Monday, 14 January 2008
Feeling poorly for some time. Saw a doctor a few weeks ago, who sent me to a specialist, who booked me into hospital for tests.Fortunately, the “medical advice is very positive.â€It’s cancer. - Tim Blair
Posted by: Old Grouch in
Linkage
at
23:49:46 GMT
| No Comments
| Add Comment
Post contains 46 words, total size 1 kb.
Friday, 11 January 2008
Feminists caught with double standards. Film at 11.
Via: IP
Posted by: Old Grouch in
Linkage
at
17:14:52 GMT
| No Comments
| Add Comment
Post contains 12 words, total size 1 kb.
(Both Florida and Indiana give special discounts (called “homestead creditsâ€) to property taxes paid by state residents. Non-residents don’t get them. Tax dodge gone wrong?)
Posted by: Old Grouch in
Linkage
at
16:43:03 GMT
| No Comments
| Add Comment
Post contains 39 words, total size 1 kb.
Monday, 07 January 2008
This story went critical over the weekend:
Visiting Sears.com (and Kmart.com) a few weeks ago, I was offered a chance to join My SHC Community, for free, but what I received was, from a privacy perspective, very costly. Sears.com is distributing spyware that tracks all your Internet usage - including banking logins, email, and all other forms of Internet usage - all in the name of "community participation." Every website visitor that joins the Sears community installs software that acts as a proxy to every web transaction made on the compromised computer. In other words, if you have installed Sears software ("the proxy") on your system, all data transmitted to and from your system will be intercepted. This extreme level of user tracking is done with little and inconspicuous notice about the true nature of the software... An interesting note, the spyware Sears distributes is "genetically" related to software CA Anti-Spyware has detected for a few years by the name of MarketScore (and other aliases) and distributed by other websites. – Computer Associates Security Advisor Research BlogAnd that's just the start:
- Sears Update: Privacy Policy, Scorecard, and Genetic Heritage
In my blog post yesterday I reported that there was a significant change in how the privacy policy for My SHC Community reads - replacing straightforward language with vague legal language (see section: The Privacy Policy). What I have come to learn is that if you navigate to http://www.myshccommunity.com/Privacy.aspx.you could actually get one of two policies. One of these policies is what I referred to as the "old" policy and the other as the "new" - even though both pages share the same URL. Here is why you could get one of two policies from the same URL. If you access that URL with a machine compromised by the Sears proxy software, you will get the policy with direct language (like "monitors all Internet behavior"). If you access the policy using an uncompromised system, you will get the toned down version (like "provide superior service"). Both policies share the same URL and same look and feel - coloring, page layout, Kmart and Sears branding, etc. This makes it very difficult for users to get consistent, accurate information about the proxy software... ...They should receive the same information no matter what system they access it from.
- Sears Update: Response to Rob Harles, VP SHC Community
- 2nd Response to Rob Harles, VP of Sears' SHC Community
Finally, while we can't draw any conclusions from this, an old comScore press release shows that before becoming VP in charge of Sears' tracking program, Rob was the senior vice president for comScore - the creator of the Sears spyware and the registrants of the domains to which the Sears spyware data is sent.
- Managemyhome.com: Another privacy issue for Sears
This was obviously introduced to let me look at my own purchase history, but unfortunately the only information they asked for when I followed that button was a name, phone number, and address. To test this out, I put in my parents' information-I want to stress that this is the exact same info listed under their name in the phone book-and was rewarded with a list of their major Sears purchases running back almost two decades to when they first moved in to that house.
- Update: Records search disabled on managemyhome.com
Elsewhere:
The ["Welcome to My SHC Community"] page then presents a document labeled "Privacy Statement and User License Agreement" -- 2,971 words of text, shown in a small scroll box with just ten lines visible, requiring fully 54 on-screen pages to view in full... The tenth page admits that the application "monitors all of the Internet behavior that occurs on the computer on which you install the application, including ... filling a shopping basket, completing an application form, or checking your ... personal financial or health information." That's remarkably comprehensive tracking -- but mentioned in a disclosure few users are likely to find, since few users will read through to page 10 of the license...
The disclosure provided within the Privacy Statement and User License Agreement also cannot satisfy the FTC's requirements. The FTC demands a disclosure "prior to ... and separate from" any license agreement, whereas the only disclosure on this page occurs within the license agreement -- exactly contrary to FTC instructions. Furthermore, users can easiliy overlook text on page ten of a lengthy license agreement. Such text is the opposite of "unavoidable."
The Register: Sears Admits to Joining Spyware Biz
Slashdot: Sears Installs Spyware
Consumerist: See Everything Your Friends And Neighbors Have Ever Bought At Sears
Via: Steven Den Beste and Teresa
Posted by: Old Grouch in
Linkage
at
03:37:14 GMT
| No Comments
| Add Comment
Post contains 776 words, total size 8 kb.
Sunday, 06 January 2008
The MoD eventually confirmed it has a ban on troops wearing uniform in civilian airports, claiming it was because a small number of airlines ban all uniforms on flights for security reasons. – Daily Mail, "Afghan heroes home for Christmas forced to change out of uniforms on freezing runway before using airport terminal"
Disgraceful.
Via LGF, thanks to Steffan for the title.
Posted by: Old Grouch in
Linkage
at
16:13:16 GMT
| No Comments
| Add Comment
Post contains 65 words, total size 1 kb.
49 queries taking 0.1284 seconds, 185 records returned.
Powered by Minx 1.1.6c-pink.












