Film-Tech Cinema Systems
Film-Tech Forum ARCHIVE


  
my profile | my password | search | faq & rules | forum home
  next oldest topic   next newest topic
» Film-Tech Forum ARCHIVE   » Community   » Film-Yak   » Allegation - ZoneAlarm has inbuilt spyware

   
Author Topic: Allegation - ZoneAlarm has inbuilt spyware
Leo Enticknap
Film God

Posts: 7474
From: Loma Linda, CA
Registered: Jul 2000


 - posted 05-29-2007 02:52 PM      Profile for Leo Enticknap   Author's Homepage   Email Leo Enticknap   Send New Private Message       Edit/Delete Post 
quote: National Inquirer

Is your firewall spying on you?

Zone Alarm gets rumbled
By Paul Hales in Jerusalem: Sunday 22 January 2006, 12:39

IT’S OBVIOUS, REALLY, that the best way of penetrating users' PCs to see what they get up to online would be to become a Firewall maker.

Like, when I wanted a Firewall and was too tight to pay for one, I turned to Checkpoint’s little freebie Zone Alarm. It sits there between you and the Internet and lets you know when someone’s trying to sneak in through your backdoor or when a program you’re running tries to connect to the Web for no apparent reason. When you’re as techie as me – not very – you just have to trust it.

Of course, Checkpoint’s an Israeli company and as a foreign journalist working in Israel you know the hyperactive security services here would like to keep tabs on you. And you know that they do. It has been confirmed to me by a security sources here that mobile phone conversations I have had have been listened to – and in circumstances which I won’t reveal, the contents of a call I have been involved in have actually been relayed back to me.

It’s part of the game – like the airport interrogation, or the surreptitious copying of your notepad while you’re off having a body search. You know what goes on but you have a job to do and just get on with it – hoping that what you get up to in the legitimate pursuit of your business won’t upset anyone to the extent that they’ll come break your door down and cart you off somewhere.

Now, the handsomely-named Mr Cringely has revealed that a colleague of his at Infoworld noticed that Zone Alarm 6.0 was sneakily sending off data to four different servers. Cringely says that Zone Labs (acquired by Checkpoint in March of 2004) at first denied the activity for a couple of months before deciding the software had a "bug" even though, as he points out, "the instructions to contact the servers were set out in the program’s XML code."

The company says it will fix the "bug" soon. In the meantime you can work around it by adding:

# Block access to ZoneLabs Server
127.0.0.1 zonelabs.com
to your Windows host file.

The "bug" seems to be present in the retail version of Zone Alarm, so there’s no telling what the freebie gets up to. We called Checkpoint here in Israel to find out, but were referred to a US spokeszoner. Trouble is they’ll all be in bed there on this sunny Sunday morning.

...which, of course, begs the question as to what spyware is present in every other firewall product on the market, not least the one built into Windows. I use the firewall in Iolo System Mechanic Pro myself, and because it's a paid-for product would hope that at least they aren't selling my browsing data for commercial purposes. But without being a programming expert (which I'm not), there's no way of telling, I guess.

 |  IP: Logged

Frank Dubrois
Jedi Master Film Handler

Posts: 896
From: Cleveland, OH
Registered: Mar 2005


 - posted 05-29-2007 03:03 PM      Profile for Frank Dubrois     Send New Private Message       Edit/Delete Post 
If you pay for it, and it doesn't disclose that it's sending information, I believe you might have a lawsuit.

 |  IP: Logged

Mike Blakesley
Film God

Posts: 12767
From: Forsyth, Montana
Registered: Jun 99


 - posted 05-29-2007 06:34 PM      Profile for Mike Blakesley   Author's Homepage   Email Mike Blakesley   Send New Private Message       Edit/Delete Post 
I would bet that anything the software is doing is covered by the "EULA" (End-user license agreement) that you have to accept either by clicking on a button when you install it, or (in some cases) you accept it simply by opening the package.

 |  IP: Logged

Joel N. Weber II
Expert Film Handler

Posts: 115
From: Somerville, MA, USA
Registered: Dec 2005


 - posted 05-29-2007 08:39 PM      Profile for Joel N. Weber II   Email Joel N. Weber II   Send New Private Message       Edit/Delete Post 
Even if you are a programming expert, the complexity of modern computer systems makes them pretty much impossible to audit perfectly and completely.

Ken Thompson's paper Reflections on Trusting Trust explains how just looking at the C source code for a system isn't good enough to audit it. And the work behind that paper was done when computers were much simpler and less capable than they are today.

 |  IP: Logged

David Stambaugh
Film God

Posts: 4021
From: Eugene, Oregon
Registered: Jan 2002


 - posted 05-29-2007 08:56 PM      Profile for David Stambaugh   Author's Homepage   Email David Stambaugh   Send New Private Message       Edit/Delete Post 
As far as Windows firewall, there are legions of Microsoft haters who spend their every waking hour scrutinizing everything that Windows does, trying to find things like, say, the MS firewall "phoning home". It's not hard to prove something like that. Has anyone alleged that is happening? Not that I'm aware of. People would love to prove it though. It would be major news.

 |  IP: Logged

Leo Enticknap
Film God

Posts: 7474
From: Loma Linda, CA
Registered: Jul 2000


 - posted 05-30-2007 10:26 AM      Profile for Leo Enticknap   Author's Homepage   Email Leo Enticknap   Send New Private Message       Edit/Delete Post 
I'd have thought it should be possible to establish that by connecting a PC to another PC which simulates the actions of an Internet server without actually being connected to the net, but which in reality logs all the connections the PC being examined tries to make. If one program repeatedly tries to 'phone home', that would show up in the log, I'd guess.

 |  IP: Logged

Joel N. Weber II
Expert Film Handler

Posts: 115
From: Somerville, MA, USA
Registered: Dec 2005


 - posted 05-30-2007 10:51 AM      Profile for Joel N. Weber II   Email Joel N. Weber II   Send New Private Message       Edit/Delete Post 
If something blatantly tries to phone home, that ought to show up in a log, yes.

However, there are more or less legitimate reasons for software to phone home, such as to collect security updates. That might provide a channel over which small amounts of additional information could be smuggled.

If the computer you're doing your logging on is running software written by the same party as the evil software running on the computer being monitored, the computer doing the monitoring might be filtering the bad stuff out so that you don't see it. And there's always a chance that widely used software has security bugs that have been discovered by someone who is exploiting them in a subtle fashion that hasn't been noticed.

 |  IP: Logged

Peter Berrett
Jedi Master Film Handler

Posts: 602
From: Victoria, Australia
Registered: Nov 2000


 - posted 05-31-2007 03:55 AM      Profile for Peter Berrett   Author's Homepage   Email Peter Berrett   Send New Private Message       Edit/Delete Post 
How is this for an idea?

If one put on TWO or even THREE firewalls at the one time they might block each others home phoning?

cheers Peter

 |  IP: Logged

Frank Angel
Film God

Posts: 5305
From: Brooklyn NY USA
Registered: Dec 1999


 - posted 05-31-2007 06:49 AM      Profile for Frank Angel   Author's Homepage   Email Frank Angel   Send New Private Message       Edit/Delete Post 
quote: Peter Berrett
If one put on TWO or even THREE firewalls at the one time they might block each others home phoning?
You pretty much will shut yourself down. Sometimes even one agressive firewall can be set so that everything slows down to a crawl. It becomes a self defeating exercise.

 |  IP: Logged



All times are Central (GMT -6:00)  
   Close Topic    Move Topic    Delete Topic    next oldest topic   next newest topic
 - Printer-friendly view of this topic
Hop To:



Powered by Infopop Corporation
UBB.classicTM 6.3.1.2

The Film-Tech Forums are designed for various members related to the cinema industry to express their opinions, viewpoints and testimonials on various products, services and events based upon speculation, personal knowledge and factual information through use, therefore all views represented here allow no liability upon the publishers of this web site and the owners of said views assume no liability for any ill will resulting from these postings. The posts made here are for educational as well as entertainment purposes and as such anyone viewing this portion of the website must accept these views as statements of the author of that opinion and agrees to release the authors from any and all liability.

© 1999-2020 Film-Tech Cinema Systems, LLC. All rights reserved.