Spyware

Benjamin Edelman
January 5, 2010

When an advertiser buys a pay-per-click ad and subsequently makes a sale, it’s natural to assume that sale resulted primarily from the PPC vendor’s efforts on the advertiser’s behalf. But tricky PPC platforms take advantage of this assumption by referring purchases that would have happened anyway. Then, when advertisers evaluate the PPC traffic they bought, they overvalue this “conversion inflation” traffic — leading advertisers to overbid and overpay.

In this piece, I show Google and its partners still covering popular sites with PPC advertisements promoting those same sites. I present the role of InfoSpace, the Google partner at the core of these misplacements, and I argue that Google should long ago have severed its ties to InfoSpace. I cite specific Google promises that these placements violate, and I critique Google’s contractual disclaimers that claim advertisers must pay for these bogus placements. Finally, I propose specific actions Google should take to satisfy to its obligations to advertisers.

Article here

http://certifiedbug.com/blog/tag/edelman/

{ 0 comments }

President Obama on Cybersecurity

by certifiedbug on May 30, 2009

in Internet Security

President Barack Obama announced his plans for securing cyberspace.

“we’ve had to learn a whole new vocabulary just to stay ahead of the cyber criminals who would do us harm — spyware and malware and spoofing and phishing and botnets.”

Obama also mention Conficker.

No single official oversees cybersecurity policy across the federal government, and no single agency has the responsibility or authority to match the scope and scale of the challenge. Indeed, when it comes to cybersecurity, federal agencies have overlapping missions and don’t coordinate and communicate nearly as well as they should — with each other or with the private sector. We saw this in the disorganized response to Conficker, the Internet “worm” that in recent months has infected millions of computers around the world.

http://certifiedbug.com/blog/tag/conficker/

Net savvy Obama used social networking sites such as Facebook and Twitter during his campaign.

Press release:
REMARKS BY THE PRESIDENT ON SECURING OUR NATION’S CYBER INFRASTRUCTURE

New York Times:
Fending Off Attacks in Cyberspace

Steve Riley
Will the new US “Cybersecurity Coordinator” actually be able to do anything?

{ 0 comments }

Beta News, Security.
“It’s hard enough to make a name for yourself as an independent anti-malware company, without competitors demanding your software be uninstalled.”

For years, Spybot Search & Destroy has been one of Fileforum’s single most installed pieces of software, with nearly 67 million downloads since 2000 on our sister site alone. It’s one of the Web’s original anti-spyware packages, independently distributed by Safer Networking Ltd., based in Ireland and developed in Germany.

Despite a user base in the dozens of millions (if not more; Safer Networking doesn’t track its users), Spybot S&D hasn’t had an easy time establishing itself in the competitive anti-malware field. Because it is freeware (commercial users must purchase licenses), the application is seen as a thorn in the side of larger companies who sell security software with the same functionality.

But now, the principals of Safer Networking are stepping up their rhetoric a bit. Speaking with Betanews last week, the developers of Spybot S&D demonstrated how some of its larger competitors are actively using their anti-virus tools to keep Spybot off customers’ systems.

Safer Networking names three manufacturers in particular: Trend Micro, Kaspersky Labs, and McAfee Software.

“We are not happy with the new marketing strategy that softwares like McAfee use to kick competitors out of the business,” wrote one company representative on Safer Networking’s forums, in response to yet another Spybot customer’s call for help.

Full story:
http://www.betanews.com/article/Spybot-Search-Destroy-competitors-are-trying-to-force-its-removal/1237840882

{ 0 comments }

CDT:US failing to prosecute Cyber criminals

by certifiedbug on August 14, 2008

in Internet Security

State AGs Fail to Adequately Protect Online Consumers
New report from the Center for American Progress and Center for Democracy and Technology finds that state attorneys general receive thousands of complaints of online fraud and abuse but have launched relatively few cases in responseWashington, D.C. — State attorneys general received thousands of consumer complaints of online fraud and abuse in 2006 and 2007 and yet, with the exception of several notable standouts, brought few significant cases in response, according to a report released today from the Center for American Progress and the Center for Democracy and Technology, Online Consumers at Risk and the Role of State Attorneys General.

Most states supplied the authors with a top 10 list ranking consumer complaint categories (Internet-related and other). In 2007, 24 out of 30 states that provided rankings reported an Internet-related category within their top 10. Eight states ranked Internet-related complaints among their top three most common consumer complaints, including four states that ranked Internet-related complaints at the top of the list.

For 2007 and 2006, 20 states provided the number of consumer complaints associated with each category—the others merely provided rankings without giving the number of complaints. In both years, these states reported roughly 20,000 Internet-related complaints.

The Federal Trade Commission also provides data for all 50 states on consumer complaints related to Internet fraud. These data are compiled from a variety of sources, including 13 state attorneys general. In 2007, the FTC reported 221,226 Internet-related fraud complaints, up almost 16,000 from 2006 and more than 24,000 in 2005.

“These numbers are startling, but they may even understate the problem,” said Reece Rushing, director of regulatory and information policy at the Center for American Progress. “Consumers are often unaware, and thus may not report, when they are victimized by online threats such as spyware or phishing. We must take action against these threats to protect consumers and preserve confidence in Internet commerce.”

As described in the report, several attorneys general, in particular those in New York and Washington state, brought important cases on behalf of online consumers. New York Attorney General Andrew Cuomo, for example, recently announced groundbreaking settlements with Priceline, Travelocity, and Cingular, which advertised using Direct Revenue, a company that surreptitiously installed adware on consumers’ computers. In Washington, meanwhile, Attorney General Rob McKenna reached a recent settlement with the operators of several websites that lured more than 13,000 Washington consumers to divulge personal information that was then sold to third parties.

Despite these successes, however, most attorneys general have not given high priority to online fraud and abuse.

Center for Democracy and Technology:  Press release

{ 0 comments }

Beware Google Search email alerts on Blogger

February 4, 2008

I saw this article over at NetWorkWorld dated 01/31/08. Google blog used to spread malware A Google-hosted blog is running phony security content that’s linked to malware, as well as using Google’s automated notification service to try to entice subscribers to click on an infected link, says one security expert. “This is the first time [...]

Read the full article →

Snips: ASK and Spyware today

February 2, 2008

I have been a bit busy, bashing Malware and all that. Couple of interesting items. EPIC complaint (PDF) filed January 19, 2008 with the FTC against ASK regarding their product ‘AskEraser.’ The Anti-Spyware Coalition (ASC) meeting held in Washington DC has convened. Many well known anti-spyware experts attended, including a fellow forum friend of mine. [...]

Read the full article →

Spybot-S&D version 1.5.2 released

January 30, 2008

Anti-spyware program by Patrick Kolla and Team Spybot. Spybot-S&D 1.5 has quite a lot of advantages over version 1.4: improved compatibility, more effective detections and new functions. Between all the positive feedback we received, there were also some things that needed to be improved: the immunization sometimes needed to be applied twice before sticking, many [...]

Read the full article →

Sears Violation of Its Privacy Policy

January 5, 2008

Bits from Bill: Your Sears Purchase Details Available to World Ben Edelman update January 4, 2008. Sears Exposes Customer Purchase History in Violation of Its Privacy Policy. Sears’s Response I wrote to Sears ManageMyHome via the addresses on their Contact Us page. To their credit, they responded quickly (less than ninety minutes). However, their reply [...]

Read the full article →

Sears installs ComScore tracking software

December 31, 2007

Ben Edelman, anti-spyware researcher and Harvard Business School Assistant Professor. Late last month, Benjamin Googins (a senior researcher in the Anti-Spyware unit at Computer Associates) critiqued a ComScore installation performed by Sears’ “Sears Holdings Community” (“My SHC Community” or “SHC”). After reviewing the installation sequence, Ben concluded that the installation offered “very little mention of [...]

Read the full article →

MalwareCrush Rogue antispyware program

December 28, 2007

Yet another fake to be aware of. MalwareCrush is a rogue anti-spyware program that uses aggressive advertising and is installed onto your computer through the use of Trojans and other malware. This software is typically installed on your computer when you download programs masquerading as a video codecs required to view a video on a [...]

Read the full article →