site Search:


 
   
In the Lion's Den
'Comet Cursor' creators defend application
by Karl Bode Thursday 06-Jun-2002 tags: business · privacy
For the past week, the creators of the "comet cursor" custom mouse cursor application have found themselves engaged in a venomous battle with users in the Lavasoft forums. The program creators are hoping to remove the application from the AdAware "blacklist", while claiming the application is harmless and they've been mislabeled as a "spyware company". Security consultants like Steve Gibson claim that just isn't the case.

view: topics flat text 
Post a:

Curious3
Thanks
Premium
join:2001-10-07
Quincy, MA

They had it coming,

Guily till proven innocent. Guess what? Judgement = Guilty. You curse yourself and take the chance when you do upon this. Spy and you pay the consquences, you knew the risks and yet you took them. 4 million users using it, do you expect all 4 million to be stupid and be computer senseless? If you did, then you're greater mistake. There was no chance that this would be not discovered with such advanced programs in the market such as ZoneAlarm. Well, look what you did, you regret it but you can't turn it back. Win our trust back? Forget it.
--
»www.langames.net

saber11
Check Six
Premium
join:2000-06-09
Clayton, OH

Re: They had it coming,

No kidding!!! If comet had explained itself, and let users "CHOOSE" to install it's software that's one thing. But at one time I went to four different sites and had comet try to instal itself 4 times!!

Moral of the story? Perception is reality.

We will now have a moment of silence for comet cursor............Ehhh that's about long enough.
--
---"Gadget Bent"---

SAM Hunter$

join:2001-05-11
USA

Re: They had it coming,

Your posting sig of "Check Six" is very appropriate for your cool Avatar of a F-14 Tomcat. In the furball of a dogfight the F-14 is wallowing pig that bleeds energy at the same rate a screen door leaks water. Heck, I've always suspected that half the reason for a RIO is because of the Tomcat's performance. Stay alive--strap yourself to an F-15E or F-16. Better yet, an F-22 when they come out.
--
"Only the dead have seen the end of war." Plato

dnoyeB
Ferrous Phallus

join:2000-10-09
Southfield, MI
If you weren't allowed to Choose, how did you

A. know comet cursor was installing itself
B. Stop comet cursor from installing itself?
Net Force$

join:2002-04-25
USA
Computer "experts" are such unreliable geeks! I can go to six different articles on this subject and half say harmless others swear Armageddon!

One important fact, it is in Symantec Norton System Works 2002, if you delete comet cursor then certain suites or functions of the program will not work! Deleting it eliminates several .dll files that are needed.

homebrewer5

join:2001-01-23
Lowell, MA

Outta Here

I don't allow it at all on my business network. I run Ad-Aware on a regular basis.
--
Bavarian Berthold

ArchAngel21x
Waiting For iPhone 5
Premium
join:2001-10-28
Lincoln, NE
Reviews:
·Internet Nebraska

Since When..........

It's bad enough when companies add stuff to their freeware and don't tell you about it. Since when did companies think it was acceptable to put stuff on your computer without your permission. (From what I know this has been going on since cookies were invented). More to the point, why is this type of behavior allowed to continue?
--
"Death Is Irrelevant"

Blizzard0

join:2000-06-27
Beverly Hills, CA

You are the weakest Link ....GOODBYE

I pray the businesses with models that rely on this either go bankrupt or find a way to do the things they wanna do by actually helping the people they spy on.

Like create an install that doesn't get snuck in when you install another program. Use Some comon sense people and maybe you will succeed at a true business model.
--
I too was a attbi hater but now with this new service my connection is to slow to complain ...
jmargel

join:2001-03-07
Northumberland, PA

Down w/ spyware

homebrewer.. the only problem w/ ad-aware is that it doesnt do automated scans. I dont have the time to manually scan 200+ machines every week. And I shouldn't expect my users to as well.

Spyware like CC needs to be stopped. As a home user & someone who's in charge of the networking @ my place of work which includes emergency response systems, this stuff needs to be illegal, and held accountable by federal law.

Enough is enough already! If my network gets penetrated by hackers, we call the FBI.. But this spyware has gotten so bad, that it's not much different than being hacked into.

[text was edited by author 2002-06-06 15:41:49]
barky
Premium
join:2001-03-17
San Diego, CA

Re: Down w/ spyware

theres no problem with adaware. it wasn't designed for corporate use, was it? As god of my own world, thanks to me for adaware being free.
froggy58

join:2002-05-07
Cape Canaveral, FL
jmargel,

Actually it can if you order(buy) the AdAware Plus module. It allows the Ad-Watch Module part rest in the tray monitoring spyware modules(mostly spycookies) and kills them live. With it running in the tray, I've hardly had to do an AdAware Scan because they usually come up with no spyware. Not sure it will stop the CC from coming in the way it does, for that I'd look into a program called WormGuard. It monitors(heuristic monitoring) exe's, viruses, trojans and their attempts to change OS settings.

WormGuard runs by a hook(non-active unless triggered) and if the wrong thing is requested by whatever the hook starts the process and warns you that this bit is trying to run, are you sure you want to do it or quarantine it.

For the past two years with those two programs running(WormGuard & AdWatch) on my machine, I've not had to run the bigger active(tray) virus scanner. I only do a full system Virus Scan once a week manually, and not seen a virus in two years.

Frog
froggy58

join:2002-05-07
Cape Canaveral, FL
Here you go.

I was sure they had Corp Lic so here it is. At the very bottom, unlimited license:

»esd.element5.com/product.html?pr···d=501541

Frog

AkumalDave
Life's A Beach
Premium,MVM
join:2001-04-20
Minneapolis, MN
said by jmargel:
.. the only problem w/ ad-aware is that it doesnt do automated scans. I dont have the time to manually scan 200+ machines every week. And I shouldn't expect my users to as well.
You might want to take a look at Pest Patrol - available through Sunbelt Software ( »www.sunbelt-software.com/product.cfm?id=911 ) . It does have a memory-resident module that can flag Spyware when it attempts to install. After I emailed Stu (of the Win2k newsletter and Sunbelt), he added a feature comparison table with Ad-aware that helps assess performance. The only beef I have with Pest Patrol is that it continually flags my 16-bit and MS-DOS apps that use NTVDM.exe as containing the Wnuke4 pest. I've swept my system repeatedly with anti-virus software and my version of NTVDM.exe appears to be legit, so I feel this is a false alarm. Emails to Tech Support have gone unanswered. Other than that, I like the program.

Dave (not affiliated with Sunbelt Software, other than as a customer)

Wills

join:2001-01-03
Port Charlotte, FL

Comet cursor is the devil.

And labelling that bafoon Steve Gibson as a "security consultant" isn't much better.

jplove71
Premium
join:2001-03-16
Colorado Springs, CO

Re: Comet cursor is the devil.

said by Wills:
And labelling that bafoon Steve Gibson as a "security consultant" isn't much better.
You're kidding right? You actually think that Steve Gibson is a 'bafoon'?

The correct spelling for 'bafoon' is buffoon.
--
Go Diamondbacks!

Wills

join:2001-01-03
Port Charlotte, FL

Re: Comet cursor is the devil.

No, I'm not kidding, he IS a bafoon. (And I'll spell it however I please)

Read up on his findings about XP bringing the internet to his knees. Then as soon as your done, educate yourself on the protocols and reasons he gives as to why, and you will quickly see that when it comes to internet security, Steve Gibson is just this side of retarded.

Steve Gibson only appeals to one type of person. They type that knows absolutley nothing about security, protocols, and thinks that Zone-Alarm is a good firewall, and has no idea what a real firewall is.

And the sad thing is that people that fit the above statement go to his site for knowledge and answers and usually leave in worse condition than they started.
--
Abit VP-6 twin 800EB's @ 1002 Mhz.Proud member of the XDC.

Copzilla$
Mmm... Donuts

join:2000-10-10
Friendswood, TX

Re: Comet cursor is the devil.

said by Wills:
No, I'm not kidding, he IS a bafoon. (And I'll spell it however I please)

Read up on his findings about XP bringing the internet to his knees. Then as soon as your done, educate yourself on the protocols and reasons he gives as to why, and you will quickly see that when it comes to internet security, Steve Gibson is just this side of retarded.
Uhhh, just an observation, but since XP was found shortly after its release to have major security flaws, which were patched... to which a relieved Gibson has stated his thanks...

Seems to me that someone calling Gibson a retarded "bafoon" is kind of a self-revealing statement.

racer9876
Defender Of The Universe
Premium
join:2000-07-03
Rosamond, CA
Have you gone to his web site »www.grc.com ? He is probably one of the best security consultants there is. Go and read his article on the DoS attack he had last year.

tenbase

join:2000-07-19
Alexandria, VA

Re: Comet cursor is the devil.

And then read this.

Wills

join:2001-01-03
Port Charlotte, FL
Yes, and like I said, if you knew anything about network/internet security you would see that he is STILL an idiot.
--
Abit VP-6 twin 800EB's @ 1002 Mhz.Proud member of the XDC.

jplove71
Premium
join:2001-03-16
Colorado Springs, CO

Re: Comet cursor is the devil.

And what about you? What makes you an authority on network/internet security? I took a peek at this page and noticed that you don't have a single post in the Security Forum here.
--
Go Diamondbacks!

tenbase

join:2000-07-19
Alexandria, VA

Re: Comet cursor is the devil.

Take a peek at any serious security forum/newsgroup/mailing list on the web, then try to find anything from Steve Gibson.
--
I would kill everyone in this room for a drop of sweet beer..

dnoyeB
Ferrous Phallus

join:2000-10-09
Southfield, MI
I think he is an intelligent man whose decisions unfortunately are not always based on his intelligence.

And unfortunately I have to say similar about theregister.co.uk who sort of has been going againct grc for a while now. They too seem to have a political agenda these days...
--
dnoyeB"Then said I, Wisdom [is] better than strength: nevertheless the poor man's wisdom [is] despised, and his words are not heard. " Ecclesiastes 9:16
The government is pricing our rights our of our reach.

tenbase

join:2000-07-19
Alexandria, VA
Interestingly, the flaws found in XP had pretty much nothing to do with what Stevearino had been crowing about for months beforehand.
--
I would kill everyone in this room for a drop of sweet beer..

jfcjrus
Premium
join:2001-12-09
New England

Who do they think they're fooling?

They are miffed that AdAware has labeled them a nasty/spyware?

I wonder, how many folks have reported to AdAware:
"Hey! CC is improperly being labeled as a nasty! I installed it and it is only doing what I expected. You made a mistake with this great little utility! Fix your ref file, will ya?"
Not to many, I gather.

Personally, I think that this is a great example of us users growing resistance and awareness of this crap. And it's catching some vendors by surprise.
We don't like it and will not put up with it.
NO amount of spin will fool us.

Seeya


dnoyeB
Ferrous Phallus

join:2000-10-09
Southfield, MI

Re: Who do they think they're fooling?

None quite naturally. But this is a bad thing. People are deferring their intelligence to an application. Now this means if adaware goes corrupt how will the users detect that if adaware goes unchallenged?

Their is no question if adaware wants to consider themselves doing a legitimate job then they MUST have an appeal process. Without such adaware is no different from Dubya scaring up support for itself. Their is no justice produced by calling guilty an innocent man. Their is not even justice from calling a guilty man guilty if their is no evidence to support it.

If they do not legitimately review comet cursor's claims, how can we believe any of their "convictions?"
--
dnoyeB"Then said I, Wisdom [is] better than strength: nevertheless the poor man's wisdom [is] despised, and his words are not heard. " Ecclesiastes 9:16
The government is pricing our rights our of our reach.

Nightfall
My Goal Is To Deny Yours
Premium,MVM
join:2001-08-03
Grand Rapids, MI
Reviews:
·Site5.com
·Comcast
·Callcentric

$20,000,000 down the toliet

From the article
quote:

"It proved nearly impossible to make money from it with any real scale," Rosen wrote, noting that Comet has burned its way through $20 million since launching in 1997, while generating total revenues of less than $200,000.

Jumpin' Jesus on a pogo stick!

$20 million since lauching for a total revenue of $200,000? I tell you, that is smart business! I wish I could get $20 million from investors and turn it into 1% ($200,000) revenue in 5 years. This company must be owned by the government or something.
--
Nightfall - »www.nightfall.net

[text was edited by author 2002-06-06 16:19:33]

Frylock2

join:2002-04-19
Versailles, KY

Spyware...

Spyware is spyware is spyware is spyware is spyware is spyware. It is just that simple. Comet Cursor trying to get a "clean slate" is like trying to say that a serial murderer is really an upstanding citizen, and should walk the streets freely.
--
"He needs an a$$-whooping is what he needs!"

hurleyp

join:2000-06-20
Ottawa, ON

Re: Spyware...

How do you get yourself "un-blacklisted"? Suppose Comet Cursor (or anyone on the list) decides to go legit and removes all traces of the dreaded spyware, and releases a squeaky clean product. Are you branded as a spy for life? There should be a way to clear your name.

Just wondering.

Paul

dtheduke

join:2001-08-09
Leesburg, FL

Re: Spyware...

If they can clear their name it will take a long time. If they actually gave you a choice on installing their scumware but they dont.To really see comet cursor in action go to www.sanrio.com. You have been warned though.

Frylock2

join:2002-04-19
Versailles, KY
said by hurleyp:
How do you get yourself "un-blacklisted"? Suppose Comet Cursor (or anyone on the list) decides to go legit and removes all traces of the dreaded spyware, and releases a squeaky clean product. Are you branded as a spy for life? There should be a way to clear your name.
Well... there doesn't seem any indication that they will remove their spyware and become legit. And even if they actually did remove the spyware and became legit, would the informed pulblic then consider them legit? I know I would still stay away from CC like the plague.
--
"He needs an a$$-whooping is what he needs!"

SAM Hunter$

join:2001-05-11
USA
said by Frylock:
Spyware is spyware....It is just that simple. Comet Cursor trying to get a "clean slate" is like trying to say that a serial murderer is really an upstanding citizen, and should walk the streets freely.
You seem both interested and passionate about this specific subject. Help me out and respond to my other post below titled: "The Facts?" I am including in this posts the most relevant part of that post. Thanks--I would appreciate your input.

"Based upon what I read these are the relevant issues:

1. Comet Cursor can and does get installed on people's PCs without their permission.
2. Comet Cursor can be installed a without users knowledge.
3. Comet Cursor does not collect any personal data on any user or their machine. It simply installs a cookie like number which does nothing more than indicate when that particular number visits--much like a cookie. It only reveals the number. So if you are Joe Smith of New York City who works as a stock broker who has comet cursor with number 123456 assigned all that is revealed when you "visit" is 123456 is visiting--nothing more.
4. No other information is gathered and nothing about you is either collected or sold or distributed to third parties.
6. The owners of comet cursor in the forum gave simple instructions so that you could change that number to any number you want so it would not be unique to you or anyone else.
5. The owners, at least in the forum, seem to be genuinely concerned with correct or modifying the current situation so that the end result is comet cursor could not be downloaded to your computer from the Internet without your permission and knowledge.
6. SOME of the inadvertent or covert downloads are a result of users having the security settings on their browser to low. (When I adjusted my settings it stopped comet cursor. Prior to that I was suffering with it being downloaded as discussed above.)
7. Some programs such as Norton System Works 2002 come with comet cursor installed on it. If you delete the comet cursor then certain features of th program become inoperable.

I find AdAware's silence very disturbing and somewhat suspicious. Why don't they say WHY they have blacklisted comet cursor and respond to the comet cursor's owner's claims?

By the way here is a question, (only those who are sincere in answering it and have knowledge of the subject need respond.)

What are the features or traits of a program that make it spyware?

Thank you."
--
"Only the dead have seen the end of war." Plato

Mike
Premium,Mod
join:2000-09-17
Pittsburgh, PA
Host:
W.O.W.
FairPoint
World of Warcraft
Site Tools
Verizon Wireless

comet cursed

"Comet Cursor"
Hell, that even sound evil.

The situation is like the "company" standing in front of a dead body splattered in warm blood with a still smoking shotgun barrel and an ejected shell at their heels saying "I didn't do it! I'm as innocent as OJ!"

starstuff
Fly By Wire
Premium
join:2001-12-05
Mcallen, TX

Ok. it is spyware... Now how do you get rid of it?

I have the spyware junk in my toshiba satellite 5005 laptop... I don't know if it came with the computer or it was installed by some web site or by toshiba's software updates.

Lavasoft reports the virus to reside in c:\toshiba\ivp\swupdate\csinstall.exe Should I just delete the file?

SAM Hunter$

join:2001-05-11
USA

The facts?

Yesterday I went to the Lavasoft Forum and read all of the four pages of posts. It was very interesting and many ways informative. It was in some ways disgraceful at least in the rudeness and disruptive posts made by certain people. (Kudos to the DSLR moderator who posted on this issue and admonished people to knock it off!)Thankfully, they represented the minority. The people in question simply wanted to be argumentative, insulting, and rude. They wouldn't respond to direct questions nor stay on the issue of the forum which was what could the two owners or corporate officers of Comet Cursor do to eliminate most of the complaints about comet cursor and to get off the AdAware black list.

Based upon what I read these are the relevant issues:

1. Comet Cursor can and does get installed on people's PCs without their permission.
2. Comet Cursor can be installed a without users knowledge.
3. Comet Cursor does not collect any personal data on any user or their machine. It simply installs a cookie like number which does nothing more than indicate when that particular number visits--much like a cookie. It only reveals the number. So if you are Joe Smith of New York City who works as a stock broker who has comet cursor with number 123456 assigned all that is revealed when you "visit" is 123456 is visiting--nothing more.
4. No other information is gathered and nothing about you is either collected or sold or distributed to third parties.
6. The owners of comet cursor in the forum gave simple instructions so that you could change that number to any number you want so it would not be unique to you or anyone else.
5. The owners, at least in the forum, seem to be genuinely concerned with correct or modifying the current situation so that the end result is comet cursor could not be downloaded to your computer from the Internet without your permission and knowledge.
6. SOME of the inadvertent or covert downloads are a result of users having the security settings on their browser to low. (When I adjusted my settings it stopped comet cursor. Prior to that I was suffering with it being downloaded as discussed above.)
7. Some programs such as Norton System Works 2002 come with comet cursor installed on it. If you delete the comet cursor then certain features of th program become inoperable.

I find AdAware's silence very disturbing and somewhat suspicious. Why don't they say WHY they have blacklisted comet cursor and respond to the comet cursor's owner's claims?

By the way here is a question, (only those who are sincere in answering it and have knowledge of the subject need respond.)

What are the features or traits of a program that make it spyware?

Thank you.
--
"Only the dead have seen the end of war." Plato


[text was edited by author 2002-06-07 14:23:09]

[text was edited by author 2002-06-07 14:30:25]

starstuff
Fly By Wire
Premium
join:2001-12-05
Mcallen, TX

Re: The facts?

Did you read wired's article? see it at: »www.wired.com/news/privacy/0,184···,00.html

and in particular: »users.rcn.com/rms2000/privacy/comet.htm

Looks like Richard Smith description is more than just planting a cookie.

SAM Hunter$

join:2001-05-11
USA

Re: The facts?

said by starstuff:
Did you read wired's article? see it at: »www.wired.com/news/privacy/0,184···,00.html

and in particular: »users.rcn.com/rms2000/privacy/comet.htm

Looks like Richard Smith description is more than just planting a cookie.
Please don't be so vague or general in your posts. Yes I read it. Where did you think I got my facts and opinions that I specifically list in detail--by crystal ball?

I also read all of the many Lavaware forum posts. Did you? In my post I stated specific facts and opinions and asked questions. So which of my opinions or facts or incorrect?

How about answering the question I ask about what defines whether a program is spyware? What is the specific trait--especially in comet cursor that makes it spyware. I am not saying it is or is not--but what is the standard? And again, in my statements and opinions I list what is incorrect in your opinion? Speak up, don't refer to links or to what someone else may have said somewhere in some article someplace. If you think I've got something wrong then tell me and be specific. Which of the seven points I list are incorrect and how are they incorrect?

What does comet cursor do besides assign you an unique number you can change if you want so it is not unique and it shows what websites you've visited? What personal identifying information other than that does it transmit? How is that different from a cookie like doubleclick?

And finally, just because someone says something is true, Richard Smith for instance, doesn't automatically make it true. Especially when he says it about something over three years and one half years ago!!! Thats right, his comments accurate or not refer to how the comet cursor program was in January 1999! Not now! Think maybe anything is different since then? Based upon all the articles and forum posts it is a lot different.
--
"Only the dead have seen the end of war." Plato


[text was edited by author 2002-06-08 12:06:57]
pierce2

join:1999-09-22
Santa Cruz, CA

Re: The facts?

many web URL's of commerce sites etc contain personal ID tracking info such as customer ID.... anything that collects and transmits a log of all the URL's you visit even if it doesn't identify you by name is an invasion of privacy.

audiomax
All Else Fails Pull The Plug

join:2002-02-20
Grand Rapids, MI

kill comet cursor

all i will say is that i hate how comet cursor installs itself without user approval. spyware by any other name is still spyware. the websites i visit are noones business anyways. yes to ad aware ! death to comet cursor
--
today we salute you, mr chinese food delivery guy
selkind

join:2001-06-22
New City, NY

is ad-aware configurable?

Assume that I, as a thinking, adult person, after researching the issue, decide that I'm willing to take the risk in using Comet Cursor (or any other software that I decide is worth the risk). Does Ad-Aware allow me to remove specific software from its s*** list when I install it, or at any time after that?

I'd like to know this answer before I plunk down money for Ad-Aware. If not, I would never dream of putting Ad-Aware on my machine.
selkind

join:2001-06-22
New City, NY

Re: is ad-aware configurable?

Never mind, I did my own research (should have in the first place!). It apparently lets you pick & choose what to delete.

Sunday, 03-Jun 17:15:23 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 12.5 years online © 1999-2012 dslreports.com.