FicmanS
Premium
join:2005-01-11
Brownsburg, IN
clubs: | reply to AnonProxy
Re: Sears where America gets spyware
Looks like a Duck
Quacks like a Duck
Must be a Duck... |
|
Noah Vail
Premium
join:2004-12-10
Lorton, VA
 ·RoadRunner Cable
| A Platypus has a bill and webbed feet.
But I don't know if it quacks. Mustbe I have a bit more to learn. I did learn this though.
..."Second, it is essential to understand that there are two groups of members in the My SHC Community, those that only fill out a profile and simply participate (the vast majority), and those that are invited and explicitly agree to have their Internet browsing tracked (a small sub-sample). The sub-sample is small by design, and the data that is collected is aggregated, anonymous and used by Sears Holdings to improve our customers' Internet experience and help guide the future development of Community.
This distinction is crucial because Mr. Googins' suggests that all members are tracked - they are not. To clarify, Mr. Googins states that "Every website visitor that joins the Sears community installs software that acts as a proxy to every web transaction made on the compromised computer." This statement is absolutely, incorrect. In actual fact, it is impossible to become a tracked member of the My SHC Community by simply joining through the website link or general e-mail. Becoming a tracked member of the My SHC Community is by invitation only. Invitations are generated randomly and kept to a minimum by design...."
There is quite a bit more at
»community.ca.com/blogs/securitya···ity.aspx
I'm not sure if this is the latest, but it appears we may not have all the facts yet.
I'm curious if Sears can redeem itself.
NV
--
My children used to Speak in Tongues. But after years of Speech Therapy, English is their First Language! |
|
Beth64
Time Is An Illusion. Lunchtime Doubly So
join:2003-11-17
Brooklyn, NY
·Optimum Online
| Hi!
You're right, there is quite a lot more at »community.ca.com/blogs/securitya···are.aspx , like this little comment from January 3rd, 2008. I quote;
"OMG. It gets worse! check out a sears site managemyhome.com. Once you register, you can look up major purchases for ANY address. All you need to do is enter a name address and phone number and if the person attached to that info has made a major purchase at sears you get that info!! They have no real controls in place -- you have to enter an onscreen code and they say that keeps your info safe, but that does not stop someone from entering other people’s contact info to see their product purchases. This brings casing someone's house to a whole new level.
I contacted the compliance e-mail listed on the site, and never got a response, which confirms that Sears does not care about the customer or customer privacy. If anyone has any ideas about how to get in contact with someone over there that might care about customer privacy, I'd welcome the ideas. That service should really be off the site. What do you have to say to that Rob?
January 3, 2008 11:09 AM "
Any brave souls who aren't afraid to clean a bit of malware from their PCs care to try this one for themselves? 
--
Cheers,
Elizabeth.
"Flying is learning how to throw yourself at the ground and miss." ~Douglas Adams (3/11/1952-5/11/2001 - Rest In Peace, Celestial Hitchhiker.)
|
|
Noah Vail
Premium
join:2004-12-10
Lorton, VA
·RoadRunner Cable
| That IS a problem.
Unless I'm missing something, it's a different problem.
This isn't directly connected with the spyware thing, unless they're both under an umbrella of gross incompetence.
***update
I did NOT read the blog in it's entirety as I believed I had.
Here's our major players:
1: Rob Harles, the Senior VP for Sears' SHC
2: Benjamin Googins senior researcher for CA Anti-Spyware
The history, all have read by now.
On 12/22 RH publishes a retort - I posted a portion above.
BG counters by posting screenshots that disprove all of RH's posting, point-by-point.
I find a response by RH on 12/29 at this link...
»community.ca.com/blogs/securitya···ity.aspx
RH largely restates his previous postings, but offers no evidence to any of his claims.
BG responds by illuminating said lack of evidence.
The tally as of today
CA-Blog - Benjamin Googins - 3 points
Sears SHC - Rob Harles - 1 point, but suffers 1 point penalty for unsubstantiated claims.
Rob Harles appears to have the ball, but is refusing to make a run with it or even make any plays at this point.
It's not looking good for Sears.
And - yuk - I appear to be praising CA in some minor way.
NV
--
My children used to Speak in Tongues. But after years of Speech Therapy, English is their First Language! |
|
Vamp9190
join:2002-02-11
Chantilly, VA | reply to Beth64
Re: A Platypus has a bill and webbed feet.
That is scary...
And the really sad part is that some thief has probably used that to break in and rob a person's house.
Sears needs to get a handle on this....fast. They are playing with fire. |
|
