Security researchers are now stating that the Sears and K-Mart websites have been found to be installing software to track the online activity of users that joined their 'online community.' Benjamin Googins at Computer Associates and spyware researcher Ben Edelman have both posted information on their respective sites detailing what has been going on. In the post-Facebook Beacon internet, consumers are becoming more wary of what information is being collected (and shared) about their online activities. While Facebook owned up to what was going on and quickly responded to concerns, Sears (who owns both Sears.com and Kmart.com) isn't doing that.
From Googins CA blog:
Sears.com is distributing spyware that tracks all your Internet usage - including banking logins, email, and all other forms of Internet usage - all in the name of "community participation." Every website visitor that joins the Sears community installs software that acts as a proxy to every web transaction made on the compromised computer. In other words, if you have installed Sears software ("the proxy") on your system, all data transmitted to and from your system will be intercepted. This extreme level of user tracking is done with little and inconspicuous notice about the true nature of the software.
Edelman says Sears claiming you get 'adequate notice' before the software in question installs is "demonstrably false."
The software that Sears installs is from ComScore, who, according to their front page, "maintains massive proprietary databases that provide a continuous, real-time measurement of the myriad ways in which the Internet is used and the wide variety of activities that are occurring online."
If it's true that Sears was collecting everything Googins says; they are sure to be headed for legal trouble, even if they got people to click 'ok' to an outrageous 54 page license agreement.

0 comments:

top