diff --git a/articles/google.html b/articles/google.html index c17c573..0fd56e7 100644 --- a/articles/google.html +++ b/articles/google.html @@ -29,7 +29,7 @@
-

Further Reading

+

Further Reading:

  1. Why Google's Spying on User Data Is Worse than the NSA's
  2. Reasons not to use Google
    3. diff --git a/articles/google_search.html b/articles/google_search.html index 657ad5f..2248aaa 100644 --- a/articles/google_search.html +++ b/articles/google_search.html @@ -1,104 +1,100 @@ - + - - - + + + Google Search — Spyware Watchdog + - Google logo -

    Google Search

    -

    -Google Search is a search engine created and owned by Google. -

    -

    Spyware Level: EXTREMELY HIGH

    -

    -Google Search collects your personal information and is heavily integrated with other services that collect your personal information. -Google's privacy policy[1] is written in a way that does not tell you which Google services are -collecting which types of information, and instead ties all of its services into one privacy policy. So the best that can be done is -to assume that by using any of Google's services at all, Google is trying to obtain all of the information detailed. -

    -

    -It's also important to note that this article only exists to provide a basic run-down on Google's spying, and is just here for completeness. It -does not at all represent the full extent of Google's breaches of privacy, just because it is not really a secret to anyone that Google collects -your information, so it is really not trying to be very detailed because it would not say anything new. -

    -

    Google Search records your searches

    -

    - Searches made using Google Search are associated with your identity and recorded in Google's servers. From the - privacy policy[1], Google makes it clear that: -

    -

    - "We collect information about the services that you use and how you use them" -

    -

    - Where "collect information" is clearly stated[2] as such: -

    -

    - "This includes information like your usage data and preferences, Gmail messages, G+ profile, photos, videos, browsing history, map searches, docs, or other Google-hosted content. Our automated systems analyze this information as it is sent and received and when it is stored. -

    -

    - Google also confirms again that it stores your searches in its servers, in this quote: -

    -

    - "When you use our services or view content provided by Google, we automatically collect and store certain information in server logs. - This includes: details of how you used our service, such as your search queries." -

    -

    Google uses your searches to build a profile of your interests, which is sold to advertisers

    -

    - In this page of Google's privacy policy[2], Google confirms that - they create profiles of their users interests: -

    -

    - "For example, we may use...information in your web history cookies to provide you with more relevant search results." -

    -

    - It's important to note that Google does not think that your search history is personal information, as long as it is not attached to your name. - It does share this information with advertisers, as long as it is "not identifiable": -

    -

    - "We may share non-personally identifiable information publicly and with our partners – like publishers, advertisers or connected sites. For example, we may share information publicly to show trends about the general use of our services." -

    -

    Google Search is integrated into the "Google Accounts" spyware platform.

    -

    - Google search allows you to sign-in using an account made on the Google Accounts spyware platform. This platform - exists to collect personal information, and connects its users to other spyware services in the Google ecosystem. - It attempts to collect phone numbers, and helps Google attribute the information it collects though all of its services - to one user, increasing the accuracy of their internal profile of you. -

    -
    -
    -

    Further Reading

    -

    - Why Google's Spying on User Data Is Worse than the NSA's
    - Reasons not to use Google
    -

    -
    -

    Sources

    -

    - 1. - Google Privacy policy - [web.archive.org] - [wayback.vefsafn.is] - [archive.li] - [ghostarchive.org] -
    - 2. - Google collect information - [archive.li] - [ghostarchive.org] -
    -

    -
    -

    - This article was last edited on 12/12/2018 -

    -

    - If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg. All contributions must be licensed under the CC0 license to be accepted. -

    - CC0 License -

    Back to catalog

    -
    +
    +
    ← Catalog
    +
    + Google logo +

    Google Search

    +

    + Google Search is a search engine created and owned by Google. +

    +

    Spyware Level: EXTREMELY HIGH

    +

    + Google Search collects your personal information and is heavily integrated with other services that collect your personal information. + Google's privacy policy[1] is written in a way that does not tell you which Google services are + collecting which types of information, and instead ties all of its services into one privacy policy. So the best that can be done is + to assume that by using any of Google's services at all, Google is trying to obtain all of the information detailed. +

    +

    + It's also important to note that this article only exists to provide a basic run-down on Google's spying, and is just here for completeness. It + does not at all represent the full extent of Google's breaches of privacy, just because it is not really a secret to anyone that Google collects + your information, so it is really not trying to be very detailed because it would not say anything new. +

    +

    Google Search records your searches

    +

    + Searches made using Google Search are associated with your identity and recorded in Google's servers. From the + privacy policy[1], Google makes it clear that: +

    +

    + "We collect information about the services that you use and how you use them" +

    +

    + Where "collect information" is clearly stated[2] as such: +

    +

    + "This includes information like your usage data and preferences, Gmail messages, G+ profile, photos, videos, browsing history, map searches, docs, or other Google-hosted content. Our automated systems analyze this information as it is sent and received and when it is stored. +

    +

    + Google also confirms again that it stores your searches in its servers, in this quote: +

    +

    + "When you use our services or view content provided by Google, we automatically collect and store certain information in server logs. + This includes: details of how you used our service, such as your search queries." +

    +

    Google uses your searches to build a profile of your interests, which is sold to advertisers

    +

    + In this page of Google's privacy policy[2], Google confirms that + they create profiles of their users interests: +

    +

    + "For example, we may use...information in your web history cookies to provide you with more relevant search results." +

    +

    + It's important to note that Google does not think that your search history is personal information, as long as it is not attached to your name. + It does share this information with advertisers, as long as it is "not identifiable": +

    +

    + "We may share non-personally identifiable information publicly and with our partners – like publishers, advertisers or connected sites. For example, we may share information publicly to show trends about the general use of our services." +

    +

    Google Search is integrated into the "Google Accounts" spyware platform.

    +

    + Google search allows you to sign-in using an account made on the Google Accounts spyware platform. This platform + exists to collect personal information, and connects its users to other spyware services in the Google ecosystem. + It attempts to collect phone numbers, and helps Google attribute the information it collects though all of its services + to one user, increasing the accuracy of their internal profile of you. +

    +
    +
    +
    +
    +

    Further Reading:

    +
      +
    1. Why Google's Spying on User Data Is Worse than the NSA's
      2. +
    2. Reasons not to use Google
      3. +
    +
    +
    +
    +

    Sources:

    +
      +
    1. Google Privacy policy [web.archive.org] [wayback.vefsafn.is] [archive.li] [ghostarchive.org]
      2. +
    2. Google collect information [archive.li] [ghostarchive.org]
      3. +
    +
    +
    + This article was last edited on 12/12/2018 +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    +

    All contributions must be licensed under the CC0 license to be accepted.

    + CC0 License +
    +
    diff --git a/articles/gzdoom.html b/articles/gzdoom.html index 7465d84..7b2d413 100644 --- a/articles/gzdoom.html +++ b/articles/gzdoom.html @@ -1,41 +1,36 @@ - + - - - + + + GZDoom — Spyware Watchdog + - GZDoom Logo -

    GZDoom

    -

    -GZDoom is a source port of Doom based on an older source port, ZDoom. -

    -

    Spyware Level: Low

    -

    -GZDoom contains telemetry that it reports back to the developers containing general information about your Operating System, CPU Cores, and OpenGL compatibility.[1]. -GZDoom's developers do not seem to be very good at handling privacy concerns (After all, if this was privacy-concious, it would be opt-in...) and so if you decide to use this program, you -should make sure to compile it with the telemetry disabled, and you should make sure that this is the only spyware in the program- there may be more spyware implemented in the future. -

    -
    -
    -

    Sources

    -

    - 1. - GZStats: A quick rundown - [web.archive.org] - [archive.is]
    -

    -
    -

    - This article was last edited on 5/30/2018 -

    -

    - If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg. All contributions must be licensed under the CC0 license to be accepted. -

    - CC0 License -

    Back to catalog

    -
    +
    +
    ← Catalog
    +
    + GZDoom Logo +

    GZDoom

    +

    GZDoom is a source port of Doom based on an older source port, ZDoom.

    +

    Spyware Level: Low

    +

    GZDoom contains telemetry that it reports back to the developers containing general information about your Operating System, CPU Cores, and OpenGL compatibility.[1]. GZDoom's developers do not seem to be very good at handling privacy concerns (After all, if this was privacy-concious, it would be opt-in...) and so if you decide to use this program, you should make sure to compile it with the telemetry disabled, and you should make sure that this is the only spyware in the program- there may be more spyware implemented in the future.

    +
    +
    +
    +
    +

    Sources:

    +
      +
    1. GZStats: A quick rundown [web.archive.org] [archive.is]
      2. +
    +
    +
    + This article was last edited on 5/30/2018 +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    +

    All contributions must be licensed under the CC0 license to be accepted.

    + CC0 License +
    +
    diff --git a/articles/hexchat.html b/articles/hexchat.html index fed897b..61076e4 100644 --- a/articles/hexchat.html +++ b/articles/hexchat.html @@ -1,28 +1,28 @@ - + - - - + + + Hexchat — Spyware Watchdog + - Hexchat Logo -

    Hexchat

    -

    -HexChat is an IRC client based on XChat, but unlike XChat it's completely free for both Windows and Unix-like systems. -

    -

    Spyware Level: Not Spyware

    -

    -Hexchat is not spyware in and of itself, however you can use it to connect to services that may be spyware. Hexchat is also distributed on spyware platforms such as the Windows Store. If you want to download Hexchat, download it from the developers' website instead of the Windows Store. -

    -
    -
    -

    - If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg. All contributions must be licensed under the CC0 license to be accepted. -

    - CC0 License -

    Back to catalog

    -
    +
    +
    ← Catalog
    +
    + Hexchat Logo +

    Hexchat

    +

    HexChat is an IRC client based on XChat, but unlike XChat it's completely free for both Windows and Unix-like systems.

    +

    Spyware Level: Not Spyware

    +

    Hexchat is not spyware in and of itself, however you can use it to connect to services that may be spyware. Hexchat is also distributed on spyware platforms such as the Windows Store. If you want to download Hexchat, download it from the developers' website instead of the Windows Store.

    +
    +
    +
    +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    +

    All contributions must be licensed under the CC0 license to be accepted.

    + CC0 License +
    +
    diff --git a/articles/hexchat_ru.html b/articles/hexchat_ru.html index d040721..ae2c7f9 100644 --- a/articles/hexchat_ru.html +++ b/articles/hexchat_ru.html @@ -1,28 +1,26 @@ - + - + - - Hexchat — Spyware Watchdog + - Hexchat Logo -

    Hexchat

    -

    -HexChat - IRC клиент, основанный на Xchat. В отличие от него, он полностью свободный и для Windows и для Unix-подобных систем. -

    -

    Уровень слежки: Нет

    -

    -Hexchat сам по себе не является следящим, однако вы можете подключаться с помощью него к сервисам, которые могут следить за вами. Hexchat также распространяется на следящих платформах, таких как Windows Store. Если вы хотите скачать Hexchat, скачайте его с сайта разработчика, а не с Windows Store. -

    -
    -
    -

    - If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg. All contributions must be licensed under the CC0 license to be accepted. -

    - CC0 License -

    Обратно в каталог

    -
    +
    +
    ← Catalog
    +
    + Hexchat Logo +

    Hexchat

    +

    HexChat - IRC клиент, основанный на Xchat. В отличие от него, он полностью свободный и для Windows и для Unix-подобных систем.

    +

    Уровень слежки: Нет

    +

    Hexchat сам по себе не является следящим, однако вы можете подключаться с помощью него к сервисам, которые могут следить за вами. Hexchat также распространяется на следящих платформах, таких как Windows Store. Если вы хотите скачать Hexchat, скачайте его с сайта разработчика, а не с Windows Store.

    +
    +
    +
    +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    +

    All contributions must be licensed under the CC0 license to be accepted.

    + CC0 License +
    +
    diff --git a/articles/http.html b/articles/http.html index 4d00e4e..629dbc2 100644 --- a/articles/http.html +++ b/articles/http.html @@ -9,45 +9,37 @@
    -
    - ← Catalog -
    -
    +
    ← Catalog
    +
    World Wide Web Consortum: The maintainers of the HTTP standard

    HyperText Transmission Protocol

    HTTP is a protocol usually used for transferring HyperText Markup Language documents accross the internet.

    Spyware Level: Not Rated

    HTTP is a protocol that is not designed with the privacy of its users in mind. The language used in the HTTP specification explicitly says that the protocol was designed with enabling the datamining of its users in mind, and contains features that are not absolutely necessary for the purpose of the protocol, but allow the protocol compromise user privacy.

    "User-Agent" Datamining feature

    -

    Section 14.43[1] of the HTTP specification details the "User-Agent" feature of the protocol that, when implemented, will attach information about your computing enviroment that can be used to track you. The biggest danger of the User-Agent is that there is no way to anonymously opt-out of this- even if you do not provide a user-agent, because almost everyone else does, you will be tracked by the fact that you do not provide that information. There are many strategies to mitigate this, with only varying levels of success, but the problem is that this is the acceptable standard of how HTTP is used and not the forgotten feature that it should be. Not only does the User-Agent feature collect this unncessary information, its purpose is explicitly stated in the protocol specifications to aid in datamining.

    +

    Section 14.43[1] of the HTTP specification details the "User-Agent" feature of the protocol that, when implemented, will attach information about your computing enviroment that can be used to track you. The biggest danger of the User-Agent is that there is no way to anonymously opt-out of this- even if you do not provide a user-agent, because almost everyone else does, you will be tracked by the fact that you do not provide that information. There are many strategies to mitigate this, with only varying levels of success, but the problem is that this is the acceptable standard of how HTTP is used and not the forgotten feature that it should be. Not only does the User-Agent feature collect this unncessary information, its purpose is explicitly stated in the protocol specifications to aid in datamining.

    "The User-Agent request-header field contains information about the user agent originating the request. This is for statistical purposes, the tracing of protocol violations, and automated recognition of user agents for the sake of tailoring responses to avoid particular user agent limitations. User agents SHOULD include this field with requests."

    Acknowledgement of HTTP's privacy problem

    -

    In the HTTP specification, the W3C explicitly acknowledges the serious privacy violations that implementations of this protocol are capable of comitting. Section 15.1[2] of the HTTP specification has a very detailed analysis of the implications of the comprimization of privacy that the User-Agent allows to happen and suggests how to use the User-Agent feature: as an opt-in feature where the privacy concerns of using such a feature are properly explained to the user. Even though this is a good section, it shows a very naive viewpoint from the W3C, the expectation that this feature would not be abused, and the expectation that implementers of this standard would respect the privacy of their users and would not use these features of the protocol to datamine users.

    +

    In the HTTP specification, the W3C explicitly acknowledges the serious privacy violations that implementations of this protocol are capable of comitting. Section 15.1[2] of the HTTP specification has a very detailed analysis of the implications of the comprimization of privacy that the User-Agent allows to happen and suggests how to use the User-Agent feature: as an opt-in feature where the privacy concerns of using such a feature are properly explained to the user. Even though this is a good section, it shows a very naive viewpoint from the W3C, the expectation that this feature would not be abused, and the expectation that implementers of this standard would respect the privacy of their users and would not use these features of the protocol to datamine users.

    At best, you could call this mindset naive. If you want to hold the W3C in contempt, you could call it malicious. It's easy to write in your standard that while you could use this protocol to monitor the behavior of users, you should ask for their permission. But once that standard is widely implemented, and is widely used for the exact malicious purpose that was acknowledged in its specification, who's fault is that?

    -
    -
    -

    Sources

    -

    - 1. - Section 14 of the HTTP/1.1 Specification - [web.archive.org] - [ghostarchive.org] -

    -

    - 2. - Section 15 of the HTTP/1.1 Specification - [web.archive.org] - [ghostarchive.org] -

    +
    +
    +
    +

    Sources:

    +
      +
    1. Section 14 of the HTTP/1.1 Specification [web.archive.org] [ghostarchive.org]
      2. +
    2. Section 15 of the HTTP/1.1 Specification [web.archive.org] [ghostarchive.org]
      3. +
    +
    -

    This article was created on 5/14/2018

    -

    This article was lasted edited on 10/11/2020

    -
    -

    If you want to contribute to this website, you can always make a pull request.

    + This article was created on 5/14/2018 +
    + This article was lasted edited on 10/11/2020 +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    All contributions must be licensed under the CC0 license to be accepted.

    CC0 License
    - \ No newline at end of file + diff --git a/articles/icecat.html b/articles/icecat.html index f1f9dee..33bdf8b 100644 --- a/articles/icecat.html +++ b/articles/icecat.html @@ -1,45 +1,38 @@ - + - - - + + + GNU IceCat — Spyware Watchdog + - icecat Logo -

    GNU IceCat

    -

    -GNU IceCat is a web browser that is a fork of Firefox. -

    -

    Spyware Level: Not Spyware

    -

    -GNU IceCat is a fork of Firefox that is more private and secure than Firefox and it contains several privacy-protecting features. IceCat 60 makes no unsolicited connections when you run it. Previous versions had privacy problems, but version 60 doesn't have these problems. You can read about the previous version here: IceCat 59 Review -

    -

    IceCat's privacy features

    -
    -

    - From gnu.org -

    -
    -

    LibreJS: GNU LibreJS aims to address the JavaScript problem described in Richard Stallman's article The JavaScript Trap.

    -

    Https-Everywhere: Extension that encrypts your communications with many major websites, making your browsing more secure.

    -

    AboutIceCat: Adds a custom "about:icecat" homepage with links to information about the free software and privacy features in IceCat, and checkboxes to enable and disable the ones more prone to break websites.

    -

    Fingerprinting countermeasures: Fingerprinting is a series of techniques allowing to uniquely identify a browser based on specific characteristics of that particular instance (like what fonts are available in that machine). Unlike cookies the user cannot opt-out of being tracked this way, so the browser has to avoid giving away that kind of hints.

    -

    - As of writing this the information on gnu.org is a little outdated. Read this for the most up to date look at it: - GNUzilla — News: IceCat 60.2.0 Pre-release -

    -
    -
    -

    - This article was last edited on 9/18/2018 -

    -

    - If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg. All contributions must be licensed under the CC0 license to be accepted. -

    - CC0 License -

    Back to catalog

    -
    +
    +
    ← Catalog
    +
    + icecat Logo +

    GNU IceCat

    +

    GNU IceCat is a web browser that is a fork of Firefox.

    +

    Spyware Level: Not Spyware

    +

    GNU IceCat is a fork of Firefox that is more private and secure than Firefox and it contains several privacy-protecting features. IceCat 60 makes no unsolicited connections when you run it. Previous versions had privacy problems, but version 60 doesn't have these problems. You can read about the previous version here: IceCat 59 Review

    +

    IceCat's privacy features

    +

    From gnu.org:

    +
      +
    • LibreJS: GNU LibreJS aims to address the JavaScript problem described in Richard Stallman's article The JavaScript Trap.
      • +
    • Https-Everywhere: Extension that encrypts your communications with many major websites, making your browsing more secure.
      • +
    • AboutIceCat: Adds a custom "about:icecat" homepage with links to information about the free software and privacy features in IceCat, and checkboxes to enable and disable the ones more prone to break websites.
      • +
    • Fingerprinting countermeasures: Fingerprinting is a series of techniques allowing to uniquely identify a browser based on specific characteristics of that particular instance (like what fonts are available in that machine). Unlike cookies the user cannot opt-out of being tracked this way, so the browser has to avoid giving away that kind of hints.
      • +
    +

    As of writing this the information on gnu.org is a little outdated. Read this for the most up to date look at it: GNUzilla — News: IceCat 60.2.0 Pre-release

    +
    +
    +
    + This article was last edited on 9/18/2018 +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    +

    All contributions must be licensed under the CC0 license to be accepted.

    + CC0 License +
    +
    diff --git a/articles/index.html b/articles/index.html index 15b278d..e515186 100644 --- a/articles/index.html +++ b/articles/index.html @@ -9,45 +9,43 @@
    -
    - ← Home -
    +
    ← Home

    Spyware Watchdog Article Catalog

    All of the articles on this website are available here!

    If you want to contribute to this website, you can always make a pull request.

    -

    Web Browsers

    - +

    Web Browsers

    +

    Online Content Platforms

    diff --git a/articles/instagram.html b/articles/instagram.html index 04b710a..5b0151e 100644 --- a/articles/instagram.html +++ b/articles/instagram.html @@ -1,107 +1,64 @@ - + - - - + + + Instagram — Spyware Watchdog + - - Instagram logo -

    Instagram

    -

    -Instagram, developed by Facebook is designed to be a free smartphone app that allows users to post pictures and videos to a feed, much like any micro-blogging platform. It is popular among teenagers and millennials. In fact businesses are now getting into the Instagram scene and creating their own Instagram profiles. -

    -

    Spyware Level: EXTREMELY HIGH

    -

    -Instagram is spyware because it identifies you with EXIF data, and demands direct access to excessive amounts of personal information that has nothing to do with the -service it provides.

    - -

    It Logs Your GPS Locations from EXIF Data In Your Photos

    -

    -Whenever a user takes a picture on a modern smartphone, GPS Coordinates are stored in photos. This is setting that one can easily turn off. However, many users don't even realize their phone is doing so. Instagram takes advantage of that. It will scan through all of the user's photos and look for this EXIF Data[1]. When it does, it logs the GPS Coordinates into a database. This database shows exactly where the user has been and what pictures they have taken. The only way to turn this off is to turn off EXIF tags on your camera (You should turn it off due to the numerous privacy issues that emerge from EXIF data). -

    - -

    It Demands Too Many Permissions and Punishes The User for Denying It Permissions

    -

    Instagram is pretty demanding when it comes to permissions. When I tested the app on my spare Android Phone, it wanted access to:

    -
      -
    • Phone owner's full name
      • -
    • Phone Contacts
      • -
    • Phone calendar
      • -
    • Send and receive SMS Messages (Which may cost money)
      • -
    • All files on phone and files on MicroSD card
      • -
    • Phone camera
      • -
    • Phone microphone
      • -
    • Identifying device information: IMEI number, carrier, SIM status, phone number
      • -
    • Control phone vibrator motor
      • -
    -

    Denying the app access to: the phone owners full name, contacts stored on the phone, the phones calendar, permission to send and receive SMS messages, and identifying device information resulted in annoying nags containing some excuse as to why they would like access to said permission.

    -

    However, if you deny it access to: All files on the phone and MicroSD card, phone camera, phone microphone, and phone vibrator motor, the app will punish the user by disabling various features in the app that will most likely operate just fine with that permission denied.

    - -

    You Must Provide a Telephone Number or Email Address to Sign Up

    -

    In order to sign up for the app, you must provide either a telephone number or an email address. You will not be allowed to create an account if you provide none of the above. This is obviously a method Instagram to uniquely identify you.

    -

    If you provided Instagram with a cellular telephone number and uninstalled the app, you will get constant nags to "see what's new on Instagram". Fortunately these nags will go away after about a month, and can be blocked by simply blocking the number

    -screenshot - -

    It Broadcasts What You Do In The App To Other Users

    -

    Introduced in January 2018, Instagram sports a new spyware feature that broadcasts what you are doing in the app to anyone that DMs you in the app[3]. But, it goes further, it reportedly also broadcasts what comments you read and what photos you like in the app. On microblogging platforms like Instagram, the majority of users like their actions to be private. A lot of users have complained about this feature and they stated that the feature is here to stay. Also, there is no way to disable this feature either.

    - -

    It Might Spy in On Your Conversations

    -

    In September 2017 users started reporting ads appearing on their Instagram feed that they spoke to another person about and never once looked it up online. While Instagram is known to use super cookies (cookies that can hop to different computers on a network and use certain techniques to avoid being deleted), this is next level. A person conducted a test where on a hike they randomly mentioned a projector[4]. Before this hike they showed no interest in projectors. Then they gave Instagram about 15 hours and when the person checked their feed the next morning, there was an ad for a projector. Sadly, this is overwhelming proof that Instagram is indeed listening in. Of course, when questioned by various news outlets, Instagram said they never did this, despite their being overwhelming evidence that they are indeed tapping users microphones.

    - - -
    -
    -

    Sources

    - -

    - 1 - Make Use Of — Ways Instagram Is Spying on You - [archive.is] - [archive.org] - [ghostarchive.org] -
    - - - - 2 - Instagram's TOS - [archive.org] - [archive.is] - [ghostarchive.org] -
    - - - - 3 - HelloGiggles Article on the New DM feature - [archive.is] - [web.archive.org] - [ghostarchive.org] -
    - - - 4 - Instagram Listens In - [archive.is] - [web.archive.org] - [ghostarchive.org] -
    -

    - - - -
    -

    - This article was last edited on 2/24/2019 -

    -

    - If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg. All contributions must be licensed under the CC0 license to be accepted. -

    - CC0 License -

    Back to catalog

    -
    +
    +
    ← Catalog
    +
    + Instagram logo +

    Instagram

    +

    Instagram, developed by Facebook is designed to be a free smartphone app that allows users to post pictures and videos to a feed, much like any micro-blogging platform. It is popular among teenagers and millennials. In fact businesses are now getting into the Instagram scene and creating their own Instagram profiles.

    +

    Spyware Level: EXTREMELY HIGH

    +

    Instagram is spyware because it identifies you with EXIF data, and demands direct access to excessive amounts of personal information that has nothing to do with the service it provides.

    +

    It Logs Your GPS Locations from EXIF Data In Your Photos

    +

    Whenever a user takes a picture on a modern smartphone, GPS Coordinates are stored in photos. This is setting that one can easily turn off. However, many users don't even realize their phone is doing so. Instagram takes advantage of that. It will scan through all of the user's photos and look for this EXIF Data[1]. When it does, it logs the GPS Coordinates into a database. This database shows exactly where the user has been and what pictures they have taken. The only way to turn this off is to turn off EXIF tags on your camera (You should turn it off due to the numerous privacy issues that emerge from EXIF data).

    +

    It Demands Too Many Permissions and Punishes The User for Denying It Permissions

    +

    Instagram is pretty demanding when it comes to permissions. When I tested the app on my spare Android Phone, it wanted access to:

    +
      +
    • Phone owner's full name
      • +
    • Phone Contacts
      • +
    • Phone calendar
      • +
    • Send and receive SMS Messages (Which may cost money)
      • +
    • All files on phone and files on MicroSD card
      • +
    • Phone camera
      • +
    • Phone microphone
      • +
    • Identifying device information: IMEI number, carrier, SIM status, phone number
      • +
    • Control phone vibrator motor
      • +
    +

    Denying the app access to: the phone owners full name, contacts stored on the phone, the phones calendar, permission to send and receive SMS messages, and identifying device information resulted in annoying nags containing some excuse as to why they would like access to said permission.

    +

    However, if you deny it access to: All files on the phone and MicroSD card, phone camera, phone microphone, and phone vibrator motor, the app will punish the user by disabling various features in the app that will most likely operate just fine with that permission denied.

    +

    You Must Provide a Telephone Number or Email Address to Sign Up

    +

    In order to sign up for the app, you must provide either a telephone number or an email address. You will not be allowed to create an account if you provide none of the above. This is obviously a method Instagram to uniquely identify you.

    +

    If you provided Instagram with a cellular telephone number and uninstalled the app, you will get constant nags to "see what's new on Instagram". Fortunately these nags will go away after about a month, and can be blocked by simply blocking the number

    + screenshot +

    It Broadcasts What You Do In The App To Other Users

    +

    Introduced in January 2018, Instagram sports a new spyware feature that broadcasts what you are doing in the app to anyone that DMs you in the app[3]. But, it goes further, it reportedly also broadcasts what comments you read and what photos you like in the app. On microblogging platforms like Instagram, the majority of users like their actions to be private. A lot of users have complained about this feature and they stated that the feature is here to stay. Also, there is no way to disable this feature either.

    +

    It Might Spy in On Your Conversations

    +

    In September 2017 users started reporting ads appearing on their Instagram feed that they spoke to another person about and never once looked it up online. While Instagram is known to use super cookies (cookies that can hop to different computers on a network and use certain techniques to avoid being deleted), this is next level. A person conducted a test where on a hike they randomly mentioned a projector[4]. Before this hike they showed no interest in projectors. Then they gave Instagram about 15 hours and when the person checked their feed the next morning, there was an ad for a projector. Sadly, this is overwhelming proof that Instagram is indeed listening in. Of course, when questioned by various news outlets, Instagram said they never did this, despite their being overwhelming evidence that they are indeed tapping users microphones.

    +
    +
    +
    +
    +

    Sources:

    +
      +
    1. Make Use Of — Ways Instagram Is Spying on You [archive.is] [archive.org] [ghostarchive.org]
      2. +
    2. Instagram's TOS [archive.org] [archive.is] [ghostarchive.org]
      3. +
    3. HelloGiggles Article on the New DM feature [archive.is] [web.archive.org] [ghostarchive.org]
      4. +
    4. Instagram Listens In [archive.is] [web.archive.org] [ghostarchive.org]
      5. +
    +
    +
    + This article was last edited on 2/24/2019 +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    +

    All contributions must be licensed under the CC0 license to be accepted.

    + CC0 License +
    +
    - diff --git a/articles/lynx.html b/articles/lynx.html index defc2b8..52730a3 100644 --- a/articles/lynx.html +++ b/articles/lynx.html @@ -9,24 +9,28 @@
    -
    - ← Catalog -
    -
    +
    ← Catalog
    +
    Lynx Logo

    Lynx

    Lynx is a text browser for the World Wide Web.

    Spyware Level: Not Spyware

    Lynx makes no unsolicited requests at all.

    It is also fully libre software under the GPLv2 license.

    +
    +
    +
    +
    +

    Further Reading

    +
      +
    1. lynx.browser.org
      2. +
    +
    -

    Further Reading

    -

    lynx.browser.org

    -
    -

    This article was created on 4/6/2020

    -

    This article was lasted edited on 10/7/2020

    -
    -

    If you want to contribute to this website, you can always make a pull request.

    + This article was created on 4/6/2020 +
    + This article was lasted edited on 10/7/2020 +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    All contributions must be licensed under the CC0 license to be accepted.

    CC0 License
    diff --git a/articles/netsurf.html b/articles/netsurf.html index 23a6b3f..3a41a56 100644 --- a/articles/netsurf.html +++ b/articles/netsurf.html @@ -1,41 +1,35 @@ + - - - Netsurf — Spyware Watchdog - - - -
    -
    ← Catalog
    -
    - Images are in the ../images folder -

    Netsurf

    -

    - From their website: "NetSurf is a multi-platform web browser for RISC OS, UNIX-like platforms (including Linux), Mac OS X, and more" [1] Version Tested: Netsurf 3.9 -

    -

    Spyware Level: Low

    -

    Upon launch Netsurf makes a request to get the default search engine's icon, that default search engine is Google. This was tested with mitmproxy. Other than that, there are no unsolicited requests. After following the mitigation guide, this software is not spyware.

    -
    -
    -
    -
    -

    Sources

    -
    -
      - 1.www.netsurf-browser.org/ - [web.archive.org] - [archive.is] - [ghostarchive.org] - -
      -
    -
    -
    -

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    -

    All contributions must be licensed under the CC0 license to be accepted.

    - CC0 License -
    + + + + Netsurf — Spyware Watchdog + + + +
    +
    ← Catalog
    +
    + Images are in the ../images folder +

    Netsurf

    +

    From their website: "NetSurf is a multi-platform web browser for RISC OS, UNIX-like platforms (including Linux), Mac OS X, and more".[1] Version Tested: Netsurf 3.9.

    +

    Spyware Level: Low

    +

    Upon launch Netsurf makes a request to get the default search engine's icon, that default search engine is Google. This was tested with mitmproxy. Other than that, there are no unsolicited requests. After following the mitigation guide, this software is not spyware.

    - +
    +
    +
    +

    Sources:

    +
      +
    1. www.netsurf-browser.org/ [web.archive.org] [archive.is] [ghostarchive.org]
      2. +
    +
    +
    +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    +

    All contributions must be licensed under the CC0 license to be accepted.

    + CC0 License +
    +
    + diff --git a/articles/qutebrowser.html b/articles/qutebrowser.html index ac30e26..a53c952 100644 --- a/articles/qutebrowser.html +++ b/articles/qutebrowser.html @@ -9,20 +9,21 @@
    -
    - ← Catalog -
    -
    +
    ← Catalog
    +
    Qutebrowser Logo

    Qutebrowser

    Qutebrowser is a keyboard-focused browser with a minimal GUI. It's based on Python and PyQt5 and free software, licensed under the GPL. Program tested: v1.6.1 for Debian Buster. Mitmproxy was used to check for connections.

    Spyware Level: Not Spyware

    Qutebrowser makes no unsolicited requests at all. It is also libre software. This web browser is a great choice to use, and there is nothing to complain about from a privacy standpoint. (although I don't really know how to use the User Interface that well...) So far this browser looks like it can stand tall in the ranks of the other privacy-respecting web browsers out there.

    +
    +
    +
    + This article was created on 5/10/2018 +
    + This article was lasted edited on 10/7/2020
    -

    This article was created on 5/10/2018

    -

    This article was lasted edited on 10/7/2020

    -
    -

    If you want to contribute to this website, you can always make a pull request.

    +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    All contributions must be licensed under the CC0 license to be accepted.

    CC0 License
    diff --git a/articles/steam.html b/articles/steam.html index 24a810b..052f3f1 100644 --- a/articles/steam.html +++ b/articles/steam.html @@ -1,116 +1,74 @@ - + - - - + + + Steam — Spyware Watchdog + - Steam logo -

    Steam

    -

    -Steam is a video game launching service, digital content store, DRM platform, file sharing platform, and Social Network created by Valve. -

    -

    Spyware Level: EXTREMELY HIGH

    -

    -This program is spyware because it collects huge amounts of user information, including but not limited to your Home Address, Telephone Number, Credit Card Number, and Internet Search History. Steam also profiles your hardware, communications through Steam's social networking features, and contains a mandatory self-updater. Steam will not work without an internet connection. -

    -

    Steam's source code is unavailable

    -

    -Steam cannot be built from an available copy of the source code. This means that it is impossible to prove that Steam is not spyware or does not use certain spyware features that it potentially has. -

    -

    Steam collects and shares huge amounts of sensitive user information

    -

    -In Steam's privacy policy[1], Steam details that it collects the following user information: -

    -
      -
    • Name
      • -
    • Address
      • -
    • Credit Card Number(s)
      • -
    • e-mail
      • -
    • Age
      • -
    • IP Address
      • -
    • Device Unique ID
      • -
    • Chat logs
      • -
    • Forum posts
      • -
    • Voice Chat Recordings
      • -
    • Hardware Enumeration
      • -
    -

    -Steam also confirms that it shares this information with third parties. The implications of this are as follows: Steam knows your name, age, where you live, your banking information, and what your e-mail is. Steam shares this information with other companies (at least, to the extent allowed by law). Steam can use your IP Address to track where you are to the nearest county and can use your Device Unique ID provided by the fingerprinting spyware features inside Steam to track your usage habits across devices that you use. Steam also records all of your communications with others through its social networking and instant messaging services, such as all chat logs, voice conversations, and forum posts, and can share all of this information with third parties as well. -

    -

    Steam has been and may still be recording your internet history

    -

    -It was proven that Steam's VAC system records your internet history and uploads it to an official Valve server[2]. Valve has subsequently denied[3] that they store user's internet history, but it is impossible for Valve to prove that they do not store internet history. What we do know is that Valve does have the ability to spy on a user's internet history, the spyware feature is programmed into Valve's software and the internet history is processed by Valve's servers. It is up to you to decide whether or not you trust Valve when they say that they have turned this feature off or not. -

    -

    Steam records and publicly broadcasts your program usage habits

    -

    -Steam records your program usage habits for all programs launched through Steam's program launching service. This spyware feature is mandatory and has no opt-out. Steam also uses its social network features such as the user profile and friends list to broadcast a users program usage habits publicly. This spyware feature can be partially disabled by setting your profile to private, but it cannot be opted-out of if you are using the "friends" social networking feature. -

    -

    Steam attempts to collect your telephone number

    -

    -Steam has the spyware feature which allows you to "opt-in" to certain features of the Steam service by providing Steam your telephone number. This is done through a pop-up that cannot be turned off. This spyware feature is currently not required, but is being encouraged by Steam. Steam in fact will lock out certain features and privileges to users who want to protect their privacy- for example, access to the "steam store" which is an online marketplace run by valve requires you to give you your phone number. So it is impossible to use all features of the software without giving up this kind of information. -

    -

    Steam "phones home" and requires and internet connection

    -

    -Steam will "phone home" whenever the Steam client is opened or a program is launched through Steam. This spyware feature is mandatory and cannot be turned off. Steam provides an offline mode which is not an opt-out because users must still connect to Steam Servers every 30 days or so. -

    -

    Steam is self-updating software

    -

    -Steam contains spyware features that allow it to update itself without user verification. This is not an opt-out feature because eventually Steam will stop working until it is updated. Self-updating software is a form of spyware because it can be used to install new spyware features or force users to agree to new agreements that force them to explicitly give up more information to continue using the spyware program. -

    -
    -
    -

    Further Reading

    -

    - - Steam Proprietary Malware - [web.archive.org] - [archive.is] -
    - - Steam uses insecure, out-of-date Chromium browser - [web.archive.org] - [archive.is] -
    - -

    -
    -

    Sources

    -

    - - 1. - Privacy Policy Agreement - [web.archive.org] - [archive.is] - [wayback.archive-it.org] - [arquivo.pt] -
    - - 2. - VAC now reads all the domains you have visited and sends it back to their servers hashed - [web.archive.org] - [archive.is] -
    - - 3. - Valve, VAC, and trust - [web.archive.org] - [archive.is] -
    - -

    - -
    -

    - This article was last edited on 8/3/2018 -

    -

    - If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg. All contributions must be licensed under the CC0 license to be accepted. -

    - CC0 License -

    Back to catalog

    -
    +
    +
    ← Catalog
    +
    + Steam logo +

    Steam

    +

    Steam is a video game launching service, digital content store, DRM platform, file sharing platform, and Social Network created by Valve.

    +

    Spyware Level: EXTREMELY HIGH

    +

    This program is spyware because it collects huge amounts of user information, including but not limited to your Home Address, Telephone Number, Credit Card Number, and Internet Search History. Steam also profiles your hardware, communications through Steam's social networking features, and contains a mandatory self-updater. Steam will not work without an internet connection.

    +

    Steam's source code is unavailable

    +

    Steam cannot be built from an available copy of the source code. This means that it is impossible to prove that Steam is not spyware or does not use certain spyware features that it potentially has.

    +

    Steam collects and shares huge amounts of sensitive user information

    +

    In Steam's privacy policy[1], Steam details that it collects the following user information:

    +
      +
    • Name
      • +
    • Address
      • +
    • Credit Card Number(s)
      • +
    • e-mail
      • +
    • Age
      • +
    • IP Address
      • +
    • Device Unique ID
      • +
    • Chat logs
      • +
    • Forum posts
      • +
    • Voice Chat Recordings
      • +
    • Hardware Enumeration
      • +
    +

    Steam also confirms that it shares this information with third parties. The implications of this are as follows: Steam knows your name, age, where you live, your banking information, and what your e-mail is. Steam shares this information with other companies (at least, to the extent allowed by law). Steam can use your IP Address to track where you are to the nearest county and can use your Device Unique ID provided by the fingerprinting spyware features inside Steam to track your usage habits across devices that you use. Steam also records all of your communications with others through its social networking and instant messaging services, such as all chat logs, voice conversations, and forum posts, and can share all of this information with third parties as well.

    +

    Steam has been and may still be recording your internet history

    +

    It was proven that Steam's VAC system records your internet history and uploads it to an official Valve server[2]. Valve has subsequently denied[3] that they store user's internet history, but it is impossible for Valve to prove that they do not store internet history. What we do know is that Valve does have the ability to spy on a user's internet history, the spyware feature is programmed into Valve's software and the internet history is processed by Valve's servers. It is up to you to decide whether or not you trust Valve when they say that they have turned this feature off or not.

    +

    Steam records and publicly broadcasts your program usage habits

    +

    Steam records your program usage habits for all programs launched through Steam's program launching service. This spyware feature is mandatory and has no opt-out. Steam also uses its social network features such as the user profile and friends list to broadcast a users program usage habits publicly. This spyware feature can be partially disabled by setting your profile to private, but it cannot be opted-out of if you are using the "friends" social networking feature.

    +

    Steam attempts to collect your telephone number

    +

    Steam has the spyware feature which allows you to "opt-in" to certain features of the Steam service by providing Steam your telephone number. This is done through a pop-up that cannot be turned off. This spyware feature is currently not required, but is being encouraged by Steam. Steam in fact will lock out certain features and privileges to users who want to protect their privacy- for example, access to the "steam store" which is an online marketplace run by valve requires you to give you your phone number. So it is impossible to use all features of the software without giving up this kind of information.

    +

    Steam "phones home" and requires and internet connection

    +

    Steam will "phone home" whenever the Steam client is opened or a program is launched through Steam. This spyware feature is mandatory and cannot be turned off. Steam provides an offline mode which is not an opt-out because users must still connect to Steam Servers every 30 days or so.

    +

    Steam is self-updating software

    +

    Steam contains spyware features that allow it to update itself without user verification. This is not an opt-out feature because eventually Steam will stop working until it is updated. Self-updating software is a form of spyware because it can be used to install new spyware features or force users to agree to new agreements that force them to explicitly give up more information to continue using the spyware program.

    +
    +
    +
    +
    +

    Further Reading:

    +
      +
    1. Steam Proprietary Malware [web.archive.org] [archive.is]
      2. +
    2. Steam uses insecure, out-of-date Chromium browser [web.archive.org] [archive.is]
      3. +
    +
    +
    +
    +

    Sources:

    +
      +
    1. Privacy Policy Agreement [web.archive.org] [archive.is] [wayback.archive-it.org] [arquivo.pt]
      2. +
    2. VAC now reads all the domains you have visited and sends it back to their servers hashed [web.archive.org] [archive.is]
      3. +
    3. Valve, VAC, and trust [web.archive.org] [archive.is]
      4. +
    +
    +
    + This article was last edited on 8/3/2018 +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    +

    All contributions must be licensed under the CC0 license to be accepted.

    + CC0 License +
    +
    diff --git a/articles/surf.html b/articles/surf.html index a5069ec..8060a74 100644 --- a/articles/surf.html +++ b/articles/surf.html @@ -1,42 +1,35 @@ + - - - Surf — Spyware Watchdog - - - -
    -
    ← Catalog
    -
    - Surf Logo -

    Surf

    -

    - From their website: "surf is a simple web browser based on WebKit2/GTK+. It is able to display websites and follow links."[1] Program tested: v2.0 for Linux. Mitmproxy was used to check for connections. -

    -

    Spyware Level: Not Spyware

    -

    - Surf makes no unsolicited requests at all. - It is also fully libre software under the expat license. It was tested in conjunction with tabbed, another piece of software developed by the same people for use with surf, it adds support for tabs. From a privacy standpoint, this browser is an excellent choice. -

    -

    Surf requires proxychains to connect to Tor, as it only supports HTTP proxies, not SOCKS (which is what Tor uses).

    + + + Surf — Spyware Watchdog + + + +
    +
    ← Catalog
    +
    + Surf Logo +

    Surf

    +

    From their website: "surf is a simple web browser based on WebKit2/GTK+. It is able to display websites and follow links."[1] Program tested: v2.0 for Linux. Mitmproxy was used to check for connections.

    +

    Spyware Level: Not Spyware

    +

    Surf makes no unsolicited requests at all. It is also fully libre software under the expat license. It was tested in conjunction with tabbed, another piece of software developed by the same people for use with surf, it adds support for tabs. From a privacy standpoint, this browser is an excellent choice.

    +

    Surf requires proxychains to connect to Tor, as it only supports HTTP proxies, not SOCKS (which is what Tor uses).

    +
    +
    +
    +
    +

    Sources:

    +
      +
    1. surf.suckless.org [ghostarchive.org] [web.archive.org]
      2. +
    -
    -
    -

    Sources

    -
      -
      - 1.surf.suckless.org - [ghostarchive.org] [web.archive.org]
      -
      -
    -
    -
    -

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    -

    All contributions must be licensed under the CC0 license to be accepted.

    - CC0 License -
    -
    - +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    +

    All contributions must be licensed under the CC0 license to be accepted.

    + CC0 License +
    +
    + diff --git a/articles/telegram.html b/articles/telegram.html index 211acdf..db7eee1 100644 --- a/articles/telegram.html +++ b/articles/telegram.html @@ -9,47 +9,39 @@
    -
    - ← Catalog -
    -
    +
    ← Catalog
    +
    Telegram Logo

    Telegram

    Telegram is an instant messaging program that allows you to send text, images, videos and also any other files to other Telegram users.

    Spyware Level: Not Rated

    -

    Telegram has some privacy problems such as the telephone number verification, and routing communications through official Telegram servers in most cases. However, Telegram contains privacy features and claims to not collect any user information[1].

    +

    Telegram has some privacy problems such as the telephone number verification, and routing communications through official Telegram servers in most cases. However, Telegram contains privacy features and claims to not collect any user information[1].

    Telephone Number Required

    Telegram features the more modern spyware feature that requires the user to associate their persistent user identity with a telephone number. This is obviously a breach of privacy, because Telegram requires the user to disclose this personal information.

    Centralized communication routing

    -

    Telegram does not use peer-to-peer or private servers for the majority of its communications. This means that Telegram is capable of logging all of the communications you send through its service, unless you opt to only use the Peer-to-Peer features of Telegram. Centralized communication routing has a high potential to be spyware. Telegram attempts to use Peer-to-Peer communication for Voice Calls, but it may disclose IP address to the counterpart. Telegram claims in its privacy policy.[1] that it does not collect any information, but it is impossible to prove this.

    +

    Telegram does not use peer-to-peer or private servers for the majority of its communications. This means that Telegram is capable of logging all of the communications you send through its service, unless you opt to only use the Peer-to-Peer features of Telegram. Centralized communication routing has a high potential to be spyware. Telegram attempts to use Peer-to-Peer communication for Voice Calls, but it may disclose IP address to the counterpart. Telegram claims in its privacy policy.[1] that it does not collect any information, but it is impossible to prove this.

    Telegram's server software is closed source and Telegram does not distribute its server software. There is no way for other people to host their own Telegram services because of this, meaning that the servers that the developers operate are the only choice for using this messaging platform.

    Telegram does not follow its GPLv2 Obligations

    -

    Telegram clients are advertised as free software, but in practice the source code is not immediately accessible.[2], the delay sometimes being up to 5 months. So, unknown spyware features could be in the official Telegram client binaries that you download, without you knowing. It's recommended that you build an outdated version of telegram from its source code, since it's not provable whether or not the binaries that are distributed have unknown spyware or not.

    +

    Telegram clients are advertised as free software, but in practice the source code is not immediately accessible.[2], the delay sometimes being up to 5 months. So, unknown spyware features could be in the official Telegram client binaries that you download, without you knowing. It's recommended that you build an outdated version of telegram from its source code, since it's not provable whether or not the binaries that are distributed have unknown spyware or not.

    +
    +
    +
    +

    Sources:

    +
      +
    1. Telegram Privacy Policy [web.archive.org] [archive.is] [ghostarchive.org]
      2. +
    2. Where are the sources of the latest releases? [web.archive.org] [archive.is] [ghostarchive.org]
      3. +
    +
    -
    -

    Sources

    -

    1. - Telegram Privacy Policy - [web.archive.org] - [archive.is] - [ghostarchive.org] -

    -

    - 2. - Where are the sources of the latest releases? - [web.archive.org] - [archive.is] - [ghostarchive.org] -

    + This article was created on 2/18/2019 +
    + This article was lasted edited on 10/11/2020
    -

    This article was created on 2/18/2019

    -

    This article was lasted edited on 10/11/2020

    -
    -

    If you want to contribute to this website, you can always make a pull request.

    +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    All contributions must be licensed under the CC0 license to be accepted.

    CC0 License
    - \ No newline at end of file + diff --git a/articles/ungoogled_chromium.html b/articles/ungoogled_chromium.html index bba7e3f..55473bc 100644 --- a/articles/ungoogled_chromium.html +++ b/articles/ungoogled_chromium.html @@ -1,47 +1,36 @@ - + - - - + + + Ungoogled-Chromium — Spyware Watchdog + - - - Ungoogled-Chromium logo -

    Ungoogled-Chromium

    -

    -Ungoogled-chromium is Google Chromium, sans integration with Google. It also features some tweaks to enhance privacy, -control, and transparency (almost all of which require manual activation or enabling).[1] -

    -

    Spyware Level: Not Spyware

    -

    -Ungoogled-chromium is a fork of Chrome that has all of Google's spyware removed. It was tested with MITMproxy and makes -no unsolicited requests, and is therefore not spyware. Ungoogled-chromium is the highest-rated -browser based on Google Chrome, and is probably one of the best choices if you can compile it. -Otherwise, configuring Iridium to a sufficient privacy standard might be a good choice if you are -looking for a Chrome-based browser to switch too without taking the time to compile any software. -

    -
    -
    -

    Sources

    -

    - 1. - Ungoogled-Chromium - [web.archive.org] - [archive.is]
    - -

    -
    -

    - This article was last edited on 11/1/2018 -

    -

    - If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg. All contributions must be licensed under the CC0 license to be accepted. -

    - CC0 License -

    Back to catalog

    -
    +
    +
    ← Catalog
    +
    + Ungoogled-Chromium logo +

    Ungoogled-Chromium

    +

    Ungoogled-chromium is Google Chromium, sans integration with Google. It also features some tweaks to enhance privacy, control, and transparency (almost all of which require manual activation or enabling).[1]

    +

    Spyware Level: Not Spyware

    +

    Ungoogled-chromium is a fork of Chrome that has all of Google's spyware removed. It was tested with MITMproxy and makes no unsolicited requests, and is therefore not spyware. Ungoogled-chromium is the highest-rated browser based on Google Chrome, and is probably one of the best choices if you can compile it. Otherwise, configuring Iridium to a sufficient privacy standard might be a good choice if you are looking for a Chrome-based browser to switch too without taking the time to compile any software.

    +
    +
    +
    +
    +

    Sources:

    +
      +
    1. Ungoogled-Chromium [web.archive.org] [archive.is]
      2. +
    +
    +
    + This article was last edited on 11/1/2018 +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    +

    All contributions must be licensed under the CC0 license to be accepted.

    + CC0 License +
    +
    diff --git a/articles/vivaldi.html b/articles/vivaldi.html index 27a06d3..ced0efd 100644 --- a/articles/vivaldi.html +++ b/articles/vivaldi.html @@ -1,94 +1,59 @@ - + - - - + + + Vivaldi — Spyware Watchdog + - vivaldi logo -

    Vivaldi

    -

    - Vivaldi is a feature-full, customizable web browser made by some of Opera's old developers (since they were dissatisfied with the direction Opera was heading). But how does it look in terms of privacy? Versions 1.15 and 2.0 were tested to make this article. Program used for testing requests: Mitmproxy. -

    -

    Spyware Level: Medium

    -

    - Vivaldi makes a bunch of requests to Google upon startup and after (malware protection requests can be turned off, but extension updates don't appear to?). Phones home every 24 hours with a unique ID using Piwik, an analytics service. Anti-privacy Bing as the default search engine. Not fully open source. Connects to an analytics platform that spies on its users. -

    -

    Vivaldi's developers do not respect your privacy

    -

    -Vivaldi connects to the analytics platform Piwik[1] that it uses to spy on its users, which is discussed in greater detail in other sections of this page. -What is most notable about this is the attitude of Vivaldi's developer team: Developers that belittle privacy concerns, and insult their users further when they speak out about being spied on, -are not developers you can trust. Below is an anti-privacy rant from a moderator on Vivaldi's forums: -

    -

    -@dib_ Stop spreading FUD. Piwik as employed by Vivaldi is not "spyware." Piwik is not a "spyware company" (unless Google, Facebook, Yahoo, TVGuide, Microsoft, Apple, NYT, Huffpo, Ancestry.com, WaPo, CenturyLink and McAfee are "spyware companies" — in which case just disconnect your computer and go to bed). It is irresponsible and malicious of you to lie about Vivaldi in this fashion. If you want to know what a connection does, ask. But don't sling around reckless accusations.[2] -

    -

    Addon updates

    -

    -
    -
    - These are the Chrome webstore requests, supposed to update your extensions. But with a new Vivaldi install, you don't have any, so they only accomplish spying. And the first request includes "x-googleupdate-appid" which is most likely uniquely identifying. Can't be disabled. -

    -

    Google Safe Browsing

    -

    -
    -
    - Vivaldi is downloading the lists for Google's Malware and Phishing protection, which is enabled by default, but can be disabled from the Settings menu. -

    - -

    Phoning home

    -

    - From Vivaldi's privacy policy: "When you install Vivaldi browser ('Vivaldi'), each installation profile is assigned a unique user ID that is stored on your computer. Vivaldi will send a message using HTTPS directly to our servers located in Iceland every 24 hours containing this ID, version, CPU architecture, screen resolution and time since last message. We anonymize the IP address of Vivaldi users by removing the last octet of the IP address from your Vivaldi client then we store the resolved approximate location after using a local geoip lookup. The purpose of this collection is to determine the total number of active users and their geographical distribution.". So they (claim to) delete "the last octet" of your IP. How generous of them. This is the full request: -

    - -

    Anti-privacy search engine by default

    -

    The default search engine is Bing, whose privacy policy states: "Microsoft will collect the search or command terms you provide, along with your IP address, location, the unique identifiers contained in our cookies, the time and date of your search, and your browser configuration.". To make it worse, that data is shared with third parties: "We share some de-identified search query data, including voice queries, with selected third parties for research and development purposes." (you have no proof it has been "de-identified", by the way). Vivaldi has other engines preinstalled, and you can easily change it, but still, the default is all we can judge it by. -

    - -

    New tab sites

    -

    By default, Vivaldi contains some websites in its new tab page that have a lot of spyware in them, but does not automatically make any connection, and those sites can easily be deleted.

    - -

    Cannot be built from source code

    -

    -"However, it is only our Chromium work that is found on https://vivaldi.com/source. If you were to build it and run it, nothing will display as the HTML/CSS/JS UI is missing. This UI is only available as part of our end user packages, which is covered by the EULA (in which we also bundle with a compiled version of our modified Chromium)."[3] -

    -
    -
    -

    Sources

    -

    - 1. - Get Matomo - [web.archive.org] - [archive.is]
    - - 2. - Return of Vivaldi spyware - [web.archive.org] - [archive.li]
    - - 3. - The Vivaldi source code license and the EULA appear to conflict with each other... - [web.archive.org] - [archive.li]
    -

    -
    -

    - This article was last edited on 10/14/2018 -

    -

    - This article was created on 11/25/2017 -

    -

    - If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg. All contributions must be licensed under the CC0 license to be accepted. -

    - CC0 License -

    Back to catalog

    -
    +
    +
    ← Catalog
    +
    + vivaldi logo +

    Vivaldi

    +

    Vivaldi is a feature-full, customizable web browser made by some of Opera's old developers (since they were dissatisfied with the direction Opera was heading). But how does it look in terms of privacy? Versions 1.15 and 2.0 were tested to make this article. Program used for testing requests: Mitmproxy.

    +

    Spyware Level: Medium

    +

    Vivaldi makes a bunch of requests to Google upon startup and after (malware protection requests can be turned off, but extension updates don't appear to?). Phones home every 24 hours with a unique ID using Piwik, an analytics service. Anti-privacy Bing as the default search engine. Not fully open source. Connects to an analytics platform that spies on its users.

    +

    Vivaldi's developers do not respect your privacy

    +

    Vivaldi connects to the analytics platform Piwik[1] that it uses to spy on its users, which is discussed in greater detail in other sections of this page. What is most notable about this is the attitude of Vivaldi's developer team: Developers that belittle privacy concerns, and insult their users further when they speak out about being spied on, are not developers you can trust. Below is an anti-privacy rant from a moderator on Vivaldi's forums:

    +

    @dib_ Stop spreading FUD. Piwik as employed by Vivaldi is not "spyware." Piwik is not a "spyware company" (unless Google, Facebook, Yahoo, TVGuide, Microsoft, Apple, NYT, Huffpo, Ancestry.com, WaPo, CenturyLink and McAfee are "spyware companies" — in which case just disconnect your computer and go to bed). It is irresponsible and malicious of you to lie about Vivaldi in this fashion. If you want to know what a connection does, ask. But don't sling around reckless accusations.[2]

    +

    Addon updates

    + Vivaldi Update +

    These are the Chrome webstore requests, supposed to update your extensions. But with a new Vivaldi install, you don't have any, so they only accomplish spying. And the first request includes "x-googleupdate-appid" which is most likely uniquely identifying. Can't be disabled.

    +

    Google Safe Browsing

    + Vivaldi SafeBrowsing + Vivaldi Threatlist +

    Vivaldi is downloading the lists for Google's Malware and Phishing protection, which is enabled by default, but can be disabled from the Settings menu.

    +

    Phoning home

    +

    From Vivaldi's privacy policy: "When you install Vivaldi browser ('Vivaldi'), each installation profile is assigned a unique user ID that is stored on your computer. Vivaldi will send a message using HTTPS directly to our servers located in Iceland every 24 hours containing this ID, version, CPU architecture, screen resolution and time since last message. We anonymize the IP address of Vivaldi users by removing the last octet of the IP address from your Vivaldi client then we store the resolved approximate location after using a local geoip lookup. The purpose of this collection is to determine the total number of active users and their geographical distribution.". So they (claim to) delete "the last octet" of your IP. How generous of them. This is the full request:

    + Vivaldi Piwik +

    Anti-privacy search engine by default

    +

    The default search engine is Bing, whose privacy policy states: "Microsoft will collect the search or command terms you provide, along with your IP address, location, the unique identifiers contained in our cookies, the time and date of your search, and your browser configuration.". To make it worse, that data is shared with third parties: "We share some de-identified search query data, including voice queries, with selected third parties for research and development purposes." (you have no proof it has been "de-identified", by the way). Vivaldi has other engines preinstalled, and you can easily change it, but still, the default is all we can judge it by.

    +

    New tab sites

    +

    By default, Vivaldi contains some websites in its new tab page that have a lot of spyware in them, but does not automatically make any connection, and those sites can easily be deleted.

    +

    Cannot be built from source code

    +

    "However, it is only our Chromium work that is found on https://vivaldi.com/source. If you were to build it and run it, nothing will display as the HTML/CSS/JS UI is missing. This UI is only available as part of our end user packages, which is covered by the EULA (in which we also bundle with a compiled version of our modified Chromium)."[3]

    +
    +
    +
    +
    +

    Sources:

    +
      +
    1. Get Matomo [web.archive.org] [archive.is]
      2. +
    2. Return of Vivaldi spyware [web.archive.org] [archive.li]
      3. +
    3. The Vivaldi source code license and the EULA appear to conflict with each other... [web.archive.org] [archive.li]
      4. +
    +
    +
    + This article was last edited on 10/14/2018 +
    + This article was created on 11/25/2017 +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    +

    All contributions must be licensed under the CC0 license to be accepted.

    + CC0 License +
    +
    diff --git a/articles/vlc.html b/articles/vlc.html index 1e3cce1..e3c2963 100644 --- a/articles/vlc.html +++ b/articles/vlc.html @@ -1,50 +1,41 @@ - + - - - + + + VLC — Spyware Watchdog + - VLC Media Player Logo -

    VLC Media Player

    -

    -VLC is a free and open source cross-platform multimedia player and framework that plays most multimedia files as well as DVDs, Audio CDs, VCDs, and various streaming protocols. -

    -

    Spyware Level: Not Spyware

    -

    -VLC Media Player is not spyware, but it does have notable features in it that could be possible forms of spyware. However, all of these features are opt-in, and the software explicitly informs the user about the risks associated with these features. VLC is a model program that has convenience features in it that could compromise privacy, while still respecting user privacy. -

    -

    VLC Media Player has been distributed with spyware programs by third parties

    -

    -While VLC's creators do not distribute their player with spyware, it has been distributed with spyware[1] by other parties. If you download VLC Media Player, make sure you download it from VideoLAN's website. -

    -

    VLC Media Player contains some opt-in spyware features

    -

    -VLC Media player searches through online databases to find complete album covers / metadata for songs. This implicitly means that it sends requests to external servers, and those servers could log information about specific users' music libraries. VLC Media player also has a self-updater, however this does not update without the user's consent, and while there is no precedent for the developers to add spyware in its updates, it's still notable. This is the notice that users are presented with when first installing VLC, which adequately explains the implications of these features. The only improvement would be to not have them checked off by default. -

    - privacy policy -
    -
    -

    Sources

    -

    - 1. - Companies bundling spyware, adware with open-source media player - [web.archive.org] - [archive.is] - [ghostarchive.org] -
    -

    -
    -

    - This article was last edited on 7/30/2018 -

    -

    - If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg. All contributions must be licensed under the CC0 license to be accepted. -

    - CC0 License -

    Back to catalog

    -
    +
    +
    ← Catalog
    +
    + VLC Media Player Logo +

    VLC Media Player

    +

    VLC is a free and open source cross-platform multimedia player and framework that plays most multimedia files as well as DVDs, Audio CDs, VCDs, and various streaming protocols.

    +

    Spyware Level: Not Spyware

    +

    VLC Media Player is not spyware, but it does have notable features in it that could be possible forms of spyware. However, all of these features are opt-in, and the software explicitly informs the user about the risks associated with these features. VLC is a model program that has convenience features in it that could compromise privacy, while still respecting user privacy.

    +

    VLC Media Player has been distributed with spyware programs by third parties

    +

    While VLC's creators do not distribute their player with spyware, it has been distributed with spyware[1] by other parties. If you download VLC Media Player, make sure you download it from VideoLAN's website.

    +

    VLC Media Player contains some opt-in spyware features

    +

    VLC Media player searches through online databases to find complete album covers / metadata for songs. This implicitly means that it sends requests to external servers, and those servers could log information about specific users' music libraries. VLC Media player also has a self-updater, however this does not update without the user's consent, and while there is no precedent for the developers to add spyware in its updates, it's still notable. This is the notice that users are presented with when first installing VLC, which adequately explains the implications of these features. The only improvement would be to not have them checked off by default.

    + privacy policy +
    +
    +
    +
    +

    Sources:

    +
      +
    1. Companies bundling spyware, adware with open-source media player [web.archive.org] [archive.is] [ghostarchive.org]
      2. +
    +
    +
    + This article was last edited on 7/30/2018 +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    +

    All contributions must be licensed under the CC0 license to be accepted.

    + CC0 License +
    +
    diff --git a/articles/yahoo.html b/articles/yahoo.html index e486a9d..5d8b556 100644 --- a/articles/yahoo.html +++ b/articles/yahoo.html @@ -1,77 +1,51 @@ + - - - + + + Yahoo! Search — Spyware Watchdog + - Yahoo Logo -

    Yahoo! Search

    -

    -Yahoo! search is a search engine made by Yahoo. -

    -

    Spyware Level: EXTREMELY HIGH

    -

    -Yahoo! search is integrated into the Oath spyware ecosystem, which is a merger between Yahoo and AOL. When you use Yahoo! Search, your -internet history is sent to Oath, and Oath will track you across the internet. This tracking is then sold to advertisers. The Oath Privacy Policy makes it difficult to know which parts of it refer to Yahoo! search, and which parts of it refer to other Oath services, so it's difficult to quantify the extent of data collection done by Yahoo! search specifically. (combining privacy policies is a common tactic to obfusicate privacy information) -

    -

    - It's important to notice that this is just scratching the surface at the extent of spying that the Oath - spyware platform does to its users, and only includes information collection aspects of the Oath spyware platform that could be reasonably attributed to Yahoo! search. -

    -

    Integration into the "Yahoo Account" spyware platform and tracking internet history

    -

    -Yahoo's privacy policy is actually called the "Oath" privacy policy, so it's not as simple to find. Yahoo search -is integrated into the "Yahoo Account" spyware platform, which shares all of the information it collects with its parent company, Oath, including your browsing history. When you have an account connected to Oath, which would be an AOL account or a Yahoo account, your internet history is collected and associated with a unique user identity obtained through browser fingerprinting.[1] -

    -

    - It's important to notice that this information will be collected whether you are signed in or not. The Oath Privacy Policy makes it clear that - they fingerprint your computer and so can uniquely identify you no matter what. What is probably happening is that Yahoo will fingerprint your - use of its services, so that you will be tracked through your usage of them, whether you have an account or not. -

    -

    Tracking users

    -

    - The Oath Privacy Policy makes a lot of statements about how it tracks its users across their devices and across the internet: -

    -

    - "We collect information from your devices (computers, mobile phones, tablets, etc.), including information about how you interact with our Services and those of our third-party partners and information that allows us to recognize and associate your activity across devices and Services. This information includes device specific identifiers and information such as IP address, cookie information, mobile device and advertising identifiers, browser version, operating system type and version, mobile network information, device settings, and software data."[1] -

    -

    Selling user information to advertisers

    -

    - The Oath privacy policy clearly states that the information it collects from you is shared with advertisers: -

    -

    - "We may recognize your devices to provide you with personalized experiences and advertising across the devices you use." - [1]

    -

    - "We also may use the information we have about you for the following purposes: ...
    - Help advertisers and publishers connect to offer relevant advertising in their apps and websites.....
    - Match and serve targeted advertising (across devices and both on and off of our Services) and provide targeted advertising based on your device activity, inferred interests and location information....
    - Create analytics and reports for external parties, including partners, publishers, advertisers, apps, third-parties and the public regarding the use of and trends within our Services and ads, including showing trends to partners regarding general preferences, the effectiveness of ads and information on user experiences...." -     [1]

    -

    - A LOT more could be written but this is probably enough to understand that Yahoo! search is spyware. If you want any more, the privacy policy should speak for itself. -

    -
    -
    -

    Sources

    -

    - 1. - Welcome to the Oath Privacy Center - [ghostarchive.org] - [web.archive.org] - [archive.is]
    -

    -
    -

    - This article was last edited on 8/3/2018 -

    -

    - If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg. All contributions must be licensed under the CC0 license to be accepted. -

    - CC0 License -

    Back to catalog

    -
    +
    +
    ← Catalog
    +
    + Yahoo Logo +

    Yahoo! Search

    +

    Yahoo! search is a search engine made by Yahoo.

    +

    Spyware Level: EXTREMELY HIGH

    +

    Yahoo! search is integrated into the Oath spyware ecosystem, which is a merger between Yahoo and AOL. When you use Yahoo! Search, your internet history is sent to Oath, and Oath will track you across the internet. This tracking is then sold to advertisers. The Oath Privacy Policy makes it difficult to know which parts of it refer to Yahoo! search, and which parts of it refer to other Oath services, so it's difficult to quantify the extent of data collection done by Yahoo! search specifically. (combining privacy policies is a common tactic to obfusicate privacy information)

    +

    It's important to notice that this is just scratching the surface at the extent of spying that the Oath spyware platform does to its users, and only includes information collection aspects of the Oath spyware platform that could be reasonably attributed to Yahoo! search.

    +

    Integration into the "Yahoo Account" spyware platform and tracking internet history

    +

    Yahoo's privacy policy is actually called the "Oath" privacy policy, so it's not as simple to find. Yahoo search is integrated into the "Yahoo Account" spyware platform, which shares all of the information it collects with its parent company, Oath, including your browsing history. When you have an account connected to Oath, which would be an AOL account or a Yahoo account, your internet history is collected and associated with a unique user identity obtained through browser fingerprinting.[1]

    +

    It's important to notice that this information will be collected whether you are signed in or not. The Oath Privacy Policy makes it clear that they fingerprint your computer and so can uniquely identify you no matter what. What is probably happening is that Yahoo will fingerprint your use of its services, so that you will be tracked through your usage of them, whether you have an account or not.

    +

    Tracking users

    +

    The Oath Privacy Policy makes a lot of statements about how it tracks its users across their devices and across the internet:

    +

    "We collect information from your devices (computers, mobile phones, tablets, etc.), including information about how you interact with our Services and those of our third-party partners and information that allows us to recognize and associate your activity across devices and Services. This information includes device specific identifiers and information such as IP address, cookie information, mobile device and advertising identifiers, browser version, operating system type and version, mobile network information, device settings, and software data."[1]

    +

    Selling user information to advertisers

    +

    The Oath privacy policy clearly states that the information it collects from you is shared with advertisers:

    +

    "We may recognize your devices to provide you with personalized experiences and advertising across the devices you use."[1]

    +

    "We also may use the information we have about you for the following purposes: ...
    + Help advertisers and publishers connect to offer relevant advertising in their apps and websites.....
    + Match and serve targeted advertising (across devices and both on and off of our Services) and provide targeted advertising based on your device activity, inferred interests and location information....
    + Create analytics and reports for external parties, including partners, publishers, advertisers, apps, third-parties and the public regarding the use of and trends within our Services and ads, including showing trends to partners regarding general preferences, the effectiveness of ads and information on user experiences...."    [1]

    +

    A LOT more could be written but this is probably enough to understand that Yahoo! search is spyware. If you want any more, the privacy policy should speak for itself.

    +
    +
    +
    +
    +

    Sources:

    +
      +
    1. Welcome to the Oath Privacy Center [ghostarchive.org] [web.archive.org] [archive.is]
      2. +
    +
    +
    + This article was last edited on 8/3/2018 +

    If you want to edit this article, or contribute your own article(s), visit us at the git repo on Codeberg.

    +

    All contributions must be licensed under the CC0 license to be accepted.

    + CC0 License +
    +