Seems sears has added spyware to thier lineup.

Here is a summary of what the software does and how it is used. The proxy:

1.. Monitors and transmits a copy of all Internet traffic going from and
coming to the compromised system.

2.. Monitors secure sessions (websites beginning with 'https'), which may
include shopping or banking sites.


3.. Records and transmits "the pace and style with which you enter
information online..."


4.. Parses the header section of personal emails.


5.. May combine any data intercepted with additional information like
"select credit bureau information" and other sources like "consumer
preference reporting companies or credit reporting agencies".

http://www.schneier.com/blog/archive...rs_engagi.html

Best Regards
Tom

"azotic" wrote:

Seems sears has added spyware to thier lineup.

Here is a summary of what the software does and how it is used. The proxy:



http://community.ca.com/blogs/securi...for-sears.aspx

Unbelievable.

On 2008-01-05, Wes wrote:
"azotic" wrote:

Seems sears has added spyware to thier lineup.

Here is a summary of what the software does and how it is used. The proxy:



http://community.ca.com/blogs/securi...for-sears.aspx

Unbelievable.


Sears is in tye hands of some kind of a corporate raider, who cares
about nothing, besides making a quick buck.

i

On Jan 5, 5:56*am, "azotic" wrote:
Seems sears has added spyware to thier lineup.

Here is a summary of what the software does and how it is used. The proxy:

* 1.. Monitors and transmits a copy of all Internet traffic going from and
coming to the compromised system.

* 2.. Monitors secure sessions (websites beginning with 'https'), which may
include shopping or banking sites.

* 3.. Records and transmits "the pace and style with which you enter
information online..."

* 4.. Parses the header section of personal emails.

* 5.. May combine any data intercepted with additional information like
"select credit bureau information" and other sources like "consumer
preference reporting companies or credit reporting agencies".

http://www.schneier.com/blog/archive...rs_engagi.html

Best Regards
Tom

What amazes me is that this is legal.

TMT

Ignoramus8343 wrote:
On 2008-01-05, Wes wrote:
"azotic" wrote:

Seems sears has added spyware to thier lineup.

Here is a summary of what the software does and how it is used. The proxy:



http://community.ca.com/blogs/securi...for-sears.aspx

Unbelievable.


Sears is in tye hands of some kind of a corporate raider, who cares
about nothing, besides making a quick buck.

i

It also take an idiot to sign up left and right for all sorts of
questionable services. It's not even clear what signing up for
hsc(whatever that even is) does for a user.

On Jan 5, 5:56*am, "azotic" wrote:
Seems sears has added spyware to thier lineup.

Here is a summary of what the software does and how it is used. The proxy:

* 1.. Monitors and transmits a copy of all Internet traffic going from and
coming to the compromised system.

* 2.. Monitors secure sessions (websites beginning with 'https'), which may
include shopping or banking sites.

* 3.. Records and transmits "the pace and style with which you enter
information online..."

* 4.. Parses the header section of personal emails.

* 5.. May combine any data intercepted with additional information like
"select credit bureau information" and other sources like "consumer
preference reporting companies or credit reporting agencies".

http://www.schneier.com/blog/archive...rs_engagi.html

Best Regards
Tom


3.. Records and transmits "the pace and style with which you enter
information online..."


Anyone understand what this means?

TMT

"Too_Many_Tools" wrote in message
...
On Jan 5, 5:56 am, "azotic" wrote:
Seems sears has added spyware to thier lineup.

Here is a summary of what the software does and how it is used. The proxy:

1.. Monitors and transmits a copy of all Internet traffic going from and
coming to the compromised system.

2.. Monitors secure sessions (websites beginning with 'https'), which may
include shopping or banking sites.

3.. Records and transmits "the pace and style with which you enter
information online..."

4.. Parses the header section of personal emails.

5.. May combine any data intercepted with additional information like
"select credit bureau information" and other sources like "consumer
preference reporting companies or credit reporting agencies".

http://www.schneier.com/blog/archive...rs_engagi.html

Best Regards
Tom


3.. Records and transmits "the pace and style with which you enter
information online..."


Anyone understand what this means?

TMT

Maybe a rutine to determine if a real person is entering information or
some kind of online bot is spoofing.

Best Regards
Tom.

Too_Many_Tools writes:

What amazes me is that this is legal.

TMT

Read the followup.

http://community.ca.com/blogs/securi...community.aspx

Apparently they tell people what will happen when they join.



--
Posted via a free Usenet account from http://www.teranews.com

Too_Many_Tools wrote:

3.. Records and transmits "the pace and style with which you enter
information online..."


Anyone understand what this means?


I don't know about you but I keyboard with great elan.


Wes

On Jan 5, 8:12*pm, Too_Many_Tools wrote:
On Jan 5, 5:56*am, "azotic" wrote:





Seems sears has added spyware to thier lineup.

Here is a summary of what the software does and how it is used. The proxy:

* 1.. Monitors and transmits a copy of all Internet traffic going from and
coming to the compromised system.

* 2.. Monitors secure sessions (websites beginning with 'https'), which may
include shopping or banking sites.

* 3.. Records and transmits "the pace and style with which you enter
information online..."

* 4.. Parses the header section of personal emails.

* 5.. May combine any data intercepted with additional information like
"select credit bureau information" and other sources like "consumer
preference reporting companies or credit reporting agencies".

http://www.schneier.com/blog/archive...rs_engagi.html

Best Regards
Tom

What amazes me is that this is legal.

TMT- Hide quoted text -

- Show quoted text -

It looks like Sears has a self induced problem....

I wonder how many more companies are doing this and just not getting
caught.

TMT

Sears accused of violating consumer fraud law

Retailer Sears, Roebuck & Co has been hit with a lawsuit seeking class-
action status that alleges a company Web site compromises customers'
private information.

The suit, filed last Friday in Circuit Court in Cook County, Illinois,
states that the retailer's managemyhome.com site allows users to view
purchase histories of Sears customers by entering public information
such as a name or street address, in violation of a state Consumer
Fraud Act that forbids "unfair or deceptive" practices.

A Sears spokeswoman declined to comment on the lawsuit on Monday.
Sears, Roebuck is a unit of Sears Holdings Corp (SHLD.O), which is
based in Hoffman Estates, Illinois.

But in a statement e-mailed to Reuters on Friday, when a consumer blog
featured an entry raising concerns about the Sears site, the retailer
said it had "turned off the ability to view a customer's purchase
history on Manage My Home until we can implement a validation process
that will restrict access by unauthorized third parties."

The complaint, which seeks class-action status and millions in
damages, said the data available at the Manage My Home site could be
used to commit fraud and obtain even more sensitive customer data such
as social security numbers.

"There's so many scary situations where people could easily trick you
into getting more personal information or gain access to your home for
improper purposes," said Jay Edelson, partner at KamberEdelson LLC,
which filed the lawsuit.

Shares of Sears Holdings fell $2.62, or 2.58 percent, to $98.80 in
late afternoon Nasdaq trading on Monday.

(Reporting by Karen Jacobs; editing by Richard Chang)