iesnare snared

[kasparov]

From the BBC website

The Information Commissioner’s Office is investigating whether online bookies are breaking the law.
It has found in favour of two punters who complained about software being downloaded on to their computers without their permission.
The gamblers believe the software could be used to track their betting history and close their accounts if they win.
The gambling companies say they are not breaching data laws and they use the software to protect against fraud.
The software at the centre of the complaints is called iesnare or iovation and downloads automatically when you log in to some online gambling websites. In some cases, it’s downloaded when you visit the homepage.
Brian Chappell, who runs the campaign website Justice for Punters, has had his accounts closed with online bookmakers after placing winning bets. …

[Matron]

You can catch-up with the “podcast” it is the first item on the show today:

http://www.bbc.co.uk/programmes/b006qps9

They are plenty of sites that will give you instructions to see if you PC has been infected by this and how to get rid of it as well.

[Marginal Value]

All the talk on the “You and Yours” programme was related to the Data Protection Act and therefore the Information Commisioner’s Office, but what apears to be happening might also be covered by the the Computer Misuse Act 1990 and its various amendments. This Act was brought in to make computer hacking a crime. Sections 1, 2, and 3 of the Act seem relevant to the reported behaviour of those website providers who download iesnare and similar programs, especially those who download it without giving potential customers the opportunity to see and agree to the Terms And Conditions of the website. Even if that opportunity is given, the T&Cs should state explicitly what is being downloaded, and not just some general comments about “cookies” (and iesnare is not a cookie) or other general terms about measures againsts fraud.

Section 3 of the Act says that unauthorised modification of a computer, or data or programs on a computer, is a criminal offence. It carries a maximum term of imprisonment of 12 months and an unlimted fine on summary conviction in a lower court, or imprisonment of up to 10 years if convicted in a Crown Court or higher.

I have noticed plenty of cases where this Act has been used against individual hackers doing nasty things to a corporation’s computer, but have yet to find it being used in the opposite direction. But I suppose there is a first time for everything.

[Author]

Posts