lengthy document (which of course is subject to change at any time). A handy attorney to help you analyze the policy might also be useful. Real makes the usual "you can trust us" sorts of boilerplate statements. They say that they don't store your Internet IP addresses in tandem with the data that they record about what you download. They claim that it's all "anonymous" and that they don't link in personally identifiable information. The stated purpose for the flow of information about your detailed downloading activities is to target the ads in the "free" version of the Download Demon software, and for (here it comes) "aggregate, anonymous statistical analysis" purposes. There is no suggestion that this data flow ceases if a user upgrades the product by paying for registration (to turn off the ads). This whole area of commercial monitoring of Internet user activity in various ways, both in "free" and non-free software, is a gigantic growth industry, largely fueled by the absence of even basic legislation to provide consumers with specific rights in this regard. Such software packages may entangle themselves into users' systems in manners that are difficult to notice, understand, control, or remove. The ongoing controversy over the technology used by Radiate, Inc.--formerly Aureate Media (<A HREF="http://www.radiate.com">http://www.radiate.com</A>) to track various aspects of users' behavior in many popular "freeware" software packages is a case in point. The "trust us, it's anonymous, you have nothing to be concerned about" philosophy expounded in so many complex commercial privacy policies might satisfy Alfred E. Neuman ("What, me worry?") of "Mad Magazine" fame, but seems increasingly inadequate for the rest of us. As far as the "Download Demon" is concerned, if you feel that it's RealNetworks' business to know the details of your file downloads from whatever sites you visit, by all means continue to use it. If not, you may want to consider trying to remove it (in the MS Windows case, via the Windows Add/Remove Programs controls), and take care that it isn't automatically installed again in the course of some other software installations. You might also wish to consider dropping a note to <A HREF="mailto:privacy@netzip.com">privacy@netzip.com</A> letting them know how you feel about these issues, pro or con. To many firms, the Web has become the vehicle for all manner of invasive systems and policies which few of us would tolerate in the routine, "non-computer" aspects of our lives. It's up to you to decide whether or not you wish to passively play along with the salacious circus of software spies. --Lauren-- Lauren Weinstein <A HREF="mailto:lauren@pfir.org">lauren@pfir.org</A> or <A HREF="mailto:lauren@vortex.com">lauren@vortex.com</A> Co-Founder, PFIR: People for Internet Responsibility - <A HREF="http://www.pfir.org">http://www.pfir.org</A> Moderator, PRIVACY Forum - <A HREF="http://www.vortex.com">http://www.vortex.com</A> Member, ACM Committee on Computers and Public Policy ------------------------------ End of PRIVACY Forum Digest 09.15 ************************ </PRE> <hr> <center> <A href="/privacy"><h3>PRIVACY Forum Home Page</h3></A><p> <A href="http://www.vortex.com"><h4><i>Vortex Technology Home Page</i></h4></A><p> <A href="/privmedia"><h4>Radio, Television, and Press Contact Information</h4></A><p> </center> <p> <font size=-2>Copyright © 2001 Vortex Technology. All Rights Reserved.</font> </BODY> </HTML>