Broadband Tech > Security > Security > Privacy in the new ZoneAlarm 5.5

reply to SUMware

Re: Privacy in the new ZoneAlarm 5.5

By the way, that "Chief Editor" title is an old one of mine. The new one is:

> Corey Bridges
> Evil Overlord and Corporate Jerkweed

I'm kidding. I know that most everyone reading this understands that we're all on the same side, and that I'm not trying to cover any evil from Zone Labs. At least, I hope everyone understands that. By the way, if you want to post my picture and direct phone number, fine. I knew the risks taking this job. But let's just make sure we don't escalate this to having someone post my children's school schedule, hm?

In the 17 pages of this thread, many questions have come up. I couldn't possibly address every nuance, but as I understand it, these are the top questions:

QUESTION: Is there a way for users to disable communication between ZoneAlarm (the free product) and Zone Labs servers?
ANSWER: Yes. Follow ALL the steps that I listed in a previous post. (Iggy posted the same list). To reiterate: It's not a matter of simply flipping just one switch. Follow all the steps. If you have thoroughly tested ZoneAlarm and found me to be wrong on that, call me. (I'm serious.) My direct number is just a post or two above this... :P

QUESTION: Did earlier versions of Zone Labs products always have ways to disable communications between themselves and Zone Labs servers?
ANSWER: Yes. In one or two of the 4.x versions, we made bad choices in creating the interface for shutting off the communications, and it made the product frustrating almost to the point of unusability. You were, however, ALWAYS able ultimately to shut the communication down. It was just a matter of the cure being worse than the problem. And, importantly, any time that we've made a poor choice on this front, we've ALWAYS corrected it.

QUESTION: Does Zone Labs share information with partner companies?
ANSWER: No matter how many times I am asked this, the answer remains No. At least for sales and marketing information. For example, if you use the Web Filtering feature in ZoneAlarm Security Suite, you can choose to send filtering recommendations to Cerberian, our web filtering partner. Our spam-filtering functionality in ZoneAlarm Security Suite comes from MailFrontier, so you can send them information. We're not collecting your personal information--let alone giving it to someone else.

QUESTION: Why do ZoneAlarm, ZoneAlarm with Antivirus, ZoneAlarm Pro, and ZoneAlarm Security Suite contact Zone Labs servers?
ANSWER: We've covered this lots and lots of times. This post is already plenty long, with more paragraphs to come. If you really want to know, check previous posts by myself or Team Z members. Here's the summation, though, which you've heard before: The ZoneAlarm family of products offers a number of features and services that enhance your security by providing specific information about threats, configurations, and programs. To enable these services, ZoneAlarm security products communicate periodically with Zone Labs servers. Of course, this communication is done on an "opt in" basis; it is your choice to decide to take advantage of these features and services.

By the way, you REALLY don't want this to turn into me giving ultra-official legal statements. Check Point is a big company with many lawyers. If I have to ask them to adjust and approve (in a strictly legal sense) every single statement I make, communication is going to dry up. Trust me. Here's the situation: I am an employee of Zone Labs, a Check Point company. Part of my job is to communicate on behalf of the company. Ergo, I am a spokesman. I am, however, human, and from time to time my posts will contain misspellings, INADVERTANT inaccuracies, and bad puns. When such mistakes are pointed out to me, I correct them as soon as possible. I have not, do not, and will not lie to you.

Here's a pertinant example--and the one I keep bringing up: based on our testing here at Zone Labs, I have said that you can disable communication between ZoneAlarm and the Zone Labs servers, using the steps previously described. If someone here is certain that he's followed all those steps (the ones appropriate to ZoneAlarm, not ZoneAlarm Pro), and he's STILL getting communication between ZoneAlarm and the Zone Labs servers, I will move heaven and earth to get that bug fixed. So far, it doesn't look like that's happened. But again: if it has, let me know, and we'll get on it.

--Corey

ZL_Corey you are a great asset to your company. Excellent post!

Cudni

Thanks, Cudni! It's always nice to get an "attaboy"--especially in the midst of such a passionate discussion as this. Makes my job feel like it's worth doing!

--Corey

Hi, SUMware--

> Corey, can you please explain "You must be 13
> years or older to install this product." on
> ZAF install (see above pic)? Why the age
> restriction?

Hm. Beats the heck outta me. I'll check. I'm afraid I'll have to ask our legal department, so it might take a couple weeks to get a response...

I jest, of course. Hopefully I'll hear back by tomorrow!

--Corey

reply to ZL_Corey
I have been a paid Zonealarm Pro user in the past,but use Sygate now, and have been watching this discussion and several others and have made a personal decision to never use ZA again, even if they resolve the current issues. Reasons?

Zonealarm has really shown it's true colors in the last few years.

Instability, and bloat are some of the reasons I uninstalled ZAPro,and the product seems to get bigger and more bloated with every new version (all I ever needed was a Firewall, not a popup blocker etc.).
But the reason I will never use it again is the response (or lack thereof) concerning past and current issues. Vague references to lawyers and legalities are just ways of saying to me that you are hiding something.
A security product should make every effort to protect it's credibility, and ZA has failed miserably (in my opinion).

Once my trust has been lost, it is very difficult to ever regain it, this may not mean much to a corporation like Zonealarm, but there are a lot of "little people" just like me who feel the same way and we are the ones that Paid to use your Product.

I really don't think ZA will make any significant changes until they have noticed a severe decline in their profit margin so I'm voting with my wallet. Profit and ethics don't seem to play well together nowadays.
When I consider all the people I have referred to ZA in the past, it makes me ill, seems I have a lot of apologies to make now.

Adios ZA, and if in the future I find Sygate doing something like this, I'll dump them too.

reply to ZL_Corey

said by ZL_Corey:

Hi, SUMware--
> Corey, can you please explain "You must be 13
> years or older to install this product." on
> ZAF install (see above pic)? Why the age
> restriction?

Hm. Beats the heck outta me. I'll check. I'm afraid I'll have to ask our legal department, so it might take a couple weeks to get a response...
I jest, of course. Hopefully I'll hear back by tomorrow!
--Corey

From the COPPA site:

Who Must Comply

If you operate a commercial Web site or an online service directed to children under 13 that collects personal information from children or if you operate a general audience Web site and have actual knowledge that you are collecting personal information from children, you must comply with the Children's Online Privacy Protection Act.

*

To determine whether a Web site is directed to children, the FTC considers several factors, including the subject matter; visual or audio content; the age of models on the site; language; whether advertising on the Web site is directed to children; information regarding the age of the actual or intended audience; and whether a site uses animated characters or other child-oriented features.
*

To determine whether an entity is an "operator" with respect to information collected at a site, the FTC will consider who owns and controls the information; who pays for the collection and maintenance of the information; what the pre-existing contractual relationships are in connection with the information; and what role the Web site plays in collecting or maintaining the information.
--
The reason you think I'm way on the left is 'cause you're so far to the right.
Sygate Personal Firewall
Why I mistrust Zone Labs