Re: Question regarding Marketscore spyware

["Steele, John E." <moonowl () BF UMICH EDU>]

> If some of those folks blocking the servers would provide 
> an IP address list and/or their domain naming scheme I'm 
> sure I'm not the only one here that would appreciate it. 
> TIA.

I second that TIA!

Thank you,
John E. Steele
Workstation & Network Support
Michigan Administrative and Information Services
734-647-8979 (phone)
734-368-4835 (Nextel)
moonowl () umich edu


-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Gary Flynn
Sent: Wednesday, December 01, 2004 10:27 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Question regarding Marketscore spyware

Jason Richardson wrote:

> Hi all, I just read an article about the threat that this flavor of 
> spyware poses to edus and that several, including those represented by 
> frequent posters here and on Unisog, have blocked all access to/from 
> their networks.  Has anyone else had any experience with it?  We have 
> not (yet) to the best of my knowledge.  Here's the story - 
> http://www.pcworld.com/news/article/0,aid,118757,tk,dn120104X,00.asp.
Its the first I've heard about it but the press seems to be picking it
up as someone else just asked me about it. It doesn't appear to be
anything new. I've seen posts about it that date back to 2001.
University of Minnesota's web page on the subject says the page was last
updated in 2003.
http://www1.umn.edu/oit/security/marketscore.html

I'd think a commercial venture that was man-in-the-middling SSL
protected sessions would end up in court pretty quick but maybe their
privacy policy discloses this and thereby the person turning their
computer over to this unknown code is making a responsible, informed
decision. Hey, I have this neat screen saver that works real well with
it too.... ;) XP's software restrictions feature looks more and more
attractive.

A quick Google search makes me think Adaware and Spybot both detect it.

If some of those folks blocking the servers would provide an IP address
list and/or their domain naming scheme I'm sure I'm not the only one
here that would appreciate it. TIA.

Gary Flynn
Security Engineer
James Madison University

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.