msgid "Proprietary Coercion - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><a> msgid "<a id=\"side-menu-button\" class=\"switch\" href=\"#navlinks\">" msgstr "" #. type: Attribute 'title' of: <div><a><img> msgid "Section contents" msgstr "" #. type: Attribute 'alt' of: <div><a><img> msgid " [Section contents] " msgstr "" #. type: Content of: <div> msgid "</a>" msgstr "" #. type: Content of: <div><p><a> msgid "<a href=\"/\">" msgstr "" #. type: Attribute 'title' of: <div><p><a><img> msgid "GNU Home" msgstr "" #. type: Content of: <div><p> msgid "" "</a> / <a href=\"/proprietary/proprietary.html\">Malware</a> / By " "type /" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Coercion" msgstr "" #. type: Content of: <div><div><p> msgid "" "Nonfree (proprietary) software is very often malware (designed to mistreat " "the user). Nonfree software is controlled by its developers, which puts them " "in a position of power over the users; <a href=\"/philosophy/free-software-" "even-more-important.html\">that is the basic injustice</a>. The developers " "and manufacturers often exercise that power to the detriment of the users " "they ought to serve." msgstr "" #. type: Content of: <div><div><p> msgid "This typically takes the form of malicious functionalities." msgstr "" #. type: Content of: <div><div><p> msgid "" "This page lists cases of companies that have announced concrete plans to " "implement malicious techniques to force users into obeying the company's " "demands." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "If you know of an example that ought to be in this page but isn't here, " "please write to <a href=\"mailto:webmasters@gnu.org\"><webmasters@gnu." "org></a> to inform us. Please include the URL of a trustworthy reference " "or two to serve as specific substantiation." msgstr "" #. type: Content of: <div><div><h4> msgid "Latest additions" msgstr "" #. type: Content of: <div><div><p> msgid "" "Entries are in reverse chronological order, based on the dates of " "publication of linked articles. The latest additions are listed on the <a " "href=\"/proprietary/proprietary.html#latest\">main page</a> of the Malware " "section." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The MoviePass dis-service <a href=\"https://www.cnet.com/culture/" "entertainment/moviepass-founder-wants-to-use-facial-recognition-to-score-you-" "free-movies/\"> is planning to use face recognition to track people's eyes</" "a> to make sure they won't put their phones down or look away during " "ads—and trackers." msgstr "" #. TRANSLATORS: Use space (SPC) as msgstr if you don't have notes. #. type: Content of: <div><div> msgid "*GNUN-SLOT: TRANSLATOR'S NOTES*" msgstr "" #. type: Content of: <div><div><p> msgid "" "Please send general FSF & GNU inquiries to <a href=\"mailto:gnu@gnu.org" "\"><gnu@gnu.org></a>. There are also <a href=\"/contact/\">other ways " "to contact</a> the FSF. Broken links and other corrections or suggestions " "can be sent to <a href=\"mailto:webmasters@gnu.org\"><webmasters@gnu." "org></a>." msgstr "" # # # #. TRANSLATORS: Ignore the original text in this paragraph, #. replace it with the translation of these two: #. We work hard and do our best to provide accurate, good quality #. translations. However, we are not exempt from imperfection. #. Please send your comments and general suggestions in this regard #. to <a href="mailto:web-translators@gnu.org"> #. <web-translators@gnu.org></a>.</p> #. <p>For information on coordinating and contributing translations of #. our web pages, see <a #. href="/server/standards/README.translations.html">Translations #. README</a>. #. type: Content of: <div><div><p> msgid "" "Please see the <a href=\"/server/standards/README.translations.html" "\">Translations README</a> for information on coordinating and contributing " "translations of this article." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2022, 2023 Free Software Foundation, Inc." msgstr "" #. type: Content of: <div><p> msgid "" "This page is licensed under a <a rel=\"license\" href=\"http://" "creativecommons.org/licenses/by/4.0/\">Creative Commons Attribution 4.0 " "International License</a>." msgstr "" #. TRANSLATORS: Use space (SPC) as msgstr if you don't want credits. #. type: Content of: <div><div> msgid "*GNUN-SLOT: TRANSLATOR'S CREDITS*" msgstr "" #. timestamp start #. type: Content of: <div><p> msgid "Updated:" msgstr "" #. type: Content of: <title> msgid "Proprietary Interference - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Interference" msgstr "" #. type: Content of: <div><div><p> msgid "" "One kind of malicious functionality mediates developer's interference into " "the use of the software. This page describes how various proprietary " "programs harass or annoy the user, or cause trouble for the user. These " "actions are like <a href=\"/proprietary/proprietary-sabotage#about-page" "\">sabotage</a>, but the word “sabotage” is too strong for them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://proton.me/blog/outlook-is-microsofts-new-data-collection-" "service\"> Outlook has become a “data collection and ad delivery " "service”</a>. Since Outlook is now integrated with Microsoft “" "cloud” services, and doesn't support end-to-end encryption, the " "company has full access to users' emails, contacts, and calendar events. " "Microsoft may also <a href=\"https://www.cyberkendra.com/2023/11/new-outlook-" "update-raises-privacy.html\"> retrieve credentials associated with any third-" "party services</a> that are synchronized with Outlook. This trove of " "personal data enables Microsoft, as well as its commercial partners, to " "flood users with targeted ads, and possibly to train “artificial " "intelligences.” Even worse, this data is available to any government " "that can force Microsoft to hand it over." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google is <a href=\"https://slate.com/technology/2025/01/google-gemini-ai-" "workspace-default-opt-in.html\"> forcing its bullshit generator, Gemini, on " "many users of Gmail</a> without asking them, and not even offering the users " "a way to deactivate it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Workplace IT managers, whose employees are forced to use Gmail, can get it " "turned off after a laborious procedure, followed by waiting—the " "darkest of dark patterns." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In its default configuration, Windows 11 now <a href=\"https://www.zdnet.com/" "article/windows-11-now-turns-on-onedrive-folder-backup-without-your-" "permission/\"> uploads users' files and personal information to Microsoft's " "“cloud”</a> without asking permission to do so. This is " "presented as a convenient backup method, but if the allotted storage " "capacity is exceeded, the user will need to buy more space, increasing " "Microsoft's profit." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "However, this small profit is probably not the company's major reason for " "making cloud storage the default. Here is an excerpt from the <a href=" "\"https://www.microsoft.com/en-US/servicesagreement\"> Microsoft Services " "agreement</a> (Section 2b):" msgstr "" #. type: Content of: <div><div><ul><li><blockquote><p> msgid "" "<i>To the extent necessary to provide the Services to you and others, to " "protect you and the Services, and to improve Microsoft products and " "services, you grant to Microsoft a worldwide and royalty-free intellectual " "property license to use Your Content, for example, to make copies of, " "retain, transmit, reformat, display, and distribute via communication tools " "Your Content on the Services.</i>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We strongly suspect that the backed-up material is used to feed Microsoft's " "greedy “AI.” In addition, it is most likely analysed to better " "profile users in order to flood them with targeted ads, thereby generating " "more profit." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Users, on the other hand, are at the mercy of any entity that demands their " "data, let alone of any cracker that breaks into Microsoft's servers. They " "<em>must</em> escape from this sick environment, and install a sane <a href=" "\"https://www.gnu.org/distros/free-distros.html\"> free/libre system</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft has started to <a href=\"https://www.cnet.com/tech/who-wants-ads-" "in-their-windows-11-start-menu-heres-how-to-turn-them-off/\"> show ads in " "the “Recommended” section of the Windows 11 Start menu</a>. " "Previously, this section only included recently used documents and images. " "Now it also contains the icons of apps Microsoft wants to advertise, in the " "hope that the user will click on one of them, and buy the app. So far, the " "user can disable the ads, but this doesn't make them more legitimate." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theverge.com/2024/3/15/24101887/microsoft-bing-popups-" "windows-11-google-chrome\"> Microsoft is using malware tactics to get users " "to switch to their web browser</a>, Microsoft Edge, and their search engine, " "Microsoft Bing. When users launch the Google Chrome browser Microsoft " "injects a pop up advertisement in the corner of the screen advising users to " "switch to Bing. Microsoft also imported users Chrome browsing data without " "their knowledge or consent." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft has been annoying people who wanted to close the proprietary " "program OneDrive on their computers, <a href=\"https://www.theverge." "com/2023/11/8/23952878/microsoft-onedrive-windows-close-app-notification\"> " "forcing them to give the reason why they were closing it</a>. This prompt " "was removed after public pressure." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is a reminder that angry users still have the power to make developers " "of proprietary software remove small annoyances. Don't count on public " "outcry to make them remove more profitable malware, though. Run away from " "proprietary software!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20231011121908/https://www.makeuseof." "com/how-to-remove-ads-on-samsung/\">Samsung's Push Service proprietary app</" "a> sends notifications to the user's phone about “updates” in " "Samsung apps, including the Gaming Hub, but these updates only sometimes " "have to do with a new version of the apps. Many times, the notifications " "from Gaming Hub are simply ads for games that they think the user should " "install based on the data collected from the user. Most importantly, <a href=" "\"https://web.archive.org/web/20240305093416/https://getfastanswer.com/3486/" "how-to-remove-samsung-push-service-on-a-smartphone\">it cannot be " "permanently disabled.</a>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Chamberlain Group <a href=\"https://arstechnica.com/gadgets/2023/11/" "chamberlain-blocks-smart-garage-door-opener-from-working-with-smart-homes/" "\">blocks users from using third-party software</a> with its garage openers. " "This is an intentional attack on using free software. The official garage " "opener proprietary mobile app is now also <a href=\"https://pluralistic." "net/2023/11/09/lead-me-not-into-temptation/#chamberlain\">infested with ads, " "including up-selling its other services and devices.</a>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is <a href=\"https://www.theguardian.com/technology/2023/feb/14/" "microsoft-to-phase-out-internet-explorer-with-new-edge-browser\"> remotely " "disabling Internet Explorer, forcibly redirecting users to Microsoft Edge</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Imposing such change is malicious, and the fact that the redirection is from " "one unjust program (IE) to another unjust program (Edge) does not excuse it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.techarp.com/mobile/apple-china-limit-airdrop/\"> " "Obeying a demand by the Chinese government, Apple restricted the use of " "AirDrop in China</a>. It imposed a ten-minute time limit during which users " "can receive files from non contacts. This makes it nearly impossible to use " "AirDrop for its intended purpose, which is to exchange files with strangers " "between iMonsters in physical proximity. This happened after it became known " "that dissenters were using the app to distribute digital anti-government " "fliers anonymously." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Norton 360 antivirus <a href=\"https://www.howtogeek.com/777952/" "norton-360-antivirus-now-mines-cryptocurrency/\">updated its program to " "install a cryptocurrency miner on users' computers</a> without people's " "permission. The miner is not turned on by default but there is no way to " "completely uninstall the crypto mining software, which has upset some users." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://slate.com/technology/2021/10/facebook-unfollow-everything-" "cease-desist.html\">Facebook's nonfree client forces its useds to look at " "the newsfeed</a>. A used of Facebook developed a browser add-on to make it " "easier to unfollow everyone and thus make the newsfeed empty. Many of the " "people used by Facebook loved this, because they regard the newsfeed as a " "burden that Facebook imposes on them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If the client software for Facebook were free, useds could probably make the " "newsfeed disappear by modifying the client not to display it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is making it harder and harder to <a href=\"https://www.theverge." "com/22630319/microsoft-windows-11-default-browser-changes\">replace default " "apps in its Windows</a> operating system and is pressuring users to use its " "proprietary programs instead. We believe the best approach to this would be " "replacing Windows with a free (as in freedom) operating system like GNU. We " "also maintain a <a href=\"/distros/free-distros.html\">list of fully free " "distributions of GNU</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/gadgets/2021/06/even-creepier-covid-" "tracking-google-silently-pushed-app-to-users-phones/\">Google automatically " "installed an app on many proprietary Android phones</a>. The app might or " "might not do malicious things but the power Google has over proprietary " "Android phones is dangerous." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/technology/2021/may/30/gadgets-have-" "stopped-working-together-interoperability-apple\">Apple is systematically " "undermining interoperability</a>. At the hardware level, it does this via " "nonstandard plugs, buses and networks. At the software level, it does this " "by not letting the user have any data except within one app." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://gizmodo.com/get-ready-for-in-car-ads-1846888390\">Ford is " "planning to force ads on drivers in cars</a>, with the ability for the owner " "to pay extra to turn them off. The system probably imposes surveillance on " "drivers too." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The <a href=\"https://www.wired.com/story/weddings-social-media-apps-photos-" "memories-miscarriage-problem/\">WeddingWire app saves people's wedding " "photos forever and hands over data to others</a>, giving users no control " "over their personal information/data. The app also sometimes shows old " "photos and memories to users, without giving them any control over this " "either." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is <a href=\"https://uk.pcmag.com/operating-systems/131798/" "microsoft-starts-automatically-removing-flash-from-windows\">forcibly " "removing the Flash player from computers running Windows 10</a>, using <a " "href=\"/proprietary/proprietary-back-doors.html#windows-update\">a universal " "backdoor in Windows</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The fact that Flash has been <a href=\"/proprietary/proprietary-back-doors." "html#M202012020\">disabled by Adobe</a> is no excuse for this abuse of " "power. The nature of proprietary software, such as Microsoft Windows, gives " "the developers power to impose their decisions on users. Free software on " "the other hand empowers users to make their own decisions." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is <a href=\"https://www.slashgear.com/windows-10-users-are-grumpy-" "over-forced-updates-and-unwanted-apps-18643135/\">forcing Windows users</a> " "to <a href=\"https://support.microsoft.com/en-us/windows/manage-updates-in-" "windows-643e9ea7-3cf6-7da6-a25c-95d4f7f099fe\">install upgrades it pushes</" "a> using <a href=\"/proprietary/proprietary-back-doors.html#windows-update" "\">its universal back doors</a>. These upgrades can do various harms to " "users such as restricting computers from some functions and/or forcing users " "to defenselessly do whatever Microsoft tells them to do." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tesla's cars have a <a href=\"/proprietary/proprietary-back-doors." "html#M201709090.1\"> universal remote back door</a>. Tesla used it to <a " "href=\"https://www.theverge.com/2020/2/6/21127243/tesla-model-s-autopilot-" "disabled-remotely-used-car-update\"> disable the autopilot features</a> on " "people's cars to make them pay extra for re-enabling the features." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This kind of malfeature is only possible with proprietary software—" "free software is controlled by its users who wouldn't let do such things to " "them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Riot Games' new anti-cheat is malware; <a href=\"https://www.extremetech.com/" "gaming/309320-riot-games-new-anti-cheat-system-runs-at-system-boot-uses-" "kernel-driver\">runs on system boot at kernel level</a> on Windows. It is " "insecure software that increases the attack surface of the operating system." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple is putting DRM on iPhone batteries, and the system proprietary " "software <a href=\"https://www.vice.com/en/article/59nz3k/apple-is-locking-" "batteries-to-specific-iphones-a-nightmare-for-diy-repair\">turns off certain " "features when batteries are replaced other than by Apple.</a>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In 2019, <a href=\"https://chromestory.com/2019/07/disable-pull-to-refresh-" "on-chrome-for-android/\"> Google revoked users' ability to turn off the " "“pull-to-refresh” gesture in Chrome for Android</a>. Despite <a " "href=\"https://support.google.com/chrome/thread/8152831\"> thousands of " "protests by frustrated users</a>, Google has not reverted its decision. " "Proprietary software developers are known for ignoring users' requests in " "favor of their own gain and convenience. Only free software gives users " "control over their own computing." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google is modifying Chromium so that <a href=\"https://tech.slashdot.org/" "story/19/01/23/0048202/google-proposes-changes-to-chromium-browser-that-will-" "break-content-blocking-extensions-including-various-ad-blockers\"> " "extensions won't be able to alter or block whatever the page contains</a>. " "Users could conceivably reverse the change in a fork of Chromium, but surely " "Chrome (nonfree) will have the same change, and users can't fix it there." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Samsung phones come preloaded with <a href=\"https://www.bloomberg.com/news/" "articles/2019-01-08/samsung-phone-users-get-a-shock-they-can-t-delete-" "facebook\"> a version of the Facebook app that can't be deleted</a>. <a href=" "\"https://www.infopackets.com/news/10484/truth-behind-undeletable-facebook-" "app\"> Facebook claims this is a stub</a> which doesn't do anything, but we " "have to take their word for it, and there is the permanent risk that the app " "will be activated by an automatic update." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Preloading crapware along with a nonfree operating system is common " "practice, but by making the crapware undeletable, Facebook and Samsung (<a " "class=\"not-a-duplicate\" href=\"https://www.bloomberg.com/news/" "articles/2019-01-08/samsung-phone-users-get-a-shock-they-can-t-delete-" "facebook\">among others</a>) are going one step further in their hijacking " "of users' devices." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "One version of Windows 10 <a href=\"https://www.ghacks.net/2018/09/12/" "microsoft-intercepting-firefox-chrome-installation-on-windows-10/\"> " "harangues users if they try to install Firefox (or Chrome)</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A nonfree video game, available through the nonfree Steam client, <a href=" "\"https://www.extremetech.com/gaming/274552-great-now-games-are-hijacking-" "systems-with-cryptocurrency-miners\"> included a “miner”</a>, i." "e. an executable that hijacks the CPU in users' computers to mine a " "cryptocurrency." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A cracker used an exploit in outdated software to <a href=\"https://www." "pcmag.com/news/400-websites-secretly-served-cryptocurrency-miners-to-visitors" "\"> inject a “miner” in web pages</a> served to visitors. This " "type of malware hijacks the computer's processor to mine a cryptocurrency." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(Note that the article refers to the infected software as “" "content management system”. A better term would be “<a href=\"/" "philosophy/words-to-avoid.html#Content\">website revision system</a>”.)" "</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Since the miner was a nonfree JavaScript program, visitors wouldn't have " "been affected if they had used <a href=\"/software/librejs/index.html" "\">LibreJS</a>. Some browser extensions that <a href=\"https://www.cnet.com/" "tech/computing/how-to-stop-sites-from-using-your-cpu-to-mine-coins/\"> " "specifically block JavaScript miners</a> are also available." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Pearson's proprietary educational software <a href=\"https://gizmodo.com/" "pearson-embedded-a-social-psychological-experiment-in-s-1825367784\"> did an " "experiment on real students</a>, treating students differently to observe " "the results." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is planning to make Windows <a href=\"https://www.theguardian.com/" "technology/2018/mar/19/windows-10-microsoft-force-people-edge-browser-" "windows-mail-chrome-firefox\"> impose use of its browser, Edge, in certain " "circumstances</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The reason Microsoft can force things on users is that Windows is nonfree." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Learn how <a href=\"https://web.archive.org/web/20170319013045/https://www." "huffingtonpost.com/joseph-farrell/the-fascinating-psycholog_b_6076502.html" "\"> gratis-to-play-and-not-win-much games manipulate their useds " "psychologically</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "These manipulative behaviors are malicious functionalities, and they are " "possible because the game is proprietary. If it were free, people could " "publish a non-manipulative version and play that instead." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows displays <a href=\"https://www.theverge.com/2017/3/17/14956540/" "microsoft-windows-10-ads-taskbar-file-explorer\"> intrusive ads for " "Microsoft products and its partners' products</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article's author starts from the premise that Microsoft has a right to " "control what Windows does to users, as long as it doesn't go “too " "far”. We disagree." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "An upgrade package for Acrobat Reader <a href=\"https://www.bleepingcomputer." "com/news/software/adobe-acrobat-reader-dc-update-installs-chrome-browser-" "extension/\">silently alters Chrome</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Microsoft Telemetry Compatibility service <a href=\"https://answers." "microsoft.com/en-us/windows/forum/all/microsoft-telemetry-compatibility/" "cefa7c8e-49c9-4965-aef6-2d5f01bb38f2\"> drastically reduces the performances " "of machines running Windows 10</a>, and can't be disabled easily." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "After <a href=\"/proprietary/malware-microsoft.html#windows10-forcing" "\">forcing the download of Windows 10</a> on computers that were running " "Windows 7 and 8, Microsoft <a href=\"https://www.computerworld.com/" "article/3012278/microsoft-sets-stage-for-massive-windows-10-upgrade-strategy." "html\"> repeatedly switched on a flag that urged users to “" "upgrade” to Windows 10</a> when they had turned it off, in the hope " "that some day they would fail to say no. To do this, Microsoft used <a href=" "\"https://www.theregister.com/2016/03/17/" "microsoft_windows_10_upgrade_gwx_vs_humanity/\"> malware techniques</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A detailed <a href=\"https://www.eff.org/deeplinks/2016/08/windows-10-" "microsoft-blatantly-disregards-user-choice-and-privacy-deep-dive\"> analysis " "of Microsoft's scheme</a> is available on the Electronic Frontier " "Foundation's website." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft has made companies' Windows machines managed by the company's " "sysadmins <a href=\"https://www.computerworld.com/article/3042397/admins-" "beware-domain-attached-pcs-are-sprouting-get-windows-10-ads.html\">harangue " "users to complain to the sysadmins about not “upgrading” to " "Windows 10</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A pacemaker running proprietary code <a href=\"https://www.wired.com/2016/02/" "i-want-to-know-what-code-is-running-inside-my-body/\">was misconfigured and " "could have killed the implanted person</a>. In order to find out what was " "wrong and get it fixed, the person needed to break into the remote device " "that sets parameters in the pacemaker (possibly infringing upon " "manufacturer's rights under the DMCA). If this system had run free software, " "it could have been fixed much sooner." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft has <a href=\"https://www.theverge.com/2016/1/16/10780876/" "microsoft-windows-support-policy-new-processors-skylake\">desupported all " "future Intel CPUs for Windows 7 and 8</a>. Those machines will be stuck with " "the nastier Windows 10. <a href=\"https://gizmodo.com/only-the-latest-" "version-of-windows-will-run-on-some-fut-1753545825\"> AMD and Qualcomm CPUs, " "too</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Of course, Windows 7 and 8 are unethical too, because they are proprietary " "software. But this example of Microsoft's wielding its power demonstrates " "the power it holds." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Free software developers also stop maintaining old versions of their " "programs, but this is not unfair to users because the users of free software " "have control over it. If it is important enough to you, you and other users " "can hire someone to support the old version on your future platforms." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe nonfree software may halt all other work and freeze a computer <a href=" "\"https://shallowsky.com/blog/gimp/non-free-software-surprises.html\"> to " "perform a license check</a>, at a random time every 30 days." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Oracle made a deal with Yahoo; Oracle's nonfree Java plug-in will <a href=" "\"https://searchengineland.com/yahoo-signs-deal-with-oracle-to-attract-new-" "users-via-java-installs-224097\"> change the user's initial web page, and " "default search engine, to Yahoo</a> unless the user intervenes to stop it." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2015-2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Jails - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Jails" msgstr "" #. type: Content of: <div><div><p> msgid "" "The “jails” are malicious operating systems that are designed to " "impose censorship of which applications the user can install. The <a href=" "\"http://i.imgur.com/ZRViDum.jpg\">image of the iPrison</a> illustrates this " "issue." msgstr "" #. type: Content of: <div><div><p> msgid "" "These systems are platforms for censorship imposed by the company that owns " "the system. Selling products designed as platforms for a company to impose " "censorship ought to be forbidden by law, but it isn't." msgstr "" #. type: Content of: <div><div><p> msgid "" "This page lists a few jails, along with some of the methods they use to " "censor apps, and includes specific examples of apps that were blocked using " "this censorship power." msgstr "" #. type: Content of: <div><div><div><ul><li> msgid " <a href=\"#apple\">Apple</a> " msgstr "" #. type: Content of: <div><div><div><ul><li> msgid " <a href=\"#microsoft\">Microsoft</a> " msgstr "" #. type: Content of: <div><div><div><ul><li> msgid " <a href=\"#consoles\">Game consoles</a> " msgstr "" #. type: Content of: <div><div><h3> msgid "Apple" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Shortcuts, a built-in scripting app on Apple devices, <a href=\"https://" "support.apple.com/guide/shortcuts/apdf01f8c054/5.0/ios/15.0\"> doesn't give " "you complete freedom to share scripts</a> (a.k.a. “shortcuts”). " "Exporting a script as a file <a href=\"https://web.archive.org/" "web/20230329031338/https://www.reddit.com/r/StallmanWasRight/comments/vogb0c/" "all_methods_of_sharing_ios_shortcuts_require_an/\"> requires an Apple ID</" "a>, and may be subjected to censorship by Apple." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In this situation (and many others), switching from iPhony/iBad to a freedom " "respecting device gives you both convenience and freedom. The assumption " "that you must sacrifice convenience to get freedom is often wrong. Jails are " "inconvenient." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple has made it <a href=\"https://gizmodo.com/apple-and-google-pull-" "opposition-app-from-russian-store-1847695238\"> impossible to load Navalny's " "tactical voting app into an iPhone</a> in Russia." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It is impossible because (1) the iPhone refuses to load apps from anywhere " "other than Apple, and (2) Apple has obeyed a Russian censorship law. The " "first point is enforced by Apple's nonfree software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple plans to require that <a href=\"https://www.macrumors.com/2019/04/08/" "mac-apps-notarization-macos-10-14-5/\"> all application software for MacOS " "be approved by Apple first</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Offering a checking service as an option could be useful and would not be " "wrong. Requiring users to get Apple's approval is tyranny. Apple says the " "check will only look for malware (not counting the malware that is <a href=" "\"/proprietary/malware-apple.html#TOC\">part of the operating system</a>), " "but Apple could change that policy step by step. Or perhaps Apple will " "define malware to include any app that the Chinese government does not like." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "For free software, this means users will need to get Apple's approval after " "compilation. This amounts to a system of surveilling the use of free " "programs." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://en.wikipedia.org/w/index.php?title=IOS_jailbreaking&" "oldid=835861046\"> iOS, the operating system of the Apple iThings, is the " "prototype of a jail</a>. It was Apple that introduced the practice of " "designing general purpose computers with censorship of application programs." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Here is an article about the <a href=\"https://weblog.rogueamoeba." "com/2008/03/07/code-signing-and-you/\"> code signing</a> that the iThings " "use to lock up the user." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Curiously, Apple is beginning to allow limited passage through the walls of " "the iThing jail: users can now install apps built from source code, provided " "the source code is written in Swift. Users cannot do this freely because " "they are required to identify themselves. <a href=\"https://developer.apple." "com/xcode/\">Here are details</a>. While this is a crack in the prison " "walls, it is not big enough to mean that the iThings are no longer jails." msgstr "" #. type: Content of: <div><div><h4> msgid "Examples of censorship by Apple jails" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Russian communications watchdog <a href=\"https://www.reuters.com/legal/" "litigation/russian-watchdog-tells-google-apple-remove-navalny-app-" "report-2021-08-20/\"> tells Google and Apple to remove Navalny's app</a> " "from their stores." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Because Apple controls what a user can install, this is absolute censorship. " "By contrast, because Android does not do that, users can install apps even " "if Google does not offer them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple is <a href=\"https://www.theguardian.com/technology/2020/aug/30/this-" "isnt-the-1990s-apple-under-pressure-from-app-developers\"> putting the " "squeeze on all business</a> conducted through apps for iMonsters." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is a symptom of a very big injustice: that Apple has the power to " "decide what software can be installed on an iMonster. That it is a jail." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple has <a href=\"https://www.theguardian.com/world/2019/oct/10/hong-kong-" "protests-apple-pulls-tracking-app-after-china-criticism\"> banned the app " "that Hong Kong protesters use to communicate</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Obeying the “local laws” about what people can do with software " "is no excuse for censoring what software people can use." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple <a href=\"https://boingboing.net/2019/10/07/apple-ios-13-1-2-for-hong-" "kong.html\"> censors the Taiwan flag in iOS</a> on behalf of the Chinese " "government. When the region is set to Hong Kong, this flag is not visible in " "the emoji selection widget but is still accessible. When the region is set " "to mainland China, all attempts to display it will result in the “" "empty emoji” icon as if the flag never existed." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Thus, not only does Apple use the App Store as an instrument of censorship, " "it also uses the iThing operating system for that purpose." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Users caught in the jail of an iMonster are <a href=\"https://boingboing." "net/2019/05/15/brittle-security.html\"> sitting ducks for other attackers</" "a>, and the app censorship prevents security companies from figuring out how " "those attacks work." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple's censorship of apps is fundamentally unjust, and would be inexcusable " "even if it didn't lead to security threats as well." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple is <a href=\"https://www.eff.org/deeplinks/2017/10/iranian-hardliners-" "want-isolated-internet\"> censoring apps for the US government too</a>. " "Specifically, it is deleting apps developed by Iranians." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The root of these wrongs is in Apple. If Apple had not designed the " "iMonsters to let Apple censor applications, Apple would not have had the " "power to stop users from installing whatever kind of apps." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple <a href=\"https://www.nytimes.com/2017/07/29/technology/china-apple-" "censorhip.html\"> deleted several VPNs from its app store for China</a>, " "thus using its own censorship power to strengthen that of the Chinese " "government." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple used its censorship system to enforce Russian surveillance <a href=" "\"https://web.archive.org/web/20220402210254/https://www.nytimes." "com/2017/01/06/technology/linkedin-blocked-in-russia.html\"> by blocking " "distribution of the LinkedIn app in Russia</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is ironic because LinkedIn is a surveillance system itself. While " "subjecting its users to its own surveillance, it tries to protect its users " "from Russian surveillance, and is therefore subject to Russian censorship." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "However, the point here is the wrong of Apple's censorship of apps." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple used its censorship system to enforce China's censorship <a href=" "\"https://www.theguardian.com/world/2017/jan/05/apple-removes-new-york-times-" "app-in-china\"> by blocking distribution of the New York Times app</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple censors games, <a href=\"https://arstechnica.com/gaming/2016/05/apple-" "says-game-about-palestinian-child-isnt-a-game/\"> banning some games from " "the cr…app store</a> because of which political points they suggest. " "Some political points are apparently considered acceptable." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple <a href=\"https://www.ifixit.com/News/7401/ifixit-app-pulled\"> banned " "a program from the App Store</a> because its developers committed the " "enormity of disassembling some iThings." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "As of 2015, Apple <a href=\"https://www.theguardian.com/commentisfree/2015/" "sep/23/apple-anti-choice-tendencies-showing-in-app-store-reproductive-rights" "\"> systematically bans apps that endorse abortion rights or would help " "women find abortions</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This particular political slant <a href=\"https://www.theguardian.com/" "technology/2011/dec/01/siri-abortion-apple-unintenional-omissions\"> affects " "other Apple services</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple has banned iThing applications that show the confederate flag. <a " "href=\"https://www.huffpost.com/entry/apple-confederate-flag_n_7663754\"> " "Not only those that use it as a symbol of racism</a>, but even strategic " "games that use it to represent confederate army units fighting in the Civil " "War." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This ludicrous rigidity illustrates the point that Apple should not be " "allowed to censor apps. Even if Apple carried out this act of censorship " "with some care, it would still be wrong. Whether racism is bad, whether " "educating people about drone attacks is bad, are not the real issue. Apple " "should not have the power to impose its views about either of these " "questions, or any other." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/technology/2014/dec/11/papers-please-" "game-ipad-nude-body-scans\"> More examples of Apple's arbitrary and " "inconsistent censorship</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple used this censorship power in 2014 to <a href=\"https://boingboing." "net/2014/02/07/apple-yanks-last-remaining-bit.html\"> ban all bitcoin apps</" "a> for the iThings for a time. It also <a href=\"https://www.gamespot.com/" "articles/apple-removes-game-about-growing-marijuana-from-app-" "store/1100-6419864/\"> banned a game about growing marijuana</a>, while " "permitting games about other crimes such as killing people. Perhaps Apple " "considers killing more acceptable than marijuana." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple rejected an app that displayed the locations of US drone " "assassinations, giving various excuses. Each time the developers fixed one " "“problem”, Apple complained about another. After the fifth " "rejection, Apple <a href=\"https://mashable.com/archive/apple-app-tracks-" "drone-strikes\"> admitted it was censoring the app based on the subject " "matter</a>." msgstr "" #. type: Content of: <div><div><h3> msgid "Microsoft" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows 10 S was a jail: <a href=\"https://www.theguardian.com/" "technology/2017/may/03/windows-10-s-microsoft-faster-pc-comparison\"> only " "programs from the Windows Store could be installed and executed</a>. It was " "however possible to <a href=\"https://www.theverge.com/2017/6/13/15789998/" "microsoft-windows-10-s-upgrade-windows-10-pro-guide\"> upgrade to Windows 10 " "Pro</a>. The successor of Windows 10 S is a special configuration of Windows " "10 called <a href=\"https://support.microsoft.com/en-us/windows/windows-10-" "and-windows-11-in-s-mode-faq-851057d6-1ee9-b9e5-c30b-93baebeebc85\"> S mode</" "a>. The major difference with Windows 10 S is that there is an easy way to " "switch out of S mode." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20190917162027/https://www.itworld.com/" "article/2832657/microsoft-metro-app-store-lock-down.html\"> Windows 8 on " "“mobile devices” (now defunct) was a jail</a>." msgstr "" #. type: Content of: <div><div><h3> msgid "Game consoles" msgstr "" #. type: Content of: <div><div><p> msgid "" "No game can run on the console unless the console's manufacturer has " "authorized it. Alas, we can't find a article to cite as a reference for " "this fact. Please inform us if you know of one." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Nintendo has devoted a lot of effort to <a href=\"https://arstechnica.com/" "gaming/2018/07/nintendo-reportedly-rolling-out-new-more-hack-proof-switch-" "hardware/\"> preventing users from installing third-party software on its " "Switch consoles</a>. These are now full-blown jails." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Sony restricted access to the PlayStation 3 GPU, so people who installed a " "GNU/Linux operating system on the console couldn't use it at full capacity. " "When some of them broke the restriction, <a href=\"https://blog.playstation." "com/2010/03/28/ps3-firmware-v3-21-update/\">Sony removed the ability to " "install other operating systems</a>. Then users broke that restriction too, " "but <a href=\"https://www.engadget.com/2011-01-12-sony-follows-up-officially-" "sues-geohot-and-fail0verflow-over-ps.html\">got sued by Sony</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "To install and use third-party operating systems and programs on the Xbox " "console, <a href=\"https://events.ccc.de/congress/2005/fahrplan/" "attachments/591-paper_xbox.pdf\">people had to break the restrictions " "imposed by Microsoft</a>." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2014-2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "" "Microsoft's Software Is Malware - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><p> msgid "" "</a> / <a href=\"/proprietary/proprietary.html\">Malware</a> / By " "company /" msgstr "" #. type: Content of: <div><h2> msgid "Microsoft's Software is Malware" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Types of Microsoft malware" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#back-doors\">Back doors</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#drm\">DRM</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#insecurity\">Insecurity</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#interference\">Interference</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#jails\">Jails</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#sabotage\">Sabotage</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#subscriptions\">Subscriptions</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#surveillance\">Surveillance</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#tethers\">Tethers</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#tyrants\">Tyrants</a>" msgstr "" #. type: Content of: <div><div><h3> msgid "Back Doors" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft Windows has a universal back door through which <a href=\"https://" "www.informationweek.com/government/microsoft-updates-windows-without-user-" "permission-apologizes\"> any change whatsoever can be imposed on the users</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This was <a href=\"https://web.archive.org/web/20200219180230/http://slated." "org/windows_by_stealth_the_updates_you_dont_want\"> reported in 2007</a> for " "XP and Vista, and it seems that Microsoft used the same method to push the " "<a href=\"/proprietary/malware-microsoft.html#windows10-forcing\"> Windows " "10 downgrade</a> to computers running Windows 7 and 8." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In Windows 10, the universal back door is no longer hidden; all “" "upgrades” will be <a href=\"https://arstechnica.com/information-" "technology/2015/07/windows-10-updates-to-be-automatic-and-mandatory-for-home-" "users/\"> forcibly and immediately imposed</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft has <a href=\"https://theintercept.com/2015/12/28/recently-bought-" "a-windows-computer-microsoft-probably-has-your-encryption-key/\"> backdoored " "its disk encryption</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The German government <a href=\"https://www.theregister.com/2013/08/23/" "nsa_germany_windows_8/\">veers away from Windows 8 computers with TPM 2.0</" "a> (<a href=\"https://www.zeit.de/digital/datenschutz/2013-08/trusted-" "computing-microsoft-windows-8-nsa\">original article in German</a>), due to " "potential back door capabilities of the TPM 2.0 chip." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Here is a suspicion that we can't prove, but is worth thinking about: <a " "href=\"https://web.archive.org/web/20150206003913/http://www.afr.com/p/" "technology/intel_chips_could_be_nsa_key_to_ymrhS1HS1633gCWKt5tFtI\"> " "Writable microcode for Intel and AMD microprocessors</a> may be a vehicle " "for the NSA to invade computers, with the help of Microsoft, say respected " "security experts." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows 8 also has a back door for <a href=\"https://www.computerworld.com/" "article/2732767/microsoft--we-can-remotely-delete-windows-8-apps.html\"> " "remotely deleting apps</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "You might well decide to let a security service that you trust remotely " "<em>deactivate</em> programs that it considers malicious. But there is no " "excuse for <em>deleting</em> the programs, and you should have the right to " "decide whom (if anyone) to trust in this way." msgstr "" #. type: Content of: <div><div><h3> msgid "DRM" msgstr "" #. type: Content of: <div><div><p> msgid "" "Digital restrictions management, or “DRM,” refers to " "functionalities designed to restrict what users can do with the data in " "their computers." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Ebooks “bought” from Microsoft's store check that their DRM is " "valid by connecting to the store every time their “owner” wants " "to read them. Microsoft is going to close this store, <a href=\"https://www." "bbc.com/news/technology-47810367\"> bricking all DRM'ed ebooks it has ever " "“sold”</a>. (The article additionally highlights the pitfalls of " "DRM.)" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is another proof that a DRM-encumbered product doesn't belong to the " "person who bought it. Microsoft said it will refund customers, but this is " "no excuse for selling them restricted books." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/gadgets/2007/08/aacs-tentacles/\">DRM in " "Windows</a>, introduced to cater to <a href=\"/proprietary/proprietary-drm." "html#bluray\">Blu-ray</a> disks. (The article talks about how the same " "malware would later be introduced in MacOS. That had not been done at the " "time, but it was done subsequently.)" msgstr "" #. type: Content of: <div><div><h3> msgid "Insecurity" msgstr "" #. type: Content of: <div><div><p> msgid "" "These bugs are/were not intentional, so unlike the rest of the file they do " "not count as malware. We mention them to refute the supposition that " "prestigious proprietary software doesn't have grave bugs." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows Recall is a feature of Microsoft's Copilot tool that comes " "preinstalled on AI-specialized computers. <a href=\"https://www.techtarget." "com/searchenterpriseai/feature/Privacy-and-security-risks-surrounding-" "Microsoft-Recall\"> Recall records everything users do on their computer</a> " "and allows them to search the recordings, but it has numerous security flaws " "and poses a risk to privacy. As Recall cannot be completely uninstalled, " "disabling it doesn't eliminate the risk because it can be reactivated by " "malware or misconfiguration." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft says that <a href=\"https://support.microsoft.com/en-us/windows/" "privacy-and-control-over-your-recall-experience-d404f672-7647-41e5-886c-" "a3c59680af15\"> Recall will not take screenshots of digitally restricted " "media</a>. Meanwhile, it stores sensitive user information such as passwords " "and bank account numbers, showing that whereas Microsoft worries somewhat " "about corporate interests, it couldn't care less about user privacy." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.bleepingcomputer.com/news/microsoft/zero-click-windows-" "tcp-ip-rce-impacts-all-systems-with-ipv6-enabled-patch-now/\"> A critical " "vulnerability in Windows systems that support IPv6</a> was discovered in " "2024, <a href=\"https://msrc.microsoft.com/update-guide/vulnerability/" "CVE-2024-38063\"> 16 years after the first affected system</a> was released. " "Unless the relevant patch is applied, an attacker can remotely execute " "arbitrary code on these systems. Microsoft considers exploits “likely." "”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The same sort of vulnerability in a free/libre operating system would " "probably be discovered sooner, since many more people would be able to look " "at the source code." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.bleepingcomputer.com/news/security/microsoft-" "office-365-email-encryption-could-expose-message-content/\"> The Microsoft " "Office encryption is weak</a>, and susceptible to attack." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Encryption is a tricky field, and easy to mess up. It is wise to insist on " "encryption software that is (1) free software and (2) studied by experts." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A security failure in Microsoft's Windows is <a href=\"https://www." "bleepingcomputer.com/news/security/fake-windows-11-upgrade-installers-infect-" "you-with-redline-malware/\">infecting people's computers with RedLine " "stealer malware</a> using a fake Windows 11 upgrade installer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A newly found Microsoft Windows vulnerability <a href=\"https://edition.cnn." "com/2021/07/08/tech/microsoft-windows-10-printnightmare/\"> can allow " "crackers to remotely gain access to the operating system</a> and install " "programs, view and delete data, or even create new user accounts with full " "user rights." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The security research firm accidentally leaked instructions on how the flaw " "could be exploited but Windows users should still wait for Microsoft to fix " "the flaw, if they fix it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>Please note that the article wrongly refers to crackers as “<a " "href=\"/philosophy/words-to-avoid.html#Hacker\">hackers</a>”.</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "At least 30 thousand organizations in the United States are newly “<a " "href=\"/philosophy/words-to-avoid.html#Hacker\">cracked</a>” via <a " "href=\"https://krebsonsecurity.com/2021/03/at-least-30000-u-s-organizations-" "newly-hacked-via-holes-in-microsofts-email-software/\">holes in Microsoft's " "proprietary email software, named Microsoft 365</a>. It is unclear whether " "there are other holes and vulnerabilities in the program or not but history " "and experience tells us it wouldn't be the last disaster with proprietary " "programs." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Researchers at the security firm SentinelOne discovered a <a href=\"https://" "www.wired.com/story/windows-defender-vulnerability-twelve-years/\">security " "flaw in proprietary program Microsoft Windows Defender that lurked " "undetected for 12 years</a>. If the program was free (as in freedom), more " "people would have had a chance to notice the problem, therefore, it could've " "been fixed a lot sooner." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The proprietary program Microsoft Teams' insecurity <a href=\"https://www." "forbes.com/sites/thomasbrewster/2020/04/27/your-whole-companys-microsoft-" "teams-data-couldve-been-stolen-with-an-evil-gif/\">could have let a " "malicious GIF steal user data from Microsoft Teams accounts</a>, possibly " "across an entire company, and taken control of “an organization's " "entire roster of Teams accounts.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Exploits of bugs in Windows, which were developed by the NSA and then leaked " "by the Shadowbrokers group, are now being used to <a href=\"https://" "theintercept.com/2017/05/12/the-nsas-lost-digital-weapon-is-helping-hijack-" "computers-around-the-world/\">attack a great number of Windows computers " "with ransomware</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A <a href=\"https://www.zdnet.com/article/windows-attack-can-steal-your-" "username-password-and-other-logins/\">flaw in Internet Explorer and Edge</a> " "allows an attacker to retrieve Microsoft account credentials, if the user is " "tricked into visiting a malicious link." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/information-technology/2013/12/credit-card-" "fraud-comes-of-age-with-first-known-point-of-sale-botnet/\"> Point-of-sale " "terminals running Windows were taken over</a> and turned into a botnet for " "the purpose of collecting customers' credit card numbers." msgstr "" #. type: Content of: <div><div><h3> msgid "Interference" msgstr "" #. type: Content of: <div><div><p> msgid "" "This section gives examples of Microsoft software harassing or annoying the " "user, or causing trouble for the user. These actions are like sabotage but " "the word “sabotage” is too strong for them." msgstr "" #. type: Content of: <div><div><h3> msgid "Sabotage" msgstr "" #. type: Content of: <div><div><p> msgid "" "The wrongs in this section are not precisely malware, since they do not " "involve making the program that runs in a way that hurts the user. But they " "are a lot like malware, since they are technical Microsoft actions that harm " "the users of specific Microsoft software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows Defender <a href=\"https://answers.microsoft.com/en-us/windows/forum/" "all/windows-defender-deleted-my-download-" "without/0b4211cf-80f7-47c7-8ea0-675785a0003c\"> deletes downloaded files " "that it considers malware</a> as soon as they are saved to disk, without " "requesting permission to do so. Many angry users have complained about this " "unacceptable behavior over the last few years, and even suggested fixes, but " "Microsoft has ignored them. It is high time for Windows users to escape " "Microsoft's tyranny by migrating to a free/libre system." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft has been <a href=\"https://borncity.com/win/2019/01/17/windows-10-" "update-kb4023057-re-released-1-16-2019/\"> force-installing a “" "remediation” program</a> on computers running certain versions of " "Windows 10. Remediation, in Microsoft's view, means <a href=\"https://" "support.microsoft.com/en-us/topic/kb4023057-update-health-tools-windows-" "update-service-components-fccad0ca-dc10-2e46-9ed1-7e392450fb3a\"> tampering " "with users' settings and files</a>, notably to “repair” any " "components of the updating system that users may have intentionally " "disabled, and thus regain full power over them. Microsoft repeatedly pushed " "faulty versions of this program to users' machines, causing numerous " "problems, some of which <a href=\"https://web.archive.org/web/20240223182933/" "https://www.windowsmode.com/microsoft-suspends-windows-10-october-2018-" "update-rollout-due-to-critical-bugs/\"> critical</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This exemplifies the arrogant and manipulative attitude that proprietary " "software developers have learned to adopt toward the people they are " "supposedly serving. Migrate to a <a href=\"/distros/free-distros.html\">free " "operating system</a> if you can!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If your employer makes you run Windows, tell the financial department how " "this wastes your time dealing with endless connections and premature " "hardware failures." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft has made Windows 7 and 8 cease to function on certain new " "computers, <a href=\"https://learn.microsoft.com/en-us/troubleshoot/windows-" "client/installing-updates-features-roles/processor-not-supported-together-" "with-windows-version\">effectively forcing their owners to switch to Windows " "10</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft <a href=\"https://arstechnica.com/information-technology/2017/04/" "new-processors-are-now-blocked-from-receiving-updates-on-old-windows/\"> has " "dropped support for Windows 7 and 8 on recent processors</a> in a big hurry." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It makes no difference what legitimate reasons Microsoft might have for not " "doing work to support them. If it doesn't want to do this work, it should " "let users do the work." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In its efforts to trick users of Windows 7 and 8 into installing all-spying " "Windows 10 against their will, Microsoft forced their computers to <a href=" "\"https://www.theguardian.com/technology/2015/sep/11/microsoft-downloading-" "windows-1\"> silently download… the whole of Windows 10</a>! " "Apparently, this was done through a <a href=\"/proprietary/proprietary-back-" "doors.html#windows-update\"> universal back door</a>. Not only did the " "unwanted downloads <a href=\"https://www.theregister.com/2016/06/03/" "windows_10_upgrade_satellite_link/\"> jeopardize important operations in " "regions of the world with poor connectivity</a>, but many of the people who " "let installation proceed found out that this “upgrade” was in " "fact a <a href=\"https://gizmodo.com/woman-wins-10-000-from-microsoft-after-" "unwanted-window-1782666146\"> downgrade</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Once Microsoft has tricked a user into accepting installation of Windows 10, " "<a href=\"https://www.theregister.com/2016/06/01/" "windows_10_nagware_no_way_out/\">they find that they are denied the option " "to cancel or even postpone the imposed date of installation</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This demonstrates what we've said for years: using proprietary software " "means letting someone have power over you, and you're going to get screwed " "sooner or later." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "FTDI's proprietary driver for its USB-to-serial chips has been designed to " "<a href=\"https://arstechnica.com/information-technology/2014/10/windows-" "update-drivers-bricking-usb-serial-chips-beloved-of-hardware-hackers/" "\">sabotage alternative compatible chips</a> so that they no longer work. " "Microsoft is <a href=\"https://it.slashdot.org/story/16/01/31/1720259/ftdi-" "driver-breaks-hardware-again\">installing this automatically</a> as an " "“upgrade”." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows 10 “upgrades” <a href=\"http://www.ghacks.net/2015/11/24/" "beware-latest-windows-10-update-may-remove-programs-automatically/\"> delete " "applications</a> without asking permission." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20191205010621/https://www." "computerworld.com/article/3423768/windows-xp--end-of-an-era--end-of-an-error." "html\">Microsoft cut off security fixes for Windows XP, except to some big " "users that pay exorbitantly</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is going to <a href=\"https://web.archive.org/web/20181030194725/" "https://www.computerworlduk.com/applications/more-than-half-of-all-ie-users-" "face-patch-axe-in-10-months-3605515/\"> cut off support for some Internet " "Explorer versions</a> in the same way." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A person or company has the right to cease to work on a particular program; " "the wrong here is Microsoft does this after having made the users dependent " "on Microsoft, because they are not free to ask anyone else to work on the " "program for them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20130622044225/http://blogs." "computerworlduk.com/open-enterprise/2013/06/how-can-any-company-ever-trust-" "microsoft-again/index.htm\">Microsoft informs the NSA of bugs in Windows " "before fixing them</a>." msgstr "" #. type: Content of: <div><div><h3> msgid "Subscriptions" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft Office forces users <a href=\"https://www.computerworld.com/" "article/2948755/office-for-windows-10-will-require-office-365-subscription-" "on-pcs-larger-tablets.html\">to subscribe to Office 365 to be able to create/" "edit documents</a>." msgstr "" #. type: Content of: <div><div><h3> msgid "Surveillance" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is <a href=\"https://arstechnica.com/gadgets/2025/03/new-" "windows-11-build-makes-mandatory-microsoft-account-sign-in-even-more-" "mandatory/\"> tightening the chains that force Windows useds to sign into " "their Microsoft account</a> [*], thus identifying themselves. We " "suspect this is an intentional strategy to avoid inspiring a lot of " "resistance all at once: leave openings to escape identification, then " "gradually close them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "Enough is enough!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "[*] <small>Why “useds”? Because running Windows is not you using " "Windows; it is Windows using you.</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Edge <a href=\"https://www.neowin.net/news/edge-sends-images-you-view-online-" "to-microsoft-here-is-how-to-disable-that/\">sends the URLs of images the " "user views to Microsoft's servers</a> by default, supposedly to “" "enhance” them. And these images <a href=\"/proprietary/proprietary-" "surveillance.html#M201405140\">may end up on the NSA's servers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft claims its nonfree browser sends the URLs without identifying you, " "which cannot be true, since at least your IP address is known to the server " "if you don't take extra measures. Either way, such enhancer service is " "unjust because any image editing <a href=\"/philosophy/who-does-that-server-" "really-serve.html\">should be done on your own computer using installed free " "software</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article describes how to disable sending the URLs. That makes a change " "for the better, but we suggest that you instead switch to a freedom-" "respecting browser with additional privacy features such as <a href=\"/" "software/gnuzilla/\">IceCat</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "As soon as it boots, and without asking any permission, <a href=\"https://" "web.archive.org/web/20230212120649/https://www.techspot.com/news/97535-" "windows-11-spyware-machine-out-users-control.html\">Windows 11 starts to " "send data to online servers</a>. The user's personal details, location or " "hardware information are reported to Microsoft and other companies to be " "used as telemetry data. All of this is done is the background, and users " "have no easy way to prevent it—unless they switch the computer offline." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft <a href=\"https://betanews.com/2023/01/19/microsoft-is-using-the-" "kb5021751-update-to-see-if-you-have-an-unsupported-version-of-office-" "installed/\"> released an “update” that installs a surveillance " "program</a> on users' computers to gather data on some installed programs " "for Microsoft's benefit. The update is rolling out automatically, and the " "program runs “one time silently.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows 11 Home and Pro now <a href=\"https://www.microsoft.com/windows/" "windows-11-specifications\"> require internet connection and a Microsoft " "account</a> to complete the installation. Windows 11 Pro had an option to " "create a local account instead, but the option has been removed. This " "account can (and most certainly will) be used for surveillance and privacy " "violations. Thankfully, a free software tool named <a href=\"https://gothub." "projectsegfau.lt/pbatard/rufus/\">Rufus</a> can bypass those requirements, " "or help users install a <a href=\"/distros/distros.html\"> free operating " "system</a> instead." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft's Office 365 suite enables employers <a href=\"https://www." "theguardian.com/technology/2020/nov/26/microsoft-productivity-score-feature-" "criticised-workplace-surveillance\">to snoop on each employee</a>. After a " "public outburst, Microsoft stated that <a href=\"https://www.theguardian.com/" "technology/2020/dec/02/microsoft-apologises-productivity-score-critics-" "derided-workplace-surveillance\">it would remove this capability</a>. Let's " "hope so." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is imposing its surveillance on the game of Minecraft by <a href=" "\"https://www.theverge.com/2020/10/22/21527647/minecraft-microsoft-account-" "mojang-java\">requiring every player to open an account on Microsoft's " "network</a>. Microsoft has bought the game and will merge all accounts into " "its network, which will give them access to people's data." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Minecraft players <a href=\"https://directory.fsf.org/wiki/Minetest\">can " "play Minetest</a> instead. The essential advantage of Minetest is that it is " "free software, meaning it respects the user's computer freedom. As a bonus, " "it offers more options." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "As of 2019-2020, Minecraft players are <a href=\"https://www.minecraft.net/" "en-us/article/java-edition-moving-house\">being forced to move to Microsoft " "servers</a>, which results in privacy violation. Microsoft publishes a " "program so users can run their own server, but the program is proprietary " "and it's another <a href=\"/philosophy/free-software-even-more-important.html" "\">injustice to users</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "People can play <a href=\"https://directory.fsf.org/wiki/Minetest" "\">Minetest</a> instead. Minetest is free software and respects the user's " "computer freedom." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Proprietary programs Google Meet, Microsoft Teams, and WebEx <a href=" "\"https://www.consumerreports.org/video-conferencing-services/" "videoconferencing-privacy-issues-google-microsoft-webex-a7383469308/\">are " "collecting user's personal and identifiable data</a> including how long a " "call lasts, who's participating in the call, and the IP addresses of " "everyone taking part. From experience, this can even harm users physically " "if those companies hand over data to governments." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google, Apple, and Microsoft (and probably some other companies) <a href=" "\"https://www.lifewire.com/wifi-positioning-system-1683343\">are collecting " "people's access points and GPS coordinates (which can identify people's " "precise location) even if their GPS is turned off</a>, without the person's " "consent, using proprietary software implemented in person's smartphone. " "Though merely asking for permission would not necessarily legitimize this." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is <a href=\"https://www.howtogeek.com/442609/confirmed-windows-10-" "setup-now-prevents-local-account-creation/\">tricking users to create an " "account on their network</a> to be able to install and use the Windows " "operating system, which is malware. The account can be used for surveillance " "and/or violating people's rights in many ways, such as turning their " "purchased software to a subscription product." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft recorded users of Xboxes and had <a href=\"https://www.vice.com/en/" "article/43kv4q/microsoft-human-contractors-listened-to-xbox-owners-homes-" "kinect-cortana\"> human workers listen to the recordings</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Morally, we see no difference between having human workers listen and having " "speech-recognition systems listen. Both intrude on privacy." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Skype refuses to say whether it can <a href=\"http://www.slate.com/blogs/" "future_tense/2012/07/20/" "skype_won_t_comment_on_whether_it_can_now_eavesdrop_on_conversations_.html" "\">eavesdrop on calls</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "That almost certainly means it can do so." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft <a href=\"https://answers.microsoft.com/en-us/outlook_com/forum/" "all/why-does-my-new-e-mail-account-need-a-phone-" "number/70049eaf-3b66-4d02-87cc-79dc73c2ea08\">forces people to give their " "phone number</a> in order to be able to create an account on the company's " "network. On top of mistreating their users by providing nonfree software, " "Microsoft is tracking their lives outside the computer and violates their " "privacy." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows 10 telemetry program sends information to Microsoft about the user's " "computer and their use of the computer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Furthermore, for users who installed the fourth stable build of Windows 10, " "called the “Creators Update,” Windows maximized the surveillance " "<a href=\"https://arstechnica.com/gadgets/2017/10/dutch-privacy-regulator-" "says-that-windows-10-breaks-the-law/\"> by force setting the telemetry mode " "to “Full”</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The <a href=\"https://docs.microsoft.com/en-us/windows/privacy/configure-" "windows-diagnostic-data-in-your-organization#full-level\"> “" "Full” telemetry mode</a> allows Microsoft Windows engineers to access, " "among other things, registry keys <a href=\"https://docs.microsoft.com/en-us/" "previous-versions/windows/it-pro/windows-2000-server/cc939702" "(v=technet.10)\"> which can contain sensitive information like " "administrator's login password</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "DRM-restricted files can be used to <a href=\"https://yro.slashdot.org/" "story/17/02/02/231229/windows-drm-protected-files-used-to-decloak-tor-" "browser-users\"> identify people browsing through Tor</a>. The vulnerability " "exists only if you use Windows." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "By default, Windows 10 <a href=\"https://betanews.com/2016/11/24/microsoft-" "shares-windows-10-telemetry-data-with-third-parties/\">sends debugging " "information to Microsoft, including core dumps</a>. Microsoft now " "distributes them to another company." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In order to increase Windows 10's install base, Microsoft <a class=\"not-a-" "duplicate\" href=\"https://www.eff.org/deeplinks/2016/08/windows-10-" "microsoft-blatantly-disregards-user-choice-and-privacy-deep-dive\"> " "blatantly disregards user choice and privacy</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://duo.com/decipher/bring-your-own-dilemma-oem-laptops-and-" "windows-10-security\"> Windows 10 comes with 13 screens of snooping options</" "a>, all enabled by default, and turning them off would be daunting to most " "users." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It appears <a href=\"https://www.ghacks.net/2016/01/05/microsoft-may-be-" "collecting-more-data-than-initially-thought/\"> Windows 10 sends data to " "Microsoft about what applications are running</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A downgrade to Windows 10 deleted surveillance-detection applications. Then " "another downgrade inserted a general spying program. Users noticed this and " "complained, so Microsoft renamed it <a href=\"https://www.theregister." "com/2015/11/26/microsoft_renamed_data_slurper_reinserted_windows_10/\"> to " "give users the impression it was gone</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "To use proprietary software is to invite such treatment." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/information-technology/2015/08/even-when-" "told-not-to-windows-10-just-cant-stop-talking-to-microsoft/\"> Windows 10 " "sends identifiable information to Microsoft</a>, even if a user turns off " "its Bing search and Cortana features, and activates the privacy-protection " "settings." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows 10 <a href=\"https://web.archive.org/web/20180923125732/https://" "jonathan.porta.codes/2015/07/30/windows-10-seems-to-have-some-scary-privacy-" "defaults/\"> ships with default settings that show no regard for the privacy " "of its users</a>, giving Microsoft the “right” to snoop on the " "users' files, text input, voice input, location info, contacts, calendar " "records and web browsing history, as well as automatically connecting the " "machines to open hotspots and showing targeted ads." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We can suppose Microsoft looks at users' files for the US government on " "demand, though the “privacy policy” does not explicitly say so. " "Will it look at users' files for the Chinese government on demand?" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft uses Windows 10's “privacy policy” to overtly impose a " "“right” to look at users' files at any time. Windows 10 full " "disk encryption <a href=\"https://edri.org/our-work/microsofts-new-small-" "print-how-your-personal-data-abused/\"> gives Microsoft a key</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Thus, Windows is overt malware in regard to surveillance, as in other issues." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The unique “advertising ID” for each user enables other " "companies to track the browsing of each specific user." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It's as if Microsoft has deliberately chosen to make Windows 10 maximally " "evil on every dimension; to make a grab for total power over anyone that " "doesn't drop Windows now." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It only gets worse with time. <a href=\"https://www.techworm.net/2014/10/" "microsofts-windows-10-permission-watch-every-move.html\"> Windows 10 " "requires users to give permission for total snooping</a>, including their " "files, their commands, their text input, and their voice input." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20190421070310/https://www.itproportal." "com/2014/05/14/microsoft-openly-offered-cloud-data-fbi-and-nsa/\"> Microsoft " "SkyDrive allows the NSA to directly examine users' data</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Skype contains <a href=\"https://web.archive.org/web/20130928235637/http://" "www.forbes.com/sites/petercohan/2013/06/20/project-chess-how-u-s-snoops-on-" "your-skype/\">spyware</a>. Microsoft changed Skype <a href=\"https://www." "theguardian.com/world/2013/jul/11/microsoft-nsa-collaboration-user-data\"> " "specifically for spying</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Spyware in older versions of Windows: <a href=\"https://www.theregister." "com/2003/02/28/windows_update_keeps_tabs/\"> Windows Update snoops on the " "user</a>. <a href=\"https://www.infoworld.com/article/2611451/a-look-at-the-" "black-underbelly-of-windows-8-1--blue-.html\"> Windows 8.1 snoops on local " "searches</a>. And there's a <a href=\"http://www.marketoracle.co.uk/" "Article40836.html\"> secret NSA key in Windows</a>, whose functions we don't " "know." msgstr "" #. type: Content of: <div><div><h3> msgid "Tethers" msgstr "" #. type: Content of: <div><div><p> msgid "" "Tethers are functionalities that require constant (or very frequent) " "connection to a server." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/gadgets/2025/02/on-may-5-microsofts-skype-" "will-shut-down-for-good/\"> Microsoft is shutting down Skype</a> on May 5th, " "2025. As with other tethered proprietary programs, users have to rely on " "servers that are controlled by the developer. When these servers shut down, " "the service disappears. Instead of migrating to the service that Microsoft " "suggests as a replacement, Skype users should regain control of their " "communications by switching to one that is based on free software. <a href=" "\"https://jitsi.org/jitsi-meet/\">Jitsi Meet</a>, for example, is " "appropriate for small video meetings. Anyone can set up a Jitsi server and " "let other people use it, and indeed many of these are available around the " "world." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The recent versions of Microsoft Office require the user to <a href=" "\"https://www.microsoft.com/en-us/microsoft-365/microsoft-365-for-home-and-" "school-faq?legRedir=true&CorrelationId=c9c5b549-11ad-4f71-bf81-" "b7e069fdb372\"> connect to Microsoft servers at least every thirty-one days</" "a>. Otherwise, the software will refuse to edit any documents or create new " "ones. It will be restricted to viewing and printing." msgstr "" #. type: Content of: <div><div><h3> msgid "Jails" msgstr "" #. type: Content of: <div><div><p> msgid "Jails are systems that impose censorship on application programs." msgstr "" #. type: Content of: <div><div><h3> msgid "Tyrants" msgstr "" #. type: Content of: <div><div><p> msgid "" "Tyrants are systems that reject any operating system not “" "authorized” by the manufacturer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft accidentally left a way for users to install GNU/Linux on Windows " "RT tablets, but now it has <a href=\"https://www.securitynewspaper." "com/2016/07/15/microsoft-silently-kills-dev-backdoor-boots-linux-locked-" "windows-rt-slabs/\"> “fixed” the “error”</a>. They " "have the gall to call this “protecting” the users. The article " "talks of installing “Linux”, but the context shows it is really " "<a href=\"/gnu/linux-and-gnu.html\">GNU/Linux</a> that users install." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.fsf.org/campaigns/secure-boot-vs-restricted-boot/\"> " "Mobile devices that come with Windows 8 are tyrants</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "As this page shows, if you do want to clean your computer of malware, the " "first software to delete is Windows." msgstr "" #. type: Content of: <title> msgid "Proprietary Manipulation - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Manipulation" msgstr "" #. type: Content of: <div><div><p> msgid "" "Manipulation of users is one of these malicious functionalities. Here are " "examples of programs that are designed to do this by taking advantage of " "human psychology." msgstr "" #. type: Content of: <div><div><p> msgid "" "We have a special page for <a href=\"/proprietary/proprietary-addictions.html" "\">Addictive programs</a>, which also take advantage of human psychology, " "but in a much more elaborate and dangerous way." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In an article from Mozilla, every car brand they researched <a href=" "\"https://www.mozillafoundation.org/privacynotincluded/articles/its-official-" "cars-are-the-worst-product-category-we-have-ever-reviewed-for-privacy/\"> " "has failed their privacy tests</a>. Some car manufacturers explicitly " "mention that they collect data which includes “sexual " "activities” and “genetic information”. Not only collecting " "any of such data is a huge privacy violation in the first place, some " "companies assume drivers and passengers' consent before they get in the car. " "Notably, Tesla threatens that the car may be “inoperable” if the " "user opts out of data collection." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tesla <a href=\"https://www.cnn.com/2022/08/22/business/tesla-fsd-price-" "increase/index.html\"> sells an add-on software feature that drivers are not " "allowed to use</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This practice depends on a back door, which is unjust in itself. Asking " "users to buy something years in advance to avoid having to pay an even " "higher price later is manipulative." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.howtogeek.com/803598/app-is-damaged-and-cant-be-opened/" "\"> Apple has been labeling various third-party files and programs as “" "damaged”</a>, preventing users from opening them, and implying that " "software from third-party sources is dangerous. While these restrictions can " "be circumvented, they violate users' freedom to do their computing as they " "wish. Most of the time, the purpose of warnings such as “" "damaged” is to scare users into sticking with Apple's proprietary " "programs for no good reason." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The nonfree app “Along,” developed by a company controlled by " "Zuckerberg, <a href=\"https://kappanonline.org/dont-go-along-with-corporate-" "schemes-to-gather-up-student-data/\"> leads students to reveal to their " "teacher personal information</a> about themselves and their families. " "Conversations are recorded and the collected data sent to the company, which " "grants itself the right to sell it. See also <a href=\"/education/" "educational-malware-app-along.html#content\">Educational Malware App “" "Along”</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Honorlock set a network of fake test answer honeypot sites, tempting people " "to get exam answers, but <a href=\"https://themarkup.org/machine-" "learning/2022/02/15/a-network-of-fake-test-answer-sites-is-trying-to-" "incriminate-students\">that is a way to entrap students, so as to identify " "them and punish them</a>, using nonfree JS code to identify them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/media/2021/jul/05/advertisers-targeted-" "dream-incubation\"> Advertising companies are experimenting to manipulate " "people's minds</a>, and impose a new way of advertising by altering their " "dreams. This “targeted dream incubation” would trigger “" "refreshing dreams” of the product, according to the companies." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Peloton company which produces treadmills recently <a href=\"https://www." "bleepingcomputer.com/news/technology/peloton-tread-owners-now-forced-into-" "monthly-subscription-after-recall/\">locked people out of basic features of " "people's treadmills by a software update</a>. The company now asks people " "for a membership/subscription for what people already paid for." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The software used in the treadmill is proprietary and probably includes back " "doors to force software updates. It teaches the lesson that if a product " "talks to external networks, you must expect it to take in new malware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Please note that the company behind this product said they are working to " "reverse the changes so people will no longer need subscription to use the " "locked feature." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apparently public anger made the company back down. If we want that to be " "our safety, we need to build up the anger against malicious features (and " "the proprietary software that is their entry path) to the point that even " "the most powerful companies don't dare." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Prodigy maths game played in schools at no cost entices students to play " "it at home, where <a href=\"https://www.theguardian.com/technology/2021/" "feb/19/maths-app-targeting-uk-schools-is-criticised-over-premium-model\"> " "the company tries to lure them into paying for a premium subscription</a> in " "exchange for mere cosmetic features that, at school, underline the " "socioeconomic gap between those who can afford it and those who can't." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The strategy of <a href=\"/education/edu-schools.html\">using schools as a " "fishing pool for customers</a> is a common practice traditionally adopted by " "nonfree software companies." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "BMW is trying to <a href=\"https://www.theverge.com/2020/7/2/21311332/bmw-in-" "car-purchase-heated-seats-software-over-the-air-updates\">lock certain " "features of its cars, and force people to pay to use part of the car they " "already bought</a>. This is done through forced update of the car software " "via a radio-operated back door." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Femm “fertility” app is secretly a <a href=\"https://www." "theguardian.com/world/2019/may/30/revealed-womens-fertility-app-is-funded-by-" "anti-abortion-campaigners\"> tool for propaganda</a> by natalist " "Christians. It spreads distrust for contraception." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "It snoops on users, too, as you must expect from nonfree programs." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tiny Lab Productions, along with online ad businesses run by Google, Twitter " "and three other companies are facing a lawsuit <a href=\"https://www.nytimes." "com/interactive/2018/09/12/technology/kids-apps-data-privacy-google-twitter." "html\">for violating people's privacy by collecting their data from mobile " "games and handing over these data to other companies/advertisers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theverge.com/2018/8/13/17684660/google-turn-off-" "location-history-data\">Google will track people even if people turn off " "location history</a>, using Google Maps, weather updates, and browser " "searches. Google basically uses any app activity to track people." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "“Dark patterns” are <a href=\"https://www.theverge." "com/2013/8/29/4640308/dark-patterns-inside-the-interfaces-designed-to-trick-" "you\">user interfaces designed to mislead users, or make option settings " "hard to find</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This allows a company such as Apple to say, “We allow users to turn " "this off” while ensuring that few will understand how to actually turn " "it off." msgstr "" #. type: Content of: <div><p> msgid "" "Copyright © 2019, 2020, 2021, 2022, 2023, 2024, 2025 Free Software " "Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Adobe's Software Is Malware - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Adobe's Software is Malware" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In its terms of service, Adobe gives itself permission to <a href=\"https://" "www.cnet.com/tech/services-and-software/adobe-defends-changes-in-its-terms-" "of-service-amid-gen-ai-explosion/\"> spy on material that people upload to " "its servers</a>, supposedly for moderation purposes. In spite of Adobe's " "denial, we can expect that sooner or later it will use this material to " "train its so-called “artificial intelligence,” and will claim " "that by agreeing to the terms of service users gave it the right to do so." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe has <a href=\"https://www.bleepingcomputer.com/news/software/adobe-to-" "ban-users-from-venezuela-due-to-us-executive-order/\"> cancelled the " "software subscriptions of all users in Venezuela</a>. This demonstrates how " "a requirement for subscription can be turned into a tool for sabotage." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe <a href=\"https://www.vice.com/en/article/a3xk3p/adobe-tells-users-" "they-can-get-sued-for-using-old-versions-of-photoshop\"> revoked the license " "of some older versions</a> of its applications, and warned customers that " "they can get sued for using them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is further proof that users of nonfree software are in the hands of its " "developer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe made “Digital Editions,” the e-reader used by most US " "libraries, <a href=\"https://web.archive.org/web/20141220181015/http://www." "computerworlduk.com/blogs/open-enterprise/drm-strikes-again-3575860/\"> send " "lots of data to Adobe</a>. Adobe's “excuse”: it's needed to " "check DRM!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.scientificamerican.com/article/adobe-software-" "subscription-model-means-you-cant-own-your-software/\"> Adobe tools require " "a subscription</a>. Adobe also tried to <a href=\"http://chocolateandvodka." "com/2014/02/20/adobe-creative-cloud-subscription-warning/\"> rip people off " "by making the subscriptions annual</a>, but that is a secondary issue " "compared with the basic wrong of the time bomb. When a program proprietary, " "and even malware, don't get distracted by the secondary issues like price." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(Please don't repeat the marketing term “Creative Cloud” " "except to express revulsion for it. The <a href=\"/philosophy/words-to-" "avoid.html#CloudComputing\"> term “cloud” is designed to cloud " "users' minds</a>.)</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe applications <a href=\"https://www.wired.com/2013/05/adobe-creative-" "cloud-petition/\"> require periodic connection to a server</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe applications have time bombs: they <a href=\"https://techcrunch." "com/2013/05/06/adobe-goes-all-in-with-subscription-based-creative-cloud-will-" "stop-selling-regular-cs-licenses-shrink-wrapped-boxes/\"> stop working after " "a certain time</a>, after which the user must pay to extend the time." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Once there was a problem with the servers that these programs use to check " "who has paid, and <a href=\"https://web.archive.org/web/20150120010845/" "http://www.macuser.co.uk/9015-adobe-creative-cloud-outage-leaves-adobe-users-" "locked-out\"> the applications refused to work for anyone</a>." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2016, 2018-2023, 2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Subscriptions - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Subscriptions" msgstr "" #. type: Content of: <div><div><p> msgid "" "It sounds simple to say that a certain program “requires a " "subscription.” What that means concretely is that it contains a time " "bomb, so that it will refuse to operate after that date. Or else it is <a " "href=\"/proprietary/proprietary-tethers.html#about-page\">tethered to a " "server</a>, and that server checks the date. Either one is a malicious " "functionality." msgstr "" #. type: Content of: <div><div><p> msgid "" "Examples of software subscriptions that harmed users directly are given " "below." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Canon is <a href=\"https://arstechnica.com/gadgets/2025/01/canon-charges-50-" "per-year-to-use-a-900-camera-as-a-functional-webcam/\"> preventing customers " "from using one of its cameras as a webcam</a> unless they create an account " "on the company's server, and pay an additional subscription. This unjust " "practice could be eliminated if the camera firmware were free (as in " "freedom)." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/lifeandstyle/2024/nov/03/addicted-to-" "love-how-dating-apps-exploit-their-users\">Dating apps exploit their users</" "a>; fundamental features require an expensive subscription, and they are " "designed to be addictive." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The company making a “smart” bassinet called Snoo has <a href=" "\"https://www.theverge.com/2024/7/20/24202166/snoo-premium-subscription-" "happiest-baby\"> locked the most advanced functionalities of the Snoo behind " "a paywall</a>. This unexpected change mainly affects users who received the " "appliance as a gift, or bought it second-hand on the assumption that all " "these functionalities would be available to them, as they used to be. This " "is another example of the deceptive behavior of proprietary software " "developers who take advantage of their power over users to change rules at " "will." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Another malicious feature of the Snoo is the fact that users need to create " "an account with the company, which thus has access to personal data, " "location (SSID), appliance log, etc., as well as manual notes about baby " "history." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "BMW has <a href=\"https://www.forbes.com/sites/alistaircharlton/2023/09/07/" "bmw-drops-controversial-heated-seats-subscription-to-refocus-on-software-" "services/\"> retreated from making car owners pay for a subscription to the " "heated seats feature</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "Customers rejected it. Bravo for them!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Instead BMW plans to require subscriptions for digital services and " "disservices—things related to the Orwellian tracking done by any " "“connected” car." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Nest snooper/surveillance cameras are always tethered to Google " "servers, record videos 24/7, and are <a href=\"https://arstechnica.com/" "gadgets/2023/09/google-nest-cameras-get-a-25-33-subscription-price-hike/\"> " "subscription-based, which is an injustice to people who use them</a>. The " "article discusses the rise in prices for “plans” you can buy " "from Google, which include storing videos in the “cloud”—" "another word for someone else's computer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "GM is switching to a new audio/video system in its cars in order to <a href=" "\"https://edition.cnn.com/2023/04/01/business/gm-apple-play-evs/index.html" "\"> collect complete information about what people in the car watch or " "listen to, and also how they drive</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The new system for navigation and “driving assistance” will be " "tethered to various online dis-services, and GM will snoop on everything the " "users do with them. But don't feel bad about that, because some of these " "subscriptions will be gratis for the first 8 years." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Volkswagen <a href=\"https://pluralistic.net/2023/02/28/kinderwagen/\"> " "tracks the location of every driver, and sells that data to third-parties</" "a>. However, it refuses to use the data to implement a feature for the " "benefit of its customers unless they pay extra money for it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This came to attention and brought controversy when Volkswagen refused to " "locate a car-jacked vehicle with a toddler in it because the owner of the " "car had not subscribed to the relevant service." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A dispute between Blizzard and one of its partners caused <a href=\"https://" "www.theguardian.com/world/2023/jan/23/world-of-warcraft-offline-china-" "millions-gamers-bereft\"> World of Warcraft to go offline in China</a>. The " "shutdown may not be permanent, but even if it is not, the fact that a " "business disagreement can stop all users in China from playing the game " "illustrates the injustice of requiring the use of a specific server." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We expect that users must pay to use that server, but whether that is the " "case is a side issue. Even if use of that server is gratis, the harm comes " "from the fact that the program doesn't allow people to make and use other " "servers for that job." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Let's hope game fans in China learn the importance of <a href=\"https://gnu." "org/philosophy/nonfree-games.html\">rejecting nonfree games</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The nonfree software in a Tesla artificially <a href=\"https://www." "theguardian.com/business/2022/jul/30/will-connected-cars-persuade-drivers-to-" "pay-for-a-high-spec-ride\"> limits the car's driving range</a>, demanding " "ransom to unlock the battery's full charge." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "This is one more reason why cars must not be “connected.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "BMW is now luring British customers into <a href=\"https://edition.cnn." "com/2022/07/14/business/bmw-subscription/index.html\"> paying for the built-" "in heated-seat feature of their new cars on a subscription basis</a>. People " "also have the option to buy the feature when they are paying for the car, " "but those who bought a used car have to pay BMW extra money to remotely " "enable the heated seats. This is probably done by BMW accessing a back door " "in the car software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple can remotely <a href=\"https://www.theguardian.com/games/2020/aug/18/" "apple-sets-deadline-in-feud-with-fortnite-maker-epic-games\"> cut off any " "developer's access to the tools for developing software</a> for iOS or MacOS." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Epic (Apple's target in this example) makes nonfree games which have their " "own <a href=\"https://ekgaming.com/2019/03/17/is-the-epic-games-store-spying-" "on-your-computer/\"> malicious features</a>, but that doesn't make it " "acceptable for Apple to have this sort of power." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Wink sells a “smart” home hub that is tethered to a server. In " "May 2020, it ordered the purchasers to start <a href=\"https://www.techhive." "com/article/578539/wink-users-revolt-following-its-sudden-shift-to-a-" "subscription-model.html\"> paying a monthly fee for the use of that server</" "a>. Because of the tethering, the hub is useless without that." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The HP <a href=\"https://boingboing.net/2019/02/08/inkjet-dystopias.html\"> " "“ink subscription” cartridges have DRM that constantly " "communicates with HP servers</a> to make sure the user is still paying for " "the subscription, and hasn't printed more pages than were paid for." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Even though the ink subscription program may be cheaper in some specific " "cases, it spies on users, and involves totally unacceptable restrictions in " "the use of ink cartridges that would otherwise be in working order." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Sony has brought back its robotic pet Aibo, this time <a href=\"https://www." "vice.com/en/article/bj778v/sony-wants-to-sell-you-a-subscription-to-a-robot-" "dog-aibo-90s-pet\"> with a universal back door, and tethered to a server " "that requires a subscription</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Canary home surveillance camera has been sabotaged by its manufacturer, " "<a href=\"https://www.theverge.com/circuitbreaker/2017/10/4/16426394/canary-" "smart-home-camera-free-service-update-change\"> turning off many features " "unless the user starts paying for a subscription</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "With manufacturers like these, who needs security breakers?" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The purchasers should learn the larger lesson and reject connected " "appliances with embedded proprietary software. Every such product is a " "temptation to commit sabotage." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Every “home security” camera, if its manufacturer can " "communicate with it, is a surveillance device. <a href=\"https://www." "theverge.com/circuitbreaker/2017/10/4/16426394/canary-smart-home-camera-free-" "service-update-change\"> Canary camera is an example</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article describes wrongdoing by the manufacturer, based on the fact that " "the device is tethered to a server." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"/proprietary/proprietary-tethers.html\">More about proprietary " "tethering</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "But it also demonstrates that the device gives the company surveillance " "capability." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2016-2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Censorship - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Censorship" msgstr "" #. type: Content of: <div><div><p> msgid "" "One kind of malicious functionality is censorship of what users can access. " "Here are examples of programs which do this. We have a <a href=\"/" "proprietary/proprietary-jails.html\">separate list of proprietary systems " "that censor installation</a> of application programs (we call them “" "jails”)." msgstr "" #. type: Content of: <div><div><p> msgid "" "Selling products designed as platforms for a company to impose censorship " "ought to be forbidden by law, but it isn't." msgstr "" #. type: Content of: <div><div><p> msgid "" "Apple mainly uses iOS, which is a typical jail, to impose censorship through " "the Apple Store. Please refer to <a href=\"/proprietary/proprietary-jails." "html#apple\">Proprietary Jails</a> for more information." msgstr "" #. type: Content of: <div><div><h3> msgid "Google" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google <a href=\"https://www.csmonitor.com/Technology/2017/0316/Google-" "Family-Link-gives-parents-a-way-to-monitor-preteens-accounts\"> offers " "censorship software</a>, ostensibly for parents to put into their children's " "computers." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "On Windows and MacOS, Chrome <a href=\"https://sites.google.com/a/chromium." "org/dev/developers/extensions-deployment-faq\"> disables extensions</a> that " "are not hosted in the Chrome Web Store." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "For example, an extension was <a href=\"https://web.archive.org/" "web/20170120094917/https://consumerist.com/2017/01/18/why-is-google-blocking-" "this-ad-blocker-on-chrome/\"> banned from the Chrome Web Store, and " "permanently disabled</a> on more than 40,000 computers." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/media/2016/feb/03/google-pulls-ad-" "blocking-app-for-samsung-phones\"> Google censored installation of Samsung's " "ad-blocker</a> on Android phones, saying that blocking ads is “" "interference” with the sites that advertise (and surveil users through " "ads)." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The ad-blocker is proprietary software, just like the program (Google Play) " "that Google used to deny access to install it. Using a nonfree program gives " "the owner power over you, and Google has exercised that power." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google's censorship, unlike that of Apple, is not total: Android allows " "users to install apps in other ways. You can install free programs from f-" "droid.org." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The <a href=\"https://www.gamespot.com/articles/nintendos-new-3ds-charges-30-" "cents-to-remove-an-in/1100-6421996/\"> Nintendo 3DS</a> censors web " "browsing; it is possible to turn off the censorship, but that requires " "identifying oneself to pay, which is a form of surveillance." msgstr "" #. type: Content of: <div><div><h3> msgid "Online conferencing" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The company behind Zoom does not only deny users' computer freedom by " "developing this piece of nonfree software, it also violates users' civil " "rights by <a href=\"https://www.theverge.com/2020/6/12/21288995/zoom-" "blocking-feature-chinese-government-censorship\">banning events and " "censoring users</a> to serve the agenda of governments." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Freedom respecting programs such as <a href=\"https://directory.fsf.org/wiki/" "Jitsi\">Jitsi</a> or <a href=\"https://directory.fsf.org/wiki/BigBlueButton" "\">BigBlueButton</a> can be used instead, better still if installed in a " "server controlled by its users." msgstr "" #. type: Content of: <div><div><h3> msgid "Other" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "As of 2021, <a href=\"https://www.rferl.org/a/russia-40-apps-preinstalled-" "electronic-devices/32532513.html\"> preinstallation of Russian-made " "proprietary software has been mandatory</a> on new computers and “" "smart” devices sold in Russia, under threat of a fine for the " "retailer, and <a href=\"https://tadviser.com/index.php/Article:Pre-" "installation_of_Russian_software_on_smartphones_and_computers\"> the list of " "mandatory applications keeps growing</a>. This gives the government a " "convenient way to <a href=\"https://www.article19.org/resources/russia-pre-" "installation-of-apps-matters-for-free-speech/\"> censor information, spy on " "people's online activity, and restrict free speech</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "New Amazon worker chat app <a href=\"https://theintercept.com/2022/04/04/" "amazon-union-living-wage-restrooms-chat-app/\">would ban specific words " "Amazon doesn't like</a>, such as “union”, “" "restrooms”, and “pay raise”. If the app was free, workers " "could modify the program so it acts as they wish, not how Amazon wants it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some Xiaomi phones <a href=\"https://www.theguardian.com/world/2021/sep/22/" "lithuania-tells-citizens-to-throw-out-chinese-phones-over-censorship-concerns" "\">have a malfeature to bleep out phrases that express political views the " "Chinese government does not like</a>. In phones sold in Europe, Xiaomi " "leaves this deactivated by default, but has a back door to activate the " "censorship." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is the natural result of having nonfree software in a device that can " "communicate with the company that made it." msgstr "" #. type: Content of: <title> msgid "Malware in Games - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><p> msgid "" "</a> / <a href=\"/proprietary/proprietary.html\">Malware</a> / By " "product /" msgstr "" #. type: Content of: <div><h2> msgid "Malware in Games" msgstr "" #. type: Content of: <div><div><p> msgid "" "Among the numerous malicious functionalities that are found in games, " "<strong><a href=\"/proprietary/proprietary-addictions.html#addictiveness\"> " "addictiveness</a></strong> may be the worst, because it doesn't only affect " "users materially, but also psychologically." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Ubisoft is facing a fraud lawsuit for <a href=\"https://www.polygon.com/" "gaming/476979/ubisoft-the-crew-shut-down-lawsuit-class-action\"> shutting " "down the proprietary video game The Crew, which was tethered to its servers</" "a>. As this game can't be played offline, people who used to think they " "owned a copy of it are now realizing they only bought a license that could " "be revoked at will by the developer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is one more example of what tethering of a proprietary program leads " "to. If The Crew were free software, its users would be able to set up " "another server, and keep on playing." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "Bungie's Destiny 2 is plagued with two major flaws:" msgstr "" #. type: Content of: <div><div><ul><li><ul><li> msgid "" "Like all proprietary tethered games, <a href=\"https://destinytracker.com/" "destiny-2/articles/is-destiny-2-down-how-to-check-server-maintenance-and-" "downtime\"> it can't be played when the company's servers are offline</a>." msgstr "" #. type: Content of: <div><div><ul><li><ul><li> msgid "" "Ever since Bungie chose BattlEye as an anti-cheat program, Destiny 2 " "has been <a href=\"https://areweanticheatyet.com/\"> incompatible with GNU/" "Linux</a> <small>[this page can't be viewed without JavaScript]</small>. " "Bungie forces Steam Deck users to <a href=\"https://www.pcguide.com/steam-" "deck/play-destiny-2/\"> replace SteamOS with Windows, or play from Edge " "browser</a>. This doesn't have to be so, as several other games that use " "BattlEye do support GNU/Linux systems. Rather than doing the necessary " "adjustments, Bungie forces users to run nonfree software in order to keep an " "absolute control over them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The addictive Genshin Impact relentlessly <a href=\"https://www.theguardian." "com/games/2020/oct/22/genshin-impact-video-game-slowly-taking-over-the-world" "\">coerces players to spend money by overwhelming the game play with loot " "boxes</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Roblox (among many other games) created anti-features which sucker children " "into <a href=\"https://www.theguardian.com/money/2020/mar/11/my-kids-" "spent-600-on-their-ipads-without-my-knowledge\"> utilizing third-party " "payment services without authorization.</a>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Resourceful children figured out how to <a href=\"https://www.bbc.co.uk/news/" "technology-48908766\"> empty their parents' bank account</a> buying packs of " "special players for an Electronic Arts soccer game." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The random element of these packs (also called “loot boxes”) " "makes the game <a href=\"/proprietary/proprietary-addictions#addictiveness" "\"> strongly addictive</a>, but the fact that players are pressured to spend " "more in order to get ahead of their competitors further qualifies it as " "<em>predatory</em>. Note that Belgium <a href=\"https://www." "rockpapershotgun.com/fifa-ultimate-team-packs-blocked-in-belgium\"> made " "these loot boxes illegal</a> in 2018." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The only good reason to have a copy of such a proprietary game is to study " "it for free software development." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Clash of Clans is a good example of a gratis mobile game that its developers " "<a href=\"https://gamerant.com/clash-of-clans-addiction/\"> made very " "addictive</a> for a large proportion of its users—and turned into a " "cash machine for themselves—by using <a href=\"/proprietary/" "proprietary-addictions.html#addictiveness\"> psychological manipulation " "techniques</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(The article uses “free” to mean “zero price," "” which is a usage we should avoid. We recommend saying “" "gratis” instead.)</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Clash Royale is an online game with an “optimized” <a href=\"/" "proprietary/proprietary-addictions.html#gacha\"> <i>gacha</i></a> system " "that makes it <a href=\"https://medium.com/@nikmlnkr/what-makes-clash-royale-" "so-addictive-1e586815b1f0\"> very addictive for players</a>, and very " "profitable for its developers." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The game Metal Gear Rising for MacOS was tethered to a server. The company " "<a href=\"https://www.gamerevolution.com/news/400087-metal-gear-rising-mac-" "unplayable-drm\"> shut down the server, and all copies stopped working</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Red Shell is a spyware that is found in many proprietary games. It <a href=" "\"https://nebulous.cloud/threads/red-shell-illegal-spyware-for-steam-" "games.31924/\"> tracks data on users' computers and sends it to third " "parties</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "ArenaNet surreptitiously installed a spyware program along with an update to " "the massive multiplayer game Guild Wars 2. The spyware allowed ArenaNet <a " "href=\"https://techraptor.net/gaming/news/arenanet-used-spyware-anti-cheat-" "for-guild-wars-2-banwave\"> to snoop on all open processes running on its " "user's computer</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The driver for a certain gaming keyboard <a href=\"https://thehackernews." "com/2017/11/mantistek-keyboard-keylogger.html\">sends information to China</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In the game Fruit Pop, the player buys boosts with coins to get a high " "score. The player gets coins at the end of each game, and can buy more coins " "with real money." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Getting a higher score once leads the player to desire higher score again " "later. But the higher score resulting from the boost <a href=\"https://qz." "com/873348/50000-coins-for-1-99-how-mobile-game-in-app-purchases-are-warping-" "kids-understanding-of-basic-economic-ideas\">does not give the player more " "coins, and does not help the player get a higher score in subsequent games</" "a>. To get that, the player will need a boost frequently, and usually has to " "pay real money for that. Since boosts are exciting and entertaining, the " "player is subtly pushed to purchase more coins with real money to get " "boosts, and it can develop into a costly habit." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "nVidia's proprietary GeForce Experience <a href=\"https://www.gamersnexus." "net/industry/2672-geforce-experience-data-transfer-analysis\">makes users " "identify themselves and then sends personal data about them to nVidia " "servers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A Capcom's Street Fighter V update <a href=\"https://www.theregister." "com/2016/09/23/capcom_street_fighter_v/\"> installed a driver that could be " "used as a back door by any application installed on a Windows computer</a>, " "but was <a href=\"https://www.rockpapershotgun.com/street-fighter-v-removes-" "new-anti-crack\"> immediately rolled back</a> in response to public outcry." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Oculus Rift games now have <a href=\"https://www.vice.com/en/article/vv77ea/" "new-oculus-drm-cross-platform\"> DRM meant to prevent running them on other " "systems</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many popular mobile games include a random-reward system called <a href=\"/" "proprietary/proprietary-addictions.html#gacha\"> <i>gacha</i></a> which is " "especially effective on children. One variant of gacha was declared illegal " "in Japan in 2012, but the other variants are still <a href=\"https://www." "forbes.com/sites/olliebarder/2016/04/04/japanese-mobile-gaming-still-cant-" "shake-off-the-spectre-of-exploitation/\"> luring players into compulsively " "spending</a> inordinate amounts of money on virtual toys." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Electronic Arts <a href=\"https://techraptor.net/gaming/news/darkspore-" "servers-shut-down\">made one of its games permanently unplayable</a> by " "shutting down its servers. This game was heavily reliant on the company's " "servers, and because the software is proprietary, users can't modify it to " "make it connect to some other server. If the game were free, people could " "still play what they purchased." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many <a href=\"https://web.archive.org/web/20240114145409/https://www." "thestar.com/news/canada/video-game-companies-are-collecting-massive-amounts-" "of-data-about-you/article_31fba9a3-2760-57ae-9ae0-4083904bcb87.html\"> video " "game consoles snoop on their users and report to the internet</a>—even " "what their users weigh." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A game console is a computer, and you can't trust a computer with a nonfree " "operating system." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Modern gratis game cr…apps <a href=\"https://toucharcade." "com/2015/09/16/we-own-you-confessions-of-a-free-to-play-producer/\"> collect " "a wide range of data about their users and their users' friends and " "associates</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Even nastier, they do it through ad networks that merge the data collected " "by various cr…apps and sites made by different companies." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "They use this data to manipulate people to buy things, and hunt for “" "whales” who can be led to spend a lot of money. They also use a back " "door to manipulate the game play for specific players." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "While the article describes gratis games, games that cost money can use the " "same tactics." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Game Of War: Fire Age is an iPhone game with <a href=\"https://www.cracked." "com/article_18461_5-creepy-ways-video-games-are-trying-to-get-you-addicted." "html\"> addictive features</a> which are based on <a href=\"/proprietary/" "proprietary-addictions.html#addictiveness\">behavioral manipulation " "techniques</a>, compounded with group emulation. After a fairly easy start, " "the game slows down and becomes more difficult, so gamers are led to spend " "more and more money in order to keep up with their group. And if they stop " "playing for a while, the equipment they invested in gets destroyed by the " "“enemy” unless they buy an expensive “shield” to " "protect it. This game is also deceptive, as it uses confusing menus and " "complex stats to obfuscate true monetary costs." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Runescape is a popular online game with some <a href=\"https://web.archive." "org/web/20230329031353/https://www.reddit.com/r/runescape/comments/33cd8g/" "question_why_is_runescape_so_addicting/\"> addictive features</a> derived " "from <a href=\"/proprietary/proprietary-addictions.html#addictiveness\"> " "behavioral manipulation techniques</a>. Certain repetitive aspects of the " "game, like <a href=\"https://en.wikipedia.org/wiki/Grinding_(video_games)\"> " "grinding</a>, can be minimised by becoming a paying member, and can thus " "encourage children and impressionable people to spend money on the game." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.eff.org/deeplinks/2014/10/nintendo-updates-take-wii-u-" "hostage-until-you-agree-new-legal-terms\">Nintendo remotely sabotaged the " "Wii U, making it refuse to work unless the user agrees to a new EULA</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We can be quite sure this EULA is unjust because injustice is the only " "motive for imposing an EULA." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Angry Birds <a href=\"https://www.nytimes.com/2014/01/28/world/spy-agencies-" "scour-phone-apps-for-personal-data.html\"> spies for companies, and the NSA " "takes advantage to spy through it too</a>. Here's information on <a href=" "\"http://confabulator.blogspot.com/2012/11/analysis-of-what-information-" "angry.html\"> more spyware apps</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.propublica.org/article/spy-agencies-probe-angry-birds-" "and-other-apps-for-personal-data\"> More about NSA app spying</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some proprietary <a href=\"https://www.theguardian.com/technology/2014/" "jan/19/apple-talking-cats-in-app-purchases\"> games lure children to spend " "their parents' money</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.defectivebydesign.org/sony\">The Playstation 3 is a " "tyrant</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Sony <a href=\"https://www.eff.org/deeplinks/2010/03/sony-steals-feature-" "from-your-playstation-3\">sabotaged the Playstation 3</a> with a firmware " "downgrade that removed the feature that allowed users to run GNU/Linux on it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Sony subsequently sent police after Geohot, after he cracked the code that " "blocked users from changing the firmware, and we responded by calling for a " "<a href=\"http://boycottsony.org\">boycott of Sony</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In a court settlement Sony is <a href=\"https://arstechnica.com/tech-" "policy/2016/06/if-you-used-to-run-linux-on-your-ps3-you-could-get-55-from-" "sony/\"> now paying for the sabotage</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Blizzard Warden is a hidden “cheating-prevention” program that " "<a href=\"https://www.eff.org/deeplinks/2005/10/new-gaming-feature-spyware" "\"> spies on every process running on a gamer's computer and sniffs a good " "deal of personal data</a>, including lots of activities which have nothing " "to do with cheating." msgstr "" #. type: Content of: <title> msgid "Proprietary Back Doors - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Back Doors" msgstr "" #. type: Content of: <div><div><p> msgid "" "Some malicious functionalities are mediated by <a href=\"/proprietary/" "proprietary.html#f1\">back doors</a>. Here are examples of programs that " "contain one or several of those, classified according to what the back door " "is known to have the power to do. Back doors that allow full control over " "the programs which contain them are said to be “universal.”" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Back-door functionalities" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#spy\">Spying</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#alter-data\">Altering user's data or settings</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "" "<a href=\"#install-delete\">Installing, deleting or disabling programs</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#universal\">Full control</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#other\">Other/undefined</a>" msgstr "" #. type: Content of: <div><div><h3> msgid "Spying" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Nest <a href=\"https://blog.google/products/google-nest/partnership-" "adt-smarter-home-security/\"> is taking over ADT</a>. Google sent out a " "software update to its speaker devices using their back door <a href=" "\"https://web.archive.org/web/20240123114737/https://www.protocol.com/google-" "smart-speaker-alarm-adt\"> that listens for things like smoke alarms</a> and " "then notifies your phone that an alarm is happening. This means the devices " "now listen for more than just their wake words. Google says the software " "update was sent out prematurely and on accident and Google was planning on " "disclosing this new feature and offering it to customers who pay for it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many models of Internet-connected cameras contain a glaring back door—" "they have login accounts with hard-coded passwords, which can't be changed, " "and <a href=\"https://arstechnica.com/information-technology/2017/06/" "internet-cameras-expose-private-video-feeds-and-remote-controls/\"> there is " "no way to delete these accounts either</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Since these accounts with hard-coded passwords are impossible to delete, " "this problem is not merely an insecurity; it amounts to a back door that can " "be used by the manufacturer (and government) to spy on users." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "WhatsApp has a feature that <a href=\"https://techcrunch.com/2017/01/13/" "encrypted-messaging-platform-whatsapp-denies-backdoor-claim/\"> has been " "described as a “back door”</a> because it would enable " "governments to nullify its encryption." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The developers say that it wasn't intended as a back door, and that may well " "be true. But that leaves the crucial question of whether it functions as " "one. Because the program is nonfree, we cannot check by studying it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple can, and regularly does, <a href=\"https://arstechnica.com/" "gadgets/2014/05/new-guidelines-outline-what-iphone-data-apple-can-give-to-" "police/\"> remotely extract some data from iPhones for the state</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This may have improved with <a href=\"https://www.denverpost.com/2014/09/17/" "apple-will-no-longer-unlock-most-iphones-ipads-for-police/\"> iOS 8 security " "improvements</a>; but <a href=\"https://theintercept.com/2014/09/22/apple-" "data/\"> not as much as Apple claims</a>." msgstr "" #. type: Content of: <div><div><h3> msgid "Altering user's data or settings" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "BlizzCon 2019 imposed a <a href=\"https://arstechnica.com/gaming/2019/05/" "blizzcon-2019-tickets-revolve-around-invasive-poorly-reviewed-smartphone-app/" "\"> requirement to run a proprietary phone app</a> to be allowed into the " "event." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This app is a spyware that can snoop on a lot of sensitive data, including " "user's location and contact list, and has <a href=\"https://web.archive.org/" "web/20220321042716/https://old.reddit.com/r/wow/comments/bkd5ew/" "you_need_to_have_a_phone_to_attend_blizzcon_this/emg38xv/\"> near-complete " "control</a> over the phone." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Android has a <a href=\"https://www.theverge.com/2018/9/14/17861150/google-" "battery-saver-android-9-pie-remote-settings-change\"> back door for remotely " "changing “user” settings</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article suggests it might be a universal back door, but this isn't clear." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Dropbox app for Macintosh <a href=\"https://web.archive.org/" "web/20180124123506/http://applehelpwriter.com/2016/07/28/revealing-dropboxs-" "dirty-little-security-hack/\"> takes control of user interface items after " "luring the user into entering an admin password</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A pregnancy test controller application not only can <a href=\"https://www." "theverge.com/2016/4/25/11503718/first-response-pregnancy-pro-test-bluetooth-" "app-security\"> spy on many sorts of data in the phone, and in server " "accounts, it can alter them too</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.computerworld.com/article/2705284/backdoor-found-in-d-" "link-router-firmware-code.html\"> Some D-Link routers</a> have a back door " "for changing settings in a dlink of an eye." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://sekurak.pl/tp-link-httptftp-backdoor/\"> The TP-Link " "router has a back door</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://gothub.projectsegfau.lt/elvanderb/TCP-32764/\">Many models " "of routers have back doors</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google has long had <a href=\"https://www.theguardian.com/technology/2015/" "nov/24/google-can-unlock-android-devices-remotely-if-phone-unencrypted\">a " "back door to remotely unlock an Android device</a>, unless its disk is " "encrypted (possible since Android 5.0 Lollipop, but still not quite the " "default)." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Caterpillar vehicles come with <a href=\"https://web.archive.org/" "web/20201108113943/https://www.zerohedge.com/news/2015-11-19/caterpillar-" "depression-has-never-been-worse-it-has-cunning-plan-how-deal-it\"> a back " "door to shutoff the engine</a> remotely." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.fsf.org/blogs/community/replicant-developers-find-and-" "close-samsung-galaxy-backdoor\"> Samsung Galaxy devices running proprietary " "Android versions come with a back door</a> that provides remote access to " "the files stored on the device." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Amazon Kindle-Swindle has a back door that has been used to <a href=" "\"https://web.archive.org/web/20220319193415/https://pogue.blogs.nytimes." "com/2009/07/17/some-e-books-are-more-equal-than-others/\"> remotely erase " "books</a>. One of the books erased was <cite>1984</cite>, by George Orwell." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Amazon responded to criticism by saying it would delete books only following " "orders from the state. However, that policy didn't last. In 2012 it <a " "href=\"https://boingboing.net/2012/10/22/kindle-user-claims-amazon-dele.html" "\"> wiped a user's Kindle-Swindle and deleted her account</a>, then offered " "her kafkaesque “explanations.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Do other ebook readers have back doors in their nonfree software? We don't " "know, and we have no way to find out. There is no reason to assume that " "they don't." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The iPhone has a back door for <a href=\"https://www.npr." "org/2010/11/22/131511381/wipeout-when-your-company-kills-your-iphone\"> " "remote wipe</a>. It's not always enabled, but users are led into enabling " "it without understanding." msgstr "" #. type: Content of: <div><div><h3> msgid "Installing, deleting or disabling programs" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"/proprietary/uhd-bluray-denies-your-freedom.html\">UHD Blu-ray " "disks are loaded with malware of the worst kinds</a>, including the AACS " "DRM. Playing them on a PC requires the Intel Management Engine, which has " "back doors and cannot be disabled. Every Blu-ray drive also has a back door " "in its firmware, which allows the AACS-enforcing organization to “" "revoke” the ability to play any AACS-restricted disk." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Xiaomi provides a tool to <a href=\"https://www.guidetoroot.com/unlock-" "bootloader-on-any-xiaomi-phones/\"> unlock the bootloader of Xiaomi " "smartphones and tablets</a>, but this requires creating an account on the " "company's servers, i.e. providing your phone number. This is the price you " "have to pay for “legally” running a free software operating " "system on Xiaomi devices. But the manufacturer retains control of the " "unlocked device through a backdoor in the bootloader—the same backdoor " "that was remotely used to unlock it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe <a href=\"https://web.archive.org/web/20211014123717/https://" "pluralistic.net/2021/10/13/theres-an-app-for-that/#gnash\">has licensed its " "Flash Player to China's Zhong Cheng Network</a> who is offering the program " "bundled with spyware and a back door that can remotely deactivate it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe is responsible for this since they gave Zhong Cheng Network permission " "to do this. This injustice involves “misuse” of the DMCA, but " "“proper,” intended use of the DMCA is a much bigger injustice. " "There is <a href=\"/philosophy/right-to-read.html\">a series of errors " "related to DMCA</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Recent Samsung TVs have a back door with which Samsung can <a href=\"https://" "www.pcmag.com/news/samsung-can-remotely-disable-any-of-its-tvs-worldwide\"> " "brick them remotely</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe Flash Player <a href=\"https://www.adobe.com/products/flashplayer/end-" "of-life.html\"> has a universal back door</a> which lets Adobe control the " "software and, for example, disable it whenever it wants. Adobe will block " "Flash content from running in Flash Player beginning January 12, 2021, which " "indicates that they have access to every Flash Player through a back door." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The back door won't be dangerous in the future, as it'll disable a " "proprietary program and make users delete the software, but it was an " "injustice for many years. Users should have deleted Flash Player even before " "its end of life." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A very popular app found in the Google Play store contained a module that " "was designed to <a href=\"https://arstechnica.com/information-" "technology/2019/08/google-play-app-with-100-million-downloads-executed-" "secret-payloads/\">secretly install malware on the user's computer</a>. The " "app developers regularly used it to make the computer download and execute " "any code they wanted." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is a concrete example of what users are exposed to when they run " "nonfree apps. They can never be completely sure that a nonfree app is safe." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple appears to say that <a href=\"https://techcrunch.com/2019/07/10/apple-" "silent-update-zoom-app/\"> there is a back door in MacOS</a> for " "automatically updating some (all?) apps." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The specific change described in the article was not malicious—it " "protected users from surveillance by third parties—but that is a " "separate question." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Corel Paintshop Pro has a <a href=\"https://torrentfreak.com/corel-wrongly-" "accuses-licensed-user-of-piracy-disables-software-remotely-181110/\"> back " "door that can make it cease to function</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article is full of confusions, errors and biases that we have an " "obligation to expose, given that we are making a link to them." msgstr "" #. type: Content of: <div><div><ul><li><ul><li> msgid "" "Getting a patent does not “enable” a company to do any " "particular thing in its products. What it does enable the company to do is " "sue other companies if they do some particular thing in their products." msgstr "" #. type: Content of: <div><div><ul><li><ul><li> msgid "" "A company's policies about when to attack users through a back door are " "beside the point. Inserting the back door is wrong in the first place, and " "using the back door is always wrong too. No software developer should have " "that power over users." msgstr "" #. type: Content of: <div><div><ul><li><ul><li> msgid "" "“<a href=\"/philosophy/words-to-avoid.html#Piracy\">Piracy</a>” " "means attacking ships. Using that word to refer to sharing copies is a " "smear; please don't smear sharing." msgstr "" #. type: Content of: <div><div><ul><li><ul><li><p> msgid "" "The idea of “protecting our IP” is total confusion. The term " "“IP” itself is a <a href=\"/philosophy/not-ipr.html\">bogus " "generalization about things that have nothing in common</a>." msgstr "" #. type: Content of: <div><div><ul><li><ul><li><p> msgid "" "In addition, to speak of “protecting” that bogus generalization " "is a separate absurdity. It's like calling the cops because neighbors' kids " "are playing on your front yard, and saying that you're “protecting the " "boundary line”. The kids can't do harm to the boundary line, not even " "with a jackhammer, because it is an abstraction and can't be affected by " "physical action." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some “Smart” TVs automatically <a href=\"https://web.archive.org/" "web/20180405014828/https:/twitter.com/buro9/status/980349887006076928\"> " "load downgrades that install a surveillance app</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We link to the article for the facts it presents. It is too bad that the " "article finishes by advocating the moral weakness of surrendering to " "Netflix. The Netflix app <a href=\"/proprietary/malware-google.html#netflix-" "app-geolocation-drm\">is malware too</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Baidu's proprietary Android library, Moplus, has a back door that <a href=" "\"https://www.eff.org/deeplinks/2015/11/millions-android-devices-vulnerable-" "remote-hijacking-baidu-wrote-code-google-made\"> can “upload " "files” as well as forcibly install apps</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "It is used by 14,000 Android applications." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In addition to its <a href=\"#windows-update\">universal back door</a>, " "Windows 8 has a back door for <a href=\"https://www.computerworld.com/" "article/2732767/microsoft--we-can-remotely-delete-windows-8-apps.html\"> " "remotely deleting apps</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In Android, <a href=\"https://www.computerworld.com/article/2506557/google-" "throws--kill-switch--on-android-phones.html\"> Google has a back door to " "remotely delete apps</a>. (It was in a program called GTalkService, which " "seems since then to have been merged into Google Play.)" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google can also <a href=\"https://jon.oberheide.org/blog/2010/06/25/remote-" "kill-and-install-on-google-android/\"> forcibly and remotely install apps</" "a> through GTalkService. This is not equivalent to a universal back door, " "but permits various dirty tricks." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Although Google's <em>exercise</em> of this power has not been malicious so " "far, the point is that nobody should have such power, which could also be " "used maliciously. You might well decide to let a security service remotely " "<em>deactivate</em> programs that it considers malicious. But there is no " "excuse for allowing it to <em>delete</em> the programs, and you should have " "the right to decide who (if anyone) to trust in this way." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The iPhone has a back door <a href=\"https://www.telegraph.co.uk/" "technology/3358134/Apples-Jobs-confirms-iPhone-kill-switch.html\"> that " "allows Apple to remotely delete apps</a> which Apple considers “" "inappropriate”. Jobs said it's OK for Apple to have this power " "because of course we can trust Apple." msgstr "" #. type: Content of: <div><div><h3> msgid "Full control" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Eclypsium <a href=\"https://eclypsium.com/blog/supply-chain-risk-from-" "gigabyte-app-center-backdoor/\"> discovered an insecure universal back door</" "a> on many computers using Gigabyte mainboards. Gigabyte designed their " "nonfree firmware so they could add a program to Windows to download " "additional software from the Internet, and run it behind the user's back." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "To add injury to injury, the back-door program was insecure, and opened ways " "for crackers to run their own programs on the affected systems, also behind " "the user's back. Gigabyte's “<a href=\"https://www.gigabyte.com/Press/" "News/2091\">solution</a>” was to ensure the back door would only run " "programs from Gigabyte." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In this case, the back door required the connivance of Windows accepting the " "program, and running it behind the user's back. Free operating systems " "rightly ignore such “Greek gifts,” so users of GNU (including " "GNU/Linux) are safe from this particular back door, even on affected " "hardware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Nonfree software does not make your computer secure—it does the " "opposite: it prevents you from trying to secure it. When nonfree programs " "are required for booting and impossible to replace, they are, in effect, a " "low-level rootkit. All the things that the industry has done to make its " "power over you secure against you also protect firmware-level rootkits " "against you." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Instead of allowing Intel, AMD, Apple and perhaps ARM to impose security " "through tyranny, we should demand laws that require them to allow users to " "install their choice of startup software and make available the information " "needed to develop such. Think of this as right-to-repair at the " "initialization stage." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>Note: Eclypsium at least mentions the problem of “unwanted " "behavior within official firmware,” but does not seem to recognize " "that the only real solution is for firmware to be free, so users can fix " "these problems without having to rely on the vendor.</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "HP delivers printers with a universal back door, and recently used it to <a " "href=\"https://www.theguardian.com/money/2023/may/10/how-can-hp-block-me-" "from-using-a-cheaper-printer-cartridge\"> sabotage them by remotely " "installing malware</a>. The malware makes the printer refuse to function " "with non-HP ink cartrides, and even with old HP cartridges which HP now " "declares to have “expired.” HP calls the back door “" "dynamic security,” and has the gall to claim that this “" "security” protects users from malware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If you own an HP printer that can still use non-HP cartridges, we urge you " "to disconnect it from the internet. This will ensure that HP doesn't " "sabotage it by “updating” its software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>Note how the author of the Guardian article credulously repeats HP's " "assertion that the “dynamic security” feature protects users " "against malware, not recognizing that the article demonstrates it does the " "opposite.</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "NordicTrack, a company that sells exercise machines with ability to show " "videos <a href=\"https://arstechnica.com/information-technology/2021/11/" "locked-out-of-god-mode-runners-are-hacking-their-treadmills/\">limits what " "people can watch, and recently disabled a feature</a> that was originally " "functional. This happened through automatic update and probably involved a " "universal back door." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some Wavelink and JetStream wifi routers have universal back doors that " "enable unauthenticated users to remotely control not only the routers, but " "also any devices connected to the network. There is evidence that <a href=" "\"https://cybernews.com/security/walmart-exclusive-routers-others-made-in-" "china-contain-backdoors-to-control-devices/\"> this vulnerability is " "actively exploited</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If you consider buying a router, we encourage you to get one that <a href=" "\"https://ryf.fsf.org/categories/routers\">runs on free software</a>. Any " "attempts at introducing malicious functionalities in it (e.g., through a " "firmware update) will be detected by the community, and soon corrected." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If unfortunately you own a router that runs on proprietary software, don't " "panic! You may be able to replace its firmware with a free operating system " "such as <a href=\"https://librecmc.org\">libreCMC</a>. If you don't know " "how, you can get help from a nearby GNU/Linux user group." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A new app published by Google <a href=\"https://www.xda-developers.com/" "google-device-lock-controller-banks-payments/\">lets banks and creditors " "deactivate people's Android devices</a> if they fail to make payments. If " "someone's device gets deactivated, it will be limited to basic " "functionality, such as emergency calling and access to settings." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "BMW will remotely <a href=\"https://www.cnet.com/roadshow/news/bmw-vehicle-" "as-a-platform/\"> enable and disable functionality in cars</a> through a " "universal back door." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The <a href=\"https://play.google.com/about/play-terms/\"> Google Play Terms " "of Service</a> insist that the user of Android accept the presence of " "universal back doors in apps released by Google." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This does not tell us whether any of Google's apps currently contains a " "universal back door, but that is a secondary question. In moral terms, " "demanding that people accept in advance certain bad treatment is equivalent " "to actually doing it. Whatever condemnation the latter deserves, the former " "deserves the same." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Android phones subsidized by the US government come with <a href=\"https://" "arstechnica.com/information-technology/2020/01/us-government-funded-android-" "phones-come-preinstalled-with-unremovable-malware/\"> preinstalled adware " "and a back door for forcing installation of apps</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The adware is in a modified version of an essential system configuration " "app. The back door is a surreptitious addition to a program whose stated " "purpose is to be a <a href=\"https://www.zdnet.com/article/unremovable-" "malware-found-preinstalled-on-low-end-smartphone-sold-in-the-us/\"> " "universal back door for firmware</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In other words, a program whose raison d'être is malicious has a secret " "secondary malicious purpose. All this is in addition to the malware of " "Android itself." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Chinese Communist Party's <a href=\"/proprietary/proprietary-" "surveillance.html#M201910130\"> “Study the Great Nation” app</a> " "was found to contain <a href=\"https://www.ndtv.com/world-news/chinese-app-" "allows-officials-access-to-100-million-users-phone-report-2115962\"> a back-" "door allowing developers to run any code they wish</a> in the users' phone, " "as “superusers.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Note: The <a href=\"http://web-old.archive.org/web/20191015005153/https://" "www.washingtonpost.com/world/asia_pacific/chinese-app-on-xis-ideology-allows-" "data-access-to-100-million-users-phones-report-says/2019/10/11/2d53bbae-" "eb4d-11e9-bafb-da248f8d5734_story.html\"> Washington Post version of the " "article</a> (partly obfuscated, but readable after copy-pasting in a text " "editor) includes a clarification saying that the tests were only performed " "on the Android version of the app, and that, according to Apple, “this " "kind of ‘superuser’ surveillance could not be conducted on " "Apple's operating system.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "ChromeBooks are programmed for obsolescence: ChromeOS has a universal back " "door that is used for updates and <a href=\"https://www.theregister." "com/2019/08/22/buying_a_chromebook_dont_forget_to_check_when_it_expires/\"> " "ceases to operate at a predefined date</a>. From then on, there appears to " "be no support whatsoever for the computer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In other words, when you stop getting screwed by the back door, you start " "getting screwed by the obsolescence." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The FordPass Connect feature of some Ford vehicles has <a href=\"https://web." "archive.org/web/20200530023040/https://www.myfordpass.com/content/ford_com/" "fp_app/en_us/termsprivacy.html\"> near-complete access to the internal car " "network</a>. It is constantly connected to the cellular phone network and " "sends Ford a lot of data, including car location. This feature operates even " "when the ignition key is removed, and users report that they can't disable " "it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If you own one of these cars, have you succeeded in breaking the " "connectivity by disconnecting the cellular modem, or wrapping the antenna in " "aluminum foil?" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "New GM cars <a href=\"https://media.gm.com/media/us/en/gmc/vehicles/" "canyon/2019.html\"> offer the feature of a universal back door</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Every nonfree program offers the user zero security against its developer. " "With this malfeature, GM has explicitly made things even worse." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Furby Connect has a <a href=\"https://web.archive.org/web/20220604212722/" "https://www.contextis.com/en/blog/dont-feed-them-after-midnight-reverse-" "engineering-the-furby-connect\"> universal back door</a>. If the product as " "shipped doesn't act as a listening device, remote changes to the code could " "surely convert it into one." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tesla used software to limit the part of the battery that was available to " "customers in some cars, and <a href=\"https://techcrunch.com/2017/09/09/" "tesla-flips-a-switch-to-increase-the-range-of-some-cars-in-florida-to-help-" "people-evacuate/\"> a universal back door in the software</a> to temporarily " "increase this limit." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "While remotely allowing car “owners” to use the whole battery " "capacity did not do them any harm, the same back door would permit Tesla " "(perhaps under the command of some government) to remotely order the car to " "use none of its battery. Or perhaps to drive its passenger to a torture " "prison." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Vizio “smart” TVs <a href=\"https://www.ftc.gov/business-" "guidance/blog/2017/02/what-vizio-was-doing-behind-tv-screen\"> have a " "universal back door</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Xiaomi phones come with <a href=\"https://web.archive.org/web/20190424082647/" "http://blog.thijsbroenink.com/2016/09/xiaomis-analytics-app-reverse-" "engineered/\"> a universal back door in the application processor, for " "Xiaomi's use</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is separate from <a href=\"#universal-back-door-phone-modem\">the " "universal back door in the modem processor that the local phone company can " "use</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Amazon Echo appears to have a universal back door, since <a href=" "\"https://en.wikipedia.org/wiki/Amazon_Echo#Software_updates\"> it installs " "“updates” automatically</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We have found nothing explicitly documenting the lack of any way to disable " "remote changes to the software, so we are not completely sure there isn't " "one, but this seems pretty clear." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/technology/2014/dec/18/chinese-android-" "phones-coolpad-hacker-backdoor\"> A Chinese version of Android has a " "universal back door</a>. Nearly all models of mobile phones have a <a href=" "\"#universal-back-door-phone-modem\"> universal back door in the modem chip</" "a>. So why did Coolpad bother to introduce another? Because this one is " "controlled by Coolpad." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"http://www.techienews.co.uk/973462/bitcoin-miners-bundled-pups-" "legitimate-applications-backed-eula/\"> Some applications come with " "MyFreeProxy, which is a universal back door</a> that can download programs " "and run them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In addition to its <a href=\"#swindle-eraser\">book eraser</a>, the Kindle-" "Swindle has a <a href=\"https://web.archive.org/web/20120715070050/http://" "www.amazon.com/gp/help/customer/display.html/?nodeId=200774090\"> universal " "back door</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Almost every phone's communication processor has a universal back door which " "is <a href=\"https://www.schneier.com/blog/archives/2006/12/" "remotely_eavesd_1.html\"> often used to make a phone transmit all " "conversations it hears</a>. See <a href=\"/proprietary/malware-mobiles." "html#universal-back-door-phone-modem\">Malware in Mobile Devices</a> for " "more info." msgstr "" #. type: Content of: <div><div><h3> msgid "Other or undefined" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Kia cars were built with a back door that enabled the company's server to " "locate them and take control of them. The car owner had access to these " "controls through the Kia server. That the car owner had such control is not " "objectionable. However, that Kia itself had such control is Orwellian, and " "ought to be illegal. The icing on the Orwellian cake is that the server had " "a security fault which <a href=\"https://samcurry.net/hacking-kia\">allowed " "absolutely anyone to activate those controls</a> for any Kia car." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many people will be outraged at that security bug, but this was presumably " "an accident. The fact that Kia had such control over cars after selling them " "to customers is what outrages us, and that must have been intentional on " "Kia's part." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/security/2023/12/exploit-used-in-mass-" "iphone-infection-campaign-targeted-secret-hardware-feature/\"> A back door " "in Apple devices</a>, present and abused from at least 2019 until 2023, " "allowed crackers to have full control over them by sending iMessage texts " "that installed malware without any action on the user's part. Infections, " "among other things, gave the intruders access to owners' microphone " "recordings, photos, location and other personal data." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Intel's intentional “management engine” back door has <a href=" "\"https://www.theregister.com/2017/11/20/intel_flags_firmware_flaws/\"> " "unintended back doors</a> too." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Dell computers, shipped with Windows, had a bogus root certificate that <a " "href=\"https://fossforce.com/2015/11/dell-comcast-intel-who-knows-who-else-" "are-out-to-get-you/\"> allowed anyone (not just Dell) to remotely authorize " "any software to run</a> on the computer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "ARRIS cable modem has a <a href=\"https://w00tsec.blogspot.de/2015/11/arris-" "cable-modem-has-backdoor-in.html?m=1\"> back door in the back door</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "“Self-encrypting” disk drives do the encryption with proprietary " "firmware so you can't trust it. Western Digital's “My Passport” " "drives <a href=\"https://www.vice.com/en/article/mgbmma/some-popular-self-" "encrypting-hard-drives-have-really-bad-encryption\"> have a back door</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Mac OS X had an <a href=\"https://truesecdev.wordpress.com/2015/04/09/hidden-" "backdoor-api-to-root-privileges-in-apple-os-x/\"> intentional local back " "door for 4 years</a>, which could be exploited by attackers to gain root " "privileges." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Here is a big problem whose details are still secret: <a href=\"https://" "mashable.com/archive/fbi-microsoft-bitlocker-backdoor\"> The FBI asks lots " "of companies to put back doors in proprietary programs</a>. We don't know of " "specific cases where this was done, but every proprietary program for " "encryption is a possibility." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "HP “storage appliances” that use the proprietary “Left " "Hand” operating system have back doors that give HP <a href=\"https://" "insights.dice.com/2013/07/11/hp-keeps-installing-secret-backdoors-in-" "enterprise-storage/\"> remote login access</a> to them. HP claims that this " "does not give HP access to the customer's data, but if the back door allows " "installation of software changes, a change could be installed that would " "give access to the customer's data." msgstr "" #. type: Content of: <div><div><p> msgid "" "The EFF has other examples of the <a href=\"https://www.eff.org/" "deeplinks/2015/02/who-really-owns-your-drones\"> use of back doors</a>." msgstr "" #. type: Content of: <title> msgid "Potential Malware - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Potential Malware" msgstr "" #. type: Content of: <div><div><p> msgid "" "This page describes malicious techniques that proprietary software might use " "in the future for malicious purposes. We don't have any evidence that they " "are in use yet." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Car companies are coming up with a list of clever reasons why <a href=" "\"https://www.nytimes.com/2019/03/28/business/autonomous-cars-technology-" "privacy.html\"> they “have to” put cameras and microphones in " "the car</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "BMW says its software does not store any driver-monitoring information. If " "this means none of the data that come out of the cameras and microphones can " "be seen by anyone else, the cameras and microphones are not dangerous. But " "should we trust this claim? The only way it can deserve rational trust is if " "the software is free." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Volvo plans to <a href=\"https://www.theguardian.com/business/2019/mar/20/" "volvo-to-install-cameras-in-new-cars-to-reduce-road-deaths\"> install " "cameras inside cars</a> to monitor the driver for signs of impairment that " "could cause an accident." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "However, there is nothing to prevent these cameras from doing other things, " "such as biometrically identifying the driver or passengers, other than " "proprietary software which Volvo—or various governments and " "criminals—could change at any time." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Malware installed into the processor in a hard drive could <a href=\"https://" "yro.slashdot.org/story/19/03/08/1928257/hard-disks-can-be-turned-into-" "listening-devices-researchers-find\"> use the disk itself as a microphone to " "detect speech</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article refers to the “Linux operating system” but seems to " "mean <a href=\"/gnu/linux-and-gnu.html\">GNU/Linux</a>. That hack would not " "require changing Linux itself." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some portable surveillance devices (“phones”) now have <a href=" "\"https://www.theguardian.com/technology/2019/feb/20/samsung-galaxy-s10-" "launch-triple-cameras-ultrasonic-fingerprint-sensors-and-5g\"> fingerprint " "sensors in the display</a>. Does that imply they could take the fingerprint " "of anyone who operates the touch screen?" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Patent applications show that Google and Amazon are interested in <a href=" "\"https://www.consumerwatchdog.org/privacy-technology/home-assistant-adopter-" "beware-google-amazon-digital-assistant-patents-reveal\"> making “" "digital assistants” study people's activities to learn all about them</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "AI programs would understand what people say to each other, observe the " "clothing they wear and the objects they carry (including the marketing " "messages on them), and use sound to track people's activities, including in " "the toilet or in bed." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It should be illegal to have such a device in your apartment without getting " "signed consent from the people that live in the other apartments in the " "building." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Any device that has a microphone and a speaker could be <a href=\"https://" "www.washington.edu/news/2017/08/16/computer-scientists-use-music-to-covertly-" "track-body-movements-activity/\">turned into a sonar system that would track " "the movements of people in the same room or other rooms nearby</a>." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2017-2023 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Tethers - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Tethers" msgstr "" #. type: Content of: <div><div><p> msgid "" "Tethering a product or program means designing it to work only by " "communicating with a specific server. That is always an injustice since it " "means you can't use the program without that server. It is also a secondary " "injustice if you can't communicate with the server in another way." msgstr "" #. type: Content of: <div><div><p> msgid "" "In some cases, tethering is used to do specific nasty things to the users. " "This page reports instances where tethering was used to harm the users " "directly." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"/proprietary/uhd-bluray-denies-your-freedom.html\">UHD Blu-ray " "disks are loaded with malware of the worst kinds</a>. Among other things, " "they are encrypted with keys that must be retrieved from a remote server. " "This makes repeated updates and internet connections a requirement if the " "user purchases several UHD Blu-ray disks over time." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://badcyber.com/dieselgate-but-for-trains-some-heavyweight-" "hardware-hacking/\">Newag, a Polish railway manufacturer, puts DRM inside " "trains to prevent third-party repairs</a>." msgstr "" #. type: Content of: <div><div><ul><li><ul><li><p> msgid "" "The train's software contains code to detect if the GPS coordinates are near " "some third party repairers, or the train has not been running for some time. " "If yes, the train will be “locked up” (i.e. bricked). It was " "also possible to unlock it by pressing a secret combination of buttons in " "the cockpit, but this ability was removed by a manufacturer's software " "update." msgstr "" #. type: Content of: <div><div><ul><li><ul><li><p> msgid "" "The train will also lock up after a certain date, which is hardcoded in the " "software." msgstr "" #. type: Content of: <div><div><ul><li><ul><li><p> msgid "" "The company pushes a software update that detects if the DRM code has been " "bypassed, i.e. the lock should have been engaged but the train is still " "operational. If yes, the controller cabin screen will display a scary " "message warning about “copyright violation”." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In Australia, people assume that “smart” means “tethered." "” When people's ISP goes down, <a href=\"https://www.theguardian.com/" "business/2023/nov/10/optus-went-down-and-the-smart-lights-came-on-and-then-" "marayke-was-stranded-in-bed\"> all the tethered devices become useless</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "That's in addition to the nasty things tethered devices do when they are " "“functioning” normally—such as snoop on the commands sent " "to the device and the results they report." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "Smart <em>users</em> know better than to accept tethered devices." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Philips Hue, the most ubiquitous home automation product in the US, is " "planning to soon <a href=\"https://boingboing.net/2023/09/27/philips-hue-to-" "make-you-create-an-account-and-log-in-to-adjust-your-lightbulbs.html\"> " "force users to log in to the app server</a> in order to be able to adjust a " "lightbulb, or use other functionalities, in what amounts to a massive user-" "tracking data grab." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some Bambu Lab 3D printers were reported to <a href=\"https://arstechnica." "com/gadgets/2023/08/3d-printers-print-break-on-their-own-due-to-cloud-outage/" "\"> start printing without user's consent</a>, as a result of a malfunction " "of the servers to which they were tethered. This caused significant damage." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Controlling Honeywell internet thermostats with the dedicated app has proven " "unreliable, due to <a href=\"https://piunikaweb.com/2022/03/15/honeywell-" "total-connect-comfort-app-website-not-working-issue/\"> recurrent connection " "issues with the server these thermostats are tethered to</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The legacy company that made Blackberry phones is about to kill them off <a " "href=\"https://edition.cnn.com/2022/01/01/tech/blackberry-end-of-life/index." "html\">by shutting down the server they are tethered to</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If the software on those phones were free (as in freedom), people could " "modify their software so they could talk to some other server." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Hundreds of Tesla drivers <a href=\"https://www.theguardian.com/" "technology/2021/nov/20/tesla-app-outage-elon-musk-apologises\">were locked " "out of their cars as a result of Tesla's app suffering from an outage</a>, " "which happened because the app is tethered to the company's servers." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Focals eyeglass display, with snooping microphone, has been eliminated. " "Google eliminated it by buying the manufacturer and shutting it down. It " "also <a href=\"https://www.ctvnews.ca/sci-tech/article/canadian-smart-" "glasses-going-offline-weeks-after-company-bought-by-google/\">shut down the " "server these devices depend on</a>, which caused the ones already sold to " "cease to function." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It may be a good thing to wipe out this product—for “smart," "” read “snoop”—but Google didn't do that for the " "sake of privacy. Rather, it was eliminating competition for its own " "snooping product." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Mellow sous-vide cooker is tethered to a server. The company suddenly <a " "href=\"https://www.slashgear.com/mellow-sous-vide-owners-get-unwelcome-" "subscription-surprise-28630842/\"> turned this tethering into a " "subscription</a>, forbidding users from taking advantage of the “" "advanced features” of the cooker unless they pay a monthly fee." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Best Buy made controllable appliances and <a href=\"https://www.theverge." "com/2019/9/6/20853671/best-buy-connect-insignia-smart-plug-wifi-freezer-" "mobile-app-shutdown-november-6\"> shut down the service to control them " "through</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Best Buy acknowledged that it was mistreating its customers by doing so, and " "offered reimbursement of the affected appliances. The fact remains, however, " "that tethering a device to a server is a way of restricting and harassing " "users. The nonfree software in the device is what stops users from cutting " "the tether." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Jibo robot toys were tethered to the manufacturer's server, and <a href=" "\"https://apnews.com/article/san-francisco-north-america-technology-business-" "ap-top-news-99c9ec8ebad242ca88178e22c7642648\"> the company made them all " "cease to work</a> by shutting down that server." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The shutdown might ironically be good for their users, since the product was " "designed to manipulate people by presenting a phony semblance of emotions, " "and was most certainly spying on them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The British supermarket Tesco sold tablets which were tethered to Tesco's " "server for reinstalling default settings. Tesco <a href=\"https://www." "theguardian.com/money/2019/mar/25/tesco-hudl-tablet-support-kill-fix\"> " "turned off the server for old models</a>, so now if you try to reinstall the " "default settings, it bricks them instead." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Honeywell's “smart” thermostats communicate only through the " "company's server. They have all the nasty characteristics of such devices: " "<a href=\"https://www.businessinsider.com/honeywell-iot-thermostats-server-" "outage-2018-9\"> surveillance, and danger of sabotage</a> (of a specific " "user, or of all users at once), as well as the risk of an outage (which is " "what just happened)." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In addition, setting the desired temperature requires running nonfree " "software. With an old-fashioned thermostat, you can do it using controls " "right on the thermostat." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Jawbone fitness tracker was tethered to a proprietary phone app. In " "2017, the company shut down and made the app stop working. <a href=\"https://" "www.theguardian.com/technology/2018/jul/05/defunct-jawbone-fitness-trackers-" "kept-selling-after-app-closure-says-which\">All the existing trackers " "stopped working forever</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article focuses on a further nasty fillip, that sales of the broken " "devices continued. But we think that is a secondary issue; it made the nasty " "consequences extend to some additional people. The fundamental wrong was to " "design the devices to depend on something else that didn't respect users' " "freedom." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Logitech will sabotage all Harmony Link household control devices by <a href=" "\"https://arstechnica.com/gadgets/2017/11/logitech-to-shut-down-service-and-" "support-for-harmony-link-devices-in-2018/\"> turning off the server through " "which the products' supposed owners communicate with them</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The owners suspect this is to pressure them to buy a newer model. If they " "are wise, they will learn, rather, to distrust any product that requires " "users to talk with them through some specialized service." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Bird and rabbit pets were implemented for Second Life by a company that " "tethered their food to a server. <a href=\"https://www.rockpapershotgun.com/" "second-life-ozimals-pet-rabbits-dying\"> It shut down the server and the " "pets more or less died</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Anova sabotaged users' cooking devices with a downgrade that tethered them " "to a remote server. <a href=\"https://web.archive.org/web/20170415145520/" "https://consumerist.com/2017/04/12/anova-ticks-off-customers-by-requiring-" "mandatory-accounts-to-cook-food/\">Unless users create an account on Anova's " "servers, their cookers won't function</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The iMessage app on iThings <a href=\"https://theintercept.com/2016/09/28/" "apple-logs-your-imessage-contacts-and-may-share-them-with-police/\">tells a " "server every phone number that the user types into it</a>; the server " "records these numbers for at least 30 days." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A half-blind security critique of a tracking app: it found that <a href=" "\"https://www.consumerreports.org/mobile-security-software/glow-pregnancy-" "app-exposed-women-to-privacy-threats-a1100919965/\"> blatant flaws allowed " "anyone to snoop on a user's personal data</a>. The critique fails entirely " "to express concern that the app sends the personal data to a server, where " "the <em>developer</em> gets it all. This “service” is for " "suckers!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The server surely has a “privacy policy,” and surely it is " "worthless since nearly all of them are." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Revolv is a device that managed “smart home” operations: " "switching lights, operate motion sensors, regulating temperature, etc. Its " "proprietary software depends on a remote server to do these tasks. On May " "15th, 2016, Google/Alphabet <a href=\"https://www.eff.org/deeplinks/2016/04/" "nest-reminds-customers-ownership-isnt-what-it-used-be\">intentionally broke " "it by shutting down the server</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If it were free software, users would have the ability to make it work " "again, differently, and then have a freedom-respecting home instead of a " "“smart” home. Don't let proprietary software control your " "devices and turn them into $300 out-of-warranty bricks. Insist on self-" "contained computers that run free software!" msgstr "" #. type: Content of: <title> msgid "" "Additions to the Malware Section - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><p> msgid "" "</a> / <a href=\"/proprietary/proprietary.html\">Malware</a> /" msgstr "" #. type: Content of: <div><h2> msgid "Additions to the Malware Section" msgstr "" #. type: Content of: <div><p> msgid "" "These are all the malware items that have been added to this directory since " "2018, in reverse chronological order. (In some cases, the latest reference " "was updated after the item was added.)" msgstr "" #. type: Content of: <div><ul><li><small> msgid "<small class='date-tag'>Added:" msgstr "" #. type: Content of: <div><ul><li><small> msgid "— Latest reference:" msgstr "" #. #echo #. encoding='none' var='PUB' #. type: Content of: <div><ul><li> msgid "</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Apple <a href=\"https://www.bleepingcomputer.com/news/security/apple-pulls-" "icloud-end-to-end-encryption-feature-in-the-uk/\"> stopped offering iCloud " "end-to-end encryption in the UK</a> after the UK government demanded <a href=" "\"https://www.washingtonpost.com/technology/2025/02/07/apple-encryption-" "backdoor-uk/\"> worldwide access to encrypted user data</a>. This is one " "more proof that storing your own data “in the cloud” puts it at " "risk." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Pixel 9 “smart”phone <a href=\"https://cybernews.com/" "security/google-pixel-9-phone-beams-data-and-awaits-commands/\"> frequently " "updates Google servers with its location and current configuration</a> along " "with personally identifiable data, raising concerns about user privacy. " "Moreover, it communicates with services that are not in use, and " "periodically attempts to download experimental, possibly insecure software. " "The system does not inform the user that it is doing all this." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "There is hope, however: it is possible to <a href=\"https://doc.e.foundation/" "devices\"> replace the original Android operating system with a deGoogled " "version</a> in Pixel phones up to 8a, and in phones from many other brands. " "No doubt that the Pixel 9 will be supported soon." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Google's ad platform enabled advertisers to <a href=\"https://arstechnica." "com/information-technology/2018/01/now-even-youtube-serves-ads-with-cpu-" "draining-cryptocurrency-miners/\"> run cryptocurrency miner code on the " "computers of YouTube users through proprietary JavaScript</a>. Some people " "noticed this, and the outrage made Google remove the miners, but the number " "of affected users was probably very high." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/gadgets/2024/05/pleas-for-open-sourcing-" "refunds-as-spotify-plans-to-brick-car-thing-devices/\">Spotify sold a music " "streaming device but they no longer support it</a>. Due to its proprietary " "nature, it can no longer be updated or even used. Users requested Spotify to " "make the software that runs on the device libre, and Spotify refused, so " "these devices are now e-waste. Spotify is now offering refunds to save the " "purchasers from losing money on these products, but this wouldn't prevent " "the products from being e-waste, and wouldn't save users from being jerked " "around by Spotify. This is an example of how software that is not free " "controls the user instead of the user controlling the software. It is also " "an important lesson for us to insist the software in a device be libre " "before we buy it." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20240311120515/https://www.nytimes." "com/2024/03/11/technology/carmakers-driver-tracking-insurance.html\"> GM is " "spying on drivers</a> who own or rent their cars, and give away detailed " "driving data to insurance companies through data brokers. These companies " "then analyze the data, and hike up insurance prices if they think the data " "denotes “risky driving.” For the car to make this data available " "to anyone but the owner or renter of the car should be a crime. If the car " "is owned by a rental company, that company should not have access to it " "either." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Surveillance cameras put in by government A to surveil for it may be " "surveilling for government B as well. That's because A put in a product <a " "href=\"https://www.rferl.org/a/ukraine-cctv-moscow-spying-schemes-" "investigation/32747767.html\"> made by B with nonfree software</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>(Please note that this article misuses the word “<a href=\"/" "philosophy/words-to-avoid.html#Hacker\">hack</a>” to mean “break " "security.”)</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"/proprietary/uhd-bluray-denies-your-freedom.html\">UHD Blu-ray " "disks are encrypted with AACS, one of the worst kinds of DRM</a>. Playing " "them on a PC requires software and hardware that meet stringent proprietary " "specifications, which developers can only obtain after signing an agreement " "that explicitly forbids them from disclosing any source code." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.bleepingcomputer.com/news/security/logofail-attack-can-" "install-uefi-bootkits-through-bootup-logos/\">x86 and ARM based computers " "shipped with UEFI are potentially vulnerable to a design omission called " "LogoFAIL</a>. A cracker can replace the BIOS logo with a fake one that " "contains malicious code. Users can't fix this omission because it is in the " "nonfree UEFI firmware that users can't replace." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Recent autos offer a feature by which the drivers can connect their snoop-" "phones to the car. That feature <a href=\"https://therecord.media/class-" "action-lawsuit-cars-text-messages-privacy\"> snoops on the calls and texts</" "a> and gives the data to the car manufacturer, and to the state." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A good privacy law would prohibit cars recording this data about the users' " "activities. But not just <em>this</em> data—lots of other data too." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20231213150111/https://www.nytimes." "com/2023/11/12/technology/iphone-repair-apple-control.html\">To block non-" "Apple repairs, Apple encodes the iMonster serial number in the original " "parts</a>. This is called “parts pairing”. Swapping parts " "between working iMonsters of the same model causes malfunction or disabling " "of some functionalities. Part replacement may also trigger persistent " "alerts, unless it is done by an Apple store." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Yandex company has started to <a href=\"https://meduza.io/en/" "feature/2023/08/08/user-x-with-driver-y-traveled-from-point-a-to-point-b\"> " "give away Yango taxi ride data to Russia's Federal Security Service (FSB)</" "a>. The Russian government (and whoever else receives the the data) thus has " "access to a wealth of personal information, including who traveled where, " "when, and with which driver. Yandex <a href=\"https://yandex.ru/legal/" "confidential/?lang=en\"> claims that it complies with European regulations</" "a> for data collected in the European Economic Area, Switzerland or Israel. " "But what about the rest of the world?" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "As tech companies add microphones to a wide range of products, including " "refrigerators and motor vehicles, they also set up transcription farms where " "human employees <a href=\"https://getpocket.com/explore/item/silicon-valley-" "got-millions-to-let-siri-and-alexa-listen-in\"> listen to what people say</" "a> and tweak the recognition algorithms." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/technology/2023/jul/04/smile-youre-on-" "camera-self-driving-cars-are-here-and-theyre-watching-you\"> Driverless cars " "in San Francisco collect videos constantly</a>, using cameras inside and " "outside, and governments have already collected those videos secretly." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "As the Surveillance Technology Oversight Project says, they are “" "driving us straight into authoritarianism.” We must <a href=\"/" "philosophy/surveillance-vs-democracy.html\">regulate <em>all</em> cameras " "that collect images that can be used to track people</a>, to make sure they " "are not used for that." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Some employers are <a href=\"https://www.theguardian.com/money/2023/may/30/i-" "feel-constantly-watched-employees-working-under-surveillance-monitorig-" "software-productivity\"> forcing employees to run “monitoring " "software”</a> on their computers. These extremely intrusive " "proprietary programs can take screenshots at regular intervals, log " "keystrokes, record audio and video, etc. Such practices have been shown to " "<a href=\"https://www.eurofound.europa.eu/publications/report/2020/employee-" "monitoring-and-surveillance-the-challenges-of-digitalisation\"> deteriorate " "employees' well-being</a>, and trade unions in the European union have " "voiced their concerns about them. The requirement for employee's consent, " "which exists in some countries, is a sham because most often the employee is " "not free to refuse. In short, these practices should be abolished." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A bug in Tesla cars software <a href=\"https://www.tweaktown.com/news/86780/" "new-app-allows-hackers-to-steal-teslas-by-making-their-own-keys/index.html" "\"> lets crackers install new car keys</a>, unlock cars, start engines, and " "even prevent real owners from accessing their cars." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A cracker even reported that he was able to <a href=\"https://fortune." "com/2022/01/12/teen-hacker-david-colombo-took-control-25-tesla-ev/\"> " "disable security systems and take control of 25 cars</a>." msgstr "" #. type: Content of: <div><ul><li> msgid "" "<small>Please note that these articles wrongly use the word “<a href=" "\"/philosophy/words-to-avoid.html#Hacker\">hacker</a>” instead of " "cracker.</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Tesla cars record videos of activity inside the car, and <a href=\"https://" "arstechnica.com/tech-policy/2023/04/tesla-workers-shared-images-from-car-" "cameras-including-scenes-of-intimacy/\"> company staff can watch those " "recordings and copy them</a>. Or at least they were able to do so until last " "year." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Tesla may have changed some security functions so that this is harder to " "do. But if Tesla can get those recordings, that is because it is planning " "for some people to use them in some situation, and that is unjust already. " "It should be illegal to make a car that takes photos or videos of the people " "in the car—or of people outside the car." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Pinduoduo app <a href=\"https://edition.cnn.com/2023/04/02/tech/china-" "pinduoduo-malware-cybersecurity-analysis-intl-hnk/index.html\"> snoops on " "other apps, and takes control of them</a>. It also installs additional " "malware that is hard to remove." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Hackers discovered <a href=\"https://samcurry.net/web-hackers-vs-the-auto-" "industry/\"> dozens of flaws in the security (in the usual narrow sense) of " "many brands of automobiles</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Security in the usual narrow sense means security against unknown third " "parties. We are more concerned with security in the broader sense—" "against the manufacturer as well as against unknown third parties. It is " "clear that each of these vulnerabilities can be exploited by the " "manufacturer too, and by any government that can threaten the manufacturer " "enough to compel the manufacturer's cooperation." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20230101185726/https://gizmodo.com/" "apple-iphone-analytics-tracking-even-when-off-app-store-1849757558\"> The " "iMonster app store client programs collect many kinds of data</a> about the " "user's actions and private communications. “Do not track” " "options are available, but tracking doesn't stop if the user activates them: " "Apple keeps on collecting data for itself, although it claims not to send it " "to third parties." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.theregister.com/2022/11/14/" "apple_data_collection_lawsuit/\"> Apple is being sued</a> for that." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a hreflang=\"ja\" href=\"https://ja.wikipedia.org/wiki/B-CAS\">B-CAS</a> <a " "href=\"#m1\">[1]</a> is the digital restrictions management (DRM) system " "used by Japanese TV broadcasters, including NHK (public-service TV). It is " "sold by the B-CAS company, which has a de-facto monopoly on it. Initially " "intended for pay-TV, its use was extended to digital free-to-air " "broadcasting as a means to enforce restrictions on copyrighted works. The " "system encrypts works that permit free redistribution just like other works, " "thus denying users their nominal rights." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "On the client side, B-CAS is typically implemented by a card that plugs into " "a compatible receiver, or alternatively by a tuner card that plugs into a " "computer. Beside implementing drastic copying and viewing restrictions, this " "system gives broadcasters full power over users, through back doors among " "other means. For example:" msgstr "" #. type: Content of: <div><ul><li><ul><li> msgid "" "It can force messages to the user's TV screen, and the user can't turn them " "off." msgstr "" #. type: Content of: <div><ul><li><ul><li> msgid "" "It can collect viewing information and send it to other companies to take " "surveys. Until 2011, user registration was required, so the viewing habits " "of each customer were recorded. We don't know whether this personal " "information was deleted from the company's servers after 2011." msgstr "" #. type: Content of: <div><ul><li><ul><li> msgid "" "Each card has an ID, which enables broadcasters to force customer-specific " "updates via the back door normally used to update the decryption key. Thus " "pay-TV broadcasters can disable decryption of the broadcast wave if " "subscription fees are not paid on time. This feature could also be used by " "any broadcaster (possibly instructed by the government) to stop certain " "persons from watching TV." msgstr "" #. type: Content of: <div><ul><li><ul><li> msgid "" "As the export of B-CAS cards is illegal, people outside Japan can't " "(officially) decrypt the satellite broadcast signal that may spill over to " "their location. They are thus deprived of a valuable source of information " "about what happens in Japan." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "These unacceptable restrictions led to a sort of cat-and-mouse game, with " "some users doing their best to bypass the system, and broadcasters trying to " "stop them without much success: cryptographic keys were retrieved through " "the back door of the B-CAS card, illegal cards were made and sold on the " "black market, as well as a tuner for PC that disables the copy control " "signal." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "While B-CAS cards are still in use with older equipment, modern high " "definition TVs have an even nastier version of this DRM (called ACAS) in a " "special chip that is built into the receiver. The chip can update its own " "software from the company's servers, even when the receiver is turned off " "(but still plugged into an outlet). This feature could be abused to disable " "stored TV programs that the power in place doesn't agree with, thus " "interfering with free speech." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Being part of the receiver, the ACAS chip is supposed to be tamper-" "resistant. Time will tell…" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>[1] We thank the free software supporter who translated this article " "from Japanese, and shared his experience of B-CAS with us. (Unfortunately, " "the article presents DRM as a good thing.)</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A security researcher found that the iOS in-app browser of TikTok <a href=" "\"https://www.theguardian.com/technology/2022/aug/24/tiktok-can-track-users-" "every-tap-as-they-visit-other-sites-through-ios-app-new-research-shows\"> " "injects keylogger-like JavaScript code into outside web pages</a>. This code " "has the ability to track all users' activities, and to retrieve any personal " "data that is entered on the pages. We have no way of verifying TikTok's " "claim that the keylogger-like code only serves purely technical functions. " "Some of the accessed data could well be saved to the company's servers, and " "even sent to third parties. This would open the door to extensive " "surveillance, including by the Chinese government (to which TikTok has " "indirect ties). There is also a risk that the data would be stolen by " "crackers, and used to launch malware attacks." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The iOS in-app browsers of Instagram and Facebook behave essentially the " "same way as TikTok's. The main difference is that Instagram and Facebook " "allow users to access third-party sites with their default browser, whereas " "<a href=\"https://web.archive.org/web/20221201065621/https://www.reddit.com/" "r/Tiktokhelp/comments/jlep5d/" "how_do_i_make_urls_open_in_my_browser_instead_of/\"> TikTok makes it nearly " "impossible</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The researcher didn't study the Android versions of in-app browsers, but we " "have no reason to assume they are safer than the iOS versions." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>Please note that the article wrongly refers to crackers as “" "hackers.”</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Some Epson printers are programmed to <a href=\"https://hardware.slashdot." "org/story/22/08/07/0350244/epson-programs-some-printers-to-stop-operating-" "claiming-danger-of-ink-spills\"> stop working after they have printed a " "predetermined number of pages</a>, on the pretext that ink pads become " "saturated with ink. This constitutes an unacceptable infringement on users' " "freedom to use their printers as they wish, and on their <a href=\"https://" "fighttorepair.substack.com/p/citing-danger-of-ink-spills-epson\"> right to " "repair them</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Today's “smart” TVs <a href=\"https://www.techdirt." "com/2022/04/14/its-still-stupidly-ridiculously-difficult-to-buy-a-dumb-tv/" "\"> push people to surrender to tracking via internet</a>. Some won't work " "unless they have a chance to download nonfree software. And they are " "designed for programmed obsolescence." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "US states that ban abortion talk about making it a crime to go to another " "state to get an abortion. They could <a href=\"https://www.cnn." "com/2022/08/29/tech/wireless-carriers-locations-fcc/index.html\"> use " "various forms of location tracking, including the network, to prosecute " "abortion-seekers</a>. The state could subpoena the data, so that the " "network's “privacy” policy would be irrelevant." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "That article explains why wireless networks collect location data, one " "unavoidable reason and one avoidable (emergency calls). It also explains " "some of the many ways the location data are used." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Networks should never do localization for emergency calls except when you " "make an emergency call, or when there is a court order to do so. It should " "be illegal for a network to do precise localization (the kind needed for " "emergency calls) except to handle an emergency call, and if a network does " "so illegally, it should be required to inform the owner of the phone in " "writing on paper, with an apology." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many retail businesses publish cr…apps that ask to <a href=\"https://" "www.delish.com/kitchen-tools/a43252/how-food-apps-use-data/\"> spy on the " "user's own data</a>—often many kinds." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Those companies know that snoop-phone usage trains people to say yes to " "almost any snooping." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Network location tracking is used, among other techniques, for <a href=" "\"https://www.linkedin.com/pulse/location-based-advertising-has-starbucks-" "coupon-finally-john-craig\"> targeted advertising</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "ATMs and vending machines in Russia run nonfree software—The machines' " "owners <a href=\"https://www.themoscowtimes.com/2022/07/01/russian-atms-" "reject-new-100-ruble-bill-kommersant-a78175\"> cannot fix them</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Markup investigated 80,000 popular web sites and <a href=\"https://" "themarkup.org/blacklight/2020/09/22/blacklight-tracking-advertisers-digital-" "privacy-sensitive-websites\"> reports on how much they snoop on users</a>. " "Almost 70,000 had third-party trackers. 5,000 fingerprinted the browser to " "identify users. 12,000 recorded the user's mouse clicks and movements." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Canada has fined the company Tim Hortons for making <a href=\"https://" "arstechnica.com/tech-policy/2022/06/tim-hortons-coffee-app-broke-law-by-" "constantly-recording-users-movements/\"> an app that tracks people's " "movements</a> to learn things such as where they live, where they work, and " "when they visit competitors' stores." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A worldwide investigation found that most of the applications that school " "districts recommended for remote education during the COVID-19 pandemic <a " "href=\"https://web.archive.org/web/20220525011540/https://www.washingtonpost." "com/technology/2022/05/24/remote-school-app-tracking-privacy/\">track and " "collect personal data from children as young as below the age of five</a>. " "These applications, and their websites, send the collected information to ad " "giants such as Facebook and Google, and they are still being used in the " "classrooms even after some of the schools reopened." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The US government <a href=\"https://themarkup.org/pixel-hunt/2022/04/28/" "applied-for-student-aid-online-facebook-saw-you\">sent personal data to " "Facebook</a> for every college student that applied for US government " "student aid. It justified this as being for a “campaign.”" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The data included name, phone number and email address. This shows the " "agency didn't even make a handwaving attempt to anonymize the student. Not " "that anonymization usually does much good—but the failure to even try " "shows that the agency was completely blind to the issue of respecting " "students' privacy." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Apple prevents people from upgrading their Mac hardware <a href=\"https://" "www.theverge.com/2022/3/21/22989226/apple-mac-studios-removable-ssd-blocked-" "software-replacement\">by imposing DRM on its removable SSD storage</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "“Smart” TV manufacturers <a href=\"https://www.theguardian.com/" "technology/2022/jan/29/what-your-smart-tv-knows-about-you-and-how-to-stop-it-" "harvesting-data\"> spy on people using various methods</a>, and harvest " "their data. They are collecting audio, video, and TV usage data to profile " "people." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Hewlett-Packard is <a href=\"https://www.theguardian.com/money/2022/feb/19/" "how-cheap-ink-cartridges-can-cost-you-dear\"> implementing DRM in its " "printers</a> so they refuse to print with ink cartridges from another " "supplier." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.eff.org/deeplinks/2022/02/worst-timeline-printer-" "company-putting-drm-paper-now\"> Dymo is now embedding DRM in the paper " "rolls for its label printers</a> to make those printers reject equivalent " "paper rolls made by other companies. This is implemented by an RFID tag, " "which keeps track of how many labels remain on the roll, and blocks further " "printing when the roll is empty—an efficient way to prevent reusing " "the same RFID with a third-party roll." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The data broker X-Mode <a href=\"https://themarkup.org/privacy/2022/01/27/" "gay-bi-dating-app-muslim-prayer-apps-sold-data-on-peoples-location-to-a-" "controversial-data-broker\">bought location data about 20,000 people " "collected by around 100 different malicious apps</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A critical bug in Apple's iOS makes it possible for attackers to alter a " "shutdown event, <a href=\"https://blog.zecops.com/research/persistence-" "without-persistence-meet-the-ultimate-persistence-bug-noreboot/\">tricking " "the user into thinking that the phone has been powered off</a>. But in fact, " "it's still running, and the user can't feel any difference between a real " "shutdown and the fake shutdown." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20230607090524/https://old.reddit.com/" "r/Instagram/comments/6xkhi8/ig_suddenly_asking_for_phone_number_not_visible/" "\">Instagram is forcing users to give away their phone numbers</a> and won't " "let people continue using the app if they refuse." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Some researchers at Google <a href=\"https://www.vice.com/en/article/93bw8y/" "google-caught-hackers-using-a-mac-zero-day-against-hong-kong-users\">found a " "zero-day vulnerability on MacOS, which crackers used to target people " "visiting the websites</a> of a media outlet and a pro-democracy labor and " "political group in Hong Kong." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "EdTech companies use their surveillance power to manipulate students, and " "direct them into tracks towards various levels of knowledge, power and " "prestige. The article argues that <a href=\"https://blogs.lse.ac.uk/" "medialse/2021/10/25/algorithmic-injustice-in-education-why-tech-companies-" "should-require-a-license-to-operate-in-childrens-education/\">these " "companies should obtain licenses to operate</a>. That wouldn't hurt, but it " "doesn't address the root of the problem. All data acquired in a school about " "any student, teacher, or employee must not leave the school, and must be " "kept in computers that belong to the school and run free (as in freedom) " "software. That way, the school district and/or parents can control what is " "done with those data." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A building in LA, with a supermarket in it, <a href=\"https://www.latimes." "com/business/story/2021-11-09/column-trader-joes-parking-app\">demands " "customers load a particular app to pay for parking in the parking lot</a>, " "and accept pervasive surveillance. They also have the option of entering " "their license plate numbers in a kiosk. That is an injustice, too." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Apple's new tactic to restrict users from repairing their own device and " "impose DRM on people is to <a href=\"https://www.ifixit.com/News/54829/" "apples-new-screen-repair-trap-could-change-the-repair-industry-forever" "\">completely disable its Face ID functionality</a> when you replace its " "screen." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Spotify app <a href=\"https://www.sec.gov/Archives/edgar/" "data/1639920/000119312518063434/d494294df1.htm\">harvests users' data to " "personally identify and know people</a> through music, their mood, mindset, " "activities, and tastes. There are over 150 billion events logged daily on " "the program which contains users' data and personal information." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.elsalvador.com/eldiariodehoy/app-chivo-bitcoin-pone-en-" "riesgo-datos-personales-de-usuarios/852310/2021/\">El Salvador " "Dictatorship's Chivo wallet is spyware</a>, it's a proprietary program that " "breaks users' freedom and spies on people; demands personal data such as the " "national ID number and does face recognition, and it is bad security for its " "data. It also asks for almost every malware permission in people's " "smartphones." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The article criticizes it for faults in “data protection”, " "though <a href=\"/philosophy/surveillance-vs-democracy.html\">“data " "protection” is the wrong approach to privacy anyway</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Google's proprietary Chrome web browser <a href=\"https://www.techrepublic." "com/article/new-chrome-feature-can-tell-sites-and-webapps-when-youre-idle/" "\"> added a surveillance API (idle detection API)</a> which lets websites " "ask Chrome to report when a user with a web page open is idle." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Various models of security cameras, DVRs, and baby monitors that run " "proprietary software <a href=\"https://www.wired.com/story/kalay-iot-bug-" "video-feeds/\">are affected by a security vulnerability that could give " "attackers access to live feeds</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/news/2021/jul/18/what-is-pegasus-" "spyware-and-how-does-it-hack-phones\"> The pegasus spyware used " "vulnerabilities on proprietary smartphone operating systems</a> to impose " "surveillance on people. It can record people's calls, copy their messages, " "and secretly film them, using a security vulnerability. There's also <a href=" "\"https://info.lookout.com/rs/051-ESQ-475/images/lookout-pegasus-technical-" "analysis.pdf\"> a technical analysis of this spyware</a> available in PDF " "format." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A free operating system would've let people to fix the bugs for themselves " "but now infected people will be compelled to wait for corporations to fix " "the problems." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/technology/2021/jun/17/nine-out-of-10-" "health-apps-harvest-user-data-global-study-shows\">Almost all proprietary " "health apps harvest users' data</a>, including sensitive health information, " "tracking identifiers, and cookies to track user activities. Some of these " "applications are tracking users across different platforms." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://techcrunch.com/2021/06/03/tiktok-just-gave-itself-" "permission-to-collect-biometric-data-on-u-s-users-including-faceprints-and-" "voiceprints/\">TikTok apps collect biometric identifiers and biometric " "information from users' smartphones</a>. The company behind it does whatever " "it wants and collects whatever data it can." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Since the beginning of 2017, <a href=\"https://qz.com/1131515/google-" "collects-android-users-locations-even-when-location-services-are-disabled" "\">Android phones have been collecting the addresses of nearby cellular " "towers</a>, even when location services are disabled, and sending that data " "back to Google." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.cpomagazine.com/data-privacy/icloud-data-turned-over-" "to-chinese-government-conflicts-with-apples-privacy-first-focus/\">Apple is " "moving its Chinese customers' iCloud data to a datacenter controlled by the " "Chinese government</a>. Apple is already storing the encryption keys on " "these servers, obeying Chinese authority, making all Chinese user data " "available to the government." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A motorcycle company named Klim is selling airbag vests with different " "payment methods, one of them is through a <a href=\"https://www.vice.com/en/" "article/93yyyd/this-motorcycle-airbag-vest-will-stop-working-if-you-miss-a-" "payment\">proprietary subscription-based option that will block the vest " "from inflating if the payments don't go through</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "They say there is a 30-days grace period if you miss a payment but the grace " "period is no excuse to the insecurity." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://internetsafetylabs.org/blog/news-press/me2ba-product-" "testing-spotlight-report-published-data-sharing-in-primary-secondary-school-" "mobile-apps-2/\">60% of school apps are sending student data to potentially " "high-risk third parties</a>, putting students and possibly all other school " "workers under surveillance. This is made possible by using unsafe and " "proprietary programs made by data-hungry corporations." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>Please note that whether students consent to this or not, doesn't " "justify the surveillance they're imposed to.</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The United States' government is reportedly considering <a href=\"https://" "www.infosecurity-magazine.com/news/private-companies-may-spy-on/\">teaming " "up with private companies to monitor American citizens' private online " "activity and digital communications</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "What creates the opportunity to try this is the fact that these companies " "are already snooping on users' private activities. That in turn is due to " "people's use of nonfree software which snoops, and online dis-services which " "snoop." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A zero-day vulnerability in Zoom which <a href=\"https://www.zdnet.com/" "article/critical-zoom-vulnerability-triggers-remote-code-execution-without-" "user-input/\">can be used to launch remote code execution (RCE) attacks</a> " "has been disclosed by researchers. The researchers demonstrated a three-bug " "attack chain that caused an RCE on a target machine, all this without any " "form of user interaction." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Google <a href=\"https://www.indiatoday.in/technology/news/story/disha-ravi-" "arrest-puts-privacy-of-all-google-india-users-in-" "doubt-1769772-2021-02-16\">handed over personal data of Indian protesters " "and activists to Indian police</a> which led to their arrest. The cops " "requested the IP address and the location where a document was created and " "with that information, they identified protesters and activists." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Amazon's monopoly and DRM is <a href=\"https://www.washingtonpost.com/" "technology/2021/03/10/amazon-library-ebook-monopoly/\">stopping public " "libraries from lending e-books and audiobooks</a>. Amazon became powerful in " "e-book world by <a href=\"/philosophy/why-call-it-the-swindle.html" "\">Swindle</a>, and is now misusing its power and violates people's rights " "using <a href=\"https://www.defectivebydesign.org\">Digital Restrictions " "Management</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The article is written in a way that endorses DRM in general, which is " "unacceptable. <a href=\"/proprietary/proprietary-drm.html\">DRM is an " "injustice to people</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.bloomberg.com/news/articles/2021-03-09/hackers-expose-" "tesla-jails-in-breach-of-150-000-security-cams\">Over 150 thousand security " "cameras that used Verkada company's proprietary software are cracked</a> by " "a major security breach. Crackers have had access to security archives of " "various gyms, hospitals, jails, schools, and police stations that have used " "Verkada's cameras." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"/philosophy/surveillance-vs-democracy.html\">It is injustice to " "the public</a> for gyms, stores, hospitals, jails, and schools to hand " "“security” footage to a company from which the government can " "collect it at any time, without even telling them." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "TV manufacturers are turning to produce only “Smart” TV sets " "(which include spyware) that <a href=\"https://frame.work/blog/in-defense-of-" "dumb-tvs\">it's now very hard to find a TV that doesn't spy on you</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "It appears that those manufacturers business model is not to produce TV and " "sell them for money, but to collect your personal data and (possibly) hand " "over them to others for benefit." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The proprietary program Clubhouse is malware and a privacy disaster. " "Clubhouse <a href=\"https://www.theguardian.com/commentisfree/2021/feb/20/" "why-hot-new-social-app-clubhouse-spells-nothing-but-trouble\">collects " "people's personal data such as recordings of people's conversations</a>, " "and, as a secondary problem, does not encrypt them, which shows a bad " "security part of the issue." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A user's unique Clubhouse ID number and chatroom ID are transmitted in " "plaintext, and Agora (the company behind the app) would likely have access " "to users' raw audio, potentially providing access to the Chinese government." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Even with good security of data transmission, collecting personal data of " "people is wrong and a violation of people's privacy rights." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The HonorLock online exam proctoring program is a surveillance tool that <a " "href=\"https://www.eff.org/deeplinks/2020/09/students-are-pushing-back-" "against-proctoring-surveillance-apps\">tracks students and collects data</a> " "such as face, driving license, and network information, among others, in " "blatant violation of students' privacy." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Preventing students from cheating should not be an excuse for running " "malware/spyware on their computers, and it's good that students are " "protesting. But their petitions overlook a crucial issue, namely, the " "injustice of being forced to run nonfree software in order to get an " "education." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many cr…apps, developed by various companies for various " "organizations, do <a href=\"https://www.expressvpn.com/digital-security-lab/" "investigation-xoth\"> location tracking unknown to those companies and those " "organizations</a>. It's actually some widely used libraries that do the " "tracking." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "What's unusual here is that proprietary software developer A tricks " "proprietary software developers B1 … B50 into making platforms for A " "to mistreat the end user." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Samsung is forcing its smartphone users in Hong Kong (and Macau) <a href=" "\"https://web.archive.org/web/20240606175013/https://blog.headuck." "com/2020/10/12/samsung-phones-force-mainland-china-dns-service-upon-hong-" "kong-wifi-users/\">to use a public DNS in Mainland China</a>, using software " "update released in September 2020, which causes many unease and privacy " "concerns." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The authorities in Venice track the <a href=\"https://edition.cnn.com/travel/" "article/venice-control-room-tourism/index.html\"> movements of all tourists</" "a> using their portable phones. The article says that <em>at present</em> " "the system is configured to report only aggregated information. But that " "could be changed. What will that system do 10 years from now? What will a " "similar system in another country do? Those are the questions this raises." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A cracker <a href=\"https://www.vice.com/en/article/m7apnn/your-cock-is-mine-" "now-hacker-locks-internet-connected-chastity-cage-demands-ransom\">took " "control of people's internet-connected chastity cages and demanded ransom</" "a>. The chastity cages are being controlled by a proprietary app (mobile " "program)." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>(Please note that the article wrongly refers to crackers as \"<a href=" "\"/philosophy/words-to-avoid.html#Hacker\">hackers</a>\".)</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "As of 2021, WhatsApp (one of Facebook's subsidiaries) is <a href=\"https://" "www.forbes.com/sites/carlypage/2021/01/08/whatsapp-tells-users-share-your-" "data-with-facebook-or-well-deactivate-your-account/\">forcing its users to " "hand over sensitive personal data</a> to its parent company. This increases " "Facebook's power over users, and further jeopardizes people's privacy and " "security." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Instead of WhatsApp you can use <a href=\"https://directory.fsf.org/wiki/Jami" "\">GNU Jami</a>, which is free software and will not collect your data." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Most Internet connected devices in Mozilla's <a href=\"https://www." "mozillafoundation.org/privacynotincluded/\">“Privacy Not " "Included”</a> list <a href=\"https://www.mozillafoundation.org/" "privacynotincluded/arlo-video-doorbell/\">are designed to snoop on users</a> " "even if they meet Mozilla's “Minimum Security Standards.” " "Insecure design of the program running on some of these devices <a href=" "\"https://www.mozillafoundation.org/privacynotincluded/vibratissimo-panty-" "buster/\">makes the user susceptible to be snooped on and exploited by " "crackers as well</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The personal finance management software “Quicken” <a href=" "\"https://www.quicken.com/support/quicken-discontinuation-policy/\"> has a " "discontinuation policy, a.k.a. planned obsolescence</a>, which is an " "injustice to users. A free (as in freedom) program would let users control " "the software. But when you use a proprietary software, you won't be in " "control." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "While the world is still struggling with COVID-19 coronavirus, many <a href=" "\"https://mashable.com/article/privacy-in-the-age-of-coronavirus\">people " "are in danger of surveillance</a> and their computers are infected with " "malware as a result of installing proprietary software." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "HP tricked users into installing a mischievous update in their printers that " "<a href=\"https://www.eff.org/deeplinks/2020/11/ink-stained-wretches-battle-" "soul-digital-freedom-taking-place-inside-your-printer\">made the devices " "reject all third-party ink cartridges</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "United States officials are facing one of biggest crackings against them in " "years, when <a href=\"https://www.theguardian.com/technology/2020/dec/15/" "orion-hack-solar-winds-explained-us-treasury-commerce-department\">malicious " "code was sneaked into SolarWinds' proprietary software named Orion</a>. " "Crackers got access to networks when users downloaded a tainted software " "update. Crackers were able to monitor internal emails at some of the top " "agencies in the US." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Commercial crackware can <a href=\"https://www.theguardian.com/" "technology/2020/dec/20/iphones-vulnerable-to-hacking-tool-for-months-" "researchers-say\"> get passwords out of an iMonster</a>, use the microphone " "and camera, and other things." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.washingtonpost.com/technology/2020/12/18/zoom-helped-" "china-surveillance/\"> A Zoom executive carried out snooping and censorship " "for the Chinese government</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This abuse of Zoom's power shows how dangerous that power is. The root " "problem is not the surveillance and censorship, but rather the power that " "Zoom has. It gets that power partly from the use of its server, but also " "partly from the nonfree client program." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Baidu apps were <a href=\"https://www.zdnet.com/article/baidus-android-apps-" "caught-collecting-sensitive-user-details/\"> caught collecting sensitive " "personal data</a> that can be used for lifetime tracking of users, and " "putting them in danger. More than 1.4 billion people worldwide are affected " "by these proprietary apps, and users' privacy is jeopardized by this " "surveillance tool. Data collected by Baidu may be handed over to the Chinese " "government, possibly putting Chinese people in danger." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Apple has <a href=\"https://sneak.berlin/20201112/your-computer-isnt-yours/" "\">implemented a malware in its computers that imposes surveillance</a> on " "users and reports users' computing to Apple." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The reports are even unencrypted and they've been leaking this data for two " "years already. This malware is reporting to Apple what user opens what " "program at what time. It also gives Apple power to sabotage users' computing." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "According to FTC, the company behind the Zoom conferencing software <a href=" "\"https://arstechnica.com/tech-policy/2020/11/zoom-lied-to-users-about-end-" "to-end-encryption-for-years-ftc-says/\">has lied to users about its end-to-" "end encryption</a> for years, at least since 2016." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "People can use free (as in freedom) programs such as <a href=\"https://" "directory.fsf.org/wiki/Jitsi\">Jitsi</a> or <a href=\"https://directory.fsf." "org/wiki/BigBlueButton\">BigBlueButton</a>, better still if installed in a " "server controlled by the users." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Apple iOS version of Zoom <a href=\"https://www.vice.com/en/article/" "k7e599/zoom-ios-app-sends-data-to-facebook-even-if-you-dont-have-a-facebook-" "account\">is sending users' data to Facebook</a> even if the user doesn't " "have a Facebook account. According to the article, Zoom and Facebook don't " "even mention this surveillance on their privacy policy page, making this an " "obvious violation of people's privacy even in their own terms." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Internet-enabled watches with proprietary software are malware, violating " "people (specially children's) privacy. In addition, they have a lot of " "security flaws. They <a href=\"https://www.wired.com/story/kid-smartwatch-" "security-vulnerabilities/\"> permit security breakers (and unauthorized " "people) to access</a> the watch." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Thus, ill-intentioned unauthorized people can intercept communications " "between parent and child and spoof messages to and from the watch, possibly " "endangering the child." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>(Note that this article misuses the word “<a href=\"/philosophy/" "words-to-avoid.html#Hacker\">hackers</a>” to mean “crackers." "”)</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many employers are using nonfree software, including videoconference " "software, to <a href=\"https://www.theguardian.com/world/2020/sep/27/" "shirking-from-home-staff-feel-the-heat-as-bosses-ramp-up-remote-surveillance" "\"> surveil and monitor staff working at home</a>. If the program reports " "whether you are “active,” that is in effect a malicious " "surveillance feature." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Facebook <a href=\"https://www.dailymail.co.uk/news/article-8747541/Facebook-" "accused-watching-Instagram-users-mobile-cameras.html\">snoops on Instagram</" "a> users by surreptitously turning on the device's camera." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Oculus headsets <a href=\"https://www.theverge.com/2020/8/18/21372435/oculus-" "facebook-login-change-separate-account-support-end-quest-october\">require " "users to identify themselves to Facebook</a>. This will give Facebook free " "rein to pervasively snoop on Oculus users." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "New Toyotas will <a href=\"https://www.theregister.com/2020/08/18/" "aws_toyota_alliance/\"> upload data to AWS to help create custom insurance " "premiums</a> based on driver behaviour." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Before you buy a “connected” car, make sure you can disconnect " "its cellular antenna and its GPS antenna. If you want GPS navigation, get a " "separate navigator which runs free software and works with Open Street Map." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "TikTok <a href=\"https://boingboing.net/2020/08/11/tiktok-exploited-android-" "secur.html\"> exploited an Android vulnerability</a> to obtain user MAC " "addresses." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Apple whistleblower Thomas Le Bonniec reports that Apple made a practice of " "surreptitiously activating the Siri software to <a href=\"https://www." "politico.eu/wp-content/uploads/2020/05/Public-Statement-Siri-recordings-TLB." "pdf\"> record users' conversations when they had not activated Siri</a>. " "This was not just occasional, it was systematic practice." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "His job was to listen to these recordings, in a group that made transcripts " "of them. He does not believes that Apple has ceased this practice." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The only reliable way to prevent this is, for the program that controls " "access to the microphone to decide when the user has “activated” " "any service, to be free software, and the operating system under it free as " "well. This way, users could make sure Apple can't listen to them." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "“Bossware” is malware that bosses <a href=\"https://www.eff.org/" "deeplinks/2020/06/inside-invasive-secretive-bossware-tracking-workers\"> " "coerce workers into installing in their own computers</a>, so the bosses can " "spy on them." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This shows why requiring the user's “consent” is not an adequate " "basis for protecting digital privacy. The boss can coerce most workers into " "consenting to almost anything, even probable exposure to contagious disease " "that can be fatal. Software like this should be illegal and bosses that " "demand it should be prosecuted for it." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Most apps are malware, but Trump's campaign app, like Modi's campaign app, " "is <a href=\"https://www.technologyreview.com/2020/06/21/1004228/trumps-data-" "hungry-invasive-app-is-a-voter-surveillance-tool-of-extraordinary-scope/\"> " "especially nasty malware, helping companies snoop on users as well as " "snooping on them itself</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The article says that Biden's app has a less manipulative overall approach, " "but that does not tell us whether it has functionalities we consider " "malicious, such as sending data the user has not explicitly asked to send." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "TV manufacturers are able to <a href=\"https://www.zdnet.com/article/fbi-" "warns-about-snoopy-smart-tvs-spying-on-you/\">snoop every second of what the " "user is watching</a>. This is illegal due to the Video Privacy Protection " "Act of 1988, but they're circumventing it through EULAs." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.wired.com/story/ripple20-iot-vulnerabilities/\"> A " "disasterous security bug</a> touches millions of products in the Internet of " "Stings." msgstr "" #. type: Content of: <div><ul><li><p> msgid "As a result, anyone can sting the user, not only the manufacturer." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Xiaomi phones <a href=\"https://www.forbes.com/sites/" "thomasbrewster/2020/04/30/exclusive-warning-over-chinese-mobile-giant-xiaomi-" "recording-millions-of-peoples-private-web-and-phone-use/\">report many " "actions the user takes</a>: starting an app, looking at a folder, visiting a " "website, listening to a song. They send device identifying information too." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Other nonfree programs snoop too. For instance, Spotify and other streaming " "dis-services make a dossier about each user, and <a href=\"/malware/" "proprietary-surveillance.html#M201508210\"> they make users identify " "themselves to pay</a>. Out, out, damned Spotify!" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Forbes exonerates the same wrongs when the culprits are not Chinese, but we " "condemn this no matter who does it." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The CIA exploited existing vulnerabilities in “smart” TVs and " "phones to design a malware that <a href=\"https://www.independent.co.uk/tech/" "wikileaks-vault-7-android-iphone-cia-phones-handsets-tv-smart-julian-assange-" "a7616651.html\"> spies through their microphones and cameras while making " "them appear to be turned off</a>. Since the spyware sniffs signals, it " "bypasses encryption." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Alipay Health Code app estimates whether the user has Covid-19 and <a " "href=\"https://www.nytimes.com/2020/03/01/business/china-coronavirus-" "surveillance.html\"> tells the cops directly</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Internet-tethered Amazon Ring had a security vulnerability that enabled " "attackers to <a href=\"https://www.commondreams.org/newswire/2019/11/07/" "amazons-ring-doorbells-leaks-customers-wi-fi-username-and-password\"> access " "the user's wifi password</a>, and snoop on the household through connected " "surveillance devices." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Knowledge of the wifi password would not be sufficient to carry out any " "significant surveillance if the devices implemented proper security, " "including encryption. But many devices with proprietary software lack this. " "Of course, they are also used by their manufacturers for snooping." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The ToToc messaging app seems to be a <a href=\"https://www.nytimes." "com/2019/12/22/us/politics/totok-app-uae.html\"> spying tool for the " "government of the United Arab Emirates</a>. Any nonfree program could be " "doing this, and that is a good reason to use free software instead." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>Note: this article uses the word “free” in the sense of " "“gratis.”</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Some Avast and AVG extensions for Firefox and Chrome were found to <a href=" "\"https://www.itpro.co.uk/security/internet-security/354417/avast-and-avg-" "extensions-pulled-from-chrome\"> snoop on users' detailed browsing habits</" "a>. Mozilla and Google removed the problematic extensions from their stores, " "but this shows once more how unsafe nonfree software can be. Tools that are " "supposed to protect a proprietary system are, instead, infecting it with " "additional malware (the system itself being the original malware)." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many Android apps fool their users by asking them to decide what permissions " "to give the program, and then <a href=\"https://nakedsecurity.sophos." "com/2019/07/10/android-apps-sidestepping-permissions-to-access-sensitive-" "data/\"> bypassing these permissions</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Android system is supposed to prevent data leaks by running apps in " "isolated sandboxes, but developers have found ways to access the data by " "other means, and there is nothing the user can do to stop them from doing " "so, since both the system and the apps are nonfree." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Most modern cars now <a href=\"https://boingboing.net/2019/12/17/cars-now-" "run-on-the-new-oil.html\"> record and send various kinds of data to the " "manufacturer</a>. For the user, access to the data is nearly impossible, as " "it involves cracking the car's computer, which is always hidden and running " "with proprietary software." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "iMonsters and Android phones, when used for work, give employers powerful <a " "href=\"https://www.fastcompany.com/90440073/if-you-use-your-personal-phone-" "for-work-say-goodbye-to-your-privacy\"> snooping and sabotage capabilities</" "a> if they install their own software on the device. Many employers demand " "to do this. For the employee, this is simply nonfree software, as " "fundamentally unjust and as dangerous as any other nonfree software." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Amazon Ring app does <a href=\"https://www.theguardian.com/" "technology/2020/jan/29/ring-smart-doorbell-company-surveillance-eff-report" "\"> surveillance for other companies as well as for Amazon</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Safari occasionally <a href=\"https://blog.cryptographyengineering." "com/2019/10/13/dear-apple-safe-browsing-might-not-be-that-safe/\"> sends " "browsing data from Apple devices in China to the Tencent Safe Browsing " "service</a>, to check URLs that possibly correspond to “" "fraudulent” websites. Since Tencent collaborates with the Chinese " "government, its Safe Browsing black list most certainly contains the " "websites of political opponents. By linking the requests originating from " "single IP addresses, the government can identify dissenters in China and " "Hong Kong, thus endangering their lives." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Chinese Communist Party's “Study the Great Nation” app " "requires users to grant it <a href=\"https://www.ndtv.com/world-news/chinese-" "app-allows-officials-access-to-100-million-users-phone-report-2115962\"> " "access to the phone's microphone, photos, text messages, contacts, and " "internet history</a>, and the Android version was found to contain a back-" "door allowing developers to run any code they wish in the users' phone, as " "“superusers.” Downloading and using this app is mandatory at " "some workplaces." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Facebook app <a href=\"https://eu.usatoday.com/story/tech/" "talkingtech/2019/09/09/facebook-app-social-network-tracking-your-every-" "move/2270305001/\"> tracks users even when it is turned off</a>, after " "tricking them into giving the app broad permissions in order to use one of " "its functionalities." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Some nonfree period-tracking apps including MIA Fem and Maya <a href=" "\"https://www.buzzfeednews.com/article/meghara/period-tracker-apps-facebook-" "maya-mia-fem\"> send intimate details of users' lives to Facebook</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Tesla users claim Tesla <a href=\"https://www.reuters.com/article/us-tesla-" "battery/tesla-owner-lawsuit-claims-software-update-fraudulently-cut-battery-" "capacity-idUSKCN1UY2TW/\">force-installed software to cut down on battery " "range</a>, rather than replace the defective batteries. Tesla did this to " "avoid having to run their warranty." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This means that proprietary software can potentially be a way to commit " "perjury with impunity." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Keeping track of who downloads a proprietary program is a form of " "surveillance. There is a proprietary program for adjusting a certain " "telescopic rifle sight. <a href=\"https://www.forbes.com/sites/" "thomasbrewster/2019/09/06/exclusive-feds-demand-apple-and-google-hand-over-" "names-of-10000-users-of-a-gun-scope-app/\"> A US prosecutor has demanded the " "list of all the 10,000 or more people who have installed it</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "With a free program there would not be a list of who has installed it." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A series of vulnerabilities <a href=\"https://www.forbes.com/sites/" "gordonkelly/2019/08/31/apple-iphone-ipad-security-ios-upgrade-iphone-xs-max-" "xr-update/\">found in iOS allowed attackers to gain access to sensitive " "information including private messages, passwords, photos and contacts " "stored on the user's iMonster</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The deep insecurity of iMonsters is even more pertinent given that Apple's " "proprietary software makes users totally dependent on Apple for even a " "modicum of security. It also means that the devices do not even try to " "offer security against Apple itself." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A game published on Facebook <a href=\"https://revealnews.org/article/so-" "your-child-racked-up-unwanted-credit-card-charges-playing-video-games-now-" "what/\">aimed at leading children to spend</a> large amounts of their " "parents' money without explaining it to them." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "When Apple suspects a user of fraud, it judges the case secretly and " "presents the verdict as a fait accompli. The punishment to a user found " "guilty <a href=\"https://qz.com/1683460/what-happens-to-your-itunes-account-" "when-apple-says-youve-committed-fraud\">is being cut off for life, which " "more-or-less cripples the user's Apple devices forever</a>. There is no " "appeal." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Out of 21 gratis Android antivirus apps that were tested by security " "researchers, eight <a href=\"https://www.comparitech.com/antivirus/android-" "antivirus-vulnerabilities/\"> failed to detect a test virus</a>. All of them " "asked for dangerous permissions or contained advertising trackers, with " "seven being more risky than the average of the 100 most popular Android apps." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>(Note that the article refers to these proprietary apps as “" "free”. It should have said “gratis” instead.)</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many unscrupulous mobile-app developers keep finding ways to <a href=" "\"https://www.cnet.com/tech/mobile/more-than-1000-android-apps-harvest-your-" "data-even-after-you-deny-permissions/\"> bypass user's settings</a>, " "regulations, and privacy-enhancing features of the operating system, in " "order to gather as much private data as they possibly can." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Thus, we can't trust rules against spying. What we can trust is having " "control over the software we run." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Google “Assistant” records users' conversations <a href=" "\"https://arstechnica.com/information-technology/2019/07/google-defends-" "listening-to-ok-google-queries-after-voice-recordings-leak/\">even when it " "is not supposed to listen</a>. Thus, when one of Google's subcontractors " "discloses a thousand confidential voice recordings, users were easily " "identified from these recordings." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Since Google “Assistant” uses proprietary software, there is no " "way to see or control what it records or sends." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Rather than trying to better control the use of recordings, Google should " "not record or listen to the person's voice. It should only get commands " "that the user wants to send to some Google service." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many Android apps can track users' movements even when the user says <a href=" "\"https://www.theverge.com/2019/7/8/20686514/android-covert-channel-" "permissions-data-collection-imei-ssid-location\"> not to allow them access " "to locations</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This involves an apparently unintentional weakness in Android, exploited " "intentionally by malicious apps." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Google Chrome is an <a href=\"https://www.mercurynews.com/2019/06/21/google-" "chrome-has-become-surveillance-software-its-time-to-switch/\"> instrument of " "surveillance</a>. It lets thousands of trackers invade users' computers and " "report the sites they visit to advertising and data companies, first of all " "to Google. Moreover, if users have a Gmail account, Chrome automatically " "logs them in to the browser for more convenient profiling. On Android, " "Chrome also reports their location to Google." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The best way to escape surveillance is to switch to <a href=\"/software/" "icecat/\">IceCat</a>, a modified version of Firefox with several changes to " "protect users' privacy." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "In spite of Apple's supposed commitment to privacy, iPhone apps contain " "trackers that are busy at night <a href=\"https://www.oregonlive.com/" "opinion/2019/05/its-3-am-do-you-know-who-your-iphone-is-talking-to.html\"> " "sending users' personal information to third parties</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The article mentions specific examples: Microsoft OneDrive, Intuit's Mint, " "Nike, Spotify, The Washington Post, The Weather Channel (owned by IBM), the " "crime-alert service Citizen, Yelp and DoorDash. But it is likely that most " "nonfree apps contain trackers. Some of these send personally identifying " "data such as phone fingerprint, exact location, email address, phone number " "or even delivery address (in the case of DoorDash). Once this information is " "collected by the company, there is no telling what it will be used for." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Amazon Alexa collects a lot more information from users than is necessary " "for correct functioning (time, location, recordings made without a " "legitimate prompt), and sends it to Amazon's servers, which store it " "indefinitely. Even worse, Amazon forwards it to third-party companies. Thus, " "even if users request deletion of their data from Amazon's servers, <a href=" "\"https://web.archive.org/web/20190507014804/https://www.ctpost.com/business/" "article/Alexa-has-been-eavesdropping-on-you-this-whole-13822095.php\"> the " "data remain on other servers</a>, where they can be accessed by advertising " "companies and government agencies. In other words, deleting the collected " "information doesn't cancel the wrong of collecting it." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Data collected by devices such as the Nest thermostat, the Philips Hue-" "connected lights, the Chamberlain MyQ garage opener and the Sonos speakers " "are likewise stored longer than necessary on the servers the devices are " "tethered to. Moreover, they are made available to Alexa. As a result, Amazon " "has a very precise picture of users' life at home, not only in the present, " "but in the past (and, who knows, in the future too?)" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Some of users' commands to the Alexa service are <a href=\"https://www.smh." "com.au/technology/alexa-is-someone-else-listening-to-us-sometimes-someone-" "is-20190411-p51d4g.html\"> recorded for Amazon employees to listen to</a>. " "The Google and Apple voice assistants do similar things." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A fraction of the Alexa service staff even has access to <a href=\"https://" "news.bloomberglaw.com/tech-and-telecom-law/amazons-alexa-reviewers-can-" "access-customers-home-addresses\"> location and other personal data</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Since the client program is nonfree, and data processing is done “<a " "href=\"/philosophy/words-to-avoid.html#CloudComputing\">in the cloud</" "a>” (a soothing way of saying “We won't tell you how and where " "it's done”), users have no way to know what happens to the recordings " "unless human eavesdroppers <a href=\"https://web.archive.org/" "web/20240416214211/https://www.bnnbloomberg.ca/three-cheers-for-amazon-s-" "human-eavesdroppers-1.1243033\"> break their non-disclosure agreements</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "As of April 2019, it is <a href=\"https://www.bleepingcomputer.com/news/" "software/major-browsers-to-prevent-disabling-of-click-tracking-privacy-risk/" "\">no longer possible to disable an unscrupulous tracking anti-feature</a> " "that <a href=\"https://html.spec.whatwg.org/multipage/links.html#hyperlink-" "auditing\">reports users when they follow ping links</a> in Apple Safari, " "Google Chrome, Opera, Microsoft Edge and also in the upcoming Microsoft Edge " "that is going to be based on Chromium." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Data collected by menstrual and pregnancy monitoring apps is often <a href=" "\"https://www.theguardian.com/world/2019/apr/13/theres-a-dark-side-to-womens-" "health-apps-menstrual-surveillance\"> available to employers and insurance " "companies</a>. Even though the data is “anonymized and aggregated," "” it can easily be traced back to the woman who uses the app." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This has harmful implications for women's rights to equal employment and " "freedom to make their own pregnancy choices. Don't use these apps, even if " "someone offers you a reward to do so. A free-software app that does more or " "less the same thing without spying on you is available from <a href=" "\"https://search.f-droid.org/?q=menstr\">F-Droid</a>, and <a href=\"https://" "web.archive.org/web/20231230011724/https://dcs.megaphone.fm/BLM6228935164." "mp3?key=23a58d3f686794e6d8b8678a5204887b&" "request_event_id=36469053-3d0b-4724-bf2d-6dbeeeac282e\"> a new one is being " "developed</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Volkswagen programmed its car engine computers to <a href=\"https://petri." "com/volkswagen-used-software-to-cheat-on-emissions/\"> detect the " "Environmental Protection Agency's emission tests</a>, and run dirty the rest " "of the time. In real driving, the cars exceeded emissions standards by a " "factor of up to 35." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Using free software would not have stopped Volkswagen from programming it " "this way, but would have made it harder to conceal, and given the users the " "possibility of correcting the deception." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Former executives of Volkswagen are being <a href=\"https://www.theguardian." "com/business/2019/apr/15/former-head-of-volkswagen-could-face-10-years-in-" "prison\"> sued over this fraud</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Google tracks the movements of Android phones and iPhones running Google " "apps, and sometimes <a href=\"https://www.nytimes.com/interactive/2019/04/13/" "us/google-location-tracking-police.html\"> saves the data for years</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Nonfree software in the phone has to be responsible for sending the location " "data to Google." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "An Android phone was observed to track location even while in airplane mode. " "It didn't send the location data while in airplane mode. Instead, <a href=" "\"https://www.thesun.co.uk/tech/7811918/google-is-tracking-you-even-with-" "airplane-mode-turned-on/\"> it saved up the data, and sent them all later</" "a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "OfficeMax cheated customers by <a href=\"https://arstechnica.com/tech-" "policy/2019/03/office-depot-tricked-people-into-buying-pc-support-with-fake-" "virus-scans/\"> using proprietary “PC Health Check” software</a> " "rigged to give false results, deceiving the customer into thinking per " "computer was infected and buy unneeded support services from the company." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Medtronics Conexus Telemetry Protocol has <a href=\"https://www." "startribune.com/750-000-medtronic-defibrillators-vulnerable-to-" "hacking/507470932/\"> two vulnerabilities that affect several models of " "implantable defibrillators</a> and the devices they connect to." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This protocol has been around since 2006, and similar vulnerabilities were " "discovered in an earlier Medtronics communication protocol in 2008. " "Apparently, nothing was done by the company to correct them. This means you " "can't rely on proprietary software developers to fix bugs in their products." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many Android phones come with a huge number of <a href=\"https://web.archive." "org/web/20190326145122/https://elpais.com/elpais/2019/03/22/" "inenglish/1553244778_819882.html\"> preinstalled nonfree apps that have " "access to sensitive data without users' knowledge</a>. These hidden apps may " "either call home with the data, or pass it on to user-installed apps that " "have access to the network but no direct access to the data. This results in " "massive surveillance on which the user has absolutely no control." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Tesla cars collect lots of personal data, and <a href=\"https://www.cnbc." "com/2019/03/29/tesla-model-3-keeps-data-like-crash-videos-location-phone-" "contacts.html\"> when they go to a junkyard the driver's personal data goes " "with them</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A study of 24 “health” apps found that 19 of them <a href=" "\"https://www.vice.com/en/article/pan9e8/health-apps-can-share-your-data-" "everywhere-new-study-shows\"> send sensitive personal data to third parties</" "a>, which can use it for invasive advertising or discriminating against " "people in poor medical condition." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Whenever user “consent” is sought, it is buried in lengthy terms " "of service that are difficult to understand. In any case, “" "consent” is not sufficient to legitimize snooping." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Low-priced Chromebooks for schools are <a href=\"https://www.eff.org/wp/" "school-issued-devices-and-student-privacy\"> collecting far more data on " "students than is necessary, and store it indefinitely</a>. Parents and " "students complain about the lack of transparency on the part of both the " "educational services and the schools, the difficulty of opting out of these " "services, and the lack of proper privacy policies, among other things." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "But complaining is not sufficient. Parents, students and teachers should " "realize that the software Google uses to spy on students is nonfree, so they " "can't verify what it really does. The only remedy is to persuade school " "officials to <a href=\"/education/edu-schools.html\"> exclusively use free " "software</a> for both education and school administration. If the school is " "run locally, parents and teachers can mandate their representatives at the " "School Board to refuse the budget unless the school initiates a switch to " "free software. If education is run nation-wide, they need to persuade " "legislators (e.g., through free software organizations, political parties, " "etc.) to migrate the public schools to free software." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A cracker would be able to <a href=\"https://uploadvr.com/hackable-webcam-" "oculus-sensor-be-aware/\"> turn the Oculus Rift sensors into spy cameras</a> " "after breaking into the computer they are connected to." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>(Unfortunately, the article <a href=\"/philosophy/words-to-avoid." "html#Hacker\">improperly refers to crackers as “hackers”</a>.)</" "small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "In China, it is mandatory for electric cars to be equipped with a terminal " "that <a href=\"https://apnews.com/article/north-america-ap-top-news-" "international-news-shanghai-china-4a749a4211904784826b45e812cff4ca\"> " "transfers technical data, including car location, to a government-run " "platform</a>. In practice, <a href=\"/proprietary/proprietary-surveillance." "html#car-spying\"> manufacturers collect this data</a> as part of their own " "spying, then forward it to the government-run platform." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Ring doorbell camera is designed so that the manufacturer (now Amazon) " "can watch all the time. Now it turns out that <a href=\"https://web.archive." "org/web/20190918024432/https://dojo.bullguard.com/dojo-by-bullguard/blog/" "ring/\"> anyone else can also watch, and fake videos too</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The third party vulnerability is presumably unintentional and Amazon will " "probably fix it. However, we do not expect Amazon to change the design that " "<a href=\"/proprietary/proprietary-surveillance.html#M201901100\">allows " "Amazon to watch</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The AppCensus database gives information on <a href=\"https://www.appcensus." "io/\"> how Android apps use and misuse users' personal data</a>. As of March " "2019, nearly 78,000 have been analyzed, of which 24,000 (31%) transmit the " "<a href=\"/proprietary/proprietary-surveillance.html#M201812290\"> " "Advertising ID</a> to other companies, and <a href=\"https://web.archive.org/" "web/20240501141046/https://blog.appcensus.io/2019/02/14/ad-ids-behaving-" "badly/\"> 18,000 (23% of the total) link this ID to hardware identifiers</" "a>, so that users cannot escape tracking by resetting it." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Collecting hardware identifiers is in apparent violation of Google's " "policies. But it seems that Google wasn't aware of it, and, once informed, " "was in no hurry to take action. This proves that the policies of a " "development platform are ineffective at preventing nonfree software " "developers from including malware in their programs." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Facebook offered a convenient proprietary library for building mobile apps, " "which also <a href=\"https://boingboing.net/2019/02/23/surveillance-" "zucksterism.html\"> sent personal data to Facebook</a>. Lots of companies " "built apps that way and released them, apparently not realizing that all the " "personal data they collected would go to Facebook as well." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "It shows that no one can trust a nonfree program, not even the developers of " "other nonfree programs." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Vizio TVs <a href=\"https://www.theverge.com/2019/1/7/18172397/airplay-2-" "homekit-vizio-tv-bill-baxter-interview-vergecast-ces-2019\"> collect “" "whatever the TV sees,”</a> in the own words of the company's CTO, and " "this data is sold to third parties. This is in return for “better " "service” (meaning more intrusive ads?) and slightly lower retail " "prices." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "What is supposed to make this spying acceptable, according to him, is that " "it is opt-in in newer models. But since the Vizio software is nonfree, we " "don't know what is actually happening behind the scenes, and there is no " "guarantee that all future updates will leave the settings unchanged." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "If you already own a Vizio “smart” TV (or any “" "smart” TV, for that matter), the easiest way to make sure it isn't " "spying on you is to disconnect it from the Internet, and use a terrestrial " "antenna instead. Unfortunately, this is not always possible. Another option, " "if you are technically oriented, is to get your own router (which can be an " "old computer running completely free software), and set up a firewall to " "block connections to Vizio's servers. Or, as a last resort, you can replace " "your TV with another model." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Twenty nine “beauty camera” apps that used to be on Google Play " "had one or more malicious functionalities, such as stealing users' photos " "instead of “beautifying” them, <a href=\"https://www." "androidpolice.com/2019/02/03/google-bans-29-beauty-camera-apps-from-the-play-" "store-that-steal-your-photos/\"> pushing unwanted and often malicious ads on " "users, and redirecting them to phishing sites</a> that stole their " "credentials. Furthermore, the user interface of most of them was designed to " "make uninstallation difficult." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Users should of course uninstall these dangerous apps if they haven't yet, " "but they should also stay away from nonfree apps in general. <em>All</em> " "nonfree apps carry a potential risk because there is no easy way of knowing " "what they really do." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many nonfree apps have a surveillance feature for <a href=\"https://" "techcrunch.com/2019/02/06/iphone-session-replay-screenshots/\"> recording " "all the users' actions</a> in interacting with the app." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "An investigation of the 150 most popular gratis VPN apps in Google Play " "found that <a href=\"https://www.top10vpn.com/research/free-vpn-" "investigations/risk-index/\"> 25% fail to protect their users' privacy</a> " "due to DNS leaks. In addition, 85% feature intrusive permissions or " "functions in their source code—often used for invasive " "advertising—that could potentially also be used to spy on users. Other " "technical flaws were found as well." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Moreover, a previous investigation had found that <a href=\"https://www." "top10vpn.com/research/free-vpn-investigations/ownership/\">half of the top " "10 gratis VPN apps have lousy privacy policies</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>(It is unfortunate that these articles talk about “free apps." "” These apps are gratis, but they are <em>not</em> <a href=\"/" "philosophy/free-sw.html\">free software</a>.)</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Google invites people to <a href=\"https://www.commondreams.org/" "views/2019/02/04/google-screenwise-unwise-trade-all-your-privacy-cash?cd-" "origin=rss\"> let Google monitor their phone use, and all internet use in " "their homes, for an extravagant payment of $20</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This is not a malicious functionality of a program with some other purpose; " "this is the software's sole purpose, and Google says so. But Google says it " "in a way that encourages most people to ignore the details. That, we " "believe, makes it fitting to list here." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Around 40% of gratis Android apps <a href=\"https://privacyinternational.org/" "report/2647/how-apps-android-share-data-facebook-report\"> report on the " "user's actions to Facebook</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Often they send the machine's “advertising ID,” so that Facebook " "can correlate the data it obtains from the same machine via various apps. " "Some of them send Facebook detailed information about the user's activities " "in the app; others only say that the user is using that app, but that alone " "is often quite informative." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This spying occurs regardless of whether the user has a Facebook account." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Foundry's graphics software <a href=\"https://torrentfreak.com/software-" "company-fines-pirates-after-monitoring-their-computers-181102/\"> reports " "information to identify who is running it</a>. The result is often a legal " "threat demanding a lot of money." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The fact that this is used for repression of forbidden sharing makes it even " "more vicious." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This illustrates that making unauthorized copies of nonfree software is not " "a cure for the injustice of nonfree software. It may avoid paying for the " "nasty thing, but cannot make it less nasty." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Until 2015, any tweet that listed a geographical tag <a href=\"http://web-" "old.archive.org/web/20190115233002/https://www.wired.com/story/twitter-" "location-data-gps-privacy/\"> sent the precise GPS location to Twitter's " "server</a>. It still contains these GPS locations." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Amazon Ring “security” devices <a href=\"https://www.engadget." "com/2019-01-10-ring-gave-employees-access-customer-video-feeds.html\"> send " "the video they capture to Amazon servers</a>, which save it long-term." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "In many cases, the video shows everyone that comes near, or merely passes " "by, the user's front door." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The article focuses on how Ring used to let individual employees look at the " "videos freely. It appears Amazon has tried to prevent that secondary abuse, " "but the primary abuse—that Amazon gets the video—Amazon expects " "society to surrender to." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Weather Channel app <a href=\"https://www.theguardian.com/" "technology/2019/jan/04/weather-channel-app-lawsuit-location-data-selling\"> " "stored users' locations to the company's server</a>. The company is being " "sued, demanding that it notify the users of what it will do with the data." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "We think that lawsuit is about a side issue. What the company does with the " "data is a secondary issue. The principal wrong here is that the company gets " "that data at all." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.vice.com/en/article/gy77wy/stop-using-third-party-" "weather-apps\"> Other weather apps</a>, including Accuweather and " "WeatherBug, are tracking people's locations." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Facebook's app got “consent” to <a href=\"https://www." "theguardian.com/technology/2018/dec/06/facebook-emails-reveal-discussions-" "over-call-log-consent\"> upload call logs automatically from Android phones</" "a> while disguising what the “consent” was for." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many web sites use JavaScript code <a href=\"https://gizmodo.com/before-you-" "hit-submit-this-company-has-already-logge-1795906081\"> to snoop on " "information that users have typed into a form but not sent</a>, in order to " "learn their identity. Some are <a href=\"https://www.manatt.com/insights/" "newsletters/advertising-law/sites-illegally-tracked-consumers-new-suits-" "allege\"> getting sued</a> for this." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The chat facilities of some customer services use the same sort of malware " "to <a href=\"https://gizmodo.com/be-warned-customer-service-agents-can-see-" "what-youre-t-1830688119\"> read what the user is typing before it is posted</" "a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Nearly all “home security cameras” <a href=\"https://www." "consumerreports.org/privacy/d-link-camera-poses-data-security-risk--consumer-" "reports-finds-a8814384448/\"> give the manufacturer an unencrypted copy of " "everything they see</a>. “Home insecurity camera” would be a " "better name!" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "When Consumer Reports tested them, it suggested that these manufacturers " "promise not to look at what's in the videos. That's not security for your " "home. Security means making sure they don't get to see through your camera." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Some Android apps <a href=\"https://web.archive.org/web/20210418052600/" "https://www.androidauthority.com/apps-uninstall-trackers-917539/amp/\"> " "track the phones of users that have deleted them</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Apple and Samsung deliberately <a href=\"https://www.theguardian.com/" "technology/2018/oct/24/apple-samsung-fined-for-slowing-down-phones\">degrade " "the performance of older phones to force users to buy their newer phones</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "GM <a href=\"https://boingboing.net/2018/10/23/dont-touch-that-dial.html\"> " "tracked the choices of radio programs</a> in its “connected” " "cars, minute by minute." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "GM did not get users' consent, but it could have got that easily by sneaking " "it into the contract that users sign for some digital service or other. A " "requirement for consent is effectively no protection." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The cars can also collect lots of other data: listening to you, watching " "you, following your movements, tracking passengers' cell phones. <em>All</" "em> such data collection should be forbidden." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "But if you really want to be safe, we must make sure the car's hardware " "cannot collect any of that data, or that the software is free so we know it " "won't collect any of that data." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Printer manufacturers are very innovative—at blocking the use of " "independent replacement ink cartridges. Their “security " "upgrades” occasionally impose new forms of cartridge DRM. <a href=" "\"https://www.vice.com/en/article/pa98ab/printer-makers-are-crippling-cheap-" "ink-cartridges-via-bogus-security-updates\"> HP and Epson have done this</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Researchers have discovered how to <a href=\"https://news.rub.de/english/" "press-releases/2018-09-24-it-security-secret-messages-alexa-and-co\"> hide " "voice commands in other audio</a>, so that people cannot hear them, but " "Alexa and Siri can." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "In MacOS and iOS, the procedure for <a href=\"https://support.apple.com/" "guide/photos/export-photos-videos-and-slideshows-pht6e157c5f/mac\"> " "converting images from the Photos format</a> to a free format is so tedious " "and time-consuming that users just give up if they have a lot of them." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2018-2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Addictions - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Addictions" msgstr "" #. type: Content of: <div><div><p> msgid "" "This page deals with malicious functionalities that are added to some " "programs for the sole purpose of luring users into more and more frequent " "and intensive use of the program, with the risk of getting addicted." msgstr "" #. type: Content of: <div><div><h3> msgid "How software is made addictive" msgstr "" #. type: Content of: <div><div><h4> msgid "Games" msgstr "" #. type: Content of: <div><div><p> msgid "" "Many games are designed to keep gamers compulsively playing—and " "spending money on the game. To achieve this result, developers use <a href=" "\"https://www.cracked.com/article_18461_5-creepy-ways-video-games-are-trying-" "to-get-you-addicted.html\"> techniques that derive from behavioral and brain " "research</a>:" msgstr "" #. type: Content of: <div><div><dl><dt> msgid "The Skinner Box" msgstr "" #. type: Content of: <div><div><dl><dd> msgid "" "An environment in which the user is trained to “push the lever“, " "i.e. do a certain action over and over again in order to get a reward. This " "is also known as “grinding.”" msgstr "" #. type: Content of: <div><div><dl><dt> msgid "Virtual food pellets" msgstr "" #. type: Content of: <div><div><dl><dd> msgid "" "Items that have nothing to do with the game itself, but are valuable to " "gamers because of the work required to obtain them (e.g., EverQuest); some " "people will end up collecting them for the sake of collecting." msgstr "" #. type: Content of: <div><div><dl><dt> msgid "Random rewards" msgstr "" #. type: Content of: <div><div><dl><dd> msgid "" "They turn the game into the equivalent of a slot machine (e.g., World of " "Warcraft, ZT Online)." msgstr "" #. type: Content of: <div><div><dl><dt> msgid "Elaborate cycles" msgstr "" #. type: Content of: <div><div><dl><dd> msgid "" "Gamers' behavior can be “shaped” by making cycles (progress from " "one level to the next) slower and slower, designing complex tasks that are " "difficult to get out of (e.g. World of Warcraft), or conversely dividing " "them up in small chunks to avoid frustration (e.g., New Super Mario Bros." "Wii)." msgstr "" #. type: Content of: <div><div><dl><dt> msgid "Decay of game assets" msgstr "" #. type: Content of: <div><div><dl><dd> msgid "" "This makes it necessary for a gamer to keep playing, without vacations, " "simply to avoid losing what they have earned so far (e.g., Farmville, Ultima " "Online, Animal Crossing)." msgstr "" #. type: Content of: <div><div><p> msgid "" "Games such as World of Warcraft, which are considered very addictive, use " "several of these techniques." msgstr "" #. type: Content of: <div><div><p> msgid "There are even more elaborate ways to get users addicted to a game." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "“Loot boxes” are a direct application of the random reward " "mechanism, and their addictiveness is enhanced by seductive animation. They " "are <a href=\"https://www.pcgamer.com/behind-the-addictive-psychology-and-" "seductive-art-of-loot-boxes/\"> akin to gambling</a>." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "<a href=\"https://wikipedia.org/wiki/Gacha_game\"><i>Gacha</i></a> systems, " "widely used by Japanese games since 2010, may be considered the ancestors of " "loot boxes. A <i>gacha</i> is the virtual equivalent of a capsule-toy " "vending machine. Its addictiveness is based on random rewards, and also on " "the basic instinct of people to collect items." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "The developers of gratis (“free-to-play”) games apply the " "techniques described above to <a href=\"https://www.psychguides.com/interact/" "the-psychology-of-freemium/\"> turn their products into slot machines</a>. " "This is clearly described in an infographic. The revenue generated by these " "games is directly related to the number of strongly addicted gamers (called " "“<a href=\"https://www.gamedeveloper.com/business/chasing-the-whale-" "examining-the-ethics-of-free-to-play-games\">whales</a>”), and to the " "amount of money they are willing to spend. Thus developers carefully study " "the behavior of millions of users to increase the addictiveness of their " "games, and apply <a href=\"https://www.uxreviewer.com/home/2019/3/7/5-" "incredibly-powerful-monetisation-patterns-using-behavioural-economics-in-ux-" "design\"> classical marketing techniques</a> such as the decoy effect to " "squeeze as much money as possible from gamers." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "<a href=\"https://keepthescore.com/blog/posts/leaderboards-in-gaming/\"> " "Leader boards</a> can increase addictiveness, because some people are so " "eager to see their name at the top of the board that they will spend an " "unreasonable amount of time playing." msgstr "" #. type: Content of: <div><div><p> msgid "" "<small>(Unfortunately, some of the articles referenced above use “" "free” to mean “zero price.” We recommend saying “" "gratis” instead.)</small>" msgstr "" #. type: Content of: <div><div><p> msgid "" "However, the addictiveness of a game is only one of the determinants of " "addiction. Equally important are the psychological make-up and life " "circumstances of the gamer. Gaming addiction, like other addictions, is a " "form of mental escape from an unrewarding life. The sad truth is that, in " "the long run, it leads to an even worse life." msgstr "" #. type: Content of: <div><div><p> msgid "" "<small><em>Note:</em> We are not gamers. If you think we have " "misunderstood some point, or have suggestions for making this text clearer " "or more correct, please send them to <<a href=\"mailto:webmasters@gnu.org" "\">webmasters@gnu.org</a>>.</small>" msgstr "" #. type: Content of: <div><div><h4> msgid "Online gambling" msgstr "" #. type: Content of: <div><div><p> msgid "" "Online gambling services (and their nonfree client programs) are <a href=" "\"https://www.theguardian.com/society/2019/feb/22/gambling-apps-more-" "dangerous-than-fobts-study-finds\"> designed to be addictive</a>, much like " "on-line games. They achieve this with various different malfunctionalities, " "often in combination." msgstr "" #. type: Content of: <div><div><p> msgid "" "Many of these malfunctionalities are implemented by the server and the " "client program together. In some cases, there is no honest way that the " "client program could counteract the nastiness—for instance, when the " "server manipulates amounts won in order to get the user addicted, the only " "way the client program could block that is to pretend the win did not " "happen. But users would not want that modification." msgstr "" #. type: Content of: <div><div><p> msgid "" "However, modification of the client program could cover up some addictive " "behaviors without losing the user anything." msgstr "" #. type: Content of: <div><div><h4> msgid "Social networks" msgstr "" #. type: Content of: <div><div><p> msgid "" "The major social networks are continuously optimizing their design to <a " "href=\"https://medium.com/thrive-global/how-technology-hijacks-peoples-minds-" "from-a-magician-and-google-s-design-ethicist-56d62ef5edf3\"> grab users' " "attention</a> by taking advantage of the psychological vulnerabilities " "described above, eventually leading some to addiction. For these people, a " "phone becomes the equivalent of a slot machine. Many of the addictive " "features (menu, “likes,” photo tagging, autoplay, etc.) are " "built into the client software, and can't be removed because the software is " "proprietary." msgstr "" #. type: Content of: <div><div><p> msgid "" "Thus, some social networking apps <a href=\"https://www.jeffbullas.com/" "facebook-creates-addiction/\">try to merge into your daily routine</a> by " "exploiting social pressure and your natural desire for socialization, " "converting habitual gestures into thorough addiction. As already noted for " "games, addictiveness is essentially based on random rewards. In the present " "case, the rewards are messages from friends and followers, “likes," "” news, interesting videos, etc. The software is designed to trigger " "users' desire for these rewards, and keep this desire alive as long as " "possible." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "By default, notifications are sent every time a new item comes in, instead " "of, say, once a day. They are associated with sounds or vibrations which " "make them even more compelling. (Remember Pavlov's experiments with rats.) " "These triggers are often opt-out, and many users don't try to turn them off. " "They are most effective when the app is installed on a mobile device which " "is always on and never leaves the user. As a side effect, they may " "contribute to the <a href=\"https://www.psychologytoday.com/us/blog/reading-" "between-the-headlines/201307/smartphone-addiction\"> addictiveness of “" "smart” phones</a>." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "Users are served selected material that is likely to interest them, based on " "<a href=\"https://theconversation.com/facebook-is-killing-democracy-with-its-" "personality-profiling-data-93611\"> profiling</a>. (This paves the way to <a " "href=\"/proprietary/proprietary-manipulation.html\">manipulation</a>, by the " "way.)" msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "The app interface is designed to make users stay on the site as long as " "possible, using <a href=\"https://uxplanet.org/ux-infinite-scrolling-vs-" "pagination-1030d29376f1\"> infinite scrolling</a> for example." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "The company that owns the social network tries to cover users' needs as " "extensively as possible, by <a href=\"https://en.wikipedia.org/wiki/" "List_of_mergers_and_acquisitions_by_Facebook\"> acquiring other companies</" "a> if needed. Once users have concentrated most of their online activities " "and a lot of their personal data on a single platform (or a set of platforms " "that belong to the same group), they find it <a href=\"https://www." "theguardian.com/lifeandstyle/2018/jan/01/antisocial-media-why-decided-cut-" "back-facebook-instagram\"> almost impossible to leave</a>. And even if they " "wanted to, they would have a hard time digging out the relevant options, and " "the app would aggressively nag them to stay." msgstr "" #. type: Content of: <div><div><p> msgid "" "A good way to minimize the risk of addiction, short of avoiding social media " "altogether, is to turn off notifications and leave as little as possible of " "your own data on the platform." msgstr "" #. type: Content of: <div><div><h4> msgid "Nonfree smartphone software" msgstr "" #. type: Content of: <div><div><p> msgid "" "Parents are very concerned about the <a href=\"https://www.freerangekids.com/" "worried-your-child-is-already-a-screen-addict-theres-hope/\"> intentional " "addictiveness of the software that their children use on snoop-phones</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "The “<a href=\"https://www.nysun.com/article/how-manipulative-tech-a-" "mashup-of-psychology-and-technology-keeps-children-glued-to-screens" "\">manipulative tech</a>,” which underpins addictive features that the " "article naively attributes to “screens,” is in fact implemented " "by software: partly in the operating system and partly in some apps. These " "features can be designed to do nasty things because they are <a href=" "\"https://fsf.org/tedx\">nonfree software</a>: their code is controlled by " "some “owner,” in this case a powerful company, rather than by " "the users. If they were free programs, the user community could reprogram " "them so as to be less addictive." msgstr "" #. type: Content of: <div><div><p> msgid "" "By freeing ourselves from these companies' power to require use of software " "they control for accessing their “services,” we will also reduce " "the harm that online dis-services can do." msgstr "" #. type: Content of: <div><div><h3> msgid "Examples of addictive software" msgstr "" #. type: Content of: <div><p> msgid "" "Copyright © 2019, 2020, 2021, 2022, 2023, 2024 Free Software " "Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Tyrants - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Tyrants" msgstr "" #. type: Content of: <div><div><p> msgid "" "A <em>tyrant</em> is a malicious device that refuses to allow users to " "install a different operating system or a modified operating system. These " "devices have measures to block execution of anything other than the “" "approved” system versions. We also refer to this practice as " "<em>tivoization</em>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple devices lock users in <a href=\"https://gizmodo.com/homepod-is-the-" "ultimate-apple-product-in-a-bad-way-1822883347\"> solely to Apple services</" "a> by being designed to be incompatible with all other options, ethical or " "unethical." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple arbitrarily <a href=\"https://9to5mac.com/2014/12/01/ios-8-1-signing-" "window-closed/\">blocks users from installing old versions of iOS</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://soylentnews.org/article.pl?sid=14/03/15/1912255\"> Intel " "processors will have tyrant software built in</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Motorola, then owned by Google, made <a href=\"https://web.archive.org/" "web/20250422121516/http://blog.azimuthsecurity.com/2013/04/unlocking-" "motorola-bootloader.html\"> Android phones that are tyrants</a> (though " "someone found a way to crack the restriction)." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Samsung “Smart” TVs have <a href=\"https://wiki.samygo.tv/index." "php?title=SamyGO_for_DUMMIES#What_are_Restricted_Firmwares.3F\"> turned " "Linux into the base for a tyrant system</a> so as to impose DRM. What " "enables Samsung to do this is that Linux is released under GNU GPL version " "2, <a href=\"/licenses/rms-why-gplv3.html\">not version 3</a>, together with " "a weak interpretation of GPL version 2." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some LG TVs <a href=\"https://web.archive.org/web/20190917164647/http://" "openlgtv.org.ru/wiki/index.php/Achievements\"> are tyrants</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Apple iThings are tyrant devices. There is a port of Android to the " "iThings, but installing it requires <a href=\"https://web.archive.org/" "web/20150721065208/http://www.idroidproject.org/wiki/Status\"> finding a bug " "or “exploit”</a> to make it possible to install a different " "system." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2014-2023, 2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Google's Software Is Malware - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Google's Software is Malware" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Types of Google malware" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#censorship\">Censorship</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#manipulation\">Manipulation</a>" msgstr "" #. type: Content of: <div><div><h3> msgid "Censorship" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google now allows Android apps to detect whether a device has been rooted, " "<a href=\"https://www.androidpolice.com/2017/05/13/netflix-confirms-blocking-" "rootedunlocked-devices-app-still-working-now/\">and refuse to install if so</" "a>. The Netflix app uses this ability to enforce DRM by refusing to install " "on rooted Android devices." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Update: Google <i>intentionally</i> changed Android so that apps <a href=" "\"https://torrentfreak.com/netflix-use-of-google-drm-means-rooted-android-" "devices-are-banned-170515/\">can detect rooted devices and refuse to run on " "them</a>. The Netflix app is proprietary malware, and one shouldn't use it. " "However, that does not make what Google has done any less wrong." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Chrome <a href=\"https://boingboing.net/2017/01/30/google-quietly-makes-" "optiona.html\">implements DRM</a>. So does Chromium, through nonfree " "software that is effectively part of it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://issues.chromium.org/issues/40504000\">More information</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Android <a href=\"https://developer.android.com/reference/android/drm/" "package-summary.html\"> contains facilities specifically to support DRM</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20180816030205/http://www.spiegel.de/" "international/world/privacy-scandal-nsa-can-spy-on-smart-phone-data-a-920971." "html\"> The NSA can tap data in smart phones, including iPhones, Android, " "and BlackBerry</a>. While there is not much detail here, it seems that this " "does not operate via the universal back door that we know nearly all " "portable phones have. It may involve exploiting various bugs. There are <a " "href=\"https://www.osnews.com/story/27416/the-second-operating-system-hiding-" "in-every-mobile-phone/\"> lots of bugs in the phones' radio software</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "This section gives examples of Google software harassing or annoying the " "user, or causing trouble for the user. These actions are like sabotage but " "the word “sabotage” is too strong for them." msgstr "" #. type: Content of: <div><div><h3> msgid "Manipulation" msgstr "" #. type: Content of: <div><div><p> msgid "" "The wrongs in this section are not precisely malware, since they do not " "involve making the program that runs in a way that hurts the user. But they " "are a lot like malware, since they are technical Google actions that harm " "the users of specific Google software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some Google apps on Android <a href=\"https://www.theguardian.com/" "technology/2018/aug/13/google-location-tracking-android-iphone-mobile\"> " "record the user's location even when users disable “location " "tracking”</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "There are other ways to turn off the other kinds of location tracking, but " "most users will be tricked by the misleading control." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Android tracks location for Google <a href=\"https://www.techdirt." "com/2017/11/21/investigation-finds-google-collected-location-data-even-with-" "location-services-turned-off/\"> even when “location services” " "are turned off, even when the phone has no SIM card</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google's new voice messaging app <a href=\"https://www.theverge." "com/2016/9/21/12994362/allo-privacy-message-logs-google\">logs all " "conversations</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Play (a component of Android) <a href=\"https://www.extremetech.com/" "mobile/235594-yes-google-play-is-tracking-you-and-thats-just-the-tip-of-a-" "very-large-iceberg\"> tracks the users' movements without their permission</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Even if you disable Google Maps and location tracking, you must disable " "Google Play itself to completely stop the tracking. This is yet another " "example of nonfree software pretending to obey the user, when it's actually " "doing something else. Such a thing would be almost unthinkable with free " "software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Chrome makes it easy for an extension to do <a href=\"https://labs." "detectify.com/2015/07/28/how-i-disabled-your-chrome-security-extensions/" "\">total snooping on the user's browsing</a>, and many of them do so." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Chrome includes a module that <a href=\"https://www." "privateinternetaccess.com/blog/google-chrome-listening-in-to-your-room-shows-" "the-importance-of-privacy-defense-in-depth/\"> activates microphones and " "transmits audio to its servers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Nest thermometers send <a href=\"https://bgr.com/general/google-nest-" "jailbreak-hack/\">a lot of data about the user</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Chrome <a href=\"https://web.archive.org/web/20151018132125/http://" "www.brad-x.com/2013/08/04/google-chrome-is-spyware/\"> spies on browser " "history, affiliations</a>, and other installed software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Spyware in Android phones (and Windows? laptops): The Wall Street Journal " "(in an article blocked from us by a paywall) reports that <a href=\"https://" "www.theverge.com/2013/8/1/4580718/fbi-can-remotely-activate-android-and-" "laptop-microphones-reports-wsj\"> the FBI can remotely activate the GPS and " "microphone in Android phones and laptops</a> (presumably Windows laptops). " "Here is <a href=\"https://cryptome.org/2013/08/fbi-hackers.htm\">more info</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Spyware is present in some Android devices when they are sold. Some " "Motorola phones, made when this company was owned by Google, use a modified " "version of Android that <a href=\"http://www.beneaththewaves.net/Projects/" "Motorola_Is_Listening.html\"> sends personal data to Motorola</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A Motorola phone <a href=\"https://web.archive.org/web/20170629175629/http://" "www.itproportal.com/2013/07/25/motorolas-new-x8-arm-chip-underpinning-the-" "always-on-future-of-android/\"> listens for voice all the time</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Play intentionally sends app developers <a href=\"https://gadgets360." "com/apps/news/google-play-store-policy-raises-privacy-concerns-331116\"> the " "personal details of users that install the app</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Merely asking the “consent” of users is not enough to legitimize " "actions like this. At this point, most users have stopped reading the " "“Terms and Conditions” that spell out what they are “" "consenting” to. Google should clearly and honestly identify the " "information it collects on users, instead of hiding it in an obscurely " "worded EULA." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "However, to truly protect people's privacy, we must prevent Google and other " "companies from getting this personal information in the first place!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many web sites report all their visitors to Google by using the Google " "Analytics service, which <a href=\"https://www.pcworld.com/article/460787/" "google_analytics_breaks_norwegian_privacy_laws_local_agency_said.html\"> " "tells Google the IP address and the page that was visited</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Chrome contains a key logger that <a href=\"https://web.archive.org/" "web/20190126075111/http://www.favbrowser.com/google-chrome-spyware-confirmed/" "\"> sends Google every URL typed in</a>, one key at a time." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2017-2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Obsolescence - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Obsolescence" msgstr "" #. type: Content of: <div><div><p> msgid "" "Programmed obsolescence is one of the malicious functionalities that may be " "designed into proprietary software." msgstr "" #. type: Content of: <div><div><p> msgid "" "Computer technology inevitably has an environmental impact, but proprietary " "software makes it worse because it is often designed to lead or pressure " "users to discard devices sooner because support for them has ceased, or to " "discard defective hardware which could have been made repairable." msgstr "" #. type: Content of: <div><div><p> msgid "" "Here are examples of proprietary programs that make hardware devices " "prematurely obsolete." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple will stop <a href=\"https://www.theguardian.com/technology/2017/jun/06/" "iphone-ipad-apps-games-apple-5-5c-obsolete\">fixing bugs for older model " "iThings</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Meanwhile, Apple stops people from fixing problems themselves; that's the " "nature of proprietary software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The <a href=\"https://michaelweinberg.org/post/137045828005/free-the-cube\"> " "“Cube” 3D printer was designed with DRM</a>: it won't accept " "third-party printing materials. It is the Keurig of printers. Now it is " "being discontinued, which means that eventually authorized materials won't " "be available and the printers may become unusable." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "With a <a href=\"https://www.fsf.org/resources/hw/endorsement/aleph-objects" "\"> printer that gets the Respects Your Freedom</a>, this problem would not " "even be a remote possibility." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "How pitiful that the author of that article says that there was “" "nothing wrong” with designing the device to restrict users in the " "first place. This is like putting a “cheat me and mistreat me” " "sign on your chest. We should know better: we should condemn all companies " "that take advantage of people like him. Indeed, it is the acceptance of " "their unjust practice that teaches people to be doormats." msgstr "" #. type: Content of: <title> msgid "Proprietary Fraud - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Fraud" msgstr "" #. type: Content of: <div><div><p> msgid "" "Here are some examples of proprietary software that defrauds users—" "taking their money by trickery." msgstr "" #. type: Content of: <div><p> msgid "" "Copyright © 2019, 2020, 2021, 2022, 2023 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Malware in Webpages - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Malware in Webpages" msgstr "" #. type: Content of: <div><div><p> msgid "" "This page lists web sites containing proprietary JavaScript programs that " "spy on users or mislead them. They make use of what we call the <a href=\"/" "philosophy/javascript-trap.html\">JavaScript Trap</a>. Of course, many sites " "collect information that the user sends, via forms or otherwise, but here " "we're not talking about that." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "British Airways used <a href=\"https://www.theverge.com/2018/7/19/17591732/" "british-airways-gdpr-compliance-twitter-personal-data-security\">nonfree " "JavaScript on its web site to give other companies personal data on its " "customers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Verify browser extension by Storyful <a href=\"https://www.theguardian." "com/world/2018/may/17/revealed-how-storyful-uses-tool-monitor-what-" "journalists-watch\">spies on the reporters that use it</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some JavaScript malware <a href=\"https://www.theverge." "com/2017/12/30/16829804/browser-password-manager-adthink-princeton-research" "\"> swipes usernames from browser-based password managers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some websites send JavaScript code to collect all the user's input, <a href=" "\"https://freedom-to-tinker.com/2017/11/15/no-boundaries-exfiltration-of-" "personal-data-by-session-replay-scripts/\">which can then be used to " "reproduce the whole session</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "If you use LibreJS, it will block that malicious JavaScript code." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "When a page uses Disqus for comments, the proprietary Disqus software <a " "href=\"https://blog.dantup.com/2017/01/visiting-a-site-that-uses-disqus-" "comments-when-not-logged-in-sends-the-url-to-facebook/\">loads a Facebook " "software package into the browser of every anonymous visitor to the page, " "and makes the page's URL available to Facebook</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Online sales, with tracking and surveillance of customers, <a href=\"https://" "www.theguardian.com/commentisfree/2016/dec/06/cookie-monsters-why-your-" "browsing-history-could-mean-rip-off-prices\">enables businesses to show " "different people different prices</a>. Most of the tracking is done by " "recording interactions with servers, but proprietary software contributes." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A <a href=\"https://research.csiro.au/isp/wp-content/uploads/" "sites/106/2016/08/paper-1.pdf\"> research paper</a> that investigated the " "privacy and security of 283 Android VPN apps concluded that “in spite " "of the promises for privacy, security, and anonymity given by the majority " "of VPN apps—millions of users may be unawarely subject to poor " "security guarantees and abusive practices inflicted by VPN apps.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Here are two examples, taken from the research paper, of proprietary VPN " "apps that use JavaScript to track users and infringe their privacy:" msgstr "" #. type: Content of: <div><div><ul><li><dl><dt> msgid "VPN Services HotspotShield" msgstr "" #. type: Content of: <div><div><ul><li><dl><dd> msgid "" "Injects JavaScript code into the HTML pages returned to the users. The " "stated purpose of the JS injection is to display ads. Uses roughly five " "tracking libraries. Also, it redirects the user's traffic through valueclick." "com (an advertising website)." msgstr "" #. type: Content of: <div><div><ul><li><dl><dt> msgid "WiFi Protector VPN" msgstr "" #. type: Content of: <div><div><ul><li><dl><dd> msgid "" "Injects JavaScript code into HTML pages, and also uses roughly five tracking " "libraries. Developers of this app have confirmed that the non-premium " "version of the app does JavaScript injection for tracking the user and " "displaying ads." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "E-books can contain JavaScript code, and <a href=\"https://www.theguardian." "com/books/2016/mar/08/men-make-up-their-minds-about-books-faster-than-women-" "study-finds\"> sometimes this code snoops on readers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Flash and JavaScript are used for <a href=\"https://arstechnica.com/" "information-technology/2013/10/top-sites-and-maybe-the-nsa-track-users-with-" "device-fingerprinting/\"> “fingerprinting” devices</a> to " "identify users." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many web sites rat their visitors to advertising networks that track users. " "Of the top 1000 web sites, <a href=\"https://www.law.berkeley.edu/research/" "bclt/research/privacy-at-bclt/web-privacy-census/\">84% (as of 5/17/2012) " "fed their visitors third-party cookies, allowing other sites to track them</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many web sites try to collect users' address books (the user's list of other " "people's phone numbers or email addresses). This violates the privacy of " "those other people." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Pages that contain “Like” buttons <a href=\"https://www.smh.com." "au/technology/facebooks-privacy-lie-aussie-exposes-tracking-as-new-patent-" "uncovered-20111004-1l61i.html\"> enable Facebook to track visitors to those " "pages</a>—even users that don't have Facebook accounts." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Flash Player's <a href=\"https://web.archive.org/web/20200808151607/http://" "www.imasuper.com/2008/10/09/flash-cookies-the-silent-privacy-killer/\"> " "cookie feature helps web sites track visitors</a>." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2017-2023, 2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Malware In Cars - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Malware In Cars" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "AI-powered driving apps can <a href=\"https://www.vice.com/en/article/43nz9p/" "ai-powered-driving-apps-can-track-your-every-move\"> track your every move</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Bad security in some cars makes it possible to <a href=\"https://cve.mitre." "org/cgi-bin/cvename.cgi?name=CVE-2017-14937\"> remotely activate the " "airbags</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The mobile apps for communicating <a href=\"https://www.bleepingcomputer.com/" "news/security/millions-of-smart-cars-vulnerable-due-to-insecure-android-apps/" "\">with a smart but foolish car have very bad security</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is in addition to the fact that the car contains a cellular modem that " "tells big brother all the time where it is. If you own such a car, it would " "be wise to disconnect the modem so as to turn off the tracking." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://jalopnik.com/america-figured-out-a-new-way-audi-cheated-on-" "emissions-1788630969\"> Audi's proprietary software used a simple method to " "cheat on emissions tests</a>: to activate a special low-emission " "gearshifting mode until the first time the car made a turn." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Due to weak security, <a href=\"https://jalopnik.com/almost-every-volkswagen-" "built-since-1995-is-vulnerable-1785159844\">it is easy to open the doors of " "100 million cars built by Volkswagen</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Computerized cars with nonfree software are <a href=\"http://www." "thelowdownblog.com/2016/07/your-cars-been-studying-you-closely-and.html\"> " "snooping devices</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Nissan Leaf has a built-in cell phone modem which allows effectively " "anyone to <a href=\"https://www.troyhunt.com/controlling-vehicle-features-of-" "nissan/\"> access its computers remotely and make changes in various " "settings</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "That's easy to do because the system has no authentication when accessed " "through the modem. However, even if it asked for authentication, you " "couldn't be confident that Nissan has no access. The software in the car is " "proprietary, <a href=\"/philosophy/free-software-even-more-important.html" "\">which means it demands blind faith from its users</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Even if no one connects to the car remotely, the cell phone modem enables " "the phone company to track the car's movements all the time; it is possible " "to physically remove the cell phone modem, though." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Security researchers discovered a <a href=\"https://www.theguardian.com/" "technology/2015/aug/12/hack-car-brakes-sms-text\"> vulnerability in " "diagnostic dongles used for vehicle tracking and insurance</a> that let them " "take remote control of a car or lorry using an SMS." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Crackers were able to <a href=\"https://arstechnica.com/information-" "technology/2015/07/fiat-chrysler-connected-car-bug-lets-hackers-take-over-" "jeep-remotely/\"> take remote control of the Jeep</a> “connected " "car”. They could track the car, start or stop the engine, and activate " "or deactivate the brakes, and more." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "We expect that Chrysler and the NSA can do this too." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If you own a car that contains a phone modem, it would be a good idea to " "deactivate this." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.eff.org/deeplinks/2013/11/drm-cars-will-drive-" "consumers-crazy\"> DRM in cars will drive consumers crazy</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tesla cars allow the company to extract data remotely and determine the " "car's location at any time. (See Section 2, paragraphs b and c of the <a " "href=\"https://www.tesla.com/sites/default/files/pdfs/en_US/" "tmi_privacy_statement_external_6-14-2013_v2.pdf\"> privacy statement</a>.) " "The company says it doesn't store this information, but if the state orders " "it to get the data and hand it over, the state can store it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Proprietary software in cars <a href=\"https://www.usatoday.com/story/money/" "cars/2013/03/24/car-spying-edr-data-privacy/1991751/\"> records information " "about drivers' movements</a>, which is made available to car manufacturers, " "insurance companies, and others." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The case of toll-collection systems, mentioned in this article, is not " "really a matter of proprietary surveillance. These systems are an " "intolerable invasion of privacy, and should be replaced with anonymous " "payment systems, but the invasion isn't done by malware. The other cases " "mentioned are done by proprietary malware in the car." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It is possible to <a href=\"https://www.pcworld.com/article/495592/" "with_hacking_music_can_take_control_of_your_car.html\"> take control of some " "car computers through malware in music files</a>. Also <a href=\"https://" "www.nytimes.com/2011/03/10/business/10hack.html\"> by radio</a>. More " "information in <a href=\"https://web.archive.org/web/20240308015157/http://" "www.autosec.org/faq.html\"> Automotive Security And Privacy Center</a>." msgstr "" #. type: Content of: <title> msgid "Proprietary Incompatibility - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Incompatibility" msgstr "" #. type: Content of: <div><div><p> msgid "" "One of these malicious functionalities is the deliberate incompatibility of " "a program with third party software that operates on the same data types." msgstr "" #. type: Content of: <div><div><p> msgid "" "A fairly common sort of incompatibility is the use of secret formats or " "protocols. This directly blocks or hinders users from switching to any other " "program—and, in particular, from switching to free software which can " "liberate the device the software runs on." msgstr "" #. type: Content of: <div><div><p> msgid "" "Apart from being deliberately anticompetitive, secret formats put users' " "digital data at risk. For instance, retrieval of old data will become very " "difficult if support for the proprietary software that can read it is " "discontinued." msgstr "" #. type: Content of: <div><div><p> msgid "" "Another sort of incompatibility occurs when a system makes some important " "operation which would be necessary for migrating data to any other system so " "cumbersome or so slow that it isn't doable for more than a small amount of " "data." msgstr "" #. type: Content of: <div><div><p> msgid "" "More generally, the major tech companies tend to impose <a href=\"https://" "www.eff.org/deeplinks/2019/07/interoperability-fix-internet-not-tech-" "companies\"> artificial restrictions</a> on the interoperability of their " "products to monopolize the market, and this is often achieved through " "proprietary malware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "iWork (office software that runs on MacOS, iOS and iCloud) uses secret " "formats and <a href=\"https://en.wikipedia.org/wiki/IWork\">provides no " "means of converting them to or from Open Document Formats</a>. iWork formats " "have changed several times since they were first introduced. This may have " "had the effect of thwarting <a href=\"https://gothub.projectsegfau.lt/" "obriensp/iWorkFileFormat/\">reverse engineering efforts</a>, thus preventing " "free software from fully supporting them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "iWork formats are considered <a href=\"https://wiki.harvard.edu/confluence/" "download/attachments/204385883/Format%20profile%20-%20Apple%20iWork%20Pages" "%20v04.docx?version=1&modificationDate=1459873751000&api=v2\"> unfit " "for document preservation</a>." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2018-2021, 2023, 2024 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "" "Malware in Educational Technology - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Malware in Educational Technology" msgstr "" #. type: Content of: <div><div><p> msgid "" "Tech corporations have invaded the education system introducing their " "proprietary products filled with malware. Education is a field that allows " "these companies to easily spread their unjust software in all directions, " "infecting deeply every area of society." msgstr "" #. type: Content of: <div><div><p> msgid "" "<a href=\"/education/edu-team.html\">Join us</a> in the fight against the " "use of nonfree software in schools." msgstr "" #. type: Content of: <div><div><p> msgid "" "This page lists malicious functionalities found in software used in " "educational environments." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2021, 2022, 2023, 2024 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "" "Apple's Operating Systems are Malware - GNU Project - Free Software " "Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Apple's Operating Systems Are Malware" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Types of Apple malware" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#incompatibility\">Incompatibility</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#pressuring\">Pressuring</a>" msgstr "" #. type: Content of: <div><div><p> msgid "" "Apple mainly uses iOS, which is a typical jail, to impose censorship through " "the Apple Store. Please refer to the <a href=\"#jails\">Apple Jails</a> " "section for more information." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple is putting DRM on iPhone batteries, and the system proprietary " "software <a href=\"#M201908150\">turns off certain features when batteries " "are replaced other than by Apple.</a>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "DRM makes the iPhone 7 nearly <a href=\"#iphone7-sabotage\">unrepairable</a> " "by anyone else but Apple." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.vice.com/en/article/bmvxp4/switzerland-wants-a-single-" "universal-phone-charger-by-2017\"> Apple uses DRM software to prevent people " "from charging an iThing with a generic USB cable</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.eff.org/deeplinks/2008/11/apple-downgrades-macbook-" "video-drm\"> DRM (digital restrictions mechanisms) in MacOS</a>. This " "article focuses on the fact that a new model of Macbook introduced a " "requirement for monitors to have malicious hardware, but DRM software in " "MacOS is involved in activating the hardware. The software for accessing " "iTunes is also responsible." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/gadgets/2007/08/aacs-tentacles/\"> DRM " "that caters to Blu-ray disks</a>. (The article focused on Windows and said " "that MacOS would do the same thing subsequently.)" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "iTunes videos have DRM, which allows Apple to <a href=\"https://en.wikipedia." "org/wiki/FairPlay\">dictate where its customers can watch the videos they " "purchased</a>." msgstr "" #. type: Content of: <div><div><h3> msgid "Incompatibility" msgstr "" #. type: Content of: <div><div><p> msgid "" "In this section, we list characteristics of Apple programs that block or " "hinder users from switching to any alternative program—and, in " "particular, from switching to free software which can liberate the device " "the software runs on." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A vulnerability in Apple's Image I/O API allowed an attacker to <a href=" "\"https://www.theguardian.com/technology/2016/jul/22/stagefright-flaw-ios-" "iphone-imessage-apple\">execute malicious code from any application which " "uses this API to render a certain kind of image file</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A bug in the iThings Messages app <a href=\"https://theintercept." "com/2016/04/12/apple-bug-exposed-chat-history-with-a-single-click/\">allowed " "a malicious web site to extract all the user's messaging history</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "Various proprietary programs are designed to harass, annoy or cause trouble " "for the user. They are like sabotage, but they are not grave enough to " "qualify for the word “sabotage”. Nonetheless, they are nasty and " "wrong. This section describes examples of Apple committing interference." msgstr "" #. type: Content of: <div><div><p> msgid "" "Jails are systems that impose censorship on which application programs a " "user can install." msgstr "" #. type: Content of: <div><div><h3> msgid "Pressuring" msgstr "" #. type: Content of: <div><div><p> msgid "" "Proprietary companies can take advantage of their customers by imposing " "arbitrary limits to their use of the software. This section reports " "examples of hard sell and other unjust commercial tactics by Apple." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple Siri <a href=\"https://www.theguardian.com/technology/2015/oct/27/" "apple-music-subscribers-siri-questions\">refuses to give you information</a> " "about music charts if you're not an Apple Music subscriber." msgstr "" #. type: Content of: <div><div><p> msgid "" "These are situations in which Apple employs its power over users to directly " "intervene in ways that harm them or block their work." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple has <a href=\"https://www.theverge.com/2018/5/31/17412396/telegram-" "apple-app-store-app-updates-russia\">blocked Telegram from upgrading its app " "for a month</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This evidently has to do with Russia's command to Apple to block Telegram in " "Russia." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Telegram client is free software on other platforms, but not on iThings. " "Since <a href=\"/proprietary/proprietary-jails.html#apple\">they are jails</" "a>, they don't permit any app to be free software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "MacOS High Sierra forcibly reformats SSD boot drives, and <a href=\"https://" "www.macworld.com/article/230582/apple-file-system-apfs-faq.html\"> changes " "the file system from HFS+ to APFS</a>, which cannot be accessed from GNU/" "Linux, Windows or even older versions of MacOS." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The iPhone 7 contains DRM specifically designed to <a href=\"https://www." "vice.com/en/article/kbjm8e/iphone-7-home-button-unreplaceable-repair-" "software-lock\"> brick it if an “unauthorized” repair shop fixes " "it</a>. “Unauthorized” essentially means anyone besides Apple." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(The article uses the term “lock” to describe the DRM, " "but we prefer to use the term <a href=\"/philosophy/words-to-avoid." "html#DigitalLocks\"> digital handcuffs</a>.)</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple <a href=\"https://www.theregister.com/2016/04/14/" "uninstall_quicktime_for_windows/\"> stops users from fixing the security " "bugs in Quicktime for Windows</a>, while refusing to fix them itself." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Apple Music client program <a href=\"https://web.archive.org/" "web/20170520213355/https://blog.vellumatlanta.com/2016/05/04/apple-stole-my-" "music-no-seriously/\">scans the user's file system for music files, copies " "them to an Apple server, and deletes them</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "iOS version 9 for iThings <a href=\"https://www.theguardian.com/money/2016/" "feb/05/error-53-apple-iphone-software-update-handset-worthless-third-party-" "repair\">sabotages them irreparably if they were repaired by someone other " "than Apple</a>. Apple eventually backed off from this policy under criticism " "from the users. However, it has not acknowledged that this was wrong." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple forced millions of iThings to <a href=\"https://discussions.apple.com/" "thread/7256669?tstart=0\">download a system upgrade without asking the " "users</a>. Apple did not forcibly install the upgrade but the downloading " "alone caused lots of trouble." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple <a href=\"https://www.theguardian.com/technology/2014/dec/04/apple-" "deleted-music-ipods-rivals-steve-jobs\"> deleted from iPods the music that " "users had got from internet music stores that competed with iTunes</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20230315024447/https://www." "computerworld.com/article/2541250/update--apple-plays-hardball--upgrade--" "bricks--unlocked-iphones.html\"> An Apple firmware “upgrade” " "bricked iPhones that had been unlocked</a>. The “upgrade” also " "deactivated applications not approved by <a href=\"/proprietary/proprietary-" "jails.html\">Apple censorship</a>. All this was apparently intentional." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adware Doctor, an ad blocker for MacOS, <a href=\"https://www.vice.com/en/" "article/wjye8x/mac-anti-adware-doctor-app-steals-browsing-history\">reports " "the user's browsing history</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The DMCA and the EU Copyright Directive make it <a href=\"https://boingboing." "net/2017/11/25/la-la-la-cant-hear-you.html\"> illegal to study how iOS " "cr…apps spy on users</a>, because this would require circumventing " "the iOS DRM." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In the latest iThings system, “turning off” WiFi and Bluetooth " "the obvious way <a href=\"https://www.theguardian.com/technology/2017/sep/21/" "ios-11-apple-toggling-wifi-bluetooth-control-centre-doesnt-turn-them-off\"> " "doesn't really turn them off</a>. A more advanced way really does turn them " "off—only until 5am. That's Apple for you—“We know you " "want to be spied on”." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple proposes <a href=\"https://www.theguardian.com/technology/2017/feb/15/" "apple-removing-iphone-home-button-fingerprint-scanning-screen\">a " "fingerprint-scanning touch screen</a>—which would mean no way to use " "it without having your fingerprints taken. Users would have no way to tell " "whether the phone is snooping on them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "iPhones <a href=\"https://theintercept.com/2016/11/17/iphones-secretly-send-" "call-history-to-apple-security-firm-says/\">send lots of personal data to " "Apple's servers</a>. Big Brother can get them from there." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "iThings automatically upload to Apple's servers all the photos and videos " "they make." msgstr "" #. type: Content of: <div><div><ul><li><blockquote><p> msgid "" "iCloud Photo Library stores every photo and video you take, and keeps them " "up to date on all your devices. Any edits you make are automatically updated " "everywhere. […]" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "(From <a href=\"https://web.archive.org/web/20150921152044/https://www.apple." "com/icloud/photos/\">Apple's iCloud information</a> as accessed on 24 Sep " "2015.) The iCloud feature is <a href=\"https://support.apple.com/en-us/" "HT202033\">activated by the startup of iOS</a>. The term “cloud” " "means “please don't ask where.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "There is a way to <a href=\"https://support.apple.com/en-us/HT201104\"> " "deactivate iCloud</a>, but it's active by default so it still counts as a " "surveillance functionality." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Unknown people apparently took advantage of this to <a href=\"https://www." "theguardian.com/technology/2014/sep/01/naked-celebrity-hack-icloud-backup-" "jennifer-lawrence\">get nude photos of many celebrities</a>. They needed to " "break Apple's security to get at them, but NSA can access any of them " "through <a href=\"/philosophy/surveillance-vs-democracy.html#digitalcash" "\">PRISM</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple has made various <a href=\"https://www.theguardian.com/technology/2014/" "nov/04/apple-data-privacy-icloud\"> MacOS programs send files to Apple " "servers without asking permission</a>. This exposes the files to Big " "Brother and perhaps to other snoops." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It also demonstrates how you can't trust proprietary software, because even " "if today's version doesn't have a malicious functionality, tomorrow's " "version might add it. The developer won't remove the malfeature unless many " "users push back hard, and the users can't remove it themselves." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "MacOS automatically <a href=\"https://web.archive.org/web/20170831144456/" "https://www.washingtonpost.com/news/the-switch/wp/2014/10/30/how-one-mans-" "private-files-ended-up-on-apples-icloud-without-his-consent/\"> sends to " "Apple servers unsaved documents being edited</a>. The things you have not " "decided to save are <a href=\"https://www.schneier.com/blog/archives/2014/10/" "apple_copies_yo.html?utm_source=twitterfeed&utm_medium=twitter/\"> even " "more sensitive</a> than the things you have stored in files." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple admits the <a href=\"https://www.intego.com/mac-security-blog/" "spotlight-suggestions-in-os-x-yosemite-and-ios-are-you-staying-private/\"> " "spying in a search facility</a>, but there's a lot <a href=\"https://gothub." "projectsegfau.lt/fix-macosx/yosemite-phone-home/\"> more snooping that Apple " "has not talked about</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Various operations in <a href=\"https://lifehacker.com/safari-and-spotlight-" "can-send-data-to-apple-heres-how-1648453540\"> the latest MacOS send reports " "to Apple</a> servers." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/technology/2014/jul/23/iphone-" "backdoors-surveillance-forensic-services\"> Several “features” " "of iOS seem to exist for no possible purpose other than surveillance</a>. " "Here is the <a href=\"http://www.zdziarski.com/blog/wp-content/" "uploads/2014/07/iOS_Backdoors_Attack_Points_Surveillance_Mechanisms_Moved.pdf" "\"> Technical presentation</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://finance.yahoo.com/blogs/the-exchange/privacy-advocates-" "worry-over-new-apple-iphone-tracking-feature-161836223.html\"> Spotlight " "search</a> sends users' search terms to Apple." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The <a class=\"not-a-duplicate\" href=\"https://finance.yahoo.com/blogs/the-" "exchange/privacy-advocates-worry-over-new-apple-iphone-tracking-" "feature-161836223.html\"> iBeacon</a> lets stores determine exactly where " "the iThing is, and get other info too." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20190924053515/https://www.zerohedge." "com/news/2013-12-30/how-nsa-hacks-your-iphone-presenting-dropout-jeep\"> " "Either Apple helps the NSA snoop on all the data in an iThing, or it is " "totally incompetent</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The iThing also <a href=\"https://www.theregister.com/2013/08/08/" "ios7_tracking_now_its_a_favourite_feature/\"> tells Apple its geolocation</" "a> by default, though that can be turned off." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "There is also a feature for web sites to track users, which is <a href=" "\"https://nakedsecurity.sophos.com/2012/10/17/how-to-disable-apple-ios-user-" "tracking-ios-6/\"> enabled by default</a>. (That article talks about iOS 6, " "but it is still true in iOS 7.)" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Users cannot make an Apple ID (<a href=\"https://apple.stackexchange.com/" "questions/49951/how-can-i-download-free-apps-without-registering-an-apple-id" "\">necessary to install even gratis apps</a>) without giving a valid email " "address and receiving the verification code Apple sends to it." msgstr "" #. type: Content of: <title> msgid "Proprietary Deception - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Deception" msgstr "" #. type: Content of: <div><div><p> msgid "" "Deception is a malicious functionality that makes the program dishonest or " "conceals trickery. Here are examples of such malicious functionalities. " "Cases of deception that involve taking people's money are listed in <a href=" "\"/proprietary/proprietary-fraud.html#main-heading\"> Proprietary Fraud</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Twenty nine “beauty camera” apps that used to be on Google Play " "had one or more malicious functionalities, such as <a href=\"https://www." "androidpolice.com/2019/02/03/google-bans-29-beauty-camera-apps-from-the-play-" "store-that-steal-your-photos/\"> stealing users' photos instead of “" "beautifying” them</a>, pushing unwanted and often malicious ads on " "users, and redirecting them to phishing sites that stole their credentials. " "Furthermore, the user interface of most of them was designed to make " "uninstallation difficult." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many proprietary programs secretly <a href=\"https://www.theregister." "com/2016/08/05/payperinstall_study/\">install other proprietary programs " "that the users don't want</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The proprietor of the Pokémon Go game <a href=\"https://www.theguardian.com/" "technology/2016/jul/14/pokemon-go-sponsored-locations-restaurants-business" "\"> invites restaurants and other businesses to pay to have the game lure " "people there</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A top-ranking proprietary Instagram client promising to tell users who's " "been watching their pictures was in reality <a href=\"https://www." "theguardian.com/technology/2015/nov/11/top-ranking-free-app-stole-instagram-" "passwords\">stealing their credentials</a>, advertising itself on their " "feed, and posting images without their consent." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2015-2023, 2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary DRM - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary DRM" msgstr "" #. type: Content of: <div><div><p> msgid "" "Here are examples of proprietary programs and systems that implement " "<em>digital restrictions management</em> (DRM): functionalities designed " "intentionally to restrict what users can do. These functionalities are also " "called <em>digital handcuffs</em>." msgstr "" #. type: Content of: <div><div><p> msgid "" "DRM is reinforced by <a href=\"http://www.theguardian.com/technology/" "blog/2014/feb/05/digital-rights-management\"> censorship laws</a> that ban " "software (and hardware) that can break the handcuffs. Instead of these " "laws, DRM itself ought to be illegal. Please support our campaign to <a " "href=\"http://DefectiveByDesign.org/\">abolish DRM</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://itstillworks.com/kindle-drm-17841.html\"> The Amazon " "Kindle has DRM</a>. That article is flawed in that it fails to treat DRM as " "an ethical question; it takes for granted that whatever Amazon might do to " "its users is legitimate. It refers to DRM as digital “rights” " "management, which is the spin term used to promote DRM. Nonetheless it " "serves as a reference for the facts." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We refer to that product as the <a href=\"/philosophy/why-call-it-the-" "swindle.html\"> Amazon Swindle</a> because of this and <a href=\"/philosophy/" "ebooks.html\"> other malicious functionalities</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "HP's firmware downgrade <a href=\"https://www.theguardian.com/" "technology/2016/sep/20/hp-inkjet-printers-unofficial-cartridges-software-" "update\">imposed DRM on some printers, which now refuse to function with " "third-party ink cartridges</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Philips “smart” lightbulbs had initially been designed to " "interact with other companies' smart light bulbs, but <a href=\"https://www." "techdirt.com/2015/12/14/lightbulb-drm-philips-locks-purchasers-out-third-" "party-bulbs-with-firmware-update/\"> later the company updated the firmware " "to disallow interoperability</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If a product is “smart”, and you didn't build it, it is cleverly " "serving its manufacturer <em>against you</em>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Netflix Android app <a href=\"https://torrentfreak.com/netflix-cracks-" "down-on-vpn-and-proxy-pirates-150103/\"> forces the use of Google DNS</a>. " "This is one of the methods that Netflix uses to enforce the geolocation " "restrictions dictated by the movie studios." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe made “Digital Editions,” the e-reader used by most US " "libraries, spy on the user <a href=\"https://web.archive.org/" "web/20141220181015/http://www.computerworlduk.com/blogs/open-enterprise/drm-" "strikes-again-3575860/\">for the sake of DRM.</a>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20131007102857/http://www.nclnet.org/" "technology/73-digital-rights-management/124-whos-driving-the-copyright-laws-" "consumers-insist-on-the-right-to-back-it-up\"> DVDs and Blu-ray disks have " "DRM</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "That page uses spin terms that favor DRM, including <a href=\"/philosophy/" "words-to-avoid.html#DigitalRightsManagement\"> digital “rights” " "management</a> and <a href=\"/philosophy/words-to-avoid.html#Protection" "\">“protect”</a>, and it claims that “artists” " "(rather than companies) are primarily responsible for putting digital " "restrictions management into these disks. Nonetheless, it is a reference " "for the facts." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Every Blu-ray disk (with few, rare exceptions) has DRM—so don't use " "Blu-ray disks!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "DRM does more nastiness to published works than merely stopping people from " "looking at and/or copying them. Even when it allows you to look, it harasses " "you in many ways. Cory Doctorow's article presents <a href=\"https://" "boingboing.net/2010/02/18/infographic-buying-d.html\"> DVDs as an example</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We condemn the propaganda term “pirate” when it is applied to " "people that share copies. Many of these DVDs are made and distributed " "commercially; in reference to that practice, “pirate” might be " "partly justified. But not when they protect users from harassment." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The fundamental cause of this harassment, and the fundamental wrong of the " "DRM in DVDs, is the requirement to use nonfree software to play the DVD. " "Fortunately we have free replacement software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://en.wikipedia.org/wiki/High-" "bandwidth_Digital_Content_Protection\"> HDCP</a> is a DRM system that " "encrypts video and audio data from the processor to the monitor. It is " "implemented mainly in hardware, but the system software also participates, " "which makes it qualify as malware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Besides controlling users, HDCP denies their fair-use rights and causes " "numerous practical problems." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.eff.org/deeplinks/2008/02/adobe-pushes-drm-flash\"> " "DRM in Flash Player</a>." msgstr "" #. type: Content of: <title> msgid "Proprietary Surveillance - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Surveillance" msgstr "" #. type: Content of: <div><div><a> msgid "<a href=\"/graphics/dog.html\">" msgstr "" #. type: Attribute 'alt' of: <div><div><a><img> msgid "" "Cartoon of a dog, wondering at the three ads that popped up on his computer " "screen..." msgstr "" #. type: Content of: <div><div><p> msgid "“How did they find out I'm a dog?”" msgstr "" #. type: Content of: <div><div><p> msgid "" "A common malicious functionality is to snoop on the user. This page records " "<strong>clearly established cases of proprietary software that spies on or " "tracks users</strong>. Manufacturers even refuse to <a href=\"https://" "techcrunch.com/2018/10/19/smart-home-devices-hoard-data-government-demands/" "\">say whether they snoop on users for the state</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "All appliances and applications that are tethered to a specific server are " "snoopers by nature. We do not list them here because they have their own " "page: <a href=\"/proprietary/proprietary-tethers.html#about-page" "\">Proprietary Tethers</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "There is a similar site named <a href=\"https://spyware.neocities.org" "\">Spyware Watchdog</a> that classifies spyware programs, so that users can " "be more aware that they are installing spyware." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Table of Contents" msgstr "" #. type: Content of: <div><div><div><h4> msgid "<a href=\"#Introduction\">Introduction</a>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "<a href=\"#OSSpyware\">Spyware in Laptops and Desktops</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInWindows\">Windows</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInMacOS\">MacOS</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInBIOS\">BIOS</a>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "<a href=\"#SpywareOnMobiles\">Spyware on Mobiles</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInTelephones\">All “Smart” Phones</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareIniThings\">iThings</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInAndroid\">Android Telephones</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInElectronicReaders\">E-Readers</a>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "<a href=\"#SpywareInApplications\">Spyware in Applications</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInDesktopApps\">Desktop Apps</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInMobileApps\">Mobile Apps</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInSkype\">Skype</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInGames\">Games</a>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "<a href=\"#SpywareInEquipment\">Spyware in Connected Equipment</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInTVSets\">TV Sets</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInCameras\">Cameras</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInToys\">Toys</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInDrones\">Drones</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareAtHome\">Other Appliances</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareOnWearables\">Wearables</a>" msgstr "" #. type: Content of: <div><div><div><ul><li><ul><li> msgid "<a href=\"#SpywareOnSmartWatches\">“Smart” Watches</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInVehicles\">Vehicles</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInVR\">Virtual Reality</a>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "<a href=\"#SpywareOnTheWeb\">Spyware on the Web</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInChrome\">Chrome</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInJavaScript\">JavaScript</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInFlash\">Flash</a>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "<a href=\"#SpywareInNetworks\">Spyware in Networks</a>" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Introduction" msgstr "" #. type: Content of: <div><div><p> msgid "" "For decades, the Free Software movement has been denouncing the abusive " "surveillance machine of <a href=\"/proprietary/proprietary.html" "\">proprietary software</a> companies such as <a href=\"/proprietary/malware-" "microsoft.html\">Microsoft</a> and <a href=\"/proprietary/malware-apple.html" "\">Apple</a>. In the recent years, this tendency to watch people has spread " "across industries, not only in the software business, but also in the " "hardware. Moreover, it also spread dramatically away from the keyboard, in " "the mobile computing industry, in the office, at <a href=\"https://www." "theguardian.com/world/2023/sep/07/uk-owners-of-smart-home-devices-being-" "asked-for-swathes-of-personal-data\"> home</a>, in transportation systems, " "and in the classroom." msgstr "" #. type: Content of: <div><div><h4> msgid "Aggregate or anonymized data" msgstr "" #. type: Content of: <div><div><p> msgid "" "Many companies, in their privacy policy, have a clause that claims they " "share aggregate, non-personally identifiable information with third parties/" "partners. Such claims are worthless, for several reasons:" msgstr "" #. type: Content of: <div><div><ul><li> msgid "They could change the policy at any time." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "They can twist the words by distributing an “aggregate” of " "“anonymized” data which can be reidentified and attributed to " "individuals." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "The raw data they don't normally distribute can be taken by data breaches." msgstr "" #. type: Content of: <div><div><ul><li> msgid "The raw data they don't normally distribute can be taken by subpoena." msgstr "" #. type: Content of: <div><div><p> msgid "" "Therefore, we must not be distracted by companies' statements of what they " "will <em>do</em> with the data they collect. The wrong is that they collect " "it at all." msgstr "" #. type: Content of: <div><div><p> msgid "" "Entries in each category are in reverse chronological order, based on the " "dates of publication of linked articles. The latest additions are listed on " "the <a href=\"/proprietary/proprietary.html#latest\">main page</a> of the " "Malware section." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Spyware in Laptops and Desktops" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#OSSpyware\">#OSSpyware</a>)</" "span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "Windows" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInWindows" "\">#SpywareInWindows</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "HP's proprietary operating system <a href=\"https://www.bbc.com/news/" "technology-42309371\">includes a proprietary keyboard driver with a key " "logger in it</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20150905163414/http://www.pocket-lint." "com/news/134954-cortana-is-always-listening-with-new-wake-on-voice-tech-even-" "when-windows-10-is-sleeping\"> Intel devices will be able to listen for " "speech all the time, even when “off.”</a>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20140219183154/http://www.techrepublic." "com/blog/asian-technology/japanese-government-warns-baidu-ime-is-spying-on-" "users/\"> Baidu's Japanese-input and Chinese-input apps spy on users</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "Microsoft's snooping on users did not start with Windows 10. There's a lot " "more <a href=\"/proprietary/malware-microsoft.html\"> Microsoft malware</a>." msgstr "" #. type: Content of: <div><div><div><h4> msgid "MacOS" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInMacOS" "\">#SpywareInMacOS</a>)</span>" msgstr "" #. type: Content of: <div><div><p> msgid "" "There's a lot more <a href=\"#SpywareIniThings\">iThing spyware</a>, and <a " "href=\"/proprietary/malware-apple.html\">Apple malware</a>." msgstr "" #. type: Content of: <div><div><div> msgid "<span id=\"SpywareAtLowLevel\"></span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "BIOS" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInBIOS" "\">#SpywareInBIOS</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.computerworld.com/article/2984889/lenovo-collects-" "usage-data-on-thinkpad-thinkcentre-and-thinkstation-pcs.html\"> Lenovo " "stealthily installed crapware and spyware via BIOS</a> on Windows installs. " "Note that the specific sabotage method Lenovo used did not affect GNU/Linux; " "also, a “clean” Windows install is not really clean since <a " "href=\"/proprietary/malware-microsoft.html\">Microsoft puts in its own " "malware</a>." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Spyware on Mobiles" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareOnMobiles" "\">#SpywareOnMobiles</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "All “Smart” Phones" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInTelephones" "\">#SpywareInTelephones</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The natural extension of monitoring people through “their” " "phones is <a href=\"https://news.northwestern.edu/stories/2016/01/fool-" "activity-tracker\"> proprietary software to make sure they can't “" "fool” the monitoring</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "According to Edward Snowden, <a href=\"https://www.bbc.com/news/" "uk-34444233\">agencies can take over smartphones</a> by sending hidden text " "messages which enable them to turn the phones on and off, listen to the " "microphone, retrieve geo-location data from the GPS, take photographs, read " "text messages, read call, location and web browsing history, and read the " "contact list. This malware is designed to disguise itself from investigation." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Portable phones with GPS <a href=\"https://www.aclu.org/issues/privacy-" "technology/location-tracking/you-are-being-tracked\"> will send their GPS " "location on remote command, and users cannot stop them</a>. (The US says it " "will eventually require all new portable phones to have GPS.)" msgstr "" #. type: Content of: <div><div><div><h4> msgid "iThings" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareIniThings" "\">#SpywareIniThings</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "Android Telephones" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInAndroid" "\">#SpywareInAndroid</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some portable phones <a href=\"https://www.prnewswire.com/news-releases/" "kryptowire-discovered-mobile-phone-firmware-that-transmitted-personally-" "identifiable-information-pii-without-user-consent-or-disclosure-300362844." "html\">are sold with spyware sending lots of data to China</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Samsung phones come with <a href=\"https://arstechnica.com/gadgets/2015/07/" "samsung-sued-for-loading-devices-with-unremovable-crapware-in-china/\">apps " "that users can't delete</a>, and they send so much data that their " "transmission is a substantial expense for users. Said transmission, not " "wanted or requested by the user, clearly must constitute spying of some kind." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"/proprietary/proprietary-back-doors.html#samsung\"> Samsung's back " "door</a> provides access to any file on the system." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some manufacturers add a <a href=\"https://androidsecuritytest.com/features/" "logs-and-services/loggers/carrieriq/\"> hidden general surveillance package " "such as Carrier IQ</a>." msgstr "" #. type: Content of: <div><div><div><h4> msgid "E-Readers" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInElectronicReaders" "\">#SpywareInElectronicReaders</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Spyware in many e-readers—not only the Kindle: <a href=\"https://www." "eff.org/pages/reader-privacy-chart-2012\"> they report even which page the " "user reads at what time</a>." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Spyware in Applications" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInApplications" "\">#SpywareInApplications</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "Desktop Apps" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInDesktopApps" "\">#SpywareInDesktopApps</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "Mobile Apps" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInMobileApps" "\">#SpywareInMobileApps</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Spanish football streaming app <a href=\"https://boingboing." "net/2018/06/11/spanish-football-app-turns-use.html\">tracks the user's " "movements and listens through the microphone</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "This makes them act as spies for licensing enforcement." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We expect it implements DRM, too—that there is no way to save a " "recording. But we can't be sure from the article." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If you learn to care much less about sports, you will benefit in many ways. " "This is one more." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "More than <a href=\"https://www.theguardian.com/technology/2018/apr/16/child-" "apps-games-android-us-google-play-store-data-sharing-law-privacy\">50% of " "the 5,855 Android apps studied by researchers were found to snoop and " "collect information about its users</a>. 40% of the apps were found to " "insecurely snitch on its users. Furthermore, they could detect only some " "methods of snooping, in these proprietary apps whose source code they cannot " "look at. The other apps might be snooping in other ways." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is evidence that proprietary apps generally work against their users. " "To protect their privacy and freedom, Android users need to get rid of the " "proprietary software—both proprietary Android by <a href=\"https://" "replicant.us\">switching to Replicant</a>, and the proprietary apps by " "getting apps from the free software only <a href=\"https://f-droid.org/\">F-" "Droid store</a> that <a href=\"https://f-droid.org/docs/Anti-Features/\"> " "prominently warns the user if an app contains anti-features</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Grindr collects information about <a href=\"https://www.commondreams.org/" "news/2018/04/02/egregious-breach-privacy-popular-app-grindr-supplies-third-" "parties-users-hiv-status\"> which users are HIV-positive, then provides the " "information to companies</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Grindr should not have so much information about its users. It could be " "designed so that users communicate such info to each other but not to the " "server's database." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The moviepass app and dis-service spy on users even more than users " "expected. It <a href=\"https://techcrunch.com/2018/03/05/moviepass-ceo-" "proudly-says-the-app-tracks-your-location-before-and-after-movies/\">records " "where they travel before and after going to a movie</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "Don't be tracked—pay cash!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tracking software in popular Android apps is pervasive and sometimes very " "clever. Some trackers can <a href=\"https://theintercept.com/2017/11/24/" "staggering-variety-of-clandestine-trackers-found-in-popular-android-apps/\"> " "follow a user's movements around a physical store by noticing WiFi networks</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Sarahah app <a href=\"https://theintercept.com/2017/08/27/hit-app-" "sarahah-quietly-uploads-your-address-book/\"> uploads all phone numbers and " "email addresses</a> in user's address book to developer's server." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(Note that this article misuses the words “<a href=\"/" "philosophy/free-sw.html\">free software</a>” referring to zero price.)" "</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "20 dishonest Android apps recorded <a href=\"https://arstechnica.com/" "information-technology/2017/07/stealthy-google-play-apps-recorded-calls-and-" "stole-e-mails-and-texts/\">phone calls and sent them and text messages and " "emails to snoopers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google did not intend to make these apps spy; on the contrary, it worked in " "various ways to prevent that, and deleted these apps after discovering what " "they did. So we cannot blame Google specifically for the snooping of these " "apps." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "On the other hand, Google redistributes nonfree Android apps, and therefore " "shares in the responsibility for the injustice of their being nonfree. It " "also distributes its own nonfree apps, such as Google Play, <a href=\"/" "philosophy/free-software-even-more-important.html\">which are malicious</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Could Google have done a better job of preventing apps from cheating? There " "is no systematic way for Google, or Android users, to inspect executable " "proprietary apps to see what they do." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google could demand the source code for these apps, and study the source " "code somehow to determine whether they mistreat users in various ways. If it " "did a good job of this, it could more or less prevent such snooping, except " "when the app developers are clever enough to outsmart the checking." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "But since Google itself develops malicious apps, we cannot trust Google to " "protect us. We must demand release of source code to the public, so we can " "depend on each other." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apps for BART <a href=\"https://web.archive.org/web/20171124190046/https://" "consumerist.com/2017/05/23/passengers-say-commuter-rail-app-illegally-" "collects-personal-user-data/\"> snoop on users</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "With free software apps, users could <em>make sure</em> that they don't " "snoop." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "With proprietary apps, one can only hope that they don't." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A study found 234 Android apps that track users by <a href=\"https://www." "bleepingcomputer.com/news/security/234-android-applications-are-currently-" "using-ultrasonic-beacons-to-track-users/\">listening to ultrasound from " "beacons placed in stores or played by TV programs</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Faceapp appears to do lots of surveillance, judging by <a href=\"https://web." "archive.org/web/20170426191242/https://www.washingtonpost.com/news/the-" "intersect/wp/2017/04/26/everything-thats-wrong-with-faceapp-the-latest-" "creepy-photo-app-for-your-face/\"> how much access it demands to personal " "data in the device</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Users are suing Bose for <a href=\"https://web.archive.org/" "web/20170423010030/https://www.washingtonpost.com/news/the-switch/" "wp/2017/04/19/bose-headphones-have-been-spying-on-their-customers-lawsuit-" "claims/\"> distributing a spyware app for its headphones</a>. Specifically, " "the app would record the names of the audio files users listen to along with " "the headphone's unique serial number." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The suit accuses that this was done without the users' consent. If the fine " "print of the app said that users gave consent for this, would that make it " "acceptable? No way! It should be flat out <a href=\"/philosophy/surveillance-" "vs-democracy.html\"> illegal to design the app to snoop at all</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Pairs of Android apps can collude to transmit users' personal data to " "servers. <a href=\"https://www.theatlantic.com/technology/archive/2017/04/" "when-apps-collude-to-steal-your-data/522177/\">A study found tens of " "thousands of pairs that collude</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Verizon <a href=\"https://yro.slashdot.org/story/17/03/30/0112259/verizon-to-" "force-appflash-spyware-on-android-phones\"> announced an opt-in proprietary " "search app that it will</a> pre-install on some of its phones. The app will " "give Verizon the same information about the users' searches that Google " "normally gets when they use its search engine." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Currently, the app is <a href=\"https://www.eff.org/deeplinks/2017/04/update-" "verizons-appflash-pre-installed-spyware-still-spyware\"> being pre-installed " "on only one phone</a>, and the user must explicitly opt-in before the app " "takes effect. However, the app remains spyware—an “" "optional” piece of spyware is still spyware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Meitu photo-editing app <a href=\"https://theintercept.com/2017/01/21/" "popular-selfie-app-sending-user-data-to-china-researchers-say/\">sends user " "data to a Chinese company</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Uber app tracks <a href=\"https://techcrunch.com/2016/11/28/uber-" "background-location-data-collection/\">clients' movements before and after " "the ride</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This example illustrates how “getting the user's consent” for " "surveillance is inadequate as a protection against massive surveillance." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Following is a non-exhaustive list, taken from the research paper, of some " "proprietary VPN apps that track users and infringe their privacy:" msgstr "" #. type: Content of: <div><div><ul><li><dl><dt> msgid "SurfEasy" msgstr "" #. type: Content of: <div><div><ul><li><dl><dd> msgid "" "Includes tracking libraries such as NativeX and Appflood, meant to track " "users and show them targeted ads." msgstr "" #. type: Content of: <div><div><ul><li><dl><dt> msgid "sFly Network Booster" msgstr "" #. type: Content of: <div><div><ul><li><dl><dd> msgid "" "Requests the <code>READ_SMS</code> and <code>SEND_SMS</code> permissions " "upon installation, meaning it has full access to users' text messages." msgstr "" #. type: Content of: <div><div><ul><li><dl><dt> msgid "DroidVPN and TigerVPN" msgstr "" #. type: Content of: <div><div><ul><li><dl><dd> msgid "" "Requests the <code>READ_LOGS</code> permission to read logs for other apps " "and also core system logs. TigerVPN developers have confirmed this." msgstr "" #. type: Content of: <div><div><ul><li><dl><dt> msgid "HideMyAss" msgstr "" #. type: Content of: <div><div><ul><li><dl><dd> msgid "" "Sends traffic to LinkedIn. Also, it stores detailed logs and may turn them " "over to the UK government if requested." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Facebook's new Magic Photo app <a href=\"https://www.theregister." "com/2015/11/10/facebook_scans_camera_for_your_friends/\"> scans your mobile " "phone's photo collections for known faces</a>, and suggests you circulate " "the picture you take according to who is in the frame." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This spyware feature seems to require online access to some known-faces " "database, which means the pictures are likely to be sent across the wire to " "Facebook's servers and face-recognition algorithms." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If so, none of Facebook users' pictures are private anymore, even if the " "user didn't “upload” them to the service." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Facebook's app listens all the time, <a href=\"https://www.independent.co.uk/" "tech/facebook-using-people-s-phones-to-listen-in-on-what-they-re-saying-" "claims-professor-a7057526.html\">to snoop on what people are listening to or " "watching</a>. In addition, it may be analyzing people's conversations to " "serve them with targeted advertisements." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apps that include <a href=\"https://web.archive.org/web/20180913014551/" "http://techaeris.com/2016/01/13/symphony-advanced-media-software-tracks-your-" "digital-life-through-your-smartphone-mic/\"> Symphony surveillance software " "snoop on what radio and TV programs are playing nearby</a>. Also on what " "users post on various sites such as Facebook, Google+ and Twitter." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "“Cryptic communication,” unrelated to the app's functionality, " "was <a href=\"https://news.mit.edu/2015/data-transferred-android-apps-" "hiding-1119\"> found in the 500 most popular gratis Android apps</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article should not have described these apps as “free”—" "they are not free software. The clear way to say “zero price” " "is “gratis.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article takes for granted that the usual analytics tools are legitimate, " "but is that valid? Software developers have no right to analyze what users " "are doing or how. “Analytics” tools that snoop are just as " "wrong as any other snooping." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "More than 73% and 47% of mobile applications, for Android and iOS " "respectively <a href=\"https://techscience.org/a/2015103001/\">hand over " "personal, behavioral and location information</a> of their users to third " "parties." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Like most “music screaming” disservices, Spotify is based on " "proprietary malware (DRM and snooping). In August 2015 it <a href=\"https://" "www.theguardian.com/technology/2015/aug/21/spotify-faces-user-backlash-over-" "new-privacy-policy\"> demanded users submit to increased snooping</a>, and " "some are starting to realize that it is nasty." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This article shows the <a href=\"https://www.theregister.com/2015/08/21/" "spotify_worse_than_the_nsa/\"> twisted ways that they present snooping as a " "way to “serve” users better</a>—never mind whether they " "want that. This is a typical example of the attitude of the proprietary " "software industry towards those they have subjugated." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "Out, out, damned Spotify!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.cl.cam.ac.uk/~arb33/papers/FerreiraEtAl-Securacy-" "WiSec2015.pdf\"> A study in 2015</a> found that 90% of the top-ranked gratis " "proprietary Android apps contained recognizable tracking libraries. For the " "paid proprietary apps, it was only 60%." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article confusingly describes gratis apps as “free”, but " "most of them are not in fact <a href=\"/philosophy/free-sw.html\">free " "software</a>. It also uses the ugly word “monetize”. A good " "replacement for that word is “exploit”; nearly always that will " "fit perfectly." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Gratis Android apps (but not <a href=\"/philosophy/free-sw.html\">free " "software</a>) connect to 100 <a href=\"https://www.theguardian.com/" "technology/2015/may/06/free-android-apps-connect-tracking-advertising-" "websites\">tracking and advertising</a> URLs, on the average." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Widely used <a href=\"https://freedom-to-tinker.com/2015/04/06/scan-this-or-" "scan-me-user-privacy-barcode-scanning-applications/\">proprietary QR-code " "scanner apps snoop on the user</a>. This is in addition to the snooping done " "by the phone company, and perhaps by the OS in the phone." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Don't be distracted by the question of whether the app developers get users " "to say “I agree”. That is no excuse for malware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many proprietary apps for mobile devices report which other apps the user " "has installed. <a href=\"https://techcrunch.com/2014/11/26/twitter-app-" "graph/\">Twitter is doing this in a way that at least is visible and " "optional</a>. Not as bad as what the others do." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Simeji keyboard is a smartphone version of Baidu's <a href=\"/" "proprietary/proprietary-surveillance.html#baidu-ime\">spying <abbr title=" "\"Input Method Editor\">IME</abbr></a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The nonfree Snapchat app's principal purpose is to restrict the use of data " "on the user's computer, but it does surveillance too: <a href=\"https://www." "theguardian.com/media/2013/dec/27/snapchat-may-be-exposed-hackers\"> it " "tries to get the user's list of other people's phone numbers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Brightest Flashlight app <a href=\"https://www.theguardian.com/" "technology/2013/dec/06/android-app-50m-downloads-sent-data-advertisers\"> " "sends user data, including geolocation, for use by companies</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The FTC criticized this app because it asked the user to approve sending " "personal data to the app developer but did not ask about sending it to other " "companies. This shows the weakness of the reject-it-if-you-dislike-snooping " "“solution” to surveillance: why should a flashlight app send any " "information to anyone? A free software flashlight app would not." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "FTC says most mobile apps for children don't respect privacy: <a href=" "\"https://arstechnica.com/information-technology/2012/12/ftc-disclosures-" "severely-lacking-in-kids-mobile-appsand-its-getting-worse/\"> https://" "arstechnica.com/information-technology/2012/12/ftc-disclosures-severely-" "lacking-in-kids-mobile-appsand-its-getting-worse/</a>." msgstr "" #. type: Content of: <div><div><div><h4> msgid "Skype" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInSkype" "\">#SpywareInSkype</a>)</span>" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInGames" "\">#SpywareInGames</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Spyware in Connected Equipment" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInEquipment" "\">#SpywareInEquipment</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The bad security in many Internet of Stings devices allows <a href=\"https://" "www.techdirt.com/2017/08/28/iot-devices-provide-comcast-wonderful-new-" "opportunity-to-spy-you/\">ISPs to snoop on the people that use them</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "Don't be a sucker—reject all the stings." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(It is unfortunate that the article uses the term <a href=\"/" "philosophy/words-to-avoid.html#Monetize\">“monetize”</a>.)</" "small>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "TV Sets" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInTVSets" "\">#SpywareInTVSets</a>)</span>" msgstr "" #. type: Content of: <div><div><p> msgid "" "Emo Phillips made a joke: The other day a woman came up to me and said, " "“Didn't I see you on television?” I said, “I don't know. " "You can't see out the other way.” Evidently that was before Amazon " "“smart” TVs." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Vizio “smart” <a href=\"https://www.ftc.gov/business-guidance/" "blog/2017/02/what-vizio-was-doing-behind-tv-screen\">TVs report everything " "that is viewed on them, and not just broadcasts and cable</a>. Even if the " "image is coming from the user's own computer, the TV reports what it is. The " "existence of a way to disable the surveillance, even if it were not hidden " "as it was in these TVs, does not legitimize the surveillance." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some web and TV advertisements play inaudible sounds to be picked up by " "proprietary malware running on other devices in range so as to determine " "that they are nearby. Once your Internet devices are paired with your TV, " "advertisers can correlate ads with Web activity, and other <a href=\"https://" "arstechnica.com/tech-policy/2015/11/beware-of-ads-that-use-inaudible-sound-" "to-link-your-phone-tv-tablet-and-pc/\"> cross-device tracking</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Vizio goes a step further than other TV manufacturers in spying on their " "users: their <a href=\"https://www.propublica.org/article/own-a-vizio-smart-" "tv-its-watching-you\"> “smart” TVs analyze your viewing habits " "in detail and link them your IP address</a> so that advertisers can track " "you across devices." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It is possible to turn this off, but having it enabled by default is an " "injustice already." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tivo's alliance with Viacom adds 2.3 million households to the 600 millions " "social media profiles the company already monitors. Tivo customers are " "unaware they're being watched by advertisers. By combining TV viewing " "information with online social media participation, Tivo can now <a href=" "\"https://www.reuters.com/article/viacom-tivo-idUSL1N12U1VV20151102/\"> " "correlate TV advertisement with online purchases</a>, exposing all users to " "new combined surveillance by default." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Vizio “smart” TVs recognize and <a href=\"https://www.engadget." "com/2015-07-24-vizio-ipo-inscape-acr.html\">track what people are watching</" "a>, even if it isn't a TV channel." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Verizon cable TV <a href=\"https://arstechnica.com/information-" "technology/2015/05/verizon-fios-reps-know-what-tv-channels-you-watch/\"> " "snoops on what programs people watch, and even what they wanted to record</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Vizio <a href=\"https://boingboing.net/2015/04/30/telescreen-watch-vizio-" "adds-s.html\"> used a firmware “upgrade” to make its TVs snoop " "on what users watch</a>. The TVs did not do that when first sold." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Samsung “Smart” TV <a href=\"https://www.consumerreports.org/" "cro/news/2015/02/who-s-the-third-party-that-samsung-and-lg-smart-tvs-are-" "sharing-your-voice-data-with/index.htm\"> transmits users' voice on the " "internet to another company, Nuance</a>. Nuance can save it and would then " "have to give it to the US or some other government." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Speech recognition is not to be trusted unless it is done by free software " "in your own computer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In its privacy policy, Samsung explicitly confirms that <a href=\"https://" "theweek.com/speedreads/538379/samsung-warns-customers-not-discuss-personal-" "information-front-smart-tvs\">voice data containing sensitive information " "will be transmitted to third parties</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Amazon “Smart” TV is <a href=\"https://www.theguardian.com/" "technology/shortcuts/2014/nov/09/amazon-echo-smart-tv-watching-listening-" "surveillance\"> snooping all the time</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "More or less all “smart” TVs <a href=\"https://myce.wiki/news/" "reseachers-all-smart-tvs-spy-on-you-sony-monitors-all-channel-switches-72851/" "\">spy on their users</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "The report was as of 2014, but we don't expect this has got better." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This shows that laws requiring products to get users' formal consent before " "collecting personal data are totally inadequate. And what happens if a user " "declines consent? Probably the TV will say, “Without your consent to " "tracking, the TV will not work.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Proper laws would say that TVs are not allowed to report what the user " "watches—no exceptions!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "LG <a href=\"https://www.techdirt.com/2014/05/20/lg-will-take-smart-out-your-" "smart-tv-if-you-dont-agree-to-share-your-viewing-search-data-with-third-" "parties/\"> disabled network features</a> on <em>previously purchased</em> " "“smart” TVs, unless the purchasers agreed to let LG begin to " "snoop on them and distribute their personal data." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Spyware in LG “smart” TVs <a href=\"http://doctorbeet.blogspot." "co.uk/2013/11/lg-smart-tvs-logging-usb-filenames-and.html\"> reports what " "the user watches, and the switch to turn this off has no effect</a>. (The " "fact that the transmission reports a 404 error really means nothing; the " "server could save that data anyway.)" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Even worse, it <a href=\"https://rrrrambles.wordpress.com/2013/11/21/lg-tv-" "logging-filenames-from-network-folders/\"> snoops on other devices on the " "user's local network</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "LG later said it had installed a patch to stop this, but any product could " "spy this way." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Meanwhile, LG TVs <a href=\"https://www.techdirt.com/2014/05/20/lg-will-take-" "smart-out-your-smart-tv-if-you-dont-agree-to-share-your-viewing-search-data-" "with-third-parties/\"> do lots of spying anyway</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Spyware in LG “smart” TVs <a href=\"https://doctorbeet.blogspot." "com/2013/11/lg-smart-tvs-logging-usb-filenames-and.html\"> reports what the " "user watches, and the switch to turn this off has no effect</a>. (The fact " "that the transmission reports a 404 error really means nothing; the server " "could save that data anyway.)" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"http://www.dailymail.co.uk/sciencetech/article-2249303/Hackers-" "penetrate-home-Crack-Samsungs-Smart-TV-allows-attacker-seize-control-" "microphone-cameras.html\"> Crackers found a way to break security on a " "“smart” TV</a> and use its camera to watch the people who are " "watching TV." msgstr "" #. type: Content of: <div><div><div><h4> msgid "Cameras" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInCameras" "\">#SpywareInCameras</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Over 70 brands of network-connected surveillance cameras have <a href=" "\"https://web.archive.org/web/20250117130741/http://www.kerneronsec." "com/2016/02/remote-code-execution-in-cctv-dvrs-of.html\"> security bugs that " "allow anyone to watch through them</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Nest Cam “smart” camera is <a href=\"https://www.bbc.com/" "news/technology-34922712\">always watching</a>, even when the “" "owner” switches it “off.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A “smart” device means the manufacturer is using it to outsmart " "you." msgstr "" #. type: Content of: <div><div><div><h4> msgid "Toys" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInToys" "\">#SpywareInToys</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A remote-control sex toy was found to make <a href=\"https://www.theverge." "com/2017/11/10/16634442/lovense-sex-toy-spy-surveillance\">audio recordings " "of the conversation between two users</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A computerized vibrator <a href=\"https://www.theguardian.com/" "technology/2016/aug/10/vibrator-phone-app-we-vibe-4-plus-bluetooth-hack\"> " "was snooping on its users through the proprietary control app</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The app was reporting the temperature of the vibrator minute by minute " "(thus, indirectly, whether it was surrounded by a person's body), as well as " "the vibration frequency." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Note the totally inadequate proposed response: a labeling standard with " "which manufacturers would make statements about their products, rather than " "free software which users could have checked and changed." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The company that made the vibrator <a href=\"https://www.theguardian.com/us-" "news/2016/sep/14/wevibe-sex-toy-data-collection-chicago-lawsuit\"> was sued " "for collecting lots of personal information about how people used it</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The company's statement that it was anonymizing the data may be true, but it " "doesn't really matter. If it had sold the data to a data broker, the data " "broker would have been able to figure out who the user was." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Following this lawsuit, <a href=\"https://www.theguardian.com/" "technology/2017/mar/14/we-vibe-vibrator-tracking-users-sexual-habits\"> the " "company has been ordered to pay a total of C$4m</a> to its customers." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "“CloudPets” toys with microphones <a href=\"https://www." "theguardian.com/technology/2017/feb/28/cloudpets-data-breach-leaks-details-" "of-500000-children-and-adults\"> leak childrens' conversations to the " "manufacturer</a>. Guess what? <a href=\"https://www.vice.com/en/article/" "pgwean/internet-of-things-teddy-bear-leaked-2-million-parent-and-kids-" "message-recordings\"> Crackers found a way to access the data</a> collected " "by the manufacturer's snooping." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "That the manufacturer and the FBI could listen to these conversations was " "unacceptable by itself." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The “smart” toys My Friend Cayla and i-Que can be <a href=" "\"https://www.forbrukerradet.no/siste-nytt/connected-toys-violate-consumer-" "laws/\">remotely controlled with a mobile phone</a>; physical access is not " "necessary. This would enable crackers to listen in on a child's " "conversations, and even speak into the toys themselves." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This means a burglar could speak into the toys and ask the child to unlock " "the front door while Mommy's not looking." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The “smart” toys My Friend Cayla and i-Que transmit <a href=" "\"https://www.forbrukerradet.no/siste-nytt/connected-toys-violate-consumer-" "laws/\">children's conversations to Nuance Communications</a>, a speech " "recognition company based in the U.S." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Those toys also contain major security vulnerabilities; crackers can " "remotely control the toys with a mobile phone. This would enable crackers to " "listen in on a child's speech, and even speak into the toys themselves." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Barbie <a href=\"https://www.mirror.co.uk/news/technology-science/technology/" "wi-fi-spy-barbie-records-childrens-5177673\">is going to spy on children and " "adults</a>." msgstr "" #. type: Content of: <div><div><div><h4> msgid "Drones" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInDrones" "\">#SpywareInDrones</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "While you're using a DJI drone to snoop on other people, DJI is in many " "cases <a href=\"https://www.theverge.com/2017/8/4/16095244/us-army-stop-" "using-dji-drones-cybersecurity\">snooping on you</a>." msgstr "" #. type: Content of: <div><div><div><h4> msgid "Other Appliances" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareAtHome" "\">#SpywareAtHome</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Crackers found a way to break the security of an Amazon device, and <a href=" "\"https://boingboing.net/2018/08/12/alexa-bob-carol.html\"> turn it into a " "listening device</a> for them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It was very difficult for them to do this. The job would be much easier for " "Amazon. And if some government such as China or the US told Amazon to do " "this, or cease to sell the product in that country, do you think Amazon " "would have the moral fiber to say no?" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(These crackers are probably hackers too, but please <a href=" "\"https://stallman.org/articles/on-hacking.html\"> don't use “" "hacking” to mean “breaking security”</a>.)</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A medical insurance company <a href=\"https://wolfstreet.com/2018/04/14/our-" "dental-insurance-sent-us-free-internet-connected-toothbrushes-and-this-is-" "what-happened-next/\"> offers a gratis electronic toothbrush that snoops on " "its user by sending usage data back over the Internet</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Sonos <a href=\"https://www.zdnet.com/article/sonos-accept-new-privacy-" "policy-speakers-cease-to-function/\"> told all its customers, “" "Agree” to snooping or the product will stop working</a>. <a href=" "\"https://www.consumerreports.org/consumerist/sonos-holds-software-updates-" "hostage-if-you-dont-sign-new-privacy-agreement/\"> Another article</a> says " "they won't forcibly change the software, but people won't be able to get any " "upgrades and eventually it will stop working." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Lots of “smart” products are designed <a href=\"https://www.cnet." "com/pictures/products-with-alexa-built-in-smart-home/?ftag=CAD6b2b181&" "bhid=27417204357610908031812337994022\">to listen to everyone in the house, " "all the time</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Today's technological practice does not include any way of making a device " "that can obey your voice commands without potentially spying on you. Even " "if it is air-gapped, it could be saving up records about you for later " "examination." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20180911191954/http://consumerman.com/" "Rent-to-own%20giant%20accused%20of%20spying%20on%20its%20customers.htm\"> " "Rent-to-own computers were programmed to spy on their renters</a>." msgstr "" #. type: Content of: <div><div><div><h4> msgid "Wearables" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareOnWearables" "\">#SpywareOnWearables</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tommy Hilfiger clothing <a href=\"https://www.theguardian.com/fashion/2018/" "jul/26/tommy-hilfiger-new-clothing-line-monitor-customers\">will monitor how " "often people wear it</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This will teach the sheeple to find it normal that companies monitor every " "aspect of what they do." msgstr "" #. type: Content of: <div><div><h5> msgid "“Smart” Watches" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A very cheap “smart watch” comes with an Android app <a href=" "\"https://www.theregister.com/2016/03/02/" "chinese_backdoor_found_in_ebays_popular_cheap_smart_watch/\"> that connects " "to an unidentified site in China</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article says this is a back door, but that could be a misunderstanding. " "However, it is certainly surveillance, at least." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "An LG “smart” watch is designed <a href=\"https://www." "huffingtonpost.co.uk/2014/07/09/lg-kizon-smart-watch_n_5570234.html\"> to " "report its location to someone else and to transmit conversations too</a>." msgstr "" #. type: Content of: <div><div><div><h4> msgid "Vehicles" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInVehicles" "\">#SpywareInVehicles</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "Virtual Reality" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInVR\">#SpywareInVR</" "a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "VR equipment, measuring every slight motion, creates the potential for the " "most intimate surveillance ever. All it takes to make this potential real <a " "href=\"https://theintercept.com/2016/12/23/virtual-reality-allows-the-most-" "detailed-intimate-digital-surveillance-yet/\">is software as malicious as " "many other programs listed in this page</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "You can bet Facebook will implement the maximum possible surveillance on " "Oculus Rift devices. The moral is, never trust a VR system with nonfree " "software in it." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Spyware on the Web" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareOnTheWeb" "\">#SpywareOnTheWeb</a>)</span>" msgstr "" #. type: Content of: <div><div><p> msgid "" "In addition, many web sites spy on their visitors. Web sites are not " "programs, so it <a href=\"/philosophy/network-services-arent-free-or-nonfree." "html\"> makes no sense to call them “free” or “" "proprietary”</a>, but the surveillance is an abuse all the same." msgstr "" #. type: Content of: <div><div><div><h4> msgid "JavaScript" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInJavaScript" "\">#SpywareInJavaScript</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "Flash" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInFlash" "\">#SpywareInFlash</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "Chrome" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInChrome" "\">#SpywareInChrome</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Spyware in Networks" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInNetworks" "\">#SpywareInNetworks</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Investigation Shows <a href=\"https://www.techdirt.com/2016/06/03/" "investigation-shows-gchq-using-us-companies-nsa-to-route-around-domestic-" "surveillance-restrictions/\">GCHQ Using US Companies, NSA To Route Around " "Domestic Surveillance Restrictions</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Specifically, it can collect the emails of members of Parliament this way, " "because they pass it through Microsoft." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Cisco TNP IP phones are <a href=\"https://boingboing.net/2012/12/29/your-" "cisco-phone-is-listening.html\"> spying devices</a>." msgstr "" #. type: Content of: <title> msgid "Malware in Mobile Devices - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Malware in Mobile Devices" msgstr "" #. type: Content of: <div><div><p> msgid "" "Nearly all mobile phones do two grievous wrongs to their users: tracking " "their movements, and listening to their conversations. This is why we call " "them “Stalin's dream”." msgstr "" #. type: Content of: <div><div><p> msgid "" "Tracking users' location is a consequence of how the cellular network " "operates: it needs to know which cell towers the phone is near, so it can " "communicate with the phone via a nearby tower. That gives the network " "location data which it saves for months or years. See <a href=\"#phone-" "communications\">below</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "Listening to conversations works by means of a universal <a href=" "\"#universal-back-door-phone-modem\">back door</a> in the software of the " "processor that communicates with the phone network." msgstr "" #. type: Content of: <div><div><p> msgid "" "In addition, the nonfree operating systems for “smart” phones " "have specific malicious functionalities, described in <a href=\"/proprietary/" "malware-apple.html\">Apple's Operating Systems are Malware</a> and <a href=" "\"/proprietary/malware-google.html\">Google's Software Is Malware</a> " "respectively." msgstr "" #. type: Content of: <div><div><p> msgid "Many phone apps are malicious, too. See <a href=\"#TOC\">below</a>." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Network location tracking" msgstr "" #. type: Content of: <div><div><div><p> msgid "" "This section describes a malicious characteristic of mobile phone networks: " "location tracking. The phone network <a href=\"https://ssd.eff.org/playlist/" "privacy-breakdown-mobile-phones\"> tracks the movements of each phone</a>." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "Strictly speaking, this tracking is not implemented by any specific software " "code; it is inherent in the cellular network technology. The network needs " "to know which cell towers the phone is near, so it can communicate with the " "phone via a nearby tower. There is no technical way to block or avoid the " "tracking and still have cellular communication with today's cellular " "networks." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "Networks do not limit themselves to using that data momentarily. Many " "countries (including the US and the EU) require the network to store all " "location data for months or years, and while stored it is available for " "whatever use the network permits, or the State requires. This can put the " "user in great danger." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "Designs for networks that wouldn't track phones have been developed, but " "using those methods would call for new networks as well as new phones." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Types of malware in mobiles" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#addictions\">Addictions</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#deception\">Deception</a>" msgstr "" #. type: Content of: <div><div><h3> msgid "Addictions" msgstr "" #. type: Content of: <div><div><p> msgid "" "Almost every phone's communication processor has a universal back door which " "is <a href=\"https://www.schneier.com/blog/archives/2006/12/" "remotely_eavesd_1.html\"> often used to make a phone transmit all " "conversations it hears</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "The back door <a class=\"not-a-duplicate\" href=\"https://www.osnews.com/" "story/27416/the-second-operating-system-hiding-in-every-mobile-phone/\"> may " "take the form of bugs that have gone 20 years unfixed</a>. The choice to " "leave the security holes in place is morally equivalent to writing a back " "door." msgstr "" #. type: Content of: <div><div><p> msgid "" "The back door is in the “modem processor”, whose job is to " "communicate with the radio network. In most phones, the modem processor " "controls the microphone. In most phones it has the power to rewrite the " "software for the main processor too." msgstr "" #. type: Content of: <div><div><p> msgid "" "A few phone models are specially designed so that the modem processor does " "not control the microphone, and so that it can't change the software in the " "main processor. They still have the back door, but at least it is unable to " "turn the phone unto a listening device." msgstr "" #. type: Content of: <div><div><p> msgid "" "The universal back door is apparently also used to make phones <a href=" "\"http://www.slate.com/blogs/future_tense/2013/07/22/" "nsa_can_reportedly_track_cellphones_even_when_they_re_turned_off.html\"> " "transmit even when they are turned off</a>. This means their movements are " "tracked, and may also make the listening feature work." msgstr "" #. type: Content of: <div><div><h3> msgid "Deception" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Siri, Alexa, and all the other voice-control systems can be <a href=" "\"https://www.fastcompany.com/90139019/a-simple-design-flaw-makes-it-" "astoundingly-easy-to-hack-siri-and-alexa\"> hijacked by programs that play " "commands in ultrasound that humans can't hear</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some Samsung phones randomly <a href=\"https://www.theverge.com/" "circuitbreaker/2018/7/2/17528076/samsung-phones-text-rcs-update-messages" "\">send photos to people in the owner's contact list</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many Android devices <a href=\"https://arstechnica.com/information-" "technology/2017/04/wide-range-of-android-phones-vulnerable-to-device-hijacks-" "over-wi-fi/\"> can be hijacked through their Wi-Fi chips</a> because of a " "bug in Broadcom's nonfree firmware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Samsung phones <a href=\"https://www.bleepingcomputer.com/news/security/sms-" "exploitable-bug-in-samsung-galaxy-phones-can-be-used-for-ransomware-attacks/" "\">have a security hole that allows an SMS message to install ransomware</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://techcrunch.com/2016/07/29/research-shows-deleted-whatsapp-" "messages-arent-actually-deleted/\">“Deleted” WhatsApp messages " "are not entirely deleted</a>. They can be recovered in various ways." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A bug in a proprietary ASN.1 library, used in cell phone towers as well as " "cell phones and routers, <a href=\"https://arstechnica.com/information-" "technology/2016/07/software-flaw-puts-mobile-phones-and-networks-at-risk-of-" "complete-takeover/\">allows taking control of those systems</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Samsung's “Smart Home” has a big security hole; <a href=" "\"https://arstechnica.com/information-technology/2016/05/samsung-smart-home-" "flaws-lets-hackers-make-keys-to-front-door/\"> unauthorized people can " "remotely control it</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Samsung claims that this is an “open” platform so the problem is " "partly the fault of app developers. That is clearly true if the apps are " "proprietary software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Anything whose name is “Smart” is most likely going to screw you." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many proprietary payment apps <a href=\"https://www.bloomberg.com/news/" "articles/2016-03-10/many-mobile-payments-startups-aren-t-properly-securing-" "user-data\">transmit personal data in an insecure way</a>. However, the " "worse aspect of these apps is that <a href=\"/philosophy/surveillance-vs-" "democracy.html\">payment is not anonymous</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://phys.org/news/2015-05-app-vulnerability-threatens-millions-" "users.html\"> Many smartphone apps use insecure authentication methods when " "storing your personal data on remote servers</a>. This leaves personal " "information like email addresses, passwords, and health information " "vulnerable. Because many of these apps are proprietary it makes it hard to " "impossible to know which apps are at risk." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "An app to prevent “identity theft” (access to personal data) by " "storing users' data on a special server <a href=\"https://arstechnica.com/" "tech-policy/2014/05/id-theft-protector-lifelock-deletes-user-data-over-" "concerns-that-app-isnt-safe/\">was deactivated by its developer</a> which " "had discovered a security flaw." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "That developer seems to be conscientious about protecting personal data from " "third parties in general, but it can't protect that data from the state. " "Quite the contrary: confiding your data to someone else's server, if not " "first encrypted by you with free software, undermines your rights." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The <a href=\"https://arstechnica.com/information-technology/2014/02/crypto-" "weaknesses-in-whatsapp-the-kind-of-stuff-the-nsa-would-love/\">insecurity of " "WhatsApp</a> makes eavesdropping a snap." msgstr "" #. type: Content of: <div><div><p> msgid "" "This section gives examples of mobile apps harassing or annoying the user, " "or causing trouble for the user. These actions are like sabotage but the " "word “sabotage” is too strong for them." msgstr "" #. type: Content of: <div><div><p> msgid "" "See above for the general universal back door in essentially all mobile " "phones, which permits converting them into <a class=\"not-a-duplicate\" href=" "\"#universal-back-door-phone-modem\"> full-time listening devices</a>." msgstr "" #. type: Content of: <title> msgid "Proprietary Software - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <style> #, no-wrap msgid " .reduced-width { width: 55em; }\n" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Software Is Often Malware" msgstr "" #. type: Content of: <div><div><p> msgid "<a href=\"#TOC\">Table of contents</a>" msgstr "" #. type: Content of: <div><div><p> msgid "<a href=\"#latest\">Latest additions</a>" msgstr "" #. type: Content of: <div><div><p> msgid "" "Proprietary software, also called nonfree software, means software that " "doesn't <a href=\"/philosophy/free-sw.html\">respect users' freedom and " "community</a>. A proprietary program puts its developer or owner <a href=\"/" "philosophy/free-software-even-more-important.html\"> in a position of power " "over its users.</a> This power is in itself an injustice." msgstr "" #. type: Content of: <div><div><p> msgid "" "The point of this directory is to show by examples that the initial " "injustice of proprietary software often leads to further injustices: " "malicious functionalities." msgstr "" #. type: Content of: <div><div><p> msgid "" "Power corrupts; the proprietary program's developer is tempted to design the " "program to mistreat its users. (Software designed to function in a way that " "mistreats the user is called <em>malware</em>.) Of course, the developer " "usually does not do this out of malice, but rather to profit more at the " "users' expense. That does not make it any less nasty or more legitimate." msgstr "" #. type: Content of: <div><div><p> msgid "" "Yielding to that temptation has become ever more frequent; nowadays it is " "standard practice. Modern proprietary software is typically an opportunity " "to be tricked, harmed, bullied or swindled." msgstr "" #. type: Content of: <div><div><p> msgid "" "Online services are not released software, but in regard to all the bad " "aspects, using a service is equivalent to using a copy of released " "software. In particular, a service can be designed to mistreat the user, " "and many services do that. However, we do not list instances of malicious " "dis-services here, for two reasons. First, a service (whether malicious or " "not) is not a program that one could install a copy of, and there is no way " "at all for users to change it. Second, it is so obvious that a service can " "mistreat users if the owner wishes that we hardly need to prove it." msgstr "" #. type: Content of: <div><div><p> msgid "" "However, most online services require the user to run a nonfree app. The " "app <em>is</em> released software, so we do list malicious functionalities " "of these apps. Mistreatment by the service itself is imposed by use of the " "app, so sometimes we mention those mistreatments too—but we try to " "state explicitly what is done by the app and what is done by the dis-service." msgstr "" #. type: Content of: <div><div><p> msgid "" "When a web site provides access to a service, it very likely sends nonfree " "JavaScript software to execute in the user's browser. Such JavaScript code " "is released software, and it's morally equivalent to other nonfree apps. If " "it does malicious things, we want to mention them here." msgstr "" #. type: Content of: <div><div><p> msgid "" "When talking about mobile phones, we do list <a href=\"/proprietary/malware-" "mobiles.html#phone-communications\">one other malicious characteristic, " "location tracking</a> which is caused by the underlying radio system rather " "than by the specific software in them." msgstr "" #. type: Content of: <div><p> msgid "" "As of March 2025, the pages in this directory list around 650 instances of " "malicious functionalities (with more than 750 references to back them up), " "but there are surely thousands more we don't know about." msgstr "" #. type: Content of: <div><p> msgid "" "Ideally we would list every instance. If you come across an instance which " "we do not list, please write to webmasters@gnu.org to tell us about it. " "Please include a reference to a reputable article that describes the " "malicious behavior clearly; we won't list an item without documentation to " "point to." msgstr "" #. type: Content of: <div><p> msgid "" "If you want to be notified when we add new items or make other changes, " "subscribe to the <a href=\"https://lists.gnu.org/mailman/listinfo/www-" "malware-commits\">mailing list <www-malware-commits@gnu.org></a>." msgstr "" #. type: Content of: <div><table><tr><th> msgid "Injustices or techniques" msgstr "" #. type: Content of: <div><table><tr><th> msgid "Products or companies" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-addictions.html\">Addictions</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/proprietary-back-doors.html\">Back doors</a> (<a " "href=\"#f1\">1</a>)" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-censorship.html\">Censorship</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-coercion.html\">Coercion</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-coverups.html\">Coverups</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-deception.html\">Deception</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/proprietary-drm.html\">DRM</a> (<a href=" "\"#f2\">2</a>)" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-fraud.html\">Fraud</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/proprietary-incompatibility.html\">Incompatibility</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-insecurity.html\">Insecurity</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-interference.html\">Interference</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/proprietary-jails.html\">Jails</a> (<a href=" "\"#f3\">3</a>)" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-manipulation.html\">Manipulation</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-obsolescence.html\">Obsolescence</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-sabotage.html\">Sabotage</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/proprietary-subscriptions.html\">Subscriptions</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-surveillance.html\">Surveillance</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/proprietary-tethers.html\">Tethers</a> (<a href=" "\"#f4\">4</a>)" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/proprietary-tyrants.html\">Tyrants</a> (<a href=" "\"#f5\">5</a>)" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/potential-malware.html\">In the pipe</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-appliances.html\">Appliances</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-cars.html\">Cars</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/malware-in-online-conferencing.html\">Conferencing</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-edtech.html\">EdTech</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-games.html\">Games</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-mobiles.html\">Mobiles</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-webpages.html\">Webpages</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-adobe.html\">Adobe</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-amazon.html\">Amazon</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-apple.html\">Apple</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-google.html\">Google</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-microsoft.html\">Microsoft</a>" msgstr "" #. type: Content of: <div><table><tr><td><ol><li> msgid "" "<em>Back door:</em> any feature of a program that enables someone who " "is not supposed to be in control of the computer where it is installed to " "send it commands." msgstr "" #. type: Content of: <div><table><tr><td><ol><li> msgid "" "<em>Digital restrictions management, or “DRM”:</em> " "functionalities designed to restrict what users can do with the data in " "their computers." msgstr "" #. type: Content of: <div><table><tr><td><ol><li> msgid "" "<em>Jail:</em> system that imposes censorship on application programs." msgstr "" #. type: Content of: <div><table><tr><td><ol><li> msgid "" "<em>Tether:</em> functionality that requires permanent (or very " "frequent) connection to a server." msgstr "" #. type: Content of: <div><table><tr><td><ol><li> msgid "" "<em>Tyrant:</em> system that rejects any operating system not “" "authorized” by the manufacturer." msgstr "" #. type: Content of: <div><p> msgid "" "Users of proprietary software are defenseless against these forms of " "mistreatment. The way to avoid them is by insisting on <a href=\"/" "philosophy/free-software-even-more-important.html\">free (freedom-" "respecting) software</a>. Since free software is controlled by its users, " "they have a pretty good defense against malicious software functionality." msgstr "" #. type: Content of: <div><p> msgid "<a href=\"/proprietary/all.html\">More items…</a>" msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2013-2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Insecurity - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Insecurity" msgstr "" #. type: Content of: <div><div><p> msgid "" "This page lists clearly established cases of insecurity in proprietary " "software that has grave consequences or is otherwise noteworthy. Even though " "most of these security flaws are unintentional, thus are not malicious " "functionalities in a strict sense, we report them to show that proprietary " "software is not as secure as mainstream media may say." msgstr "" #. type: Content of: <div><div><p> msgid "" "This doesn't imply that free software is immune to bugs or insecurities. " "The difference between free and proprietary software in this respect is the " "handling of the bugs: free software users are able to study the program and/" "or fix the bugs they find, often in communities as they are able to share " "the program, while proprietary program users are forced to rely on the " "program's developer for fixes." msgstr "" #. type: Content of: <div><div><p> msgid "" "If the developer does not care to fix the problem — often the case for " "embedded software and old releases — the users are sunk. But if the " "developer does send a corrected version, it may contain new malicious " "functionalities as well as bug fixes." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"/proprietary/uhd-bluray-denies-your-freedom.html\">UHD Blu-ray " "disks are loaded with malware of the worst kinds</a>. Among other things, " "playing them on a PC requires Intel SGX (Software Guard Extensions), which " "not only has numerous security vulnerabilities, but also was deprecated and " "removed from mainstream Intel CPUs in 2022." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "One of the dangers of the “internet of stings” is that, if you " "lose your internet service, you also <a href=\"https://torrentfreak.com/" "piracy-notices-can-mess-with-your-thermostat-isp-warns-171224/\"> lose " "control of your house and appliances</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "For your safety, don't use any appliance with a connection to the real " "internet." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Amazon recently invited consumers to be suckers and <a href=\"https://www." "techdirt.com/2017/11/22/vulnerability-found-amazon-key-again-showing-how-" "dumber-tech-is-often-smarter-option/\"> allow delivery staff to open their " "front doors</a>. Wouldn't you know it, the system has a grave security flaw." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A “smart” intravenous pump designed for hospitals is connected " "to the internet. Naturally <a href=\"https://www.techdirt.com/2017/09/22/" "smart-hospital-iv-pump-vulnerable-to-remote-hack-attack/\"> its security has " "been cracked</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(Note that this article misuses the term <a href=\"/philosophy/words-" "to-avoid.html#Hacker\">“hackers”</a> referring to crackers.)</" "small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many models of Internet-connected cameras <a href=\"/proprietary/proprietary-" "back-doors.html#InternetCameraBackDoor\"> have backdoors</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "That is a malicious functionality, but in addition it is a gross insecurity " "since anyone, including malicious crackers, <a href=\"https://arstechnica." "com/information-technology/2017/06/internet-cameras-expose-private-video-" "feeds-and-remote-controls/\">can find those accounts and use them to get " "into users' cameras</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many models of Internet-connected cameras are tremendously insecure. They " "have login accounts with hard-coded passwords, which can't be changed, and " "<a href=\"https://arstechnica.com/information-technology/2017/06/internet-" "cameras-expose-private-video-feeds-and-remote-controls/\">there is no way to " "delete these accounts either</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Intel's CPU backdoor—the Intel Management Engine—had a <a href=" "\"https://arstechnica.com/information-technology/2017/05/intel-patches-" "remote-code-execution-bug-that-lurked-in-cpus-for-10-years/\">major security " "vulnerability for 10 years</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The vulnerability allowed a cracker to access the computer's Intel Active " "Management Technology (AMT) <a href=\"https://arstechnica.com/information-" "technology/2017/05/the-hijacking-flaw-that-lurked-in-intel-chips-is-worse-" "than-anyone-thought/\"> web interface with an empty password and gave " "administrative access</a> to access the computer's keyboard, mouse, monitor " "among other privileges." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It does not help that in newer Intel processors, it is impossible to turn " "off the Intel Management Engine. Thus, even users who are proactive about " "their security can do nothing to protect themselves besides using machines " "that don't come with the backdoor." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The proprietary code that runs pacemakers, insulin pumps, and other medical " "devices is <a href=\"https://www.bbc.com/news/technology-40042584\"> full of " "gross security faults</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Conexant HD Audio Driver Package (version 1.0.0.46 and earlier) pre-" "installed on 28 models of HP laptops logged the user's keystroke to a file " "in the filesystem. Any process with access to the filesystem or the " "MapViewOfFile API could gain access to the log. Furthermore, <a href=" "\"https://modzero.com/modlog/archives/2017/05/11/en_keylogger_in_hewlett-" "packard_audio_driver/index.html\">according to modzero</a> the “" "information-leak via Covert Storage Channel enables malware authors to " "capture keystrokes without taking the risk of being classified as malicious " "task by AV heuristics”." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "When Miele's Internet of Stings hospital disinfectant dishwasher is <a href=" "\"https://www.vice.com/en/article/pg9qkv/a-hackable-dishwasher-is-connecting-" "hospitals-to-the-internet-of-shit\"> connected to the Internet, its security " "is crap</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "For example, a cracker can gain access to the dishwasher's filesystem, " "infect it with malware, and force the dishwasher to launch attacks on other " "devices in the network. Since these dishwashers are used in hospitals, such " "attacks could potentially put hundreds of lives at risk." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If you buy a used “smart” car, house, TV, refrigerator, etc., " "usually <a href=\"https://boingboing.net/2017/02/20/the-previous-owners-of-" "used.html\">the previous owners can still remotely control it</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "4G LTE phone networks are drastically insecure. They can be <a href=" "\"https://www.theregister.com/2016/10/23/" "every_lte_call_text_can_be_intercepted_blacked_out_hacker_finds/\"> taken " "over by third parties and used for man-in-the-middle attacks</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Ransomware <a href=\"https://www.pentestpartners.com/security-blog/" "thermostat-ransomware-a-lesson-in-iot-security/\"> has been developed for a " "thermostat that uses proprietary software</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Antivirus programs have so many errors that <a href=\"https://" "theconversation.com/as-more-vulnerabilities-are-discovered-is-it-time-to-" "uninstall-antivirus-software-61374\">they may make security worse</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "GNU/Linux does not need antivirus software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Malware was found on <a href=\"http://www.slate.com/blogs/" "future_tense/2016/04/11/" "security_cameras_sold_through_amazon_have_malware_according_to_security.html" "\"> security cameras available through Amazon</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A camera that records locally on physical media, and has no network " "connection, does not threaten people with surveillance—neither by " "watching people through the camera, nor through malware in the camera." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "FitBit fitness trackers have a <a href=\"https://www.tripwire.com/state-of-" "security/latest-security-news/10-second-hack-delivers-first-ever-malware-to-" "fitness-trackers/\"> Bluetooth vulnerability</a> that allows attackers to " "send malware to the devices, which can subsequently spread to computers and " "other FitBit trackers that interact with them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Due to bad security in a drug pump, crackers could use it to <a href=" "\"https://www.wired.com/2015/06/hackers-can-send-fatal-doses-hospital-drug-" "pumps/\"> kill patients</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Hospira infusion pumps, which are used to administer drugs to a patient, " "were rated “<a href=\"https://securityledger.com/2015/05/researcher-" "drug-pump-the-least-secure-ip-device-ive-ever-seen/\">least secure IP device " "I've ever seen</a>” by a security researcher." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Depending on what drug is being infused, the insecurity could open the door " "to murder." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Lots of <a href=\"https://www.wired.com/2014/04/hospital-equipment-" "vulnerable/\"> hospital equipment has lousy security</a>, and it can be " "fatal." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.bunniestudios.com/blog/?p=3554\"> Some flash memories " "have modifiable software</a>, which makes them vulnerable to viruses." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We don't call this a “back door” because it is normal that you " "can install a new system in a computer, given physical access to it. " "However, memory sticks and cards should not be modifiable in this way." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/world/2013/sep/05/nsa-gchq-encryption-" "codes-security\">The NSA has put back doors into nonfree encryption " "software</a>. We don't know which ones they are, but we can be sure they " "include some widely used systems. This reinforces the point that you can " "never trust the security of nonfree software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The FTC punished a company for making webcams with <a href=\"https://www." "nytimes.com/2013/09/05/technology/ftc-says-webcams-flaw-put-users-lives-on-" "display.html\"> bad security so that it was easy for anyone to watch through " "them</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"http://spritesmods.com/?art=hddhack&page=6\"> Replaceable " "nonfree software in disk drives can be written by a nonfree program</a>. " "This makes any system vulnerable to persistent attacks that normal forensics " "won't detect." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It is possible to <a href=\"https://siliconangle.com/2013/07/27/famed-hacker-" "barnaby-jack-dies-days-before-scheduled-black-hat-appearance/\"> kill people " "by taking control of medical implants by radio</a>. More information in <a " "href=\"https://www.bbc.com/news/technology-17631838\">BBC News</a> and <a " "href=\"https://ioactive.com/broken-hearts-how-plausible-was-the-homeland-" "pacemaker-hack/\"> IOActive Labs Research blog</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.forbes.com/sites/kashmirhill/2013/07/26/smart-homes-" "hack/\"> “Smart homes”</a> turn out to be stupidly vulnerable to " "intrusion." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2013, 2015-2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Coverups - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Coverups" msgstr "" #. type: Content of: <div><div><p> msgid "" "This page lists instances where proprietary software had a bug, and the " "developers converted it into a malicious functionality by trying to cover up " "the existence of the bug." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Price Waterhouse Coopers tried to suppress knowledge of a security flaw by " "<a href=\"https://www.zdnet.com/article/pwc-sends-security-researchers-cease-" "and-desist-letter-instead-of-fixing-security-flaw/\"> making legal threats " "against the security company that found it</a>." msgstr "" #. type: Content of: <title> msgid "Proprietary Sabotage - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Sabotage" msgstr "" #. type: Content of: <div><div><p> msgid "" "Some malicious functionalities mediate sabotage, i.e. abusive interference " "of the developer into the use of the software, with harmful consequences for " "the users. Examples of such situations are listed below." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"/proprietary/uhd-bluray-denies-your-freedom.html\">UHD Blu-ray " "disks are loaded with malware of the worst kinds</a>. Not only does " "playback of these disks on a PC require proprietary software and hardware " "that enforce AACS, a very nasty DRM, but developers of software players are " "forbidden from disclosing any source code. The user could also lose the " "ability to play AACS-restricted disks anytime by attempting to play a new " "Blu-ray disk." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tesla used software to limit customers to using just <a href=\"https://" "techcrunch.com/2017/09/09/tesla-flips-a-switch-to-increase-the-range-of-some-" "cars-in-florida-to-help-people-evacuate/\">part of the battery of some cars</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The developer of Ham Radio Deluxe <a href=\"https://www.techdirt." "com/2016/12/22/software-company-shows-how-not-to-handle-negative-review/" "\">sabotaged a customer's installation as punishment for posting a negative " "review</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Most proprietary software companies don't use their power so harshly, but it " "is an injustice that they all <em>have</em> such power." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Amazon <a href=\"https://www.techdirt.com/2015/03/24/while-bricking-" "jailbroken-fire-tvs-last-year-amazon-did-same-to-kindle-devices/\"> " "downgraded the software in users' Swindles</a> so that those already rooted " "would cease to function at all." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Oracle's nonfree Java plug-in for browsers <a href=\"https://www.zdnet.com/" "article/a-close-look-at-how-oracle-installs-deceptive-software-with-java-" "updates/\">sneakily installs other annoying proprietary software</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "That article disregards all other bad things about proprietary software. " "For instance, it regards the inclusion of proprietary Flash Player (which " "has a <a href=\"https://web.archive.org/web/20200808151607/http://www." "imasuper.com/2008/10/09/flash-cookies-the-silent-privacy-killer/" "\">surveillance feature</a> and DRM) in Chrome as a good thing. Chrome is a " "proprietary browser with a universal back door." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We don't agree with the article's views on those issues, but we present it " "as a factual reference." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In 2014, <a href=\"https://www.computerworld.com/article/2715615/oracle-will-" "continue-to-bundle--crapware--with-java.html\"> Oracle insisted on " "continuing this practice</a>." msgstr "" #. type: Content of: <title> msgid "Malware in Online Conferencing - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Malware in Online Conferencing" msgstr "" #. type: Content of: <div><p> msgid "" "Copyright © 2020, 2021, 2022, 2023, 2024, 2025 Free Software " "Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Amazon's Software Is Malware - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Amazon's Software Is Malware" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid " <a href=\"#swindle\">Kindle Swindle</a> " msgstr "" #. type: Content of: <div><div><div><ul><li> msgid " <a href=\"#echo\">Echo</a> " msgstr "" #. type: Content of: <div><div><div><ul><li> msgid " <a href=\"#misc\">Other products</a> " msgstr "" #. type: Content of: <div><div><div><h3> msgid "Kindle Swindle" msgstr "" #. type: Content of: <div><div><p> msgid "" "We refer to this product as the <a href=\"/philosophy/why-call-it-the-" "swindle.html\">Amazon Swindle</a> because it has <a href=\"/proprietary/" "proprietary-drm.html\">Digital restrictions management (DRM)</a> and <a href=" "\"/philosophy/ebooks.html\"> other malicious functionalities</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Kindle also has a <a href=\"https://web.archive.org/web/20120715070050/" "http://www.amazon.com/gp/help/customer/display.html/?nodeId=200774090\"> " "universal back door</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Electronic Frontier Foundation has examined and found <a href=\"https://" "www.eff.org/pages/reader-privacy-chart-2012\">various kinds of surveillance " "in the Swindle and other e-readers</a>." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Echo" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Other products" msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2014-2024 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Malware in Appliances - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Malware in Appliances" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Don't trust “connected” appliances" msgstr "" #. type: Content of: <div><div><div><p> msgid "" "Most of the devices listed here are “connected”—they try " "to talk over the internet with someone (typically a company) other than the " "nominal owner. Such an appliance is inherently untrustworthy: no matter " "what company it is, you should never trust it <em>that far</em>." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "The appliances we are dealing with contain software, almost always nonfree " "software. It is reasonable to treat this software as <a href=\"/philosophy/" "free-hardware-designs.html#boundary\">equivalent to a bunch of circuits</a>, " "provided it is <em>never</em> changed (not even if the change is called an " "“upgrade”)." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "In a connected appliance, it is hard to ensure that software won't be " "changed. Typically a connected appliance will have a universal back " "door—a feature that allows the company to remotely replace the " "software in it, over the internet. Some appliances might be exceptions, but " "we can never verify that a given appliance is an exception. Thus, we can " "never be sure that software in it won't be changed." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "In practice, these “upgrades” can amount to sabotage. Let's " "assume, for instance, that your printer accepts third-party ink cartridges. " "You have no guarantee that, some day, the manufacturer will not install " "malicious code to reject them. With a connected device, you must expect " "this." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "The manufacturer may try to justify these “upgrades” in the name " "of “security.” You can respond by asking: “Whose security? " "Security for me, or for the manufacturer against me?” If the " "manufacturer writes the software, in practice it implements security for " "itself against the customers." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "Even without changing the code in the device, the company can use the “" "connection” to do nasty things to you—for instance, snoop on " "you, your family and your guests, or make it stop running at all." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "The reliable way to prevent abuse of this sort is to block the appliance " "from communicating by internet with anything other than <em>your own " "computer</em>. (You can make your own computer more secure by running " "exclusively free software in it.)" msgstr "" #. type: Content of: <div><div><div><p> msgid "" "In an ideal world, appliances would contain 100% free software, so our " "community could correct any problems the software might have. The free " "software would obey <em>us</em>, not companies. That software would not let " "anyone change it without entering passwords that the <em>owners</em> chose." msgstr "" #. type: Content of: <div><div><h3> msgid "Examples of malware in appliances" msgstr "" #. type: Content of: <div><div> msgid "<a href=\"#content\"><span>BACK TO TOP </span>▲</a>" msgstr "" #. type: Content of: <div><div><h3> msgid "Proprietary malware" msgstr "" #. type: Content of: <div><div><dl><dt> msgid "" "<a href=\"/proprietary/all.html#content\">All items added since 2018</a>" msgstr "" #. type: Content of: <div><div><dl><dt> msgid "By type" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-addictions.html#content\">Addictions</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-back-doors.html#content\">Back doors</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-censorship.html#content\">Censorship</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-coercion.html#content\">Coercion</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-coverups.html#content\">Coverups</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-deception.html#content\">Deception</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-drm.html#content\">DRM</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-fraud.html#content\">Fraud</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-incompatibility.html#content" "\">Incompatibility</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-insecurity.html#content\">Insecurity</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-interference.html#content\">Interference</" "a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-jails.html#content\">Jails</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-manipulation.html#content\">Manipulation</" "a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-obsolescence.html#content\">Obsolescence</" "a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-sabotage.html#content\">Sabotage</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-subscriptions.html#content" "\">Subscriptions</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-surveillance.html#content\">Surveillance</" "a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-tethers.html#content\">Tethers</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-tyrants.html#content\">Tyrants</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/potential-malware.html#content\">In the pipe</a>" msgstr "" #. type: Content of: <div><div><dl><dt> msgid "By product" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-appliances.html#content\">Appliances</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-cars.html#content\">Cars</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/malware-in-online-conferencing.html#content" "\">Conferencing</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-edtech.html#content\">EdTech</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-games.html#content\">Games</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-mobiles.html#content\">Mobiles</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-webpages.html#content\">Webpages</a>" msgstr "" #. type: Content of: <div><div><dl><dt> msgid "By company" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-adobe.html#content\">Adobe</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-amazon.html#content\">Amazon</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-apple.html#content\">Apple</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-google.html#content\">Google</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-microsoft.html#content\">Microsoft</a>" msgstr "" #. type: Content of: <div><div><dl><dt> msgid "Articles" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/articles/uhd-bluray-denies-your-freedom\">UHD Blu-ray " "Denies Your Freedom</a>" msgstr ""

# LANGUAGE translation of files in proprietary/po/ # Copyright (C) YEAR Free Software Foundation, Inc. # This file is distributed under the same license as the original article. # FIRST AUTHOR , YEAR. # #, fuzzy msgid "" msgstr "" "Project-Id-Version: proprietary/po/\n" "POT-Creation-Date: 2023-05-31 14:26+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" "Language: \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" #. type: Content of: msgid "Proprietary Coercion - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><a> msgid "<a id=\"side-menu-button\" class=\"switch\" href=\"#navlinks\">" msgstr "" #. type: Attribute 'title' of: <div><a><img> msgid "Section contents" msgstr "" #. type: Attribute 'alt' of: <div><a><img> msgid " [Section contents] " msgstr "" #. type: Content of: <div> msgid "</a>" msgstr "" #. type: Content of: <div><p><a> msgid "<a href=\"/\">" msgstr "" #. type: Attribute 'title' of: <div><p><a><img> msgid "GNU Home" msgstr "" #. type: Content of: <div><p> msgid "" "</a> / <a href=\"/proprietary/proprietary.html\">Malware</a> / By " "type /" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Coercion" msgstr "" #. type: Content of: <div><div><p> msgid "" "Nonfree (proprietary) software is very often malware (designed to mistreat " "the user). Nonfree software is controlled by its developers, which puts them " "in a position of power over the users; <a href=\"/philosophy/free-software-" "even-more-important.html\">that is the basic injustice</a>. The developers " "and manufacturers often exercise that power to the detriment of the users " "they ought to serve." msgstr "" #. type: Content of: <div><div><p> msgid "This typically takes the form of malicious functionalities." msgstr "" #. type: Content of: <div><div><p> msgid "" "This page lists cases of companies that have announced concrete plans to " "implement malicious techniques to force users into obeying the company's " "demands." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "If you know of an example that ought to be in this page but isn't here, " "please write to <a href=\"mailto:webmasters@gnu.org\"><webmasters@gnu." "org></a> to inform us. Please include the URL of a trustworthy reference " "or two to serve as specific substantiation." msgstr "" #. type: Content of: <div><div><h4> msgid "Latest additions" msgstr "" #. type: Content of: <div><div><p> msgid "" "Entries are in reverse chronological order, based on the dates of " "publication of linked articles. The latest additions are listed on the <a " "href=\"/proprietary/proprietary.html#latest\">main page</a> of the Malware " "section." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The MoviePass dis-service <a href=\"https://www.cnet.com/culture/" "entertainment/moviepass-founder-wants-to-use-facial-recognition-to-score-you-" "free-movies/\"> is planning to use face recognition to track people's eyes</" "a> to make sure they won't put their phones down or look away during " "ads—and trackers." msgstr "" #. TRANSLATORS: Use space (SPC) as msgstr if you don't have notes. #. type: Content of: <div><div> msgid "*GNUN-SLOT: TRANSLATOR'S NOTES*" msgstr "" #. type: Content of: <div><div><p> msgid "" "Please send general FSF & GNU inquiries to <a href=\"mailto:gnu@gnu.org" "\"><gnu@gnu.org></a>. There are also <a href=\"/contact/\">other ways " "to contact</a> the FSF. Broken links and other corrections or suggestions " "can be sent to <a href=\"mailto:webmasters@gnu.org\"><webmasters@gnu." "org></a>." msgstr "" # # # #. TRANSLATORS: Ignore the original text in this paragraph, #. replace it with the translation of these two: #. We work hard and do our best to provide accurate, good quality #. translations. However, we are not exempt from imperfection. #. Please send your comments and general suggestions in this regard #. to <a href="mailto:web-translators@gnu.org"> #. <web-translators@gnu.org></a>.</p> #. <p>For information on coordinating and contributing translations of #. our web pages, see <a #. href="/server/standards/README.translations.html">Translations #. README</a>. #. type: Content of: <div><div><p> msgid "" "Please see the <a href=\"/server/standards/README.translations.html" "\">Translations README</a> for information on coordinating and contributing " "translations of this article." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2022, 2023 Free Software Foundation, Inc." msgstr "" #. type: Content of: <div><p> msgid "" "This page is licensed under a <a rel=\"license\" href=\"http://" "creativecommons.org/licenses/by/4.0/\">Creative Commons Attribution 4.0 " "International License</a>." msgstr "" #. TRANSLATORS: Use space (SPC) as msgstr if you don't want credits. #. type: Content of: <div><div> msgid "*GNUN-SLOT: TRANSLATOR'S CREDITS*" msgstr "" #. timestamp start #. type: Content of: <div><p> msgid "Updated:" msgstr "" #. type: Content of: <title> msgid "Proprietary Interference - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Interference" msgstr "" #. type: Content of: <div><div><p> msgid "" "One kind of malicious functionality mediates developer's interference into " "the use of the software. This page describes how various proprietary " "programs harass or annoy the user, or cause trouble for the user. These " "actions are like <a href=\"/proprietary/proprietary-sabotage#about-page" "\">sabotage</a>, but the word “sabotage” is too strong for them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://proton.me/blog/outlook-is-microsofts-new-data-collection-" "service\"> Outlook has become a “data collection and ad delivery " "service”</a>. Since Outlook is now integrated with Microsoft “" "cloud” services, and doesn't support end-to-end encryption, the " "company has full access to users' emails, contacts, and calendar events. " "Microsoft may also <a href=\"https://www.cyberkendra.com/2023/11/new-outlook-" "update-raises-privacy.html\"> retrieve credentials associated with any third-" "party services</a> that are synchronized with Outlook. This trove of " "personal data enables Microsoft, as well as its commercial partners, to " "flood users with targeted ads, and possibly to train “artificial " "intelligences.” Even worse, this data is available to any government " "that can force Microsoft to hand it over." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google is <a href=\"https://slate.com/technology/2025/01/google-gemini-ai-" "workspace-default-opt-in.html\"> forcing its bullshit generator, Gemini, on " "many users of Gmail</a> without asking them, and not even offering the users " "a way to deactivate it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Workplace IT managers, whose employees are forced to use Gmail, can get it " "turned off after a laborious procedure, followed by waiting—the " "darkest of dark patterns." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In its default configuration, Windows 11 now <a href=\"https://www.zdnet.com/" "article/windows-11-now-turns-on-onedrive-folder-backup-without-your-" "permission/\"> uploads users' files and personal information to Microsoft's " "“cloud”</a> without asking permission to do so. This is " "presented as a convenient backup method, but if the allotted storage " "capacity is exceeded, the user will need to buy more space, increasing " "Microsoft's profit." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "However, this small profit is probably not the company's major reason for " "making cloud storage the default. Here is an excerpt from the <a href=" "\"https://www.microsoft.com/en-US/servicesagreement\"> Microsoft Services " "agreement</a> (Section 2b):" msgstr "" #. type: Content of: <div><div><ul><li><blockquote><p> msgid "" "<i>To the extent necessary to provide the Services to you and others, to " "protect you and the Services, and to improve Microsoft products and " "services, you grant to Microsoft a worldwide and royalty-free intellectual " "property license to use Your Content, for example, to make copies of, " "retain, transmit, reformat, display, and distribute via communication tools " "Your Content on the Services.</i>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We strongly suspect that the backed-up material is used to feed Microsoft's " "greedy “AI.” In addition, it is most likely analysed to better " "profile users in order to flood them with targeted ads, thereby generating " "more profit." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Users, on the other hand, are at the mercy of any entity that demands their " "data, let alone of any cracker that breaks into Microsoft's servers. They " "<em>must</em> escape from this sick environment, and install a sane <a href=" "\"https://www.gnu.org/distros/free-distros.html\"> free/libre system</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft has started to <a href=\"https://www.cnet.com/tech/who-wants-ads-" "in-their-windows-11-start-menu-heres-how-to-turn-them-off/\"> show ads in " "the “Recommended” section of the Windows 11 Start menu</a>. " "Previously, this section only included recently used documents and images. " "Now it also contains the icons of apps Microsoft wants to advertise, in the " "hope that the user will click on one of them, and buy the app. So far, the " "user can disable the ads, but this doesn't make them more legitimate." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theverge.com/2024/3/15/24101887/microsoft-bing-popups-" "windows-11-google-chrome\"> Microsoft is using malware tactics to get users " "to switch to their web browser</a>, Microsoft Edge, and their search engine, " "Microsoft Bing. When users launch the Google Chrome browser Microsoft " "injects a pop up advertisement in the corner of the screen advising users to " "switch to Bing. Microsoft also imported users Chrome browsing data without " "their knowledge or consent." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft has been annoying people who wanted to close the proprietary " "program OneDrive on their computers, <a href=\"https://www.theverge." "com/2023/11/8/23952878/microsoft-onedrive-windows-close-app-notification\"> " "forcing them to give the reason why they were closing it</a>. This prompt " "was removed after public pressure." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is a reminder that angry users still have the power to make developers " "of proprietary software remove small annoyances. Don't count on public " "outcry to make them remove more profitable malware, though. Run away from " "proprietary software!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20231011121908/https://www.makeuseof." "com/how-to-remove-ads-on-samsung/\">Samsung's Push Service proprietary app</" "a> sends notifications to the user's phone about “updates” in " "Samsung apps, including the Gaming Hub, but these updates only sometimes " "have to do with a new version of the apps. Many times, the notifications " "from Gaming Hub are simply ads for games that they think the user should " "install based on the data collected from the user. Most importantly, <a href=" "\"https://web.archive.org/web/20240305093416/https://getfastanswer.com/3486/" "how-to-remove-samsung-push-service-on-a-smartphone\">it cannot be " "permanently disabled.</a>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Chamberlain Group <a href=\"https://arstechnica.com/gadgets/2023/11/" "chamberlain-blocks-smart-garage-door-opener-from-working-with-smart-homes/" "\">blocks users from using third-party software</a> with its garage openers. " "This is an intentional attack on using free software. The official garage " "opener proprietary mobile app is now also <a href=\"https://pluralistic." "net/2023/11/09/lead-me-not-into-temptation/#chamberlain\">infested with ads, " "including up-selling its other services and devices.</a>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is <a href=\"https://www.theguardian.com/technology/2023/feb/14/" "microsoft-to-phase-out-internet-explorer-with-new-edge-browser\"> remotely " "disabling Internet Explorer, forcibly redirecting users to Microsoft Edge</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Imposing such change is malicious, and the fact that the redirection is from " "one unjust program (IE) to another unjust program (Edge) does not excuse it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.techarp.com/mobile/apple-china-limit-airdrop/\"> " "Obeying a demand by the Chinese government, Apple restricted the use of " "AirDrop in China</a>. It imposed a ten-minute time limit during which users " "can receive files from non contacts. This makes it nearly impossible to use " "AirDrop for its intended purpose, which is to exchange files with strangers " "between iMonsters in physical proximity. This happened after it became known " "that dissenters were using the app to distribute digital anti-government " "fliers anonymously." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Norton 360 antivirus <a href=\"https://www.howtogeek.com/777952/" "norton-360-antivirus-now-mines-cryptocurrency/\">updated its program to " "install a cryptocurrency miner on users' computers</a> without people's " "permission. The miner is not turned on by default but there is no way to " "completely uninstall the crypto mining software, which has upset some users." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://slate.com/technology/2021/10/facebook-unfollow-everything-" "cease-desist.html\">Facebook's nonfree client forces its useds to look at " "the newsfeed</a>. A used of Facebook developed a browser add-on to make it " "easier to unfollow everyone and thus make the newsfeed empty. Many of the " "people used by Facebook loved this, because they regard the newsfeed as a " "burden that Facebook imposes on them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If the client software for Facebook were free, useds could probably make the " "newsfeed disappear by modifying the client not to display it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is making it harder and harder to <a href=\"https://www.theverge." "com/22630319/microsoft-windows-11-default-browser-changes\">replace default " "apps in its Windows</a> operating system and is pressuring users to use its " "proprietary programs instead. We believe the best approach to this would be " "replacing Windows with a free (as in freedom) operating system like GNU. We " "also maintain a <a href=\"/distros/free-distros.html\">list of fully free " "distributions of GNU</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/gadgets/2021/06/even-creepier-covid-" "tracking-google-silently-pushed-app-to-users-phones/\">Google automatically " "installed an app on many proprietary Android phones</a>. The app might or " "might not do malicious things but the power Google has over proprietary " "Android phones is dangerous." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/technology/2021/may/30/gadgets-have-" "stopped-working-together-interoperability-apple\">Apple is systematically " "undermining interoperability</a>. At the hardware level, it does this via " "nonstandard plugs, buses and networks. At the software level, it does this " "by not letting the user have any data except within one app." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://gizmodo.com/get-ready-for-in-car-ads-1846888390\">Ford is " "planning to force ads on drivers in cars</a>, with the ability for the owner " "to pay extra to turn them off. The system probably imposes surveillance on " "drivers too." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The <a href=\"https://www.wired.com/story/weddings-social-media-apps-photos-" "memories-miscarriage-problem/\">WeddingWire app saves people's wedding " "photos forever and hands over data to others</a>, giving users no control " "over their personal information/data. The app also sometimes shows old " "photos and memories to users, without giving them any control over this " "either." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is <a href=\"https://uk.pcmag.com/operating-systems/131798/" "microsoft-starts-automatically-removing-flash-from-windows\">forcibly " "removing the Flash player from computers running Windows 10</a>, using <a " "href=\"/proprietary/proprietary-back-doors.html#windows-update\">a universal " "backdoor in Windows</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The fact that Flash has been <a href=\"/proprietary/proprietary-back-doors." "html#M202012020\">disabled by Adobe</a> is no excuse for this abuse of " "power. The nature of proprietary software, such as Microsoft Windows, gives " "the developers power to impose their decisions on users. Free software on " "the other hand empowers users to make their own decisions." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is <a href=\"https://www.slashgear.com/windows-10-users-are-grumpy-" "over-forced-updates-and-unwanted-apps-18643135/\">forcing Windows users</a> " "to <a href=\"https://support.microsoft.com/en-us/windows/manage-updates-in-" "windows-643e9ea7-3cf6-7da6-a25c-95d4f7f099fe\">install upgrades it pushes</" "a> using <a href=\"/proprietary/proprietary-back-doors.html#windows-update" "\">its universal back doors</a>. These upgrades can do various harms to " "users such as restricting computers from some functions and/or forcing users " "to defenselessly do whatever Microsoft tells them to do." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tesla's cars have a <a href=\"/proprietary/proprietary-back-doors." "html#M201709090.1\"> universal remote back door</a>. Tesla used it to <a " "href=\"https://www.theverge.com/2020/2/6/21127243/tesla-model-s-autopilot-" "disabled-remotely-used-car-update\"> disable the autopilot features</a> on " "people's cars to make them pay extra for re-enabling the features." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This kind of malfeature is only possible with proprietary software—" "free software is controlled by its users who wouldn't let do such things to " "them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Riot Games' new anti-cheat is malware; <a href=\"https://www.extremetech.com/" "gaming/309320-riot-games-new-anti-cheat-system-runs-at-system-boot-uses-" "kernel-driver\">runs on system boot at kernel level</a> on Windows. It is " "insecure software that increases the attack surface of the operating system." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple is putting DRM on iPhone batteries, and the system proprietary " "software <a href=\"https://www.vice.com/en/article/59nz3k/apple-is-locking-" "batteries-to-specific-iphones-a-nightmare-for-diy-repair\">turns off certain " "features when batteries are replaced other than by Apple.</a>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In 2019, <a href=\"https://chromestory.com/2019/07/disable-pull-to-refresh-" "on-chrome-for-android/\"> Google revoked users' ability to turn off the " "“pull-to-refresh” gesture in Chrome for Android</a>. Despite <a " "href=\"https://support.google.com/chrome/thread/8152831\"> thousands of " "protests by frustrated users</a>, Google has not reverted its decision. " "Proprietary software developers are known for ignoring users' requests in " "favor of their own gain and convenience. Only free software gives users " "control over their own computing." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google is modifying Chromium so that <a href=\"https://tech.slashdot.org/" "story/19/01/23/0048202/google-proposes-changes-to-chromium-browser-that-will-" "break-content-blocking-extensions-including-various-ad-blockers\"> " "extensions won't be able to alter or block whatever the page contains</a>. " "Users could conceivably reverse the change in a fork of Chromium, but surely " "Chrome (nonfree) will have the same change, and users can't fix it there." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Samsung phones come preloaded with <a href=\"https://www.bloomberg.com/news/" "articles/2019-01-08/samsung-phone-users-get-a-shock-they-can-t-delete-" "facebook\"> a version of the Facebook app that can't be deleted</a>. <a href=" "\"https://www.infopackets.com/news/10484/truth-behind-undeletable-facebook-" "app\"> Facebook claims this is a stub</a> which doesn't do anything, but we " "have to take their word for it, and there is the permanent risk that the app " "will be activated by an automatic update." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Preloading crapware along with a nonfree operating system is common " "practice, but by making the crapware undeletable, Facebook and Samsung (<a " "class=\"not-a-duplicate\" href=\"https://www.bloomberg.com/news/" "articles/2019-01-08/samsung-phone-users-get-a-shock-they-can-t-delete-" "facebook\">among others</a>) are going one step further in their hijacking " "of users' devices." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "One version of Windows 10 <a href=\"https://www.ghacks.net/2018/09/12/" "microsoft-intercepting-firefox-chrome-installation-on-windows-10/\"> " "harangues users if they try to install Firefox (or Chrome)</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A nonfree video game, available through the nonfree Steam client, <a href=" "\"https://www.extremetech.com/gaming/274552-great-now-games-are-hijacking-" "systems-with-cryptocurrency-miners\"> included a “miner”</a>, i." "e. an executable that hijacks the CPU in users' computers to mine a " "cryptocurrency." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A cracker used an exploit in outdated software to <a href=\"https://www." "pcmag.com/news/400-websites-secretly-served-cryptocurrency-miners-to-visitors" "\"> inject a “miner” in web pages</a> served to visitors. This " "type of malware hijacks the computer's processor to mine a cryptocurrency." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(Note that the article refers to the infected software as “" "content management system”. A better term would be “<a href=\"/" "philosophy/words-to-avoid.html#Content\">website revision system</a>”.)" "</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Since the miner was a nonfree JavaScript program, visitors wouldn't have " "been affected if they had used <a href=\"/software/librejs/index.html" "\">LibreJS</a>. Some browser extensions that <a href=\"https://www.cnet.com/" "tech/computing/how-to-stop-sites-from-using-your-cpu-to-mine-coins/\"> " "specifically block JavaScript miners</a> are also available." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Pearson's proprietary educational software <a href=\"https://gizmodo.com/" "pearson-embedded-a-social-psychological-experiment-in-s-1825367784\"> did an " "experiment on real students</a>, treating students differently to observe " "the results." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is planning to make Windows <a href=\"https://www.theguardian.com/" "technology/2018/mar/19/windows-10-microsoft-force-people-edge-browser-" "windows-mail-chrome-firefox\"> impose use of its browser, Edge, in certain " "circumstances</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The reason Microsoft can force things on users is that Windows is nonfree." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Learn how <a href=\"https://web.archive.org/web/20170319013045/https://www." "huffingtonpost.com/joseph-farrell/the-fascinating-psycholog_b_6076502.html" "\"> gratis-to-play-and-not-win-much games manipulate their useds " "psychologically</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "These manipulative behaviors are malicious functionalities, and they are " "possible because the game is proprietary. If it were free, people could " "publish a non-manipulative version and play that instead." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows displays <a href=\"https://www.theverge.com/2017/3/17/14956540/" "microsoft-windows-10-ads-taskbar-file-explorer\"> intrusive ads for " "Microsoft products and its partners' products</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article's author starts from the premise that Microsoft has a right to " "control what Windows does to users, as long as it doesn't go “too " "far”. We disagree." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "An upgrade package for Acrobat Reader <a href=\"https://www.bleepingcomputer." "com/news/software/adobe-acrobat-reader-dc-update-installs-chrome-browser-" "extension/\">silently alters Chrome</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Microsoft Telemetry Compatibility service <a href=\"https://answers." "microsoft.com/en-us/windows/forum/all/microsoft-telemetry-compatibility/" "cefa7c8e-49c9-4965-aef6-2d5f01bb38f2\"> drastically reduces the performances " "of machines running Windows 10</a>, and can't be disabled easily." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "After <a href=\"/proprietary/malware-microsoft.html#windows10-forcing" "\">forcing the download of Windows 10</a> on computers that were running " "Windows 7 and 8, Microsoft <a href=\"https://www.computerworld.com/" "article/3012278/microsoft-sets-stage-for-massive-windows-10-upgrade-strategy." "html\"> repeatedly switched on a flag that urged users to “" "upgrade” to Windows 10</a> when they had turned it off, in the hope " "that some day they would fail to say no. To do this, Microsoft used <a href=" "\"https://www.theregister.com/2016/03/17/" "microsoft_windows_10_upgrade_gwx_vs_humanity/\"> malware techniques</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A detailed <a href=\"https://www.eff.org/deeplinks/2016/08/windows-10-" "microsoft-blatantly-disregards-user-choice-and-privacy-deep-dive\"> analysis " "of Microsoft's scheme</a> is available on the Electronic Frontier " "Foundation's website." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft has made companies' Windows machines managed by the company's " "sysadmins <a href=\"https://www.computerworld.com/article/3042397/admins-" "beware-domain-attached-pcs-are-sprouting-get-windows-10-ads.html\">harangue " "users to complain to the sysadmins about not “upgrading” to " "Windows 10</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A pacemaker running proprietary code <a href=\"https://www.wired.com/2016/02/" "i-want-to-know-what-code-is-running-inside-my-body/\">was misconfigured and " "could have killed the implanted person</a>. In order to find out what was " "wrong and get it fixed, the person needed to break into the remote device " "that sets parameters in the pacemaker (possibly infringing upon " "manufacturer's rights under the DMCA). If this system had run free software, " "it could have been fixed much sooner." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft has <a href=\"https://www.theverge.com/2016/1/16/10780876/" "microsoft-windows-support-policy-new-processors-skylake\">desupported all " "future Intel CPUs for Windows 7 and 8</a>. Those machines will be stuck with " "the nastier Windows 10. <a href=\"https://gizmodo.com/only-the-latest-" "version-of-windows-will-run-on-some-fut-1753545825\"> AMD and Qualcomm CPUs, " "too</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Of course, Windows 7 and 8 are unethical too, because they are proprietary " "software. But this example of Microsoft's wielding its power demonstrates " "the power it holds." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Free software developers also stop maintaining old versions of their " "programs, but this is not unfair to users because the users of free software " "have control over it. If it is important enough to you, you and other users " "can hire someone to support the old version on your future platforms." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe nonfree software may halt all other work and freeze a computer <a href=" "\"https://shallowsky.com/blog/gimp/non-free-software-surprises.html\"> to " "perform a license check</a>, at a random time every 30 days." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Oracle made a deal with Yahoo; Oracle's nonfree Java plug-in will <a href=" "\"https://searchengineland.com/yahoo-signs-deal-with-oracle-to-attract-new-" "users-via-java-installs-224097\"> change the user's initial web page, and " "default search engine, to Yahoo</a> unless the user intervenes to stop it." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2015-2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Jails - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Jails" msgstr "" #. type: Content of: <div><div><p> msgid "" "The “jails” are malicious operating systems that are designed to " "impose censorship of which applications the user can install. The <a href=" "\"http://i.imgur.com/ZRViDum.jpg\">image of the iPrison</a> illustrates this " "issue." msgstr "" #. type: Content of: <div><div><p> msgid "" "These systems are platforms for censorship imposed by the company that owns " "the system. Selling products designed as platforms for a company to impose " "censorship ought to be forbidden by law, but it isn't." msgstr "" #. type: Content of: <div><div><p> msgid "" "This page lists a few jails, along with some of the methods they use to " "censor apps, and includes specific examples of apps that were blocked using " "this censorship power." msgstr "" #. type: Content of: <div><div><div><ul><li> msgid " <a href=\"#apple\">Apple</a> " msgstr "" #. type: Content of: <div><div><div><ul><li> msgid " <a href=\"#microsoft\">Microsoft</a> " msgstr "" #. type: Content of: <div><div><div><ul><li> msgid " <a href=\"#consoles\">Game consoles</a> " msgstr "" #. type: Content of: <div><div><h3> msgid "Apple" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Shortcuts, a built-in scripting app on Apple devices, <a href=\"https://" "support.apple.com/guide/shortcuts/apdf01f8c054/5.0/ios/15.0\"> doesn't give " "you complete freedom to share scripts</a> (a.k.a. “shortcuts”). " "Exporting a script as a file <a href=\"https://web.archive.org/" "web/20230329031338/https://www.reddit.com/r/StallmanWasRight/comments/vogb0c/" "all_methods_of_sharing_ios_shortcuts_require_an/\"> requires an Apple ID</" "a>, and may be subjected to censorship by Apple." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In this situation (and many others), switching from iPhony/iBad to a freedom " "respecting device gives you both convenience and freedom. The assumption " "that you must sacrifice convenience to get freedom is often wrong. Jails are " "inconvenient." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple has made it <a href=\"https://gizmodo.com/apple-and-google-pull-" "opposition-app-from-russian-store-1847695238\"> impossible to load Navalny's " "tactical voting app into an iPhone</a> in Russia." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It is impossible because (1) the iPhone refuses to load apps from anywhere " "other than Apple, and (2) Apple has obeyed a Russian censorship law. The " "first point is enforced by Apple's nonfree software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple plans to require that <a href=\"https://www.macrumors.com/2019/04/08/" "mac-apps-notarization-macos-10-14-5/\"> all application software for MacOS " "be approved by Apple first</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Offering a checking service as an option could be useful and would not be " "wrong. Requiring users to get Apple's approval is tyranny. Apple says the " "check will only look for malware (not counting the malware that is <a href=" "\"/proprietary/malware-apple.html#TOC\">part of the operating system</a>), " "but Apple could change that policy step by step. Or perhaps Apple will " "define malware to include any app that the Chinese government does not like." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "For free software, this means users will need to get Apple's approval after " "compilation. This amounts to a system of surveilling the use of free " "programs." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://en.wikipedia.org/w/index.php?title=IOS_jailbreaking&" "oldid=835861046\"> iOS, the operating system of the Apple iThings, is the " "prototype of a jail</a>. It was Apple that introduced the practice of " "designing general purpose computers with censorship of application programs." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Here is an article about the <a href=\"https://weblog.rogueamoeba." "com/2008/03/07/code-signing-and-you/\"> code signing</a> that the iThings " "use to lock up the user." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Curiously, Apple is beginning to allow limited passage through the walls of " "the iThing jail: users can now install apps built from source code, provided " "the source code is written in Swift. Users cannot do this freely because " "they are required to identify themselves. <a href=\"https://developer.apple." "com/xcode/\">Here are details</a>. While this is a crack in the prison " "walls, it is not big enough to mean that the iThings are no longer jails." msgstr "" #. type: Content of: <div><div><h4> msgid "Examples of censorship by Apple jails" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Russian communications watchdog <a href=\"https://www.reuters.com/legal/" "litigation/russian-watchdog-tells-google-apple-remove-navalny-app-" "report-2021-08-20/\"> tells Google and Apple to remove Navalny's app</a> " "from their stores." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Because Apple controls what a user can install, this is absolute censorship. " "By contrast, because Android does not do that, users can install apps even " "if Google does not offer them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple is <a href=\"https://www.theguardian.com/technology/2020/aug/30/this-" "isnt-the-1990s-apple-under-pressure-from-app-developers\"> putting the " "squeeze on all business</a> conducted through apps for iMonsters." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is a symptom of a very big injustice: that Apple has the power to " "decide what software can be installed on an iMonster. That it is a jail." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple has <a href=\"https://www.theguardian.com/world/2019/oct/10/hong-kong-" "protests-apple-pulls-tracking-app-after-china-criticism\"> banned the app " "that Hong Kong protesters use to communicate</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Obeying the “local laws” about what people can do with software " "is no excuse for censoring what software people can use." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple <a href=\"https://boingboing.net/2019/10/07/apple-ios-13-1-2-for-hong-" "kong.html\"> censors the Taiwan flag in iOS</a> on behalf of the Chinese " "government. When the region is set to Hong Kong, this flag is not visible in " "the emoji selection widget but is still accessible. When the region is set " "to mainland China, all attempts to display it will result in the “" "empty emoji” icon as if the flag never existed." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Thus, not only does Apple use the App Store as an instrument of censorship, " "it also uses the iThing operating system for that purpose." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Users caught in the jail of an iMonster are <a href=\"https://boingboing." "net/2019/05/15/brittle-security.html\"> sitting ducks for other attackers</" "a>, and the app censorship prevents security companies from figuring out how " "those attacks work." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple's censorship of apps is fundamentally unjust, and would be inexcusable " "even if it didn't lead to security threats as well." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple is <a href=\"https://www.eff.org/deeplinks/2017/10/iranian-hardliners-" "want-isolated-internet\"> censoring apps for the US government too</a>. " "Specifically, it is deleting apps developed by Iranians." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The root of these wrongs is in Apple. If Apple had not designed the " "iMonsters to let Apple censor applications, Apple would not have had the " "power to stop users from installing whatever kind of apps." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple <a href=\"https://www.nytimes.com/2017/07/29/technology/china-apple-" "censorhip.html\"> deleted several VPNs from its app store for China</a>, " "thus using its own censorship power to strengthen that of the Chinese " "government." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple used its censorship system to enforce Russian surveillance <a href=" "\"https://web.archive.org/web/20220402210254/https://www.nytimes." "com/2017/01/06/technology/linkedin-blocked-in-russia.html\"> by blocking " "distribution of the LinkedIn app in Russia</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is ironic because LinkedIn is a surveillance system itself. While " "subjecting its users to its own surveillance, it tries to protect its users " "from Russian surveillance, and is therefore subject to Russian censorship." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "However, the point here is the wrong of Apple's censorship of apps." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple used its censorship system to enforce China's censorship <a href=" "\"https://www.theguardian.com/world/2017/jan/05/apple-removes-new-york-times-" "app-in-china\"> by blocking distribution of the New York Times app</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple censors games, <a href=\"https://arstechnica.com/gaming/2016/05/apple-" "says-game-about-palestinian-child-isnt-a-game/\"> banning some games from " "the cr…app store</a> because of which political points they suggest. " "Some political points are apparently considered acceptable." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple <a href=\"https://www.ifixit.com/News/7401/ifixit-app-pulled\"> banned " "a program from the App Store</a> because its developers committed the " "enormity of disassembling some iThings." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "As of 2015, Apple <a href=\"https://www.theguardian.com/commentisfree/2015/" "sep/23/apple-anti-choice-tendencies-showing-in-app-store-reproductive-rights" "\"> systematically bans apps that endorse abortion rights or would help " "women find abortions</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This particular political slant <a href=\"https://www.theguardian.com/" "technology/2011/dec/01/siri-abortion-apple-unintenional-omissions\"> affects " "other Apple services</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple has banned iThing applications that show the confederate flag. <a " "href=\"https://www.huffpost.com/entry/apple-confederate-flag_n_7663754\"> " "Not only those that use it as a symbol of racism</a>, but even strategic " "games that use it to represent confederate army units fighting in the Civil " "War." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This ludicrous rigidity illustrates the point that Apple should not be " "allowed to censor apps. Even if Apple carried out this act of censorship " "with some care, it would still be wrong. Whether racism is bad, whether " "educating people about drone attacks is bad, are not the real issue. Apple " "should not have the power to impose its views about either of these " "questions, or any other." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/technology/2014/dec/11/papers-please-" "game-ipad-nude-body-scans\"> More examples of Apple's arbitrary and " "inconsistent censorship</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple used this censorship power in 2014 to <a href=\"https://boingboing." "net/2014/02/07/apple-yanks-last-remaining-bit.html\"> ban all bitcoin apps</" "a> for the iThings for a time. It also <a href=\"https://www.gamespot.com/" "articles/apple-removes-game-about-growing-marijuana-from-app-" "store/1100-6419864/\"> banned a game about growing marijuana</a>, while " "permitting games about other crimes such as killing people. Perhaps Apple " "considers killing more acceptable than marijuana." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple rejected an app that displayed the locations of US drone " "assassinations, giving various excuses. Each time the developers fixed one " "“problem”, Apple complained about another. After the fifth " "rejection, Apple <a href=\"https://mashable.com/archive/apple-app-tracks-" "drone-strikes\"> admitted it was censoring the app based on the subject " "matter</a>." msgstr "" #. type: Content of: <div><div><h3> msgid "Microsoft" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows 10 S was a jail: <a href=\"https://www.theguardian.com/" "technology/2017/may/03/windows-10-s-microsoft-faster-pc-comparison\"> only " "programs from the Windows Store could be installed and executed</a>. It was " "however possible to <a href=\"https://www.theverge.com/2017/6/13/15789998/" "microsoft-windows-10-s-upgrade-windows-10-pro-guide\"> upgrade to Windows 10 " "Pro</a>. The successor of Windows 10 S is a special configuration of Windows " "10 called <a href=\"https://support.microsoft.com/en-us/windows/windows-10-" "and-windows-11-in-s-mode-faq-851057d6-1ee9-b9e5-c30b-93baebeebc85\"> S mode</" "a>. The major difference with Windows 10 S is that there is an easy way to " "switch out of S mode." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20190917162027/https://www.itworld.com/" "article/2832657/microsoft-metro-app-store-lock-down.html\"> Windows 8 on " "“mobile devices” (now defunct) was a jail</a>." msgstr "" #. type: Content of: <div><div><h3> msgid "Game consoles" msgstr "" #. type: Content of: <div><div><p> msgid "" "No game can run on the console unless the console's manufacturer has " "authorized it. Alas, we can't find a article to cite as a reference for " "this fact. Please inform us if you know of one." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Nintendo has devoted a lot of effort to <a href=\"https://arstechnica.com/" "gaming/2018/07/nintendo-reportedly-rolling-out-new-more-hack-proof-switch-" "hardware/\"> preventing users from installing third-party software on its " "Switch consoles</a>. These are now full-blown jails." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Sony restricted access to the PlayStation 3 GPU, so people who installed a " "GNU/Linux operating system on the console couldn't use it at full capacity. " "When some of them broke the restriction, <a href=\"https://blog.playstation." "com/2010/03/28/ps3-firmware-v3-21-update/\">Sony removed the ability to " "install other operating systems</a>. Then users broke that restriction too, " "but <a href=\"https://www.engadget.com/2011-01-12-sony-follows-up-officially-" "sues-geohot-and-fail0verflow-over-ps.html\">got sued by Sony</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "To install and use third-party operating systems and programs on the Xbox " "console, <a href=\"https://events.ccc.de/congress/2005/fahrplan/" "attachments/591-paper_xbox.pdf\">people had to break the restrictions " "imposed by Microsoft</a>." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2014-2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "" "Microsoft's Software Is Malware - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><p> msgid "" "</a> / <a href=\"/proprietary/proprietary.html\">Malware</a> / By " "company /" msgstr "" #. type: Content of: <div><h2> msgid "Microsoft's Software is Malware" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Types of Microsoft malware" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#back-doors\">Back doors</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#drm\">DRM</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#insecurity\">Insecurity</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#interference\">Interference</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#jails\">Jails</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#sabotage\">Sabotage</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#subscriptions\">Subscriptions</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#surveillance\">Surveillance</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#tethers\">Tethers</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#tyrants\">Tyrants</a>" msgstr "" #. type: Content of: <div><div><h3> msgid "Back Doors" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft Windows has a universal back door through which <a href=\"https://" "www.informationweek.com/government/microsoft-updates-windows-without-user-" "permission-apologizes\"> any change whatsoever can be imposed on the users</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This was <a href=\"https://web.archive.org/web/20200219180230/http://slated." "org/windows_by_stealth_the_updates_you_dont_want\"> reported in 2007</a> for " "XP and Vista, and it seems that Microsoft used the same method to push the " "<a href=\"/proprietary/malware-microsoft.html#windows10-forcing\"> Windows " "10 downgrade</a> to computers running Windows 7 and 8." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In Windows 10, the universal back door is no longer hidden; all “" "upgrades” will be <a href=\"https://arstechnica.com/information-" "technology/2015/07/windows-10-updates-to-be-automatic-and-mandatory-for-home-" "users/\"> forcibly and immediately imposed</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft has <a href=\"https://theintercept.com/2015/12/28/recently-bought-" "a-windows-computer-microsoft-probably-has-your-encryption-key/\"> backdoored " "its disk encryption</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The German government <a href=\"https://www.theregister.com/2013/08/23/" "nsa_germany_windows_8/\">veers away from Windows 8 computers with TPM 2.0</" "a> (<a href=\"https://www.zeit.de/digital/datenschutz/2013-08/trusted-" "computing-microsoft-windows-8-nsa\">original article in German</a>), due to " "potential back door capabilities of the TPM 2.0 chip." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Here is a suspicion that we can't prove, but is worth thinking about: <a " "href=\"https://web.archive.org/web/20150206003913/http://www.afr.com/p/" "technology/intel_chips_could_be_nsa_key_to_ymrhS1HS1633gCWKt5tFtI\"> " "Writable microcode for Intel and AMD microprocessors</a> may be a vehicle " "for the NSA to invade computers, with the help of Microsoft, say respected " "security experts." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows 8 also has a back door for <a href=\"https://www.computerworld.com/" "article/2732767/microsoft--we-can-remotely-delete-windows-8-apps.html\"> " "remotely deleting apps</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "You might well decide to let a security service that you trust remotely " "<em>deactivate</em> programs that it considers malicious. But there is no " "excuse for <em>deleting</em> the programs, and you should have the right to " "decide whom (if anyone) to trust in this way." msgstr "" #. type: Content of: <div><div><h3> msgid "DRM" msgstr "" #. type: Content of: <div><div><p> msgid "" "Digital restrictions management, or “DRM,” refers to " "functionalities designed to restrict what users can do with the data in " "their computers." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Ebooks “bought” from Microsoft's store check that their DRM is " "valid by connecting to the store every time their “owner” wants " "to read them. Microsoft is going to close this store, <a href=\"https://www." "bbc.com/news/technology-47810367\"> bricking all DRM'ed ebooks it has ever " "“sold”</a>. (The article additionally highlights the pitfalls of " "DRM.)" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is another proof that a DRM-encumbered product doesn't belong to the " "person who bought it. Microsoft said it will refund customers, but this is " "no excuse for selling them restricted books." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/gadgets/2007/08/aacs-tentacles/\">DRM in " "Windows</a>, introduced to cater to <a href=\"/proprietary/proprietary-drm." "html#bluray\">Blu-ray</a> disks. (The article talks about how the same " "malware would later be introduced in MacOS. That had not been done at the " "time, but it was done subsequently.)" msgstr "" #. type: Content of: <div><div><h3> msgid "Insecurity" msgstr "" #. type: Content of: <div><div><p> msgid "" "These bugs are/were not intentional, so unlike the rest of the file they do " "not count as malware. We mention them to refute the supposition that " "prestigious proprietary software doesn't have grave bugs." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows Recall is a feature of Microsoft's Copilot tool that comes " "preinstalled on AI-specialized computers. <a href=\"https://www.techtarget." "com/searchenterpriseai/feature/Privacy-and-security-risks-surrounding-" "Microsoft-Recall\"> Recall records everything users do on their computer</a> " "and allows them to search the recordings, but it has numerous security flaws " "and poses a risk to privacy. As Recall cannot be completely uninstalled, " "disabling it doesn't eliminate the risk because it can be reactivated by " "malware or misconfiguration." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft says that <a href=\"https://support.microsoft.com/en-us/windows/" "privacy-and-control-over-your-recall-experience-d404f672-7647-41e5-886c-" "a3c59680af15\"> Recall will not take screenshots of digitally restricted " "media</a>. Meanwhile, it stores sensitive user information such as passwords " "and bank account numbers, showing that whereas Microsoft worries somewhat " "about corporate interests, it couldn't care less about user privacy." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.bleepingcomputer.com/news/microsoft/zero-click-windows-" "tcp-ip-rce-impacts-all-systems-with-ipv6-enabled-patch-now/\"> A critical " "vulnerability in Windows systems that support IPv6</a> was discovered in " "2024, <a href=\"https://msrc.microsoft.com/update-guide/vulnerability/" "CVE-2024-38063\"> 16 years after the first affected system</a> was released. " "Unless the relevant patch is applied, an attacker can remotely execute " "arbitrary code on these systems. Microsoft considers exploits “likely." "”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The same sort of vulnerability in a free/libre operating system would " "probably be discovered sooner, since many more people would be able to look " "at the source code." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.bleepingcomputer.com/news/security/microsoft-" "office-365-email-encryption-could-expose-message-content/\"> The Microsoft " "Office encryption is weak</a>, and susceptible to attack." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Encryption is a tricky field, and easy to mess up. It is wise to insist on " "encryption software that is (1) free software and (2) studied by experts." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A security failure in Microsoft's Windows is <a href=\"https://www." "bleepingcomputer.com/news/security/fake-windows-11-upgrade-installers-infect-" "you-with-redline-malware/\">infecting people's computers with RedLine " "stealer malware</a> using a fake Windows 11 upgrade installer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A newly found Microsoft Windows vulnerability <a href=\"https://edition.cnn." "com/2021/07/08/tech/microsoft-windows-10-printnightmare/\"> can allow " "crackers to remotely gain access to the operating system</a> and install " "programs, view and delete data, or even create new user accounts with full " "user rights." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The security research firm accidentally leaked instructions on how the flaw " "could be exploited but Windows users should still wait for Microsoft to fix " "the flaw, if they fix it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>Please note that the article wrongly refers to crackers as “<a " "href=\"/philosophy/words-to-avoid.html#Hacker\">hackers</a>”.</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "At least 30 thousand organizations in the United States are newly “<a " "href=\"/philosophy/words-to-avoid.html#Hacker\">cracked</a>” via <a " "href=\"https://krebsonsecurity.com/2021/03/at-least-30000-u-s-organizations-" "newly-hacked-via-holes-in-microsofts-email-software/\">holes in Microsoft's " "proprietary email software, named Microsoft 365</a>. It is unclear whether " "there are other holes and vulnerabilities in the program or not but history " "and experience tells us it wouldn't be the last disaster with proprietary " "programs." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Researchers at the security firm SentinelOne discovered a <a href=\"https://" "www.wired.com/story/windows-defender-vulnerability-twelve-years/\">security " "flaw in proprietary program Microsoft Windows Defender that lurked " "undetected for 12 years</a>. If the program was free (as in freedom), more " "people would have had a chance to notice the problem, therefore, it could've " "been fixed a lot sooner." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The proprietary program Microsoft Teams' insecurity <a href=\"https://www." "forbes.com/sites/thomasbrewster/2020/04/27/your-whole-companys-microsoft-" "teams-data-couldve-been-stolen-with-an-evil-gif/\">could have let a " "malicious GIF steal user data from Microsoft Teams accounts</a>, possibly " "across an entire company, and taken control of “an organization's " "entire roster of Teams accounts.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Exploits of bugs in Windows, which were developed by the NSA and then leaked " "by the Shadowbrokers group, are now being used to <a href=\"https://" "theintercept.com/2017/05/12/the-nsas-lost-digital-weapon-is-helping-hijack-" "computers-around-the-world/\">attack a great number of Windows computers " "with ransomware</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A <a href=\"https://www.zdnet.com/article/windows-attack-can-steal-your-" "username-password-and-other-logins/\">flaw in Internet Explorer and Edge</a> " "allows an attacker to retrieve Microsoft account credentials, if the user is " "tricked into visiting a malicious link." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/information-technology/2013/12/credit-card-" "fraud-comes-of-age-with-first-known-point-of-sale-botnet/\"> Point-of-sale " "terminals running Windows were taken over</a> and turned into a botnet for " "the purpose of collecting customers' credit card numbers." msgstr "" #. type: Content of: <div><div><h3> msgid "Interference" msgstr "" #. type: Content of: <div><div><p> msgid "" "This section gives examples of Microsoft software harassing or annoying the " "user, or causing trouble for the user. These actions are like sabotage but " "the word “sabotage” is too strong for them." msgstr "" #. type: Content of: <div><div><h3> msgid "Sabotage" msgstr "" #. type: Content of: <div><div><p> msgid "" "The wrongs in this section are not precisely malware, since they do not " "involve making the program that runs in a way that hurts the user. But they " "are a lot like malware, since they are technical Microsoft actions that harm " "the users of specific Microsoft software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows Defender <a href=\"https://answers.microsoft.com/en-us/windows/forum/" "all/windows-defender-deleted-my-download-" "without/0b4211cf-80f7-47c7-8ea0-675785a0003c\"> deletes downloaded files " "that it considers malware</a> as soon as they are saved to disk, without " "requesting permission to do so. Many angry users have complained about this " "unacceptable behavior over the last few years, and even suggested fixes, but " "Microsoft has ignored them. It is high time for Windows users to escape " "Microsoft's tyranny by migrating to a free/libre system." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft has been <a href=\"https://borncity.com/win/2019/01/17/windows-10-" "update-kb4023057-re-released-1-16-2019/\"> force-installing a “" "remediation” program</a> on computers running certain versions of " "Windows 10. Remediation, in Microsoft's view, means <a href=\"https://" "support.microsoft.com/en-us/topic/kb4023057-update-health-tools-windows-" "update-service-components-fccad0ca-dc10-2e46-9ed1-7e392450fb3a\"> tampering " "with users' settings and files</a>, notably to “repair” any " "components of the updating system that users may have intentionally " "disabled, and thus regain full power over them. Microsoft repeatedly pushed " "faulty versions of this program to users' machines, causing numerous " "problems, some of which <a href=\"https://web.archive.org/web/20240223182933/" "https://www.windowsmode.com/microsoft-suspends-windows-10-october-2018-" "update-rollout-due-to-critical-bugs/\"> critical</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This exemplifies the arrogant and manipulative attitude that proprietary " "software developers have learned to adopt toward the people they are " "supposedly serving. Migrate to a <a href=\"/distros/free-distros.html\">free " "operating system</a> if you can!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If your employer makes you run Windows, tell the financial department how " "this wastes your time dealing with endless connections and premature " "hardware failures." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft has made Windows 7 and 8 cease to function on certain new " "computers, <a href=\"https://learn.microsoft.com/en-us/troubleshoot/windows-" "client/installing-updates-features-roles/processor-not-supported-together-" "with-windows-version\">effectively forcing their owners to switch to Windows " "10</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft <a href=\"https://arstechnica.com/information-technology/2017/04/" "new-processors-are-now-blocked-from-receiving-updates-on-old-windows/\"> has " "dropped support for Windows 7 and 8 on recent processors</a> in a big hurry." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It makes no difference what legitimate reasons Microsoft might have for not " "doing work to support them. If it doesn't want to do this work, it should " "let users do the work." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In its efforts to trick users of Windows 7 and 8 into installing all-spying " "Windows 10 against their will, Microsoft forced their computers to <a href=" "\"https://www.theguardian.com/technology/2015/sep/11/microsoft-downloading-" "windows-1\"> silently download… the whole of Windows 10</a>! " "Apparently, this was done through a <a href=\"/proprietary/proprietary-back-" "doors.html#windows-update\"> universal back door</a>. Not only did the " "unwanted downloads <a href=\"https://www.theregister.com/2016/06/03/" "windows_10_upgrade_satellite_link/\"> jeopardize important operations in " "regions of the world with poor connectivity</a>, but many of the people who " "let installation proceed found out that this “upgrade” was in " "fact a <a href=\"https://gizmodo.com/woman-wins-10-000-from-microsoft-after-" "unwanted-window-1782666146\"> downgrade</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Once Microsoft has tricked a user into accepting installation of Windows 10, " "<a href=\"https://www.theregister.com/2016/06/01/" "windows_10_nagware_no_way_out/\">they find that they are denied the option " "to cancel or even postpone the imposed date of installation</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This demonstrates what we've said for years: using proprietary software " "means letting someone have power over you, and you're going to get screwed " "sooner or later." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "FTDI's proprietary driver for its USB-to-serial chips has been designed to " "<a href=\"https://arstechnica.com/information-technology/2014/10/windows-" "update-drivers-bricking-usb-serial-chips-beloved-of-hardware-hackers/" "\">sabotage alternative compatible chips</a> so that they no longer work. " "Microsoft is <a href=\"https://it.slashdot.org/story/16/01/31/1720259/ftdi-" "driver-breaks-hardware-again\">installing this automatically</a> as an " "“upgrade”." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows 10 “upgrades” <a href=\"http://www.ghacks.net/2015/11/24/" "beware-latest-windows-10-update-may-remove-programs-automatically/\"> delete " "applications</a> without asking permission." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20191205010621/https://www." "computerworld.com/article/3423768/windows-xp--end-of-an-era--end-of-an-error." "html\">Microsoft cut off security fixes for Windows XP, except to some big " "users that pay exorbitantly</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is going to <a href=\"https://web.archive.org/web/20181030194725/" "https://www.computerworlduk.com/applications/more-than-half-of-all-ie-users-" "face-patch-axe-in-10-months-3605515/\"> cut off support for some Internet " "Explorer versions</a> in the same way." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A person or company has the right to cease to work on a particular program; " "the wrong here is Microsoft does this after having made the users dependent " "on Microsoft, because they are not free to ask anyone else to work on the " "program for them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20130622044225/http://blogs." "computerworlduk.com/open-enterprise/2013/06/how-can-any-company-ever-trust-" "microsoft-again/index.htm\">Microsoft informs the NSA of bugs in Windows " "before fixing them</a>." msgstr "" #. type: Content of: <div><div><h3> msgid "Subscriptions" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft Office forces users <a href=\"https://www.computerworld.com/" "article/2948755/office-for-windows-10-will-require-office-365-subscription-" "on-pcs-larger-tablets.html\">to subscribe to Office 365 to be able to create/" "edit documents</a>." msgstr "" #. type: Content of: <div><div><h3> msgid "Surveillance" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is <a href=\"https://arstechnica.com/gadgets/2025/03/new-" "windows-11-build-makes-mandatory-microsoft-account-sign-in-even-more-" "mandatory/\"> tightening the chains that force Windows useds to sign into " "their Microsoft account</a> [*], thus identifying themselves. We " "suspect this is an intentional strategy to avoid inspiring a lot of " "resistance all at once: leave openings to escape identification, then " "gradually close them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "Enough is enough!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "[*] <small>Why “useds”? Because running Windows is not you using " "Windows; it is Windows using you.</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Edge <a href=\"https://www.neowin.net/news/edge-sends-images-you-view-online-" "to-microsoft-here-is-how-to-disable-that/\">sends the URLs of images the " "user views to Microsoft's servers</a> by default, supposedly to “" "enhance” them. And these images <a href=\"/proprietary/proprietary-" "surveillance.html#M201405140\">may end up on the NSA's servers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft claims its nonfree browser sends the URLs without identifying you, " "which cannot be true, since at least your IP address is known to the server " "if you don't take extra measures. Either way, such enhancer service is " "unjust because any image editing <a href=\"/philosophy/who-does-that-server-" "really-serve.html\">should be done on your own computer using installed free " "software</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article describes how to disable sending the URLs. That makes a change " "for the better, but we suggest that you instead switch to a freedom-" "respecting browser with additional privacy features such as <a href=\"/" "software/gnuzilla/\">IceCat</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "As soon as it boots, and without asking any permission, <a href=\"https://" "web.archive.org/web/20230212120649/https://www.techspot.com/news/97535-" "windows-11-spyware-machine-out-users-control.html\">Windows 11 starts to " "send data to online servers</a>. The user's personal details, location or " "hardware information are reported to Microsoft and other companies to be " "used as telemetry data. All of this is done is the background, and users " "have no easy way to prevent it—unless they switch the computer offline." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft <a href=\"https://betanews.com/2023/01/19/microsoft-is-using-the-" "kb5021751-update-to-see-if-you-have-an-unsupported-version-of-office-" "installed/\"> released an “update” that installs a surveillance " "program</a> on users' computers to gather data on some installed programs " "for Microsoft's benefit. The update is rolling out automatically, and the " "program runs “one time silently.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows 11 Home and Pro now <a href=\"https://www.microsoft.com/windows/" "windows-11-specifications\"> require internet connection and a Microsoft " "account</a> to complete the installation. Windows 11 Pro had an option to " "create a local account instead, but the option has been removed. This " "account can (and most certainly will) be used for surveillance and privacy " "violations. Thankfully, a free software tool named <a href=\"https://gothub." "projectsegfau.lt/pbatard/rufus/\">Rufus</a> can bypass those requirements, " "or help users install a <a href=\"/distros/distros.html\"> free operating " "system</a> instead." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft's Office 365 suite enables employers <a href=\"https://www." "theguardian.com/technology/2020/nov/26/microsoft-productivity-score-feature-" "criticised-workplace-surveillance\">to snoop on each employee</a>. After a " "public outburst, Microsoft stated that <a href=\"https://www.theguardian.com/" "technology/2020/dec/02/microsoft-apologises-productivity-score-critics-" "derided-workplace-surveillance\">it would remove this capability</a>. Let's " "hope so." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is imposing its surveillance on the game of Minecraft by <a href=" "\"https://www.theverge.com/2020/10/22/21527647/minecraft-microsoft-account-" "mojang-java\">requiring every player to open an account on Microsoft's " "network</a>. Microsoft has bought the game and will merge all accounts into " "its network, which will give them access to people's data." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Minecraft players <a href=\"https://directory.fsf.org/wiki/Minetest\">can " "play Minetest</a> instead. The essential advantage of Minetest is that it is " "free software, meaning it respects the user's computer freedom. As a bonus, " "it offers more options." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "As of 2019-2020, Minecraft players are <a href=\"https://www.minecraft.net/" "en-us/article/java-edition-moving-house\">being forced to move to Microsoft " "servers</a>, which results in privacy violation. Microsoft publishes a " "program so users can run their own server, but the program is proprietary " "and it's another <a href=\"/philosophy/free-software-even-more-important.html" "\">injustice to users</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "People can play <a href=\"https://directory.fsf.org/wiki/Minetest" "\">Minetest</a> instead. Minetest is free software and respects the user's " "computer freedom." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Proprietary programs Google Meet, Microsoft Teams, and WebEx <a href=" "\"https://www.consumerreports.org/video-conferencing-services/" "videoconferencing-privacy-issues-google-microsoft-webex-a7383469308/\">are " "collecting user's personal and identifiable data</a> including how long a " "call lasts, who's participating in the call, and the IP addresses of " "everyone taking part. From experience, this can even harm users physically " "if those companies hand over data to governments." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google, Apple, and Microsoft (and probably some other companies) <a href=" "\"https://www.lifewire.com/wifi-positioning-system-1683343\">are collecting " "people's access points and GPS coordinates (which can identify people's " "precise location) even if their GPS is turned off</a>, without the person's " "consent, using proprietary software implemented in person's smartphone. " "Though merely asking for permission would not necessarily legitimize this." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft is <a href=\"https://www.howtogeek.com/442609/confirmed-windows-10-" "setup-now-prevents-local-account-creation/\">tricking users to create an " "account on their network</a> to be able to install and use the Windows " "operating system, which is malware. The account can be used for surveillance " "and/or violating people's rights in many ways, such as turning their " "purchased software to a subscription product." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft recorded users of Xboxes and had <a href=\"https://www.vice.com/en/" "article/43kv4q/microsoft-human-contractors-listened-to-xbox-owners-homes-" "kinect-cortana\"> human workers listen to the recordings</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Morally, we see no difference between having human workers listen and having " "speech-recognition systems listen. Both intrude on privacy." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Skype refuses to say whether it can <a href=\"http://www.slate.com/blogs/" "future_tense/2012/07/20/" "skype_won_t_comment_on_whether_it_can_now_eavesdrop_on_conversations_.html" "\">eavesdrop on calls</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "That almost certainly means it can do so." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft <a href=\"https://answers.microsoft.com/en-us/outlook_com/forum/" "all/why-does-my-new-e-mail-account-need-a-phone-" "number/70049eaf-3b66-4d02-87cc-79dc73c2ea08\">forces people to give their " "phone number</a> in order to be able to create an account on the company's " "network. On top of mistreating their users by providing nonfree software, " "Microsoft is tracking their lives outside the computer and violates their " "privacy." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows 10 telemetry program sends information to Microsoft about the user's " "computer and their use of the computer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Furthermore, for users who installed the fourth stable build of Windows 10, " "called the “Creators Update,” Windows maximized the surveillance " "<a href=\"https://arstechnica.com/gadgets/2017/10/dutch-privacy-regulator-" "says-that-windows-10-breaks-the-law/\"> by force setting the telemetry mode " "to “Full”</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The <a href=\"https://docs.microsoft.com/en-us/windows/privacy/configure-" "windows-diagnostic-data-in-your-organization#full-level\"> “" "Full” telemetry mode</a> allows Microsoft Windows engineers to access, " "among other things, registry keys <a href=\"https://docs.microsoft.com/en-us/" "previous-versions/windows/it-pro/windows-2000-server/cc939702" "(v=technet.10)\"> which can contain sensitive information like " "administrator's login password</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "DRM-restricted files can be used to <a href=\"https://yro.slashdot.org/" "story/17/02/02/231229/windows-drm-protected-files-used-to-decloak-tor-" "browser-users\"> identify people browsing through Tor</a>. The vulnerability " "exists only if you use Windows." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "By default, Windows 10 <a href=\"https://betanews.com/2016/11/24/microsoft-" "shares-windows-10-telemetry-data-with-third-parties/\">sends debugging " "information to Microsoft, including core dumps</a>. Microsoft now " "distributes them to another company." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In order to increase Windows 10's install base, Microsoft <a class=\"not-a-" "duplicate\" href=\"https://www.eff.org/deeplinks/2016/08/windows-10-" "microsoft-blatantly-disregards-user-choice-and-privacy-deep-dive\"> " "blatantly disregards user choice and privacy</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://duo.com/decipher/bring-your-own-dilemma-oem-laptops-and-" "windows-10-security\"> Windows 10 comes with 13 screens of snooping options</" "a>, all enabled by default, and turning them off would be daunting to most " "users." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It appears <a href=\"https://www.ghacks.net/2016/01/05/microsoft-may-be-" "collecting-more-data-than-initially-thought/\"> Windows 10 sends data to " "Microsoft about what applications are running</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A downgrade to Windows 10 deleted surveillance-detection applications. Then " "another downgrade inserted a general spying program. Users noticed this and " "complained, so Microsoft renamed it <a href=\"https://www.theregister." "com/2015/11/26/microsoft_renamed_data_slurper_reinserted_windows_10/\"> to " "give users the impression it was gone</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "To use proprietary software is to invite such treatment." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/information-technology/2015/08/even-when-" "told-not-to-windows-10-just-cant-stop-talking-to-microsoft/\"> Windows 10 " "sends identifiable information to Microsoft</a>, even if a user turns off " "its Bing search and Cortana features, and activates the privacy-protection " "settings." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Windows 10 <a href=\"https://web.archive.org/web/20180923125732/https://" "jonathan.porta.codes/2015/07/30/windows-10-seems-to-have-some-scary-privacy-" "defaults/\"> ships with default settings that show no regard for the privacy " "of its users</a>, giving Microsoft the “right” to snoop on the " "users' files, text input, voice input, location info, contacts, calendar " "records and web browsing history, as well as automatically connecting the " "machines to open hotspots and showing targeted ads." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We can suppose Microsoft looks at users' files for the US government on " "demand, though the “privacy policy” does not explicitly say so. " "Will it look at users' files for the Chinese government on demand?" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft uses Windows 10's “privacy policy” to overtly impose a " "“right” to look at users' files at any time. Windows 10 full " "disk encryption <a href=\"https://edri.org/our-work/microsofts-new-small-" "print-how-your-personal-data-abused/\"> gives Microsoft a key</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Thus, Windows is overt malware in regard to surveillance, as in other issues." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The unique “advertising ID” for each user enables other " "companies to track the browsing of each specific user." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It's as if Microsoft has deliberately chosen to make Windows 10 maximally " "evil on every dimension; to make a grab for total power over anyone that " "doesn't drop Windows now." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It only gets worse with time. <a href=\"https://www.techworm.net/2014/10/" "microsofts-windows-10-permission-watch-every-move.html\"> Windows 10 " "requires users to give permission for total snooping</a>, including their " "files, their commands, their text input, and their voice input." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20190421070310/https://www.itproportal." "com/2014/05/14/microsoft-openly-offered-cloud-data-fbi-and-nsa/\"> Microsoft " "SkyDrive allows the NSA to directly examine users' data</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Skype contains <a href=\"https://web.archive.org/web/20130928235637/http://" "www.forbes.com/sites/petercohan/2013/06/20/project-chess-how-u-s-snoops-on-" "your-skype/\">spyware</a>. Microsoft changed Skype <a href=\"https://www." "theguardian.com/world/2013/jul/11/microsoft-nsa-collaboration-user-data\"> " "specifically for spying</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Spyware in older versions of Windows: <a href=\"https://www.theregister." "com/2003/02/28/windows_update_keeps_tabs/\"> Windows Update snoops on the " "user</a>. <a href=\"https://www.infoworld.com/article/2611451/a-look-at-the-" "black-underbelly-of-windows-8-1--blue-.html\"> Windows 8.1 snoops on local " "searches</a>. And there's a <a href=\"http://www.marketoracle.co.uk/" "Article40836.html\"> secret NSA key in Windows</a>, whose functions we don't " "know." msgstr "" #. type: Content of: <div><div><h3> msgid "Tethers" msgstr "" #. type: Content of: <div><div><p> msgid "" "Tethers are functionalities that require constant (or very frequent) " "connection to a server." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/gadgets/2025/02/on-may-5-microsofts-skype-" "will-shut-down-for-good/\"> Microsoft is shutting down Skype</a> on May 5th, " "2025. As with other tethered proprietary programs, users have to rely on " "servers that are controlled by the developer. When these servers shut down, " "the service disappears. Instead of migrating to the service that Microsoft " "suggests as a replacement, Skype users should regain control of their " "communications by switching to one that is based on free software. <a href=" "\"https://jitsi.org/jitsi-meet/\">Jitsi Meet</a>, for example, is " "appropriate for small video meetings. Anyone can set up a Jitsi server and " "let other people use it, and indeed many of these are available around the " "world." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The recent versions of Microsoft Office require the user to <a href=" "\"https://www.microsoft.com/en-us/microsoft-365/microsoft-365-for-home-and-" "school-faq?legRedir=true&CorrelationId=c9c5b549-11ad-4f71-bf81-" "b7e069fdb372\"> connect to Microsoft servers at least every thirty-one days</" "a>. Otherwise, the software will refuse to edit any documents or create new " "ones. It will be restricted to viewing and printing." msgstr "" #. type: Content of: <div><div><h3> msgid "Jails" msgstr "" #. type: Content of: <div><div><p> msgid "Jails are systems that impose censorship on application programs." msgstr "" #. type: Content of: <div><div><h3> msgid "Tyrants" msgstr "" #. type: Content of: <div><div><p> msgid "" "Tyrants are systems that reject any operating system not “" "authorized” by the manufacturer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Microsoft accidentally left a way for users to install GNU/Linux on Windows " "RT tablets, but now it has <a href=\"https://www.securitynewspaper." "com/2016/07/15/microsoft-silently-kills-dev-backdoor-boots-linux-locked-" "windows-rt-slabs/\"> “fixed” the “error”</a>. They " "have the gall to call this “protecting” the users. The article " "talks of installing “Linux”, but the context shows it is really " "<a href=\"/gnu/linux-and-gnu.html\">GNU/Linux</a> that users install." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.fsf.org/campaigns/secure-boot-vs-restricted-boot/\"> " "Mobile devices that come with Windows 8 are tyrants</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "As this page shows, if you do want to clean your computer of malware, the " "first software to delete is Windows." msgstr "" #. type: Content of: <title> msgid "Proprietary Manipulation - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Manipulation" msgstr "" #. type: Content of: <div><div><p> msgid "" "Manipulation of users is one of these malicious functionalities. Here are " "examples of programs that are designed to do this by taking advantage of " "human psychology." msgstr "" #. type: Content of: <div><div><p> msgid "" "We have a special page for <a href=\"/proprietary/proprietary-addictions.html" "\">Addictive programs</a>, which also take advantage of human psychology, " "but in a much more elaborate and dangerous way." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In an article from Mozilla, every car brand they researched <a href=" "\"https://www.mozillafoundation.org/privacynotincluded/articles/its-official-" "cars-are-the-worst-product-category-we-have-ever-reviewed-for-privacy/\"> " "has failed their privacy tests</a>. Some car manufacturers explicitly " "mention that they collect data which includes “sexual " "activities” and “genetic information”. Not only collecting " "any of such data is a huge privacy violation in the first place, some " "companies assume drivers and passengers' consent before they get in the car. " "Notably, Tesla threatens that the car may be “inoperable” if the " "user opts out of data collection." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tesla <a href=\"https://www.cnn.com/2022/08/22/business/tesla-fsd-price-" "increase/index.html\"> sells an add-on software feature that drivers are not " "allowed to use</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This practice depends on a back door, which is unjust in itself. Asking " "users to buy something years in advance to avoid having to pay an even " "higher price later is manipulative." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.howtogeek.com/803598/app-is-damaged-and-cant-be-opened/" "\"> Apple has been labeling various third-party files and programs as “" "damaged”</a>, preventing users from opening them, and implying that " "software from third-party sources is dangerous. While these restrictions can " "be circumvented, they violate users' freedom to do their computing as they " "wish. Most of the time, the purpose of warnings such as “" "damaged” is to scare users into sticking with Apple's proprietary " "programs for no good reason." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The nonfree app “Along,” developed by a company controlled by " "Zuckerberg, <a href=\"https://kappanonline.org/dont-go-along-with-corporate-" "schemes-to-gather-up-student-data/\"> leads students to reveal to their " "teacher personal information</a> about themselves and their families. " "Conversations are recorded and the collected data sent to the company, which " "grants itself the right to sell it. See also <a href=\"/education/" "educational-malware-app-along.html#content\">Educational Malware App “" "Along”</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Honorlock set a network of fake test answer honeypot sites, tempting people " "to get exam answers, but <a href=\"https://themarkup.org/machine-" "learning/2022/02/15/a-network-of-fake-test-answer-sites-is-trying-to-" "incriminate-students\">that is a way to entrap students, so as to identify " "them and punish them</a>, using nonfree JS code to identify them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/media/2021/jul/05/advertisers-targeted-" "dream-incubation\"> Advertising companies are experimenting to manipulate " "people's minds</a>, and impose a new way of advertising by altering their " "dreams. This “targeted dream incubation” would trigger “" "refreshing dreams” of the product, according to the companies." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Peloton company which produces treadmills recently <a href=\"https://www." "bleepingcomputer.com/news/technology/peloton-tread-owners-now-forced-into-" "monthly-subscription-after-recall/\">locked people out of basic features of " "people's treadmills by a software update</a>. The company now asks people " "for a membership/subscription for what people already paid for." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The software used in the treadmill is proprietary and probably includes back " "doors to force software updates. It teaches the lesson that if a product " "talks to external networks, you must expect it to take in new malware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Please note that the company behind this product said they are working to " "reverse the changes so people will no longer need subscription to use the " "locked feature." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apparently public anger made the company back down. If we want that to be " "our safety, we need to build up the anger against malicious features (and " "the proprietary software that is their entry path) to the point that even " "the most powerful companies don't dare." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Prodigy maths game played in schools at no cost entices students to play " "it at home, where <a href=\"https://www.theguardian.com/technology/2021/" "feb/19/maths-app-targeting-uk-schools-is-criticised-over-premium-model\"> " "the company tries to lure them into paying for a premium subscription</a> in " "exchange for mere cosmetic features that, at school, underline the " "socioeconomic gap between those who can afford it and those who can't." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The strategy of <a href=\"/education/edu-schools.html\">using schools as a " "fishing pool for customers</a> is a common practice traditionally adopted by " "nonfree software companies." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "BMW is trying to <a href=\"https://www.theverge.com/2020/7/2/21311332/bmw-in-" "car-purchase-heated-seats-software-over-the-air-updates\">lock certain " "features of its cars, and force people to pay to use part of the car they " "already bought</a>. This is done through forced update of the car software " "via a radio-operated back door." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Femm “fertility” app is secretly a <a href=\"https://www." "theguardian.com/world/2019/may/30/revealed-womens-fertility-app-is-funded-by-" "anti-abortion-campaigners\"> tool for propaganda</a> by natalist " "Christians. It spreads distrust for contraception." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "It snoops on users, too, as you must expect from nonfree programs." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tiny Lab Productions, along with online ad businesses run by Google, Twitter " "and three other companies are facing a lawsuit <a href=\"https://www.nytimes." "com/interactive/2018/09/12/technology/kids-apps-data-privacy-google-twitter." "html\">for violating people's privacy by collecting their data from mobile " "games and handing over these data to other companies/advertisers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theverge.com/2018/8/13/17684660/google-turn-off-" "location-history-data\">Google will track people even if people turn off " "location history</a>, using Google Maps, weather updates, and browser " "searches. Google basically uses any app activity to track people." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "“Dark patterns” are <a href=\"https://www.theverge." "com/2013/8/29/4640308/dark-patterns-inside-the-interfaces-designed-to-trick-" "you\">user interfaces designed to mislead users, or make option settings " "hard to find</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This allows a company such as Apple to say, “We allow users to turn " "this off” while ensuring that few will understand how to actually turn " "it off." msgstr "" #. type: Content of: <div><p> msgid "" "Copyright © 2019, 2020, 2021, 2022, 2023, 2024, 2025 Free Software " "Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Adobe's Software Is Malware - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Adobe's Software is Malware" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In its terms of service, Adobe gives itself permission to <a href=\"https://" "www.cnet.com/tech/services-and-software/adobe-defends-changes-in-its-terms-" "of-service-amid-gen-ai-explosion/\"> spy on material that people upload to " "its servers</a>, supposedly for moderation purposes. In spite of Adobe's " "denial, we can expect that sooner or later it will use this material to " "train its so-called “artificial intelligence,” and will claim " "that by agreeing to the terms of service users gave it the right to do so." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe has <a href=\"https://www.bleepingcomputer.com/news/software/adobe-to-" "ban-users-from-venezuela-due-to-us-executive-order/\"> cancelled the " "software subscriptions of all users in Venezuela</a>. This demonstrates how " "a requirement for subscription can be turned into a tool for sabotage." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe <a href=\"https://www.vice.com/en/article/a3xk3p/adobe-tells-users-" "they-can-get-sued-for-using-old-versions-of-photoshop\"> revoked the license " "of some older versions</a> of its applications, and warned customers that " "they can get sued for using them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is further proof that users of nonfree software are in the hands of its " "developer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe made “Digital Editions,” the e-reader used by most US " "libraries, <a href=\"https://web.archive.org/web/20141220181015/http://www." "computerworlduk.com/blogs/open-enterprise/drm-strikes-again-3575860/\"> send " "lots of data to Adobe</a>. Adobe's “excuse”: it's needed to " "check DRM!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.scientificamerican.com/article/adobe-software-" "subscription-model-means-you-cant-own-your-software/\"> Adobe tools require " "a subscription</a>. Adobe also tried to <a href=\"http://chocolateandvodka." "com/2014/02/20/adobe-creative-cloud-subscription-warning/\"> rip people off " "by making the subscriptions annual</a>, but that is a secondary issue " "compared with the basic wrong of the time bomb. When a program proprietary, " "and even malware, don't get distracted by the secondary issues like price." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(Please don't repeat the marketing term “Creative Cloud” " "except to express revulsion for it. The <a href=\"/philosophy/words-to-" "avoid.html#CloudComputing\"> term “cloud” is designed to cloud " "users' minds</a>.)</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe applications <a href=\"https://www.wired.com/2013/05/adobe-creative-" "cloud-petition/\"> require periodic connection to a server</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe applications have time bombs: they <a href=\"https://techcrunch." "com/2013/05/06/adobe-goes-all-in-with-subscription-based-creative-cloud-will-" "stop-selling-regular-cs-licenses-shrink-wrapped-boxes/\"> stop working after " "a certain time</a>, after which the user must pay to extend the time." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Once there was a problem with the servers that these programs use to check " "who has paid, and <a href=\"https://web.archive.org/web/20150120010845/" "http://www.macuser.co.uk/9015-adobe-creative-cloud-outage-leaves-adobe-users-" "locked-out\"> the applications refused to work for anyone</a>." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2016, 2018-2023, 2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Subscriptions - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Subscriptions" msgstr "" #. type: Content of: <div><div><p> msgid "" "It sounds simple to say that a certain program “requires a " "subscription.” What that means concretely is that it contains a time " "bomb, so that it will refuse to operate after that date. Or else it is <a " "href=\"/proprietary/proprietary-tethers.html#about-page\">tethered to a " "server</a>, and that server checks the date. Either one is a malicious " "functionality." msgstr "" #. type: Content of: <div><div><p> msgid "" "Examples of software subscriptions that harmed users directly are given " "below." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Canon is <a href=\"https://arstechnica.com/gadgets/2025/01/canon-charges-50-" "per-year-to-use-a-900-camera-as-a-functional-webcam/\"> preventing customers " "from using one of its cameras as a webcam</a> unless they create an account " "on the company's server, and pay an additional subscription. This unjust " "practice could be eliminated if the camera firmware were free (as in " "freedom)." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/lifeandstyle/2024/nov/03/addicted-to-" "love-how-dating-apps-exploit-their-users\">Dating apps exploit their users</" "a>; fundamental features require an expensive subscription, and they are " "designed to be addictive." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The company making a “smart” bassinet called Snoo has <a href=" "\"https://www.theverge.com/2024/7/20/24202166/snoo-premium-subscription-" "happiest-baby\"> locked the most advanced functionalities of the Snoo behind " "a paywall</a>. This unexpected change mainly affects users who received the " "appliance as a gift, or bought it second-hand on the assumption that all " "these functionalities would be available to them, as they used to be. This " "is another example of the deceptive behavior of proprietary software " "developers who take advantage of their power over users to change rules at " "will." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Another malicious feature of the Snoo is the fact that users need to create " "an account with the company, which thus has access to personal data, " "location (SSID), appliance log, etc., as well as manual notes about baby " "history." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "BMW has <a href=\"https://www.forbes.com/sites/alistaircharlton/2023/09/07/" "bmw-drops-controversial-heated-seats-subscription-to-refocus-on-software-" "services/\"> retreated from making car owners pay for a subscription to the " "heated seats feature</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "Customers rejected it. Bravo for them!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Instead BMW plans to require subscriptions for digital services and " "disservices—things related to the Orwellian tracking done by any " "“connected” car." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Nest snooper/surveillance cameras are always tethered to Google " "servers, record videos 24/7, and are <a href=\"https://arstechnica.com/" "gadgets/2023/09/google-nest-cameras-get-a-25-33-subscription-price-hike/\"> " "subscription-based, which is an injustice to people who use them</a>. The " "article discusses the rise in prices for “plans” you can buy " "from Google, which include storing videos in the “cloud”—" "another word for someone else's computer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "GM is switching to a new audio/video system in its cars in order to <a href=" "\"https://edition.cnn.com/2023/04/01/business/gm-apple-play-evs/index.html" "\"> collect complete information about what people in the car watch or " "listen to, and also how they drive</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The new system for navigation and “driving assistance” will be " "tethered to various online dis-services, and GM will snoop on everything the " "users do with them. But don't feel bad about that, because some of these " "subscriptions will be gratis for the first 8 years." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Volkswagen <a href=\"https://pluralistic.net/2023/02/28/kinderwagen/\"> " "tracks the location of every driver, and sells that data to third-parties</" "a>. However, it refuses to use the data to implement a feature for the " "benefit of its customers unless they pay extra money for it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This came to attention and brought controversy when Volkswagen refused to " "locate a car-jacked vehicle with a toddler in it because the owner of the " "car had not subscribed to the relevant service." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A dispute between Blizzard and one of its partners caused <a href=\"https://" "www.theguardian.com/world/2023/jan/23/world-of-warcraft-offline-china-" "millions-gamers-bereft\"> World of Warcraft to go offline in China</a>. The " "shutdown may not be permanent, but even if it is not, the fact that a " "business disagreement can stop all users in China from playing the game " "illustrates the injustice of requiring the use of a specific server." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We expect that users must pay to use that server, but whether that is the " "case is a side issue. Even if use of that server is gratis, the harm comes " "from the fact that the program doesn't allow people to make and use other " "servers for that job." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Let's hope game fans in China learn the importance of <a href=\"https://gnu." "org/philosophy/nonfree-games.html\">rejecting nonfree games</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The nonfree software in a Tesla artificially <a href=\"https://www." "theguardian.com/business/2022/jul/30/will-connected-cars-persuade-drivers-to-" "pay-for-a-high-spec-ride\"> limits the car's driving range</a>, demanding " "ransom to unlock the battery's full charge." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "This is one more reason why cars must not be “connected.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "BMW is now luring British customers into <a href=\"https://edition.cnn." "com/2022/07/14/business/bmw-subscription/index.html\"> paying for the built-" "in heated-seat feature of their new cars on a subscription basis</a>. People " "also have the option to buy the feature when they are paying for the car, " "but those who bought a used car have to pay BMW extra money to remotely " "enable the heated seats. This is probably done by BMW accessing a back door " "in the car software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple can remotely <a href=\"https://www.theguardian.com/games/2020/aug/18/" "apple-sets-deadline-in-feud-with-fortnite-maker-epic-games\"> cut off any " "developer's access to the tools for developing software</a> for iOS or MacOS." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Epic (Apple's target in this example) makes nonfree games which have their " "own <a href=\"https://ekgaming.com/2019/03/17/is-the-epic-games-store-spying-" "on-your-computer/\"> malicious features</a>, but that doesn't make it " "acceptable for Apple to have this sort of power." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Wink sells a “smart” home hub that is tethered to a server. In " "May 2020, it ordered the purchasers to start <a href=\"https://www.techhive." "com/article/578539/wink-users-revolt-following-its-sudden-shift-to-a-" "subscription-model.html\"> paying a monthly fee for the use of that server</" "a>. Because of the tethering, the hub is useless without that." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The HP <a href=\"https://boingboing.net/2019/02/08/inkjet-dystopias.html\"> " "“ink subscription” cartridges have DRM that constantly " "communicates with HP servers</a> to make sure the user is still paying for " "the subscription, and hasn't printed more pages than were paid for." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Even though the ink subscription program may be cheaper in some specific " "cases, it spies on users, and involves totally unacceptable restrictions in " "the use of ink cartridges that would otherwise be in working order." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Sony has brought back its robotic pet Aibo, this time <a href=\"https://www." "vice.com/en/article/bj778v/sony-wants-to-sell-you-a-subscription-to-a-robot-" "dog-aibo-90s-pet\"> with a universal back door, and tethered to a server " "that requires a subscription</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Canary home surveillance camera has been sabotaged by its manufacturer, " "<a href=\"https://www.theverge.com/circuitbreaker/2017/10/4/16426394/canary-" "smart-home-camera-free-service-update-change\"> turning off many features " "unless the user starts paying for a subscription</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "With manufacturers like these, who needs security breakers?" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The purchasers should learn the larger lesson and reject connected " "appliances with embedded proprietary software. Every such product is a " "temptation to commit sabotage." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Every “home security” camera, if its manufacturer can " "communicate with it, is a surveillance device. <a href=\"https://www." "theverge.com/circuitbreaker/2017/10/4/16426394/canary-smart-home-camera-free-" "service-update-change\"> Canary camera is an example</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article describes wrongdoing by the manufacturer, based on the fact that " "the device is tethered to a server." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"/proprietary/proprietary-tethers.html\">More about proprietary " "tethering</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "But it also demonstrates that the device gives the company surveillance " "capability." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2016-2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Censorship - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Censorship" msgstr "" #. type: Content of: <div><div><p> msgid "" "One kind of malicious functionality is censorship of what users can access. " "Here are examples of programs which do this. We have a <a href=\"/" "proprietary/proprietary-jails.html\">separate list of proprietary systems " "that censor installation</a> of application programs (we call them “" "jails”)." msgstr "" #. type: Content of: <div><div><p> msgid "" "Selling products designed as platforms for a company to impose censorship " "ought to be forbidden by law, but it isn't." msgstr "" #. type: Content of: <div><div><p> msgid "" "Apple mainly uses iOS, which is a typical jail, to impose censorship through " "the Apple Store. Please refer to <a href=\"/proprietary/proprietary-jails." "html#apple\">Proprietary Jails</a> for more information." msgstr "" #. type: Content of: <div><div><h3> msgid "Google" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google <a href=\"https://www.csmonitor.com/Technology/2017/0316/Google-" "Family-Link-gives-parents-a-way-to-monitor-preteens-accounts\"> offers " "censorship software</a>, ostensibly for parents to put into their children's " "computers." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "On Windows and MacOS, Chrome <a href=\"https://sites.google.com/a/chromium." "org/dev/developers/extensions-deployment-faq\"> disables extensions</a> that " "are not hosted in the Chrome Web Store." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "For example, an extension was <a href=\"https://web.archive.org/" "web/20170120094917/https://consumerist.com/2017/01/18/why-is-google-blocking-" "this-ad-blocker-on-chrome/\"> banned from the Chrome Web Store, and " "permanently disabled</a> on more than 40,000 computers." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/media/2016/feb/03/google-pulls-ad-" "blocking-app-for-samsung-phones\"> Google censored installation of Samsung's " "ad-blocker</a> on Android phones, saying that blocking ads is “" "interference” with the sites that advertise (and surveil users through " "ads)." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The ad-blocker is proprietary software, just like the program (Google Play) " "that Google used to deny access to install it. Using a nonfree program gives " "the owner power over you, and Google has exercised that power." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google's censorship, unlike that of Apple, is not total: Android allows " "users to install apps in other ways. You can install free programs from f-" "droid.org." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The <a href=\"https://www.gamespot.com/articles/nintendos-new-3ds-charges-30-" "cents-to-remove-an-in/1100-6421996/\"> Nintendo 3DS</a> censors web " "browsing; it is possible to turn off the censorship, but that requires " "identifying oneself to pay, which is a form of surveillance." msgstr "" #. type: Content of: <div><div><h3> msgid "Online conferencing" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The company behind Zoom does not only deny users' computer freedom by " "developing this piece of nonfree software, it also violates users' civil " "rights by <a href=\"https://www.theverge.com/2020/6/12/21288995/zoom-" "blocking-feature-chinese-government-censorship\">banning events and " "censoring users</a> to serve the agenda of governments." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Freedom respecting programs such as <a href=\"https://directory.fsf.org/wiki/" "Jitsi\">Jitsi</a> or <a href=\"https://directory.fsf.org/wiki/BigBlueButton" "\">BigBlueButton</a> can be used instead, better still if installed in a " "server controlled by its users." msgstr "" #. type: Content of: <div><div><h3> msgid "Other" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "As of 2021, <a href=\"https://www.rferl.org/a/russia-40-apps-preinstalled-" "electronic-devices/32532513.html\"> preinstallation of Russian-made " "proprietary software has been mandatory</a> on new computers and “" "smart” devices sold in Russia, under threat of a fine for the " "retailer, and <a href=\"https://tadviser.com/index.php/Article:Pre-" "installation_of_Russian_software_on_smartphones_and_computers\"> the list of " "mandatory applications keeps growing</a>. This gives the government a " "convenient way to <a href=\"https://www.article19.org/resources/russia-pre-" "installation-of-apps-matters-for-free-speech/\"> censor information, spy on " "people's online activity, and restrict free speech</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "New Amazon worker chat app <a href=\"https://theintercept.com/2022/04/04/" "amazon-union-living-wage-restrooms-chat-app/\">would ban specific words " "Amazon doesn't like</a>, such as “union”, “" "restrooms”, and “pay raise”. If the app was free, workers " "could modify the program so it acts as they wish, not how Amazon wants it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some Xiaomi phones <a href=\"https://www.theguardian.com/world/2021/sep/22/" "lithuania-tells-citizens-to-throw-out-chinese-phones-over-censorship-concerns" "\">have a malfeature to bleep out phrases that express political views the " "Chinese government does not like</a>. In phones sold in Europe, Xiaomi " "leaves this deactivated by default, but has a back door to activate the " "censorship." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is the natural result of having nonfree software in a device that can " "communicate with the company that made it." msgstr "" #. type: Content of: <title> msgid "Malware in Games - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><p> msgid "" "</a> / <a href=\"/proprietary/proprietary.html\">Malware</a> / By " "product /" msgstr "" #. type: Content of: <div><h2> msgid "Malware in Games" msgstr "" #. type: Content of: <div><div><p> msgid "" "Among the numerous malicious functionalities that are found in games, " "<strong><a href=\"/proprietary/proprietary-addictions.html#addictiveness\"> " "addictiveness</a></strong> may be the worst, because it doesn't only affect " "users materially, but also psychologically." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Ubisoft is facing a fraud lawsuit for <a href=\"https://www.polygon.com/" "gaming/476979/ubisoft-the-crew-shut-down-lawsuit-class-action\"> shutting " "down the proprietary video game The Crew, which was tethered to its servers</" "a>. As this game can't be played offline, people who used to think they " "owned a copy of it are now realizing they only bought a license that could " "be revoked at will by the developer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is one more example of what tethering of a proprietary program leads " "to. If The Crew were free software, its users would be able to set up " "another server, and keep on playing." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "Bungie's Destiny 2 is plagued with two major flaws:" msgstr "" #. type: Content of: <div><div><ul><li><ul><li> msgid "" "Like all proprietary tethered games, <a href=\"https://destinytracker.com/" "destiny-2/articles/is-destiny-2-down-how-to-check-server-maintenance-and-" "downtime\"> it can't be played when the company's servers are offline</a>." msgstr "" #. type: Content of: <div><div><ul><li><ul><li> msgid "" "Ever since Bungie chose BattlEye as an anti-cheat program, Destiny 2 " "has been <a href=\"https://areweanticheatyet.com/\"> incompatible with GNU/" "Linux</a> <small>[this page can't be viewed without JavaScript]</small>. " "Bungie forces Steam Deck users to <a href=\"https://www.pcguide.com/steam-" "deck/play-destiny-2/\"> replace SteamOS with Windows, or play from Edge " "browser</a>. This doesn't have to be so, as several other games that use " "BattlEye do support GNU/Linux systems. Rather than doing the necessary " "adjustments, Bungie forces users to run nonfree software in order to keep an " "absolute control over them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The addictive Genshin Impact relentlessly <a href=\"https://www.theguardian." "com/games/2020/oct/22/genshin-impact-video-game-slowly-taking-over-the-world" "\">coerces players to spend money by overwhelming the game play with loot " "boxes</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Roblox (among many other games) created anti-features which sucker children " "into <a href=\"https://www.theguardian.com/money/2020/mar/11/my-kids-" "spent-600-on-their-ipads-without-my-knowledge\"> utilizing third-party " "payment services without authorization.</a>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Resourceful children figured out how to <a href=\"https://www.bbc.co.uk/news/" "technology-48908766\"> empty their parents' bank account</a> buying packs of " "special players for an Electronic Arts soccer game." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The random element of these packs (also called “loot boxes”) " "makes the game <a href=\"/proprietary/proprietary-addictions#addictiveness" "\"> strongly addictive</a>, but the fact that players are pressured to spend " "more in order to get ahead of their competitors further qualifies it as " "<em>predatory</em>. Note that Belgium <a href=\"https://www." "rockpapershotgun.com/fifa-ultimate-team-packs-blocked-in-belgium\"> made " "these loot boxes illegal</a> in 2018." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The only good reason to have a copy of such a proprietary game is to study " "it for free software development." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Clash of Clans is a good example of a gratis mobile game that its developers " "<a href=\"https://gamerant.com/clash-of-clans-addiction/\"> made very " "addictive</a> for a large proportion of its users—and turned into a " "cash machine for themselves—by using <a href=\"/proprietary/" "proprietary-addictions.html#addictiveness\"> psychological manipulation " "techniques</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(The article uses “free” to mean “zero price," "” which is a usage we should avoid. We recommend saying “" "gratis” instead.)</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Clash Royale is an online game with an “optimized” <a href=\"/" "proprietary/proprietary-addictions.html#gacha\"> <i>gacha</i></a> system " "that makes it <a href=\"https://medium.com/@nikmlnkr/what-makes-clash-royale-" "so-addictive-1e586815b1f0\"> very addictive for players</a>, and very " "profitable for its developers." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The game Metal Gear Rising for MacOS was tethered to a server. The company " "<a href=\"https://www.gamerevolution.com/news/400087-metal-gear-rising-mac-" "unplayable-drm\"> shut down the server, and all copies stopped working</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Red Shell is a spyware that is found in many proprietary games. It <a href=" "\"https://nebulous.cloud/threads/red-shell-illegal-spyware-for-steam-" "games.31924/\"> tracks data on users' computers and sends it to third " "parties</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "ArenaNet surreptitiously installed a spyware program along with an update to " "the massive multiplayer game Guild Wars 2. The spyware allowed ArenaNet <a " "href=\"https://techraptor.net/gaming/news/arenanet-used-spyware-anti-cheat-" "for-guild-wars-2-banwave\"> to snoop on all open processes running on its " "user's computer</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The driver for a certain gaming keyboard <a href=\"https://thehackernews." "com/2017/11/mantistek-keyboard-keylogger.html\">sends information to China</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In the game Fruit Pop, the player buys boosts with coins to get a high " "score. The player gets coins at the end of each game, and can buy more coins " "with real money." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Getting a higher score once leads the player to desire higher score again " "later. But the higher score resulting from the boost <a href=\"https://qz." "com/873348/50000-coins-for-1-99-how-mobile-game-in-app-purchases-are-warping-" "kids-understanding-of-basic-economic-ideas\">does not give the player more " "coins, and does not help the player get a higher score in subsequent games</" "a>. To get that, the player will need a boost frequently, and usually has to " "pay real money for that. Since boosts are exciting and entertaining, the " "player is subtly pushed to purchase more coins with real money to get " "boosts, and it can develop into a costly habit." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "nVidia's proprietary GeForce Experience <a href=\"https://www.gamersnexus." "net/industry/2672-geforce-experience-data-transfer-analysis\">makes users " "identify themselves and then sends personal data about them to nVidia " "servers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A Capcom's Street Fighter V update <a href=\"https://www.theregister." "com/2016/09/23/capcom_street_fighter_v/\"> installed a driver that could be " "used as a back door by any application installed on a Windows computer</a>, " "but was <a href=\"https://www.rockpapershotgun.com/street-fighter-v-removes-" "new-anti-crack\"> immediately rolled back</a> in response to public outcry." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Oculus Rift games now have <a href=\"https://www.vice.com/en/article/vv77ea/" "new-oculus-drm-cross-platform\"> DRM meant to prevent running them on other " "systems</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many popular mobile games include a random-reward system called <a href=\"/" "proprietary/proprietary-addictions.html#gacha\"> <i>gacha</i></a> which is " "especially effective on children. One variant of gacha was declared illegal " "in Japan in 2012, but the other variants are still <a href=\"https://www." "forbes.com/sites/olliebarder/2016/04/04/japanese-mobile-gaming-still-cant-" "shake-off-the-spectre-of-exploitation/\"> luring players into compulsively " "spending</a> inordinate amounts of money on virtual toys." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Electronic Arts <a href=\"https://techraptor.net/gaming/news/darkspore-" "servers-shut-down\">made one of its games permanently unplayable</a> by " "shutting down its servers. This game was heavily reliant on the company's " "servers, and because the software is proprietary, users can't modify it to " "make it connect to some other server. If the game were free, people could " "still play what they purchased." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many <a href=\"https://web.archive.org/web/20240114145409/https://www." "thestar.com/news/canada/video-game-companies-are-collecting-massive-amounts-" "of-data-about-you/article_31fba9a3-2760-57ae-9ae0-4083904bcb87.html\"> video " "game consoles snoop on their users and report to the internet</a>—even " "what their users weigh." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A game console is a computer, and you can't trust a computer with a nonfree " "operating system." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Modern gratis game cr…apps <a href=\"https://toucharcade." "com/2015/09/16/we-own-you-confessions-of-a-free-to-play-producer/\"> collect " "a wide range of data about their users and their users' friends and " "associates</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Even nastier, they do it through ad networks that merge the data collected " "by various cr…apps and sites made by different companies." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "They use this data to manipulate people to buy things, and hunt for “" "whales” who can be led to spend a lot of money. They also use a back " "door to manipulate the game play for specific players." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "While the article describes gratis games, games that cost money can use the " "same tactics." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Game Of War: Fire Age is an iPhone game with <a href=\"https://www.cracked." "com/article_18461_5-creepy-ways-video-games-are-trying-to-get-you-addicted." "html\"> addictive features</a> which are based on <a href=\"/proprietary/" "proprietary-addictions.html#addictiveness\">behavioral manipulation " "techniques</a>, compounded with group emulation. After a fairly easy start, " "the game slows down and becomes more difficult, so gamers are led to spend " "more and more money in order to keep up with their group. And if they stop " "playing for a while, the equipment they invested in gets destroyed by the " "“enemy” unless they buy an expensive “shield” to " "protect it. This game is also deceptive, as it uses confusing menus and " "complex stats to obfuscate true monetary costs." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Runescape is a popular online game with some <a href=\"https://web.archive." "org/web/20230329031353/https://www.reddit.com/r/runescape/comments/33cd8g/" "question_why_is_runescape_so_addicting/\"> addictive features</a> derived " "from <a href=\"/proprietary/proprietary-addictions.html#addictiveness\"> " "behavioral manipulation techniques</a>. Certain repetitive aspects of the " "game, like <a href=\"https://en.wikipedia.org/wiki/Grinding_(video_games)\"> " "grinding</a>, can be minimised by becoming a paying member, and can thus " "encourage children and impressionable people to spend money on the game." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.eff.org/deeplinks/2014/10/nintendo-updates-take-wii-u-" "hostage-until-you-agree-new-legal-terms\">Nintendo remotely sabotaged the " "Wii U, making it refuse to work unless the user agrees to a new EULA</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We can be quite sure this EULA is unjust because injustice is the only " "motive for imposing an EULA." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Angry Birds <a href=\"https://www.nytimes.com/2014/01/28/world/spy-agencies-" "scour-phone-apps-for-personal-data.html\"> spies for companies, and the NSA " "takes advantage to spy through it too</a>. Here's information on <a href=" "\"http://confabulator.blogspot.com/2012/11/analysis-of-what-information-" "angry.html\"> more spyware apps</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.propublica.org/article/spy-agencies-probe-angry-birds-" "and-other-apps-for-personal-data\"> More about NSA app spying</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some proprietary <a href=\"https://www.theguardian.com/technology/2014/" "jan/19/apple-talking-cats-in-app-purchases\"> games lure children to spend " "their parents' money</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.defectivebydesign.org/sony\">The Playstation 3 is a " "tyrant</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Sony <a href=\"https://www.eff.org/deeplinks/2010/03/sony-steals-feature-" "from-your-playstation-3\">sabotaged the Playstation 3</a> with a firmware " "downgrade that removed the feature that allowed users to run GNU/Linux on it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Sony subsequently sent police after Geohot, after he cracked the code that " "blocked users from changing the firmware, and we responded by calling for a " "<a href=\"http://boycottsony.org\">boycott of Sony</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In a court settlement Sony is <a href=\"https://arstechnica.com/tech-" "policy/2016/06/if-you-used-to-run-linux-on-your-ps3-you-could-get-55-from-" "sony/\"> now paying for the sabotage</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Blizzard Warden is a hidden “cheating-prevention” program that " "<a href=\"https://www.eff.org/deeplinks/2005/10/new-gaming-feature-spyware" "\"> spies on every process running on a gamer's computer and sniffs a good " "deal of personal data</a>, including lots of activities which have nothing " "to do with cheating." msgstr "" #. type: Content of: <title> msgid "Proprietary Back Doors - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Back Doors" msgstr "" #. type: Content of: <div><div><p> msgid "" "Some malicious functionalities are mediated by <a href=\"/proprietary/" "proprietary.html#f1\">back doors</a>. Here are examples of programs that " "contain one or several of those, classified according to what the back door " "is known to have the power to do. Back doors that allow full control over " "the programs which contain them are said to be “universal.”" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Back-door functionalities" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#spy\">Spying</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#alter-data\">Altering user's data or settings</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "" "<a href=\"#install-delete\">Installing, deleting or disabling programs</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#universal\">Full control</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#other\">Other/undefined</a>" msgstr "" #. type: Content of: <div><div><h3> msgid "Spying" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Nest <a href=\"https://blog.google/products/google-nest/partnership-" "adt-smarter-home-security/\"> is taking over ADT</a>. Google sent out a " "software update to its speaker devices using their back door <a href=" "\"https://web.archive.org/web/20240123114737/https://www.protocol.com/google-" "smart-speaker-alarm-adt\"> that listens for things like smoke alarms</a> and " "then notifies your phone that an alarm is happening. This means the devices " "now listen for more than just their wake words. Google says the software " "update was sent out prematurely and on accident and Google was planning on " "disclosing this new feature and offering it to customers who pay for it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many models of Internet-connected cameras contain a glaring back door—" "they have login accounts with hard-coded passwords, which can't be changed, " "and <a href=\"https://arstechnica.com/information-technology/2017/06/" "internet-cameras-expose-private-video-feeds-and-remote-controls/\"> there is " "no way to delete these accounts either</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Since these accounts with hard-coded passwords are impossible to delete, " "this problem is not merely an insecurity; it amounts to a back door that can " "be used by the manufacturer (and government) to spy on users." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "WhatsApp has a feature that <a href=\"https://techcrunch.com/2017/01/13/" "encrypted-messaging-platform-whatsapp-denies-backdoor-claim/\"> has been " "described as a “back door”</a> because it would enable " "governments to nullify its encryption." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The developers say that it wasn't intended as a back door, and that may well " "be true. But that leaves the crucial question of whether it functions as " "one. Because the program is nonfree, we cannot check by studying it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple can, and regularly does, <a href=\"https://arstechnica.com/" "gadgets/2014/05/new-guidelines-outline-what-iphone-data-apple-can-give-to-" "police/\"> remotely extract some data from iPhones for the state</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This may have improved with <a href=\"https://www.denverpost.com/2014/09/17/" "apple-will-no-longer-unlock-most-iphones-ipads-for-police/\"> iOS 8 security " "improvements</a>; but <a href=\"https://theintercept.com/2014/09/22/apple-" "data/\"> not as much as Apple claims</a>." msgstr "" #. type: Content of: <div><div><h3> msgid "Altering user's data or settings" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "BlizzCon 2019 imposed a <a href=\"https://arstechnica.com/gaming/2019/05/" "blizzcon-2019-tickets-revolve-around-invasive-poorly-reviewed-smartphone-app/" "\"> requirement to run a proprietary phone app</a> to be allowed into the " "event." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This app is a spyware that can snoop on a lot of sensitive data, including " "user's location and contact list, and has <a href=\"https://web.archive.org/" "web/20220321042716/https://old.reddit.com/r/wow/comments/bkd5ew/" "you_need_to_have_a_phone_to_attend_blizzcon_this/emg38xv/\"> near-complete " "control</a> over the phone." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Android has a <a href=\"https://www.theverge.com/2018/9/14/17861150/google-" "battery-saver-android-9-pie-remote-settings-change\"> back door for remotely " "changing “user” settings</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article suggests it might be a universal back door, but this isn't clear." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Dropbox app for Macintosh <a href=\"https://web.archive.org/" "web/20180124123506/http://applehelpwriter.com/2016/07/28/revealing-dropboxs-" "dirty-little-security-hack/\"> takes control of user interface items after " "luring the user into entering an admin password</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A pregnancy test controller application not only can <a href=\"https://www." "theverge.com/2016/4/25/11503718/first-response-pregnancy-pro-test-bluetooth-" "app-security\"> spy on many sorts of data in the phone, and in server " "accounts, it can alter them too</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.computerworld.com/article/2705284/backdoor-found-in-d-" "link-router-firmware-code.html\"> Some D-Link routers</a> have a back door " "for changing settings in a dlink of an eye." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://sekurak.pl/tp-link-httptftp-backdoor/\"> The TP-Link " "router has a back door</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://gothub.projectsegfau.lt/elvanderb/TCP-32764/\">Many models " "of routers have back doors</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google has long had <a href=\"https://www.theguardian.com/technology/2015/" "nov/24/google-can-unlock-android-devices-remotely-if-phone-unencrypted\">a " "back door to remotely unlock an Android device</a>, unless its disk is " "encrypted (possible since Android 5.0 Lollipop, but still not quite the " "default)." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Caterpillar vehicles come with <a href=\"https://web.archive.org/" "web/20201108113943/https://www.zerohedge.com/news/2015-11-19/caterpillar-" "depression-has-never-been-worse-it-has-cunning-plan-how-deal-it\"> a back " "door to shutoff the engine</a> remotely." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.fsf.org/blogs/community/replicant-developers-find-and-" "close-samsung-galaxy-backdoor\"> Samsung Galaxy devices running proprietary " "Android versions come with a back door</a> that provides remote access to " "the files stored on the device." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Amazon Kindle-Swindle has a back door that has been used to <a href=" "\"https://web.archive.org/web/20220319193415/https://pogue.blogs.nytimes." "com/2009/07/17/some-e-books-are-more-equal-than-others/\"> remotely erase " "books</a>. One of the books erased was <cite>1984</cite>, by George Orwell." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Amazon responded to criticism by saying it would delete books only following " "orders from the state. However, that policy didn't last. In 2012 it <a " "href=\"https://boingboing.net/2012/10/22/kindle-user-claims-amazon-dele.html" "\"> wiped a user's Kindle-Swindle and deleted her account</a>, then offered " "her kafkaesque “explanations.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Do other ebook readers have back doors in their nonfree software? We don't " "know, and we have no way to find out. There is no reason to assume that " "they don't." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The iPhone has a back door for <a href=\"https://www.npr." "org/2010/11/22/131511381/wipeout-when-your-company-kills-your-iphone\"> " "remote wipe</a>. It's not always enabled, but users are led into enabling " "it without understanding." msgstr "" #. type: Content of: <div><div><h3> msgid "Installing, deleting or disabling programs" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"/proprietary/uhd-bluray-denies-your-freedom.html\">UHD Blu-ray " "disks are loaded with malware of the worst kinds</a>, including the AACS " "DRM. Playing them on a PC requires the Intel Management Engine, which has " "back doors and cannot be disabled. Every Blu-ray drive also has a back door " "in its firmware, which allows the AACS-enforcing organization to “" "revoke” the ability to play any AACS-restricted disk." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Xiaomi provides a tool to <a href=\"https://www.guidetoroot.com/unlock-" "bootloader-on-any-xiaomi-phones/\"> unlock the bootloader of Xiaomi " "smartphones and tablets</a>, but this requires creating an account on the " "company's servers, i.e. providing your phone number. This is the price you " "have to pay for “legally” running a free software operating " "system on Xiaomi devices. But the manufacturer retains control of the " "unlocked device through a backdoor in the bootloader—the same backdoor " "that was remotely used to unlock it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe <a href=\"https://web.archive.org/web/20211014123717/https://" "pluralistic.net/2021/10/13/theres-an-app-for-that/#gnash\">has licensed its " "Flash Player to China's Zhong Cheng Network</a> who is offering the program " "bundled with spyware and a back door that can remotely deactivate it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe is responsible for this since they gave Zhong Cheng Network permission " "to do this. This injustice involves “misuse” of the DMCA, but " "“proper,” intended use of the DMCA is a much bigger injustice. " "There is <a href=\"/philosophy/right-to-read.html\">a series of errors " "related to DMCA</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Recent Samsung TVs have a back door with which Samsung can <a href=\"https://" "www.pcmag.com/news/samsung-can-remotely-disable-any-of-its-tvs-worldwide\"> " "brick them remotely</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe Flash Player <a href=\"https://www.adobe.com/products/flashplayer/end-" "of-life.html\"> has a universal back door</a> which lets Adobe control the " "software and, for example, disable it whenever it wants. Adobe will block " "Flash content from running in Flash Player beginning January 12, 2021, which " "indicates that they have access to every Flash Player through a back door." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The back door won't be dangerous in the future, as it'll disable a " "proprietary program and make users delete the software, but it was an " "injustice for many years. Users should have deleted Flash Player even before " "its end of life." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A very popular app found in the Google Play store contained a module that " "was designed to <a href=\"https://arstechnica.com/information-" "technology/2019/08/google-play-app-with-100-million-downloads-executed-" "secret-payloads/\">secretly install malware on the user's computer</a>. The " "app developers regularly used it to make the computer download and execute " "any code they wanted." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is a concrete example of what users are exposed to when they run " "nonfree apps. They can never be completely sure that a nonfree app is safe." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple appears to say that <a href=\"https://techcrunch.com/2019/07/10/apple-" "silent-update-zoom-app/\"> there is a back door in MacOS</a> for " "automatically updating some (all?) apps." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The specific change described in the article was not malicious—it " "protected users from surveillance by third parties—but that is a " "separate question." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Corel Paintshop Pro has a <a href=\"https://torrentfreak.com/corel-wrongly-" "accuses-licensed-user-of-piracy-disables-software-remotely-181110/\"> back " "door that can make it cease to function</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article is full of confusions, errors and biases that we have an " "obligation to expose, given that we are making a link to them." msgstr "" #. type: Content of: <div><div><ul><li><ul><li> msgid "" "Getting a patent does not “enable” a company to do any " "particular thing in its products. What it does enable the company to do is " "sue other companies if they do some particular thing in their products." msgstr "" #. type: Content of: <div><div><ul><li><ul><li> msgid "" "A company's policies about when to attack users through a back door are " "beside the point. Inserting the back door is wrong in the first place, and " "using the back door is always wrong too. No software developer should have " "that power over users." msgstr "" #. type: Content of: <div><div><ul><li><ul><li> msgid "" "“<a href=\"/philosophy/words-to-avoid.html#Piracy\">Piracy</a>” " "means attacking ships. Using that word to refer to sharing copies is a " "smear; please don't smear sharing." msgstr "" #. type: Content of: <div><div><ul><li><ul><li><p> msgid "" "The idea of “protecting our IP” is total confusion. The term " "“IP” itself is a <a href=\"/philosophy/not-ipr.html\">bogus " "generalization about things that have nothing in common</a>." msgstr "" #. type: Content of: <div><div><ul><li><ul><li><p> msgid "" "In addition, to speak of “protecting” that bogus generalization " "is a separate absurdity. It's like calling the cops because neighbors' kids " "are playing on your front yard, and saying that you're “protecting the " "boundary line”. The kids can't do harm to the boundary line, not even " "with a jackhammer, because it is an abstraction and can't be affected by " "physical action." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some “Smart” TVs automatically <a href=\"https://web.archive.org/" "web/20180405014828/https:/twitter.com/buro9/status/980349887006076928\"> " "load downgrades that install a surveillance app</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We link to the article for the facts it presents. It is too bad that the " "article finishes by advocating the moral weakness of surrendering to " "Netflix. The Netflix app <a href=\"/proprietary/malware-google.html#netflix-" "app-geolocation-drm\">is malware too</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Baidu's proprietary Android library, Moplus, has a back door that <a href=" "\"https://www.eff.org/deeplinks/2015/11/millions-android-devices-vulnerable-" "remote-hijacking-baidu-wrote-code-google-made\"> can “upload " "files” as well as forcibly install apps</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "It is used by 14,000 Android applications." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In addition to its <a href=\"#windows-update\">universal back door</a>, " "Windows 8 has a back door for <a href=\"https://www.computerworld.com/" "article/2732767/microsoft--we-can-remotely-delete-windows-8-apps.html\"> " "remotely deleting apps</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In Android, <a href=\"https://www.computerworld.com/article/2506557/google-" "throws--kill-switch--on-android-phones.html\"> Google has a back door to " "remotely delete apps</a>. (It was in a program called GTalkService, which " "seems since then to have been merged into Google Play.)" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google can also <a href=\"https://jon.oberheide.org/blog/2010/06/25/remote-" "kill-and-install-on-google-android/\"> forcibly and remotely install apps</" "a> through GTalkService. This is not equivalent to a universal back door, " "but permits various dirty tricks." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Although Google's <em>exercise</em> of this power has not been malicious so " "far, the point is that nobody should have such power, which could also be " "used maliciously. You might well decide to let a security service remotely " "<em>deactivate</em> programs that it considers malicious. But there is no " "excuse for allowing it to <em>delete</em> the programs, and you should have " "the right to decide who (if anyone) to trust in this way." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The iPhone has a back door <a href=\"https://www.telegraph.co.uk/" "technology/3358134/Apples-Jobs-confirms-iPhone-kill-switch.html\"> that " "allows Apple to remotely delete apps</a> which Apple considers “" "inappropriate”. Jobs said it's OK for Apple to have this power " "because of course we can trust Apple." msgstr "" #. type: Content of: <div><div><h3> msgid "Full control" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Eclypsium <a href=\"https://eclypsium.com/blog/supply-chain-risk-from-" "gigabyte-app-center-backdoor/\"> discovered an insecure universal back door</" "a> on many computers using Gigabyte mainboards. Gigabyte designed their " "nonfree firmware so they could add a program to Windows to download " "additional software from the Internet, and run it behind the user's back." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "To add injury to injury, the back-door program was insecure, and opened ways " "for crackers to run their own programs on the affected systems, also behind " "the user's back. Gigabyte's “<a href=\"https://www.gigabyte.com/Press/" "News/2091\">solution</a>” was to ensure the back door would only run " "programs from Gigabyte." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In this case, the back door required the connivance of Windows accepting the " "program, and running it behind the user's back. Free operating systems " "rightly ignore such “Greek gifts,” so users of GNU (including " "GNU/Linux) are safe from this particular back door, even on affected " "hardware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Nonfree software does not make your computer secure—it does the " "opposite: it prevents you from trying to secure it. When nonfree programs " "are required for booting and impossible to replace, they are, in effect, a " "low-level rootkit. All the things that the industry has done to make its " "power over you secure against you also protect firmware-level rootkits " "against you." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Instead of allowing Intel, AMD, Apple and perhaps ARM to impose security " "through tyranny, we should demand laws that require them to allow users to " "install their choice of startup software and make available the information " "needed to develop such. Think of this as right-to-repair at the " "initialization stage." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>Note: Eclypsium at least mentions the problem of “unwanted " "behavior within official firmware,” but does not seem to recognize " "that the only real solution is for firmware to be free, so users can fix " "these problems without having to rely on the vendor.</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "HP delivers printers with a universal back door, and recently used it to <a " "href=\"https://www.theguardian.com/money/2023/may/10/how-can-hp-block-me-" "from-using-a-cheaper-printer-cartridge\"> sabotage them by remotely " "installing malware</a>. The malware makes the printer refuse to function " "with non-HP ink cartrides, and even with old HP cartridges which HP now " "declares to have “expired.” HP calls the back door “" "dynamic security,” and has the gall to claim that this “" "security” protects users from malware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If you own an HP printer that can still use non-HP cartridges, we urge you " "to disconnect it from the internet. This will ensure that HP doesn't " "sabotage it by “updating” its software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>Note how the author of the Guardian article credulously repeats HP's " "assertion that the “dynamic security” feature protects users " "against malware, not recognizing that the article demonstrates it does the " "opposite.</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "NordicTrack, a company that sells exercise machines with ability to show " "videos <a href=\"https://arstechnica.com/information-technology/2021/11/" "locked-out-of-god-mode-runners-are-hacking-their-treadmills/\">limits what " "people can watch, and recently disabled a feature</a> that was originally " "functional. This happened through automatic update and probably involved a " "universal back door." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some Wavelink and JetStream wifi routers have universal back doors that " "enable unauthenticated users to remotely control not only the routers, but " "also any devices connected to the network. There is evidence that <a href=" "\"https://cybernews.com/security/walmart-exclusive-routers-others-made-in-" "china-contain-backdoors-to-control-devices/\"> this vulnerability is " "actively exploited</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If you consider buying a router, we encourage you to get one that <a href=" "\"https://ryf.fsf.org/categories/routers\">runs on free software</a>. Any " "attempts at introducing malicious functionalities in it (e.g., through a " "firmware update) will be detected by the community, and soon corrected." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If unfortunately you own a router that runs on proprietary software, don't " "panic! You may be able to replace its firmware with a free operating system " "such as <a href=\"https://librecmc.org\">libreCMC</a>. If you don't know " "how, you can get help from a nearby GNU/Linux user group." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A new app published by Google <a href=\"https://www.xda-developers.com/" "google-device-lock-controller-banks-payments/\">lets banks and creditors " "deactivate people's Android devices</a> if they fail to make payments. If " "someone's device gets deactivated, it will be limited to basic " "functionality, such as emergency calling and access to settings." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "BMW will remotely <a href=\"https://www.cnet.com/roadshow/news/bmw-vehicle-" "as-a-platform/\"> enable and disable functionality in cars</a> through a " "universal back door." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The <a href=\"https://play.google.com/about/play-terms/\"> Google Play Terms " "of Service</a> insist that the user of Android accept the presence of " "universal back doors in apps released by Google." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This does not tell us whether any of Google's apps currently contains a " "universal back door, but that is a secondary question. In moral terms, " "demanding that people accept in advance certain bad treatment is equivalent " "to actually doing it. Whatever condemnation the latter deserves, the former " "deserves the same." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Android phones subsidized by the US government come with <a href=\"https://" "arstechnica.com/information-technology/2020/01/us-government-funded-android-" "phones-come-preinstalled-with-unremovable-malware/\"> preinstalled adware " "and a back door for forcing installation of apps</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The adware is in a modified version of an essential system configuration " "app. The back door is a surreptitious addition to a program whose stated " "purpose is to be a <a href=\"https://www.zdnet.com/article/unremovable-" "malware-found-preinstalled-on-low-end-smartphone-sold-in-the-us/\"> " "universal back door for firmware</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In other words, a program whose raison d'être is malicious has a secret " "secondary malicious purpose. All this is in addition to the malware of " "Android itself." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Chinese Communist Party's <a href=\"/proprietary/proprietary-" "surveillance.html#M201910130\"> “Study the Great Nation” app</a> " "was found to contain <a href=\"https://www.ndtv.com/world-news/chinese-app-" "allows-officials-access-to-100-million-users-phone-report-2115962\"> a back-" "door allowing developers to run any code they wish</a> in the users' phone, " "as “superusers.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Note: The <a href=\"http://web-old.archive.org/web/20191015005153/https://" "www.washingtonpost.com/world/asia_pacific/chinese-app-on-xis-ideology-allows-" "data-access-to-100-million-users-phones-report-says/2019/10/11/2d53bbae-" "eb4d-11e9-bafb-da248f8d5734_story.html\"> Washington Post version of the " "article</a> (partly obfuscated, but readable after copy-pasting in a text " "editor) includes a clarification saying that the tests were only performed " "on the Android version of the app, and that, according to Apple, “this " "kind of ‘superuser’ surveillance could not be conducted on " "Apple's operating system.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "ChromeBooks are programmed for obsolescence: ChromeOS has a universal back " "door that is used for updates and <a href=\"https://www.theregister." "com/2019/08/22/buying_a_chromebook_dont_forget_to_check_when_it_expires/\"> " "ceases to operate at a predefined date</a>. From then on, there appears to " "be no support whatsoever for the computer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In other words, when you stop getting screwed by the back door, you start " "getting screwed by the obsolescence." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The FordPass Connect feature of some Ford vehicles has <a href=\"https://web." "archive.org/web/20200530023040/https://www.myfordpass.com/content/ford_com/" "fp_app/en_us/termsprivacy.html\"> near-complete access to the internal car " "network</a>. It is constantly connected to the cellular phone network and " "sends Ford a lot of data, including car location. This feature operates even " "when the ignition key is removed, and users report that they can't disable " "it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If you own one of these cars, have you succeeded in breaking the " "connectivity by disconnecting the cellular modem, or wrapping the antenna in " "aluminum foil?" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "New GM cars <a href=\"https://media.gm.com/media/us/en/gmc/vehicles/" "canyon/2019.html\"> offer the feature of a universal back door</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Every nonfree program offers the user zero security against its developer. " "With this malfeature, GM has explicitly made things even worse." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Furby Connect has a <a href=\"https://web.archive.org/web/20220604212722/" "https://www.contextis.com/en/blog/dont-feed-them-after-midnight-reverse-" "engineering-the-furby-connect\"> universal back door</a>. If the product as " "shipped doesn't act as a listening device, remote changes to the code could " "surely convert it into one." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tesla used software to limit the part of the battery that was available to " "customers in some cars, and <a href=\"https://techcrunch.com/2017/09/09/" "tesla-flips-a-switch-to-increase-the-range-of-some-cars-in-florida-to-help-" "people-evacuate/\"> a universal back door in the software</a> to temporarily " "increase this limit." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "While remotely allowing car “owners” to use the whole battery " "capacity did not do them any harm, the same back door would permit Tesla " "(perhaps under the command of some government) to remotely order the car to " "use none of its battery. Or perhaps to drive its passenger to a torture " "prison." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Vizio “smart” TVs <a href=\"https://www.ftc.gov/business-" "guidance/blog/2017/02/what-vizio-was-doing-behind-tv-screen\"> have a " "universal back door</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Xiaomi phones come with <a href=\"https://web.archive.org/web/20190424082647/" "http://blog.thijsbroenink.com/2016/09/xiaomis-analytics-app-reverse-" "engineered/\"> a universal back door in the application processor, for " "Xiaomi's use</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is separate from <a href=\"#universal-back-door-phone-modem\">the " "universal back door in the modem processor that the local phone company can " "use</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Amazon Echo appears to have a universal back door, since <a href=" "\"https://en.wikipedia.org/wiki/Amazon_Echo#Software_updates\"> it installs " "“updates” automatically</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We have found nothing explicitly documenting the lack of any way to disable " "remote changes to the software, so we are not completely sure there isn't " "one, but this seems pretty clear." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/technology/2014/dec/18/chinese-android-" "phones-coolpad-hacker-backdoor\"> A Chinese version of Android has a " "universal back door</a>. Nearly all models of mobile phones have a <a href=" "\"#universal-back-door-phone-modem\"> universal back door in the modem chip</" "a>. So why did Coolpad bother to introduce another? Because this one is " "controlled by Coolpad." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"http://www.techienews.co.uk/973462/bitcoin-miners-bundled-pups-" "legitimate-applications-backed-eula/\"> Some applications come with " "MyFreeProxy, which is a universal back door</a> that can download programs " "and run them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In addition to its <a href=\"#swindle-eraser\">book eraser</a>, the Kindle-" "Swindle has a <a href=\"https://web.archive.org/web/20120715070050/http://" "www.amazon.com/gp/help/customer/display.html/?nodeId=200774090\"> universal " "back door</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Almost every phone's communication processor has a universal back door which " "is <a href=\"https://www.schneier.com/blog/archives/2006/12/" "remotely_eavesd_1.html\"> often used to make a phone transmit all " "conversations it hears</a>. See <a href=\"/proprietary/malware-mobiles." "html#universal-back-door-phone-modem\">Malware in Mobile Devices</a> for " "more info." msgstr "" #. type: Content of: <div><div><h3> msgid "Other or undefined" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Kia cars were built with a back door that enabled the company's server to " "locate them and take control of them. The car owner had access to these " "controls through the Kia server. That the car owner had such control is not " "objectionable. However, that Kia itself had such control is Orwellian, and " "ought to be illegal. The icing on the Orwellian cake is that the server had " "a security fault which <a href=\"https://samcurry.net/hacking-kia\">allowed " "absolutely anyone to activate those controls</a> for any Kia car." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many people will be outraged at that security bug, but this was presumably " "an accident. The fact that Kia had such control over cars after selling them " "to customers is what outrages us, and that must have been intentional on " "Kia's part." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/security/2023/12/exploit-used-in-mass-" "iphone-infection-campaign-targeted-secret-hardware-feature/\"> A back door " "in Apple devices</a>, present and abused from at least 2019 until 2023, " "allowed crackers to have full control over them by sending iMessage texts " "that installed malware without any action on the user's part. Infections, " "among other things, gave the intruders access to owners' microphone " "recordings, photos, location and other personal data." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Intel's intentional “management engine” back door has <a href=" "\"https://www.theregister.com/2017/11/20/intel_flags_firmware_flaws/\"> " "unintended back doors</a> too." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Dell computers, shipped with Windows, had a bogus root certificate that <a " "href=\"https://fossforce.com/2015/11/dell-comcast-intel-who-knows-who-else-" "are-out-to-get-you/\"> allowed anyone (not just Dell) to remotely authorize " "any software to run</a> on the computer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "ARRIS cable modem has a <a href=\"https://w00tsec.blogspot.de/2015/11/arris-" "cable-modem-has-backdoor-in.html?m=1\"> back door in the back door</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "“Self-encrypting” disk drives do the encryption with proprietary " "firmware so you can't trust it. Western Digital's “My Passport” " "drives <a href=\"https://www.vice.com/en/article/mgbmma/some-popular-self-" "encrypting-hard-drives-have-really-bad-encryption\"> have a back door</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Mac OS X had an <a href=\"https://truesecdev.wordpress.com/2015/04/09/hidden-" "backdoor-api-to-root-privileges-in-apple-os-x/\"> intentional local back " "door for 4 years</a>, which could be exploited by attackers to gain root " "privileges." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Here is a big problem whose details are still secret: <a href=\"https://" "mashable.com/archive/fbi-microsoft-bitlocker-backdoor\"> The FBI asks lots " "of companies to put back doors in proprietary programs</a>. We don't know of " "specific cases where this was done, but every proprietary program for " "encryption is a possibility." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "HP “storage appliances” that use the proprietary “Left " "Hand” operating system have back doors that give HP <a href=\"https://" "insights.dice.com/2013/07/11/hp-keeps-installing-secret-backdoors-in-" "enterprise-storage/\"> remote login access</a> to them. HP claims that this " "does not give HP access to the customer's data, but if the back door allows " "installation of software changes, a change could be installed that would " "give access to the customer's data." msgstr "" #. type: Content of: <div><div><p> msgid "" "The EFF has other examples of the <a href=\"https://www.eff.org/" "deeplinks/2015/02/who-really-owns-your-drones\"> use of back doors</a>." msgstr "" #. type: Content of: <title> msgid "Potential Malware - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Potential Malware" msgstr "" #. type: Content of: <div><div><p> msgid "" "This page describes malicious techniques that proprietary software might use " "in the future for malicious purposes. We don't have any evidence that they " "are in use yet." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Car companies are coming up with a list of clever reasons why <a href=" "\"https://www.nytimes.com/2019/03/28/business/autonomous-cars-technology-" "privacy.html\"> they “have to” put cameras and microphones in " "the car</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "BMW says its software does not store any driver-monitoring information. If " "this means none of the data that come out of the cameras and microphones can " "be seen by anyone else, the cameras and microphones are not dangerous. But " "should we trust this claim? The only way it can deserve rational trust is if " "the software is free." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Volvo plans to <a href=\"https://www.theguardian.com/business/2019/mar/20/" "volvo-to-install-cameras-in-new-cars-to-reduce-road-deaths\"> install " "cameras inside cars</a> to monitor the driver for signs of impairment that " "could cause an accident." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "However, there is nothing to prevent these cameras from doing other things, " "such as biometrically identifying the driver or passengers, other than " "proprietary software which Volvo—or various governments and " "criminals—could change at any time." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Malware installed into the processor in a hard drive could <a href=\"https://" "yro.slashdot.org/story/19/03/08/1928257/hard-disks-can-be-turned-into-" "listening-devices-researchers-find\"> use the disk itself as a microphone to " "detect speech</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article refers to the “Linux operating system” but seems to " "mean <a href=\"/gnu/linux-and-gnu.html\">GNU/Linux</a>. That hack would not " "require changing Linux itself." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some portable surveillance devices (“phones”) now have <a href=" "\"https://www.theguardian.com/technology/2019/feb/20/samsung-galaxy-s10-" "launch-triple-cameras-ultrasonic-fingerprint-sensors-and-5g\"> fingerprint " "sensors in the display</a>. Does that imply they could take the fingerprint " "of anyone who operates the touch screen?" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Patent applications show that Google and Amazon are interested in <a href=" "\"https://www.consumerwatchdog.org/privacy-technology/home-assistant-adopter-" "beware-google-amazon-digital-assistant-patents-reveal\"> making “" "digital assistants” study people's activities to learn all about them</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "AI programs would understand what people say to each other, observe the " "clothing they wear and the objects they carry (including the marketing " "messages on them), and use sound to track people's activities, including in " "the toilet or in bed." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It should be illegal to have such a device in your apartment without getting " "signed consent from the people that live in the other apartments in the " "building." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Any device that has a microphone and a speaker could be <a href=\"https://" "www.washington.edu/news/2017/08/16/computer-scientists-use-music-to-covertly-" "track-body-movements-activity/\">turned into a sonar system that would track " "the movements of people in the same room or other rooms nearby</a>." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2017-2023 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Tethers - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Tethers" msgstr "" #. type: Content of: <div><div><p> msgid "" "Tethering a product or program means designing it to work only by " "communicating with a specific server. That is always an injustice since it " "means you can't use the program without that server. It is also a secondary " "injustice if you can't communicate with the server in another way." msgstr "" #. type: Content of: <div><div><p> msgid "" "In some cases, tethering is used to do specific nasty things to the users. " "This page reports instances where tethering was used to harm the users " "directly." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"/proprietary/uhd-bluray-denies-your-freedom.html\">UHD Blu-ray " "disks are loaded with malware of the worst kinds</a>. Among other things, " "they are encrypted with keys that must be retrieved from a remote server. " "This makes repeated updates and internet connections a requirement if the " "user purchases several UHD Blu-ray disks over time." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://badcyber.com/dieselgate-but-for-trains-some-heavyweight-" "hardware-hacking/\">Newag, a Polish railway manufacturer, puts DRM inside " "trains to prevent third-party repairs</a>." msgstr "" #. type: Content of: <div><div><ul><li><ul><li><p> msgid "" "The train's software contains code to detect if the GPS coordinates are near " "some third party repairers, or the train has not been running for some time. " "If yes, the train will be “locked up” (i.e. bricked). It was " "also possible to unlock it by pressing a secret combination of buttons in " "the cockpit, but this ability was removed by a manufacturer's software " "update." msgstr "" #. type: Content of: <div><div><ul><li><ul><li><p> msgid "" "The train will also lock up after a certain date, which is hardcoded in the " "software." msgstr "" #. type: Content of: <div><div><ul><li><ul><li><p> msgid "" "The company pushes a software update that detects if the DRM code has been " "bypassed, i.e. the lock should have been engaged but the train is still " "operational. If yes, the controller cabin screen will display a scary " "message warning about “copyright violation”." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In Australia, people assume that “smart” means “tethered." "” When people's ISP goes down, <a href=\"https://www.theguardian.com/" "business/2023/nov/10/optus-went-down-and-the-smart-lights-came-on-and-then-" "marayke-was-stranded-in-bed\"> all the tethered devices become useless</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "That's in addition to the nasty things tethered devices do when they are " "“functioning” normally—such as snoop on the commands sent " "to the device and the results they report." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "Smart <em>users</em> know better than to accept tethered devices." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Philips Hue, the most ubiquitous home automation product in the US, is " "planning to soon <a href=\"https://boingboing.net/2023/09/27/philips-hue-to-" "make-you-create-an-account-and-log-in-to-adjust-your-lightbulbs.html\"> " "force users to log in to the app server</a> in order to be able to adjust a " "lightbulb, or use other functionalities, in what amounts to a massive user-" "tracking data grab." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some Bambu Lab 3D printers were reported to <a href=\"https://arstechnica." "com/gadgets/2023/08/3d-printers-print-break-on-their-own-due-to-cloud-outage/" "\"> start printing without user's consent</a>, as a result of a malfunction " "of the servers to which they were tethered. This caused significant damage." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Controlling Honeywell internet thermostats with the dedicated app has proven " "unreliable, due to <a href=\"https://piunikaweb.com/2022/03/15/honeywell-" "total-connect-comfort-app-website-not-working-issue/\"> recurrent connection " "issues with the server these thermostats are tethered to</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The legacy company that made Blackberry phones is about to kill them off <a " "href=\"https://edition.cnn.com/2022/01/01/tech/blackberry-end-of-life/index." "html\">by shutting down the server they are tethered to</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If the software on those phones were free (as in freedom), people could " "modify their software so they could talk to some other server." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Hundreds of Tesla drivers <a href=\"https://www.theguardian.com/" "technology/2021/nov/20/tesla-app-outage-elon-musk-apologises\">were locked " "out of their cars as a result of Tesla's app suffering from an outage</a>, " "which happened because the app is tethered to the company's servers." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Focals eyeglass display, with snooping microphone, has been eliminated. " "Google eliminated it by buying the manufacturer and shutting it down. It " "also <a href=\"https://www.ctvnews.ca/sci-tech/article/canadian-smart-" "glasses-going-offline-weeks-after-company-bought-by-google/\">shut down the " "server these devices depend on</a>, which caused the ones already sold to " "cease to function." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It may be a good thing to wipe out this product—for “smart," "” read “snoop”—but Google didn't do that for the " "sake of privacy. Rather, it was eliminating competition for its own " "snooping product." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Mellow sous-vide cooker is tethered to a server. The company suddenly <a " "href=\"https://www.slashgear.com/mellow-sous-vide-owners-get-unwelcome-" "subscription-surprise-28630842/\"> turned this tethering into a " "subscription</a>, forbidding users from taking advantage of the “" "advanced features” of the cooker unless they pay a monthly fee." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Best Buy made controllable appliances and <a href=\"https://www.theverge." "com/2019/9/6/20853671/best-buy-connect-insignia-smart-plug-wifi-freezer-" "mobile-app-shutdown-november-6\"> shut down the service to control them " "through</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Best Buy acknowledged that it was mistreating its customers by doing so, and " "offered reimbursement of the affected appliances. The fact remains, however, " "that tethering a device to a server is a way of restricting and harassing " "users. The nonfree software in the device is what stops users from cutting " "the tether." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Jibo robot toys were tethered to the manufacturer's server, and <a href=" "\"https://apnews.com/article/san-francisco-north-america-technology-business-" "ap-top-news-99c9ec8ebad242ca88178e22c7642648\"> the company made them all " "cease to work</a> by shutting down that server." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The shutdown might ironically be good for their users, since the product was " "designed to manipulate people by presenting a phony semblance of emotions, " "and was most certainly spying on them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The British supermarket Tesco sold tablets which were tethered to Tesco's " "server for reinstalling default settings. Tesco <a href=\"https://www." "theguardian.com/money/2019/mar/25/tesco-hudl-tablet-support-kill-fix\"> " "turned off the server for old models</a>, so now if you try to reinstall the " "default settings, it bricks them instead." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Honeywell's “smart” thermostats communicate only through the " "company's server. They have all the nasty characteristics of such devices: " "<a href=\"https://www.businessinsider.com/honeywell-iot-thermostats-server-" "outage-2018-9\"> surveillance, and danger of sabotage</a> (of a specific " "user, or of all users at once), as well as the risk of an outage (which is " "what just happened)." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In addition, setting the desired temperature requires running nonfree " "software. With an old-fashioned thermostat, you can do it using controls " "right on the thermostat." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Jawbone fitness tracker was tethered to a proprietary phone app. In " "2017, the company shut down and made the app stop working. <a href=\"https://" "www.theguardian.com/technology/2018/jul/05/defunct-jawbone-fitness-trackers-" "kept-selling-after-app-closure-says-which\">All the existing trackers " "stopped working forever</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article focuses on a further nasty fillip, that sales of the broken " "devices continued. But we think that is a secondary issue; it made the nasty " "consequences extend to some additional people. The fundamental wrong was to " "design the devices to depend on something else that didn't respect users' " "freedom." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Logitech will sabotage all Harmony Link household control devices by <a href=" "\"https://arstechnica.com/gadgets/2017/11/logitech-to-shut-down-service-and-" "support-for-harmony-link-devices-in-2018/\"> turning off the server through " "which the products' supposed owners communicate with them</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The owners suspect this is to pressure them to buy a newer model. If they " "are wise, they will learn, rather, to distrust any product that requires " "users to talk with them through some specialized service." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Bird and rabbit pets were implemented for Second Life by a company that " "tethered their food to a server. <a href=\"https://www.rockpapershotgun.com/" "second-life-ozimals-pet-rabbits-dying\"> It shut down the server and the " "pets more or less died</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Anova sabotaged users' cooking devices with a downgrade that tethered them " "to a remote server. <a href=\"https://web.archive.org/web/20170415145520/" "https://consumerist.com/2017/04/12/anova-ticks-off-customers-by-requiring-" "mandatory-accounts-to-cook-food/\">Unless users create an account on Anova's " "servers, their cookers won't function</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The iMessage app on iThings <a href=\"https://theintercept.com/2016/09/28/" "apple-logs-your-imessage-contacts-and-may-share-them-with-police/\">tells a " "server every phone number that the user types into it</a>; the server " "records these numbers for at least 30 days." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A half-blind security critique of a tracking app: it found that <a href=" "\"https://www.consumerreports.org/mobile-security-software/glow-pregnancy-" "app-exposed-women-to-privacy-threats-a1100919965/\"> blatant flaws allowed " "anyone to snoop on a user's personal data</a>. The critique fails entirely " "to express concern that the app sends the personal data to a server, where " "the <em>developer</em> gets it all. This “service” is for " "suckers!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The server surely has a “privacy policy,” and surely it is " "worthless since nearly all of them are." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Revolv is a device that managed “smart home” operations: " "switching lights, operate motion sensors, regulating temperature, etc. Its " "proprietary software depends on a remote server to do these tasks. On May " "15th, 2016, Google/Alphabet <a href=\"https://www.eff.org/deeplinks/2016/04/" "nest-reminds-customers-ownership-isnt-what-it-used-be\">intentionally broke " "it by shutting down the server</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If it were free software, users would have the ability to make it work " "again, differently, and then have a freedom-respecting home instead of a " "“smart” home. Don't let proprietary software control your " "devices and turn them into $300 out-of-warranty bricks. Insist on self-" "contained computers that run free software!" msgstr "" #. type: Content of: <title> msgid "" "Additions to the Malware Section - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><p> msgid "" "</a> / <a href=\"/proprietary/proprietary.html\">Malware</a> /" msgstr "" #. type: Content of: <div><h2> msgid "Additions to the Malware Section" msgstr "" #. type: Content of: <div><p> msgid "" "These are all the malware items that have been added to this directory since " "2018, in reverse chronological order. (In some cases, the latest reference " "was updated after the item was added.)" msgstr "" #. type: Content of: <div><ul><li><small> msgid "<small class='date-tag'>Added:" msgstr "" #. type: Content of: <div><ul><li><small> msgid "— Latest reference:" msgstr "" #. #echo #. encoding='none' var='PUB' #. type: Content of: <div><ul><li> msgid "</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Apple <a href=\"https://www.bleepingcomputer.com/news/security/apple-pulls-" "icloud-end-to-end-encryption-feature-in-the-uk/\"> stopped offering iCloud " "end-to-end encryption in the UK</a> after the UK government demanded <a href=" "\"https://www.washingtonpost.com/technology/2025/02/07/apple-encryption-" "backdoor-uk/\"> worldwide access to encrypted user data</a>. This is one " "more proof that storing your own data “in the cloud” puts it at " "risk." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Pixel 9 “smart”phone <a href=\"https://cybernews.com/" "security/google-pixel-9-phone-beams-data-and-awaits-commands/\"> frequently " "updates Google servers with its location and current configuration</a> along " "with personally identifiable data, raising concerns about user privacy. " "Moreover, it communicates with services that are not in use, and " "periodically attempts to download experimental, possibly insecure software. " "The system does not inform the user that it is doing all this." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "There is hope, however: it is possible to <a href=\"https://doc.e.foundation/" "devices\"> replace the original Android operating system with a deGoogled " "version</a> in Pixel phones up to 8a, and in phones from many other brands. " "No doubt that the Pixel 9 will be supported soon." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Google's ad platform enabled advertisers to <a href=\"https://arstechnica." "com/information-technology/2018/01/now-even-youtube-serves-ads-with-cpu-" "draining-cryptocurrency-miners/\"> run cryptocurrency miner code on the " "computers of YouTube users through proprietary JavaScript</a>. Some people " "noticed this, and the outrage made Google remove the miners, but the number " "of affected users was probably very high." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/gadgets/2024/05/pleas-for-open-sourcing-" "refunds-as-spotify-plans-to-brick-car-thing-devices/\">Spotify sold a music " "streaming device but they no longer support it</a>. Due to its proprietary " "nature, it can no longer be updated or even used. Users requested Spotify to " "make the software that runs on the device libre, and Spotify refused, so " "these devices are now e-waste. Spotify is now offering refunds to save the " "purchasers from losing money on these products, but this wouldn't prevent " "the products from being e-waste, and wouldn't save users from being jerked " "around by Spotify. This is an example of how software that is not free " "controls the user instead of the user controlling the software. It is also " "an important lesson for us to insist the software in a device be libre " "before we buy it." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20240311120515/https://www.nytimes." "com/2024/03/11/technology/carmakers-driver-tracking-insurance.html\"> GM is " "spying on drivers</a> who own or rent their cars, and give away detailed " "driving data to insurance companies through data brokers. These companies " "then analyze the data, and hike up insurance prices if they think the data " "denotes “risky driving.” For the car to make this data available " "to anyone but the owner or renter of the car should be a crime. If the car " "is owned by a rental company, that company should not have access to it " "either." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Surveillance cameras put in by government A to surveil for it may be " "surveilling for government B as well. That's because A put in a product <a " "href=\"https://www.rferl.org/a/ukraine-cctv-moscow-spying-schemes-" "investigation/32747767.html\"> made by B with nonfree software</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>(Please note that this article misuses the word “<a href=\"/" "philosophy/words-to-avoid.html#Hacker\">hack</a>” to mean “break " "security.”)</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"/proprietary/uhd-bluray-denies-your-freedom.html\">UHD Blu-ray " "disks are encrypted with AACS, one of the worst kinds of DRM</a>. Playing " "them on a PC requires software and hardware that meet stringent proprietary " "specifications, which developers can only obtain after signing an agreement " "that explicitly forbids them from disclosing any source code." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.bleepingcomputer.com/news/security/logofail-attack-can-" "install-uefi-bootkits-through-bootup-logos/\">x86 and ARM based computers " "shipped with UEFI are potentially vulnerable to a design omission called " "LogoFAIL</a>. A cracker can replace the BIOS logo with a fake one that " "contains malicious code. Users can't fix this omission because it is in the " "nonfree UEFI firmware that users can't replace." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Recent autos offer a feature by which the drivers can connect their snoop-" "phones to the car. That feature <a href=\"https://therecord.media/class-" "action-lawsuit-cars-text-messages-privacy\"> snoops on the calls and texts</" "a> and gives the data to the car manufacturer, and to the state." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A good privacy law would prohibit cars recording this data about the users' " "activities. But not just <em>this</em> data—lots of other data too." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20231213150111/https://www.nytimes." "com/2023/11/12/technology/iphone-repair-apple-control.html\">To block non-" "Apple repairs, Apple encodes the iMonster serial number in the original " "parts</a>. This is called “parts pairing”. Swapping parts " "between working iMonsters of the same model causes malfunction or disabling " "of some functionalities. Part replacement may also trigger persistent " "alerts, unless it is done by an Apple store." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Yandex company has started to <a href=\"https://meduza.io/en/" "feature/2023/08/08/user-x-with-driver-y-traveled-from-point-a-to-point-b\"> " "give away Yango taxi ride data to Russia's Federal Security Service (FSB)</" "a>. The Russian government (and whoever else receives the the data) thus has " "access to a wealth of personal information, including who traveled where, " "when, and with which driver. Yandex <a href=\"https://yandex.ru/legal/" "confidential/?lang=en\"> claims that it complies with European regulations</" "a> for data collected in the European Economic Area, Switzerland or Israel. " "But what about the rest of the world?" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "As tech companies add microphones to a wide range of products, including " "refrigerators and motor vehicles, they also set up transcription farms where " "human employees <a href=\"https://getpocket.com/explore/item/silicon-valley-" "got-millions-to-let-siri-and-alexa-listen-in\"> listen to what people say</" "a> and tweak the recognition algorithms." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/technology/2023/jul/04/smile-youre-on-" "camera-self-driving-cars-are-here-and-theyre-watching-you\"> Driverless cars " "in San Francisco collect videos constantly</a>, using cameras inside and " "outside, and governments have already collected those videos secretly." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "As the Surveillance Technology Oversight Project says, they are “" "driving us straight into authoritarianism.” We must <a href=\"/" "philosophy/surveillance-vs-democracy.html\">regulate <em>all</em> cameras " "that collect images that can be used to track people</a>, to make sure they " "are not used for that." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Some employers are <a href=\"https://www.theguardian.com/money/2023/may/30/i-" "feel-constantly-watched-employees-working-under-surveillance-monitorig-" "software-productivity\"> forcing employees to run “monitoring " "software”</a> on their computers. These extremely intrusive " "proprietary programs can take screenshots at regular intervals, log " "keystrokes, record audio and video, etc. Such practices have been shown to " "<a href=\"https://www.eurofound.europa.eu/publications/report/2020/employee-" "monitoring-and-surveillance-the-challenges-of-digitalisation\"> deteriorate " "employees' well-being</a>, and trade unions in the European union have " "voiced their concerns about them. The requirement for employee's consent, " "which exists in some countries, is a sham because most often the employee is " "not free to refuse. In short, these practices should be abolished." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A bug in Tesla cars software <a href=\"https://www.tweaktown.com/news/86780/" "new-app-allows-hackers-to-steal-teslas-by-making-their-own-keys/index.html" "\"> lets crackers install new car keys</a>, unlock cars, start engines, and " "even prevent real owners from accessing their cars." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A cracker even reported that he was able to <a href=\"https://fortune." "com/2022/01/12/teen-hacker-david-colombo-took-control-25-tesla-ev/\"> " "disable security systems and take control of 25 cars</a>." msgstr "" #. type: Content of: <div><ul><li> msgid "" "<small>Please note that these articles wrongly use the word “<a href=" "\"/philosophy/words-to-avoid.html#Hacker\">hacker</a>” instead of " "cracker.</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Tesla cars record videos of activity inside the car, and <a href=\"https://" "arstechnica.com/tech-policy/2023/04/tesla-workers-shared-images-from-car-" "cameras-including-scenes-of-intimacy/\"> company staff can watch those " "recordings and copy them</a>. Or at least they were able to do so until last " "year." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Tesla may have changed some security functions so that this is harder to " "do. But if Tesla can get those recordings, that is because it is planning " "for some people to use them in some situation, and that is unjust already. " "It should be illegal to make a car that takes photos or videos of the people " "in the car—or of people outside the car." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Pinduoduo app <a href=\"https://edition.cnn.com/2023/04/02/tech/china-" "pinduoduo-malware-cybersecurity-analysis-intl-hnk/index.html\"> snoops on " "other apps, and takes control of them</a>. It also installs additional " "malware that is hard to remove." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Hackers discovered <a href=\"https://samcurry.net/web-hackers-vs-the-auto-" "industry/\"> dozens of flaws in the security (in the usual narrow sense) of " "many brands of automobiles</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Security in the usual narrow sense means security against unknown third " "parties. We are more concerned with security in the broader sense—" "against the manufacturer as well as against unknown third parties. It is " "clear that each of these vulnerabilities can be exploited by the " "manufacturer too, and by any government that can threaten the manufacturer " "enough to compel the manufacturer's cooperation." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20230101185726/https://gizmodo.com/" "apple-iphone-analytics-tracking-even-when-off-app-store-1849757558\"> The " "iMonster app store client programs collect many kinds of data</a> about the " "user's actions and private communications. “Do not track” " "options are available, but tracking doesn't stop if the user activates them: " "Apple keeps on collecting data for itself, although it claims not to send it " "to third parties." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.theregister.com/2022/11/14/" "apple_data_collection_lawsuit/\"> Apple is being sued</a> for that." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a hreflang=\"ja\" href=\"https://ja.wikipedia.org/wiki/B-CAS\">B-CAS</a> <a " "href=\"#m1\">[1]</a> is the digital restrictions management (DRM) system " "used by Japanese TV broadcasters, including NHK (public-service TV). It is " "sold by the B-CAS company, which has a de-facto monopoly on it. Initially " "intended for pay-TV, its use was extended to digital free-to-air " "broadcasting as a means to enforce restrictions on copyrighted works. The " "system encrypts works that permit free redistribution just like other works, " "thus denying users their nominal rights." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "On the client side, B-CAS is typically implemented by a card that plugs into " "a compatible receiver, or alternatively by a tuner card that plugs into a " "computer. Beside implementing drastic copying and viewing restrictions, this " "system gives broadcasters full power over users, through back doors among " "other means. For example:" msgstr "" #. type: Content of: <div><ul><li><ul><li> msgid "" "It can force messages to the user's TV screen, and the user can't turn them " "off." msgstr "" #. type: Content of: <div><ul><li><ul><li> msgid "" "It can collect viewing information and send it to other companies to take " "surveys. Until 2011, user registration was required, so the viewing habits " "of each customer were recorded. We don't know whether this personal " "information was deleted from the company's servers after 2011." msgstr "" #. type: Content of: <div><ul><li><ul><li> msgid "" "Each card has an ID, which enables broadcasters to force customer-specific " "updates via the back door normally used to update the decryption key. Thus " "pay-TV broadcasters can disable decryption of the broadcast wave if " "subscription fees are not paid on time. This feature could also be used by " "any broadcaster (possibly instructed by the government) to stop certain " "persons from watching TV." msgstr "" #. type: Content of: <div><ul><li><ul><li> msgid "" "As the export of B-CAS cards is illegal, people outside Japan can't " "(officially) decrypt the satellite broadcast signal that may spill over to " "their location. They are thus deprived of a valuable source of information " "about what happens in Japan." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "These unacceptable restrictions led to a sort of cat-and-mouse game, with " "some users doing their best to bypass the system, and broadcasters trying to " "stop them without much success: cryptographic keys were retrieved through " "the back door of the B-CAS card, illegal cards were made and sold on the " "black market, as well as a tuner for PC that disables the copy control " "signal." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "While B-CAS cards are still in use with older equipment, modern high " "definition TVs have an even nastier version of this DRM (called ACAS) in a " "special chip that is built into the receiver. The chip can update its own " "software from the company's servers, even when the receiver is turned off " "(but still plugged into an outlet). This feature could be abused to disable " "stored TV programs that the power in place doesn't agree with, thus " "interfering with free speech." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Being part of the receiver, the ACAS chip is supposed to be tamper-" "resistant. Time will tell…" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>[1] We thank the free software supporter who translated this article " "from Japanese, and shared his experience of B-CAS with us. (Unfortunately, " "the article presents DRM as a good thing.)</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A security researcher found that the iOS in-app browser of TikTok <a href=" "\"https://www.theguardian.com/technology/2022/aug/24/tiktok-can-track-users-" "every-tap-as-they-visit-other-sites-through-ios-app-new-research-shows\"> " "injects keylogger-like JavaScript code into outside web pages</a>. This code " "has the ability to track all users' activities, and to retrieve any personal " "data that is entered on the pages. We have no way of verifying TikTok's " "claim that the keylogger-like code only serves purely technical functions. " "Some of the accessed data could well be saved to the company's servers, and " "even sent to third parties. This would open the door to extensive " "surveillance, including by the Chinese government (to which TikTok has " "indirect ties). There is also a risk that the data would be stolen by " "crackers, and used to launch malware attacks." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The iOS in-app browsers of Instagram and Facebook behave essentially the " "same way as TikTok's. The main difference is that Instagram and Facebook " "allow users to access third-party sites with their default browser, whereas " "<a href=\"https://web.archive.org/web/20221201065621/https://www.reddit.com/" "r/Tiktokhelp/comments/jlep5d/" "how_do_i_make_urls_open_in_my_browser_instead_of/\"> TikTok makes it nearly " "impossible</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The researcher didn't study the Android versions of in-app browsers, but we " "have no reason to assume they are safer than the iOS versions." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>Please note that the article wrongly refers to crackers as “" "hackers.”</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Some Epson printers are programmed to <a href=\"https://hardware.slashdot." "org/story/22/08/07/0350244/epson-programs-some-printers-to-stop-operating-" "claiming-danger-of-ink-spills\"> stop working after they have printed a " "predetermined number of pages</a>, on the pretext that ink pads become " "saturated with ink. This constitutes an unacceptable infringement on users' " "freedom to use their printers as they wish, and on their <a href=\"https://" "fighttorepair.substack.com/p/citing-danger-of-ink-spills-epson\"> right to " "repair them</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Today's “smart” TVs <a href=\"https://www.techdirt." "com/2022/04/14/its-still-stupidly-ridiculously-difficult-to-buy-a-dumb-tv/" "\"> push people to surrender to tracking via internet</a>. Some won't work " "unless they have a chance to download nonfree software. And they are " "designed for programmed obsolescence." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "US states that ban abortion talk about making it a crime to go to another " "state to get an abortion. They could <a href=\"https://www.cnn." "com/2022/08/29/tech/wireless-carriers-locations-fcc/index.html\"> use " "various forms of location tracking, including the network, to prosecute " "abortion-seekers</a>. The state could subpoena the data, so that the " "network's “privacy” policy would be irrelevant." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "That article explains why wireless networks collect location data, one " "unavoidable reason and one avoidable (emergency calls). It also explains " "some of the many ways the location data are used." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Networks should never do localization for emergency calls except when you " "make an emergency call, or when there is a court order to do so. It should " "be illegal for a network to do precise localization (the kind needed for " "emergency calls) except to handle an emergency call, and if a network does " "so illegally, it should be required to inform the owner of the phone in " "writing on paper, with an apology." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many retail businesses publish cr…apps that ask to <a href=\"https://" "www.delish.com/kitchen-tools/a43252/how-food-apps-use-data/\"> spy on the " "user's own data</a>—often many kinds." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Those companies know that snoop-phone usage trains people to say yes to " "almost any snooping." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Network location tracking is used, among other techniques, for <a href=" "\"https://www.linkedin.com/pulse/location-based-advertising-has-starbucks-" "coupon-finally-john-craig\"> targeted advertising</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "ATMs and vending machines in Russia run nonfree software—The machines' " "owners <a href=\"https://www.themoscowtimes.com/2022/07/01/russian-atms-" "reject-new-100-ruble-bill-kommersant-a78175\"> cannot fix them</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Markup investigated 80,000 popular web sites and <a href=\"https://" "themarkup.org/blacklight/2020/09/22/blacklight-tracking-advertisers-digital-" "privacy-sensitive-websites\"> reports on how much they snoop on users</a>. " "Almost 70,000 had third-party trackers. 5,000 fingerprinted the browser to " "identify users. 12,000 recorded the user's mouse clicks and movements." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Canada has fined the company Tim Hortons for making <a href=\"https://" "arstechnica.com/tech-policy/2022/06/tim-hortons-coffee-app-broke-law-by-" "constantly-recording-users-movements/\"> an app that tracks people's " "movements</a> to learn things such as where they live, where they work, and " "when they visit competitors' stores." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A worldwide investigation found that most of the applications that school " "districts recommended for remote education during the COVID-19 pandemic <a " "href=\"https://web.archive.org/web/20220525011540/https://www.washingtonpost." "com/technology/2022/05/24/remote-school-app-tracking-privacy/\">track and " "collect personal data from children as young as below the age of five</a>. " "These applications, and their websites, send the collected information to ad " "giants such as Facebook and Google, and they are still being used in the " "classrooms even after some of the schools reopened." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The US government <a href=\"https://themarkup.org/pixel-hunt/2022/04/28/" "applied-for-student-aid-online-facebook-saw-you\">sent personal data to " "Facebook</a> for every college student that applied for US government " "student aid. It justified this as being for a “campaign.”" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The data included name, phone number and email address. This shows the " "agency didn't even make a handwaving attempt to anonymize the student. Not " "that anonymization usually does much good—but the failure to even try " "shows that the agency was completely blind to the issue of respecting " "students' privacy." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Apple prevents people from upgrading their Mac hardware <a href=\"https://" "www.theverge.com/2022/3/21/22989226/apple-mac-studios-removable-ssd-blocked-" "software-replacement\">by imposing DRM on its removable SSD storage</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "“Smart” TV manufacturers <a href=\"https://www.theguardian.com/" "technology/2022/jan/29/what-your-smart-tv-knows-about-you-and-how-to-stop-it-" "harvesting-data\"> spy on people using various methods</a>, and harvest " "their data. They are collecting audio, video, and TV usage data to profile " "people." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Hewlett-Packard is <a href=\"https://www.theguardian.com/money/2022/feb/19/" "how-cheap-ink-cartridges-can-cost-you-dear\"> implementing DRM in its " "printers</a> so they refuse to print with ink cartridges from another " "supplier." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.eff.org/deeplinks/2022/02/worst-timeline-printer-" "company-putting-drm-paper-now\"> Dymo is now embedding DRM in the paper " "rolls for its label printers</a> to make those printers reject equivalent " "paper rolls made by other companies. This is implemented by an RFID tag, " "which keeps track of how many labels remain on the roll, and blocks further " "printing when the roll is empty—an efficient way to prevent reusing " "the same RFID with a third-party roll." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The data broker X-Mode <a href=\"https://themarkup.org/privacy/2022/01/27/" "gay-bi-dating-app-muslim-prayer-apps-sold-data-on-peoples-location-to-a-" "controversial-data-broker\">bought location data about 20,000 people " "collected by around 100 different malicious apps</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A critical bug in Apple's iOS makes it possible for attackers to alter a " "shutdown event, <a href=\"https://blog.zecops.com/research/persistence-" "without-persistence-meet-the-ultimate-persistence-bug-noreboot/\">tricking " "the user into thinking that the phone has been powered off</a>. But in fact, " "it's still running, and the user can't feel any difference between a real " "shutdown and the fake shutdown." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20230607090524/https://old.reddit.com/" "r/Instagram/comments/6xkhi8/ig_suddenly_asking_for_phone_number_not_visible/" "\">Instagram is forcing users to give away their phone numbers</a> and won't " "let people continue using the app if they refuse." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Some researchers at Google <a href=\"https://www.vice.com/en/article/93bw8y/" "google-caught-hackers-using-a-mac-zero-day-against-hong-kong-users\">found a " "zero-day vulnerability on MacOS, which crackers used to target people " "visiting the websites</a> of a media outlet and a pro-democracy labor and " "political group in Hong Kong." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "EdTech companies use their surveillance power to manipulate students, and " "direct them into tracks towards various levels of knowledge, power and " "prestige. The article argues that <a href=\"https://blogs.lse.ac.uk/" "medialse/2021/10/25/algorithmic-injustice-in-education-why-tech-companies-" "should-require-a-license-to-operate-in-childrens-education/\">these " "companies should obtain licenses to operate</a>. That wouldn't hurt, but it " "doesn't address the root of the problem. All data acquired in a school about " "any student, teacher, or employee must not leave the school, and must be " "kept in computers that belong to the school and run free (as in freedom) " "software. That way, the school district and/or parents can control what is " "done with those data." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A building in LA, with a supermarket in it, <a href=\"https://www.latimes." "com/business/story/2021-11-09/column-trader-joes-parking-app\">demands " "customers load a particular app to pay for parking in the parking lot</a>, " "and accept pervasive surveillance. They also have the option of entering " "their license plate numbers in a kiosk. That is an injustice, too." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Apple's new tactic to restrict users from repairing their own device and " "impose DRM on people is to <a href=\"https://www.ifixit.com/News/54829/" "apples-new-screen-repair-trap-could-change-the-repair-industry-forever" "\">completely disable its Face ID functionality</a> when you replace its " "screen." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Spotify app <a href=\"https://www.sec.gov/Archives/edgar/" "data/1639920/000119312518063434/d494294df1.htm\">harvests users' data to " "personally identify and know people</a> through music, their mood, mindset, " "activities, and tastes. There are over 150 billion events logged daily on " "the program which contains users' data and personal information." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.elsalvador.com/eldiariodehoy/app-chivo-bitcoin-pone-en-" "riesgo-datos-personales-de-usuarios/852310/2021/\">El Salvador " "Dictatorship's Chivo wallet is spyware</a>, it's a proprietary program that " "breaks users' freedom and spies on people; demands personal data such as the " "national ID number and does face recognition, and it is bad security for its " "data. It also asks for almost every malware permission in people's " "smartphones." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The article criticizes it for faults in “data protection”, " "though <a href=\"/philosophy/surveillance-vs-democracy.html\">“data " "protection” is the wrong approach to privacy anyway</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Google's proprietary Chrome web browser <a href=\"https://www.techrepublic." "com/article/new-chrome-feature-can-tell-sites-and-webapps-when-youre-idle/" "\"> added a surveillance API (idle detection API)</a> which lets websites " "ask Chrome to report when a user with a web page open is idle." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Various models of security cameras, DVRs, and baby monitors that run " "proprietary software <a href=\"https://www.wired.com/story/kalay-iot-bug-" "video-feeds/\">are affected by a security vulnerability that could give " "attackers access to live feeds</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/news/2021/jul/18/what-is-pegasus-" "spyware-and-how-does-it-hack-phones\"> The pegasus spyware used " "vulnerabilities on proprietary smartphone operating systems</a> to impose " "surveillance on people. It can record people's calls, copy their messages, " "and secretly film them, using a security vulnerability. There's also <a href=" "\"https://info.lookout.com/rs/051-ESQ-475/images/lookout-pegasus-technical-" "analysis.pdf\"> a technical analysis of this spyware</a> available in PDF " "format." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A free operating system would've let people to fix the bugs for themselves " "but now infected people will be compelled to wait for corporations to fix " "the problems." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/technology/2021/jun/17/nine-out-of-10-" "health-apps-harvest-user-data-global-study-shows\">Almost all proprietary " "health apps harvest users' data</a>, including sensitive health information, " "tracking identifiers, and cookies to track user activities. Some of these " "applications are tracking users across different platforms." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://techcrunch.com/2021/06/03/tiktok-just-gave-itself-" "permission-to-collect-biometric-data-on-u-s-users-including-faceprints-and-" "voiceprints/\">TikTok apps collect biometric identifiers and biometric " "information from users' smartphones</a>. The company behind it does whatever " "it wants and collects whatever data it can." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Since the beginning of 2017, <a href=\"https://qz.com/1131515/google-" "collects-android-users-locations-even-when-location-services-are-disabled" "\">Android phones have been collecting the addresses of nearby cellular " "towers</a>, even when location services are disabled, and sending that data " "back to Google." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.cpomagazine.com/data-privacy/icloud-data-turned-over-" "to-chinese-government-conflicts-with-apples-privacy-first-focus/\">Apple is " "moving its Chinese customers' iCloud data to a datacenter controlled by the " "Chinese government</a>. Apple is already storing the encryption keys on " "these servers, obeying Chinese authority, making all Chinese user data " "available to the government." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A motorcycle company named Klim is selling airbag vests with different " "payment methods, one of them is through a <a href=\"https://www.vice.com/en/" "article/93yyyd/this-motorcycle-airbag-vest-will-stop-working-if-you-miss-a-" "payment\">proprietary subscription-based option that will block the vest " "from inflating if the payments don't go through</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "They say there is a 30-days grace period if you miss a payment but the grace " "period is no excuse to the insecurity." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://internetsafetylabs.org/blog/news-press/me2ba-product-" "testing-spotlight-report-published-data-sharing-in-primary-secondary-school-" "mobile-apps-2/\">60% of school apps are sending student data to potentially " "high-risk third parties</a>, putting students and possibly all other school " "workers under surveillance. This is made possible by using unsafe and " "proprietary programs made by data-hungry corporations." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>Please note that whether students consent to this or not, doesn't " "justify the surveillance they're imposed to.</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The United States' government is reportedly considering <a href=\"https://" "www.infosecurity-magazine.com/news/private-companies-may-spy-on/\">teaming " "up with private companies to monitor American citizens' private online " "activity and digital communications</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "What creates the opportunity to try this is the fact that these companies " "are already snooping on users' private activities. That in turn is due to " "people's use of nonfree software which snoops, and online dis-services which " "snoop." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A zero-day vulnerability in Zoom which <a href=\"https://www.zdnet.com/" "article/critical-zoom-vulnerability-triggers-remote-code-execution-without-" "user-input/\">can be used to launch remote code execution (RCE) attacks</a> " "has been disclosed by researchers. The researchers demonstrated a three-bug " "attack chain that caused an RCE on a target machine, all this without any " "form of user interaction." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Google <a href=\"https://www.indiatoday.in/technology/news/story/disha-ravi-" "arrest-puts-privacy-of-all-google-india-users-in-" "doubt-1769772-2021-02-16\">handed over personal data of Indian protesters " "and activists to Indian police</a> which led to their arrest. The cops " "requested the IP address and the location where a document was created and " "with that information, they identified protesters and activists." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Amazon's monopoly and DRM is <a href=\"https://www.washingtonpost.com/" "technology/2021/03/10/amazon-library-ebook-monopoly/\">stopping public " "libraries from lending e-books and audiobooks</a>. Amazon became powerful in " "e-book world by <a href=\"/philosophy/why-call-it-the-swindle.html" "\">Swindle</a>, and is now misusing its power and violates people's rights " "using <a href=\"https://www.defectivebydesign.org\">Digital Restrictions " "Management</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The article is written in a way that endorses DRM in general, which is " "unacceptable. <a href=\"/proprietary/proprietary-drm.html\">DRM is an " "injustice to people</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.bloomberg.com/news/articles/2021-03-09/hackers-expose-" "tesla-jails-in-breach-of-150-000-security-cams\">Over 150 thousand security " "cameras that used Verkada company's proprietary software are cracked</a> by " "a major security breach. Crackers have had access to security archives of " "various gyms, hospitals, jails, schools, and police stations that have used " "Verkada's cameras." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"/philosophy/surveillance-vs-democracy.html\">It is injustice to " "the public</a> for gyms, stores, hospitals, jails, and schools to hand " "“security” footage to a company from which the government can " "collect it at any time, without even telling them." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "TV manufacturers are turning to produce only “Smart” TV sets " "(which include spyware) that <a href=\"https://frame.work/blog/in-defense-of-" "dumb-tvs\">it's now very hard to find a TV that doesn't spy on you</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "It appears that those manufacturers business model is not to produce TV and " "sell them for money, but to collect your personal data and (possibly) hand " "over them to others for benefit." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The proprietary program Clubhouse is malware and a privacy disaster. " "Clubhouse <a href=\"https://www.theguardian.com/commentisfree/2021/feb/20/" "why-hot-new-social-app-clubhouse-spells-nothing-but-trouble\">collects " "people's personal data such as recordings of people's conversations</a>, " "and, as a secondary problem, does not encrypt them, which shows a bad " "security part of the issue." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A user's unique Clubhouse ID number and chatroom ID are transmitted in " "plaintext, and Agora (the company behind the app) would likely have access " "to users' raw audio, potentially providing access to the Chinese government." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Even with good security of data transmission, collecting personal data of " "people is wrong and a violation of people's privacy rights." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The HonorLock online exam proctoring program is a surveillance tool that <a " "href=\"https://www.eff.org/deeplinks/2020/09/students-are-pushing-back-" "against-proctoring-surveillance-apps\">tracks students and collects data</a> " "such as face, driving license, and network information, among others, in " "blatant violation of students' privacy." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Preventing students from cheating should not be an excuse for running " "malware/spyware on their computers, and it's good that students are " "protesting. But their petitions overlook a crucial issue, namely, the " "injustice of being forced to run nonfree software in order to get an " "education." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many cr…apps, developed by various companies for various " "organizations, do <a href=\"https://www.expressvpn.com/digital-security-lab/" "investigation-xoth\"> location tracking unknown to those companies and those " "organizations</a>. It's actually some widely used libraries that do the " "tracking." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "What's unusual here is that proprietary software developer A tricks " "proprietary software developers B1 … B50 into making platforms for A " "to mistreat the end user." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Samsung is forcing its smartphone users in Hong Kong (and Macau) <a href=" "\"https://web.archive.org/web/20240606175013/https://blog.headuck." "com/2020/10/12/samsung-phones-force-mainland-china-dns-service-upon-hong-" "kong-wifi-users/\">to use a public DNS in Mainland China</a>, using software " "update released in September 2020, which causes many unease and privacy " "concerns." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The authorities in Venice track the <a href=\"https://edition.cnn.com/travel/" "article/venice-control-room-tourism/index.html\"> movements of all tourists</" "a> using their portable phones. The article says that <em>at present</em> " "the system is configured to report only aggregated information. But that " "could be changed. What will that system do 10 years from now? What will a " "similar system in another country do? Those are the questions this raises." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A cracker <a href=\"https://www.vice.com/en/article/m7apnn/your-cock-is-mine-" "now-hacker-locks-internet-connected-chastity-cage-demands-ransom\">took " "control of people's internet-connected chastity cages and demanded ransom</" "a>. The chastity cages are being controlled by a proprietary app (mobile " "program)." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>(Please note that the article wrongly refers to crackers as \"<a href=" "\"/philosophy/words-to-avoid.html#Hacker\">hackers</a>\".)</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "As of 2021, WhatsApp (one of Facebook's subsidiaries) is <a href=\"https://" "www.forbes.com/sites/carlypage/2021/01/08/whatsapp-tells-users-share-your-" "data-with-facebook-or-well-deactivate-your-account/\">forcing its users to " "hand over sensitive personal data</a> to its parent company. This increases " "Facebook's power over users, and further jeopardizes people's privacy and " "security." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Instead of WhatsApp you can use <a href=\"https://directory.fsf.org/wiki/Jami" "\">GNU Jami</a>, which is free software and will not collect your data." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Most Internet connected devices in Mozilla's <a href=\"https://www." "mozillafoundation.org/privacynotincluded/\">“Privacy Not " "Included”</a> list <a href=\"https://www.mozillafoundation.org/" "privacynotincluded/arlo-video-doorbell/\">are designed to snoop on users</a> " "even if they meet Mozilla's “Minimum Security Standards.” " "Insecure design of the program running on some of these devices <a href=" "\"https://www.mozillafoundation.org/privacynotincluded/vibratissimo-panty-" "buster/\">makes the user susceptible to be snooped on and exploited by " "crackers as well</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The personal finance management software “Quicken” <a href=" "\"https://www.quicken.com/support/quicken-discontinuation-policy/\"> has a " "discontinuation policy, a.k.a. planned obsolescence</a>, which is an " "injustice to users. A free (as in freedom) program would let users control " "the software. But when you use a proprietary software, you won't be in " "control." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "While the world is still struggling with COVID-19 coronavirus, many <a href=" "\"https://mashable.com/article/privacy-in-the-age-of-coronavirus\">people " "are in danger of surveillance</a> and their computers are infected with " "malware as a result of installing proprietary software." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "HP tricked users into installing a mischievous update in their printers that " "<a href=\"https://www.eff.org/deeplinks/2020/11/ink-stained-wretches-battle-" "soul-digital-freedom-taking-place-inside-your-printer\">made the devices " "reject all third-party ink cartridges</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "United States officials are facing one of biggest crackings against them in " "years, when <a href=\"https://www.theguardian.com/technology/2020/dec/15/" "orion-hack-solar-winds-explained-us-treasury-commerce-department\">malicious " "code was sneaked into SolarWinds' proprietary software named Orion</a>. " "Crackers got access to networks when users downloaded a tainted software " "update. Crackers were able to monitor internal emails at some of the top " "agencies in the US." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Commercial crackware can <a href=\"https://www.theguardian.com/" "technology/2020/dec/20/iphones-vulnerable-to-hacking-tool-for-months-" "researchers-say\"> get passwords out of an iMonster</a>, use the microphone " "and camera, and other things." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.washingtonpost.com/technology/2020/12/18/zoom-helped-" "china-surveillance/\"> A Zoom executive carried out snooping and censorship " "for the Chinese government</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This abuse of Zoom's power shows how dangerous that power is. The root " "problem is not the surveillance and censorship, but rather the power that " "Zoom has. It gets that power partly from the use of its server, but also " "partly from the nonfree client program." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Baidu apps were <a href=\"https://www.zdnet.com/article/baidus-android-apps-" "caught-collecting-sensitive-user-details/\"> caught collecting sensitive " "personal data</a> that can be used for lifetime tracking of users, and " "putting them in danger. More than 1.4 billion people worldwide are affected " "by these proprietary apps, and users' privacy is jeopardized by this " "surveillance tool. Data collected by Baidu may be handed over to the Chinese " "government, possibly putting Chinese people in danger." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Apple has <a href=\"https://sneak.berlin/20201112/your-computer-isnt-yours/" "\">implemented a malware in its computers that imposes surveillance</a> on " "users and reports users' computing to Apple." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The reports are even unencrypted and they've been leaking this data for two " "years already. This malware is reporting to Apple what user opens what " "program at what time. It also gives Apple power to sabotage users' computing." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "According to FTC, the company behind the Zoom conferencing software <a href=" "\"https://arstechnica.com/tech-policy/2020/11/zoom-lied-to-users-about-end-" "to-end-encryption-for-years-ftc-says/\">has lied to users about its end-to-" "end encryption</a> for years, at least since 2016." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "People can use free (as in freedom) programs such as <a href=\"https://" "directory.fsf.org/wiki/Jitsi\">Jitsi</a> or <a href=\"https://directory.fsf." "org/wiki/BigBlueButton\">BigBlueButton</a>, better still if installed in a " "server controlled by the users." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Apple iOS version of Zoom <a href=\"https://www.vice.com/en/article/" "k7e599/zoom-ios-app-sends-data-to-facebook-even-if-you-dont-have-a-facebook-" "account\">is sending users' data to Facebook</a> even if the user doesn't " "have a Facebook account. According to the article, Zoom and Facebook don't " "even mention this surveillance on their privacy policy page, making this an " "obvious violation of people's privacy even in their own terms." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Internet-enabled watches with proprietary software are malware, violating " "people (specially children's) privacy. In addition, they have a lot of " "security flaws. They <a href=\"https://www.wired.com/story/kid-smartwatch-" "security-vulnerabilities/\"> permit security breakers (and unauthorized " "people) to access</a> the watch." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Thus, ill-intentioned unauthorized people can intercept communications " "between parent and child and spoof messages to and from the watch, possibly " "endangering the child." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>(Note that this article misuses the word “<a href=\"/philosophy/" "words-to-avoid.html#Hacker\">hackers</a>” to mean “crackers." "”)</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many employers are using nonfree software, including videoconference " "software, to <a href=\"https://www.theguardian.com/world/2020/sep/27/" "shirking-from-home-staff-feel-the-heat-as-bosses-ramp-up-remote-surveillance" "\"> surveil and monitor staff working at home</a>. If the program reports " "whether you are “active,” that is in effect a malicious " "surveillance feature." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Facebook <a href=\"https://www.dailymail.co.uk/news/article-8747541/Facebook-" "accused-watching-Instagram-users-mobile-cameras.html\">snoops on Instagram</" "a> users by surreptitously turning on the device's camera." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Oculus headsets <a href=\"https://www.theverge.com/2020/8/18/21372435/oculus-" "facebook-login-change-separate-account-support-end-quest-october\">require " "users to identify themselves to Facebook</a>. This will give Facebook free " "rein to pervasively snoop on Oculus users." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "New Toyotas will <a href=\"https://www.theregister.com/2020/08/18/" "aws_toyota_alliance/\"> upload data to AWS to help create custom insurance " "premiums</a> based on driver behaviour." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Before you buy a “connected” car, make sure you can disconnect " "its cellular antenna and its GPS antenna. If you want GPS navigation, get a " "separate navigator which runs free software and works with Open Street Map." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "TikTok <a href=\"https://boingboing.net/2020/08/11/tiktok-exploited-android-" "secur.html\"> exploited an Android vulnerability</a> to obtain user MAC " "addresses." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Apple whistleblower Thomas Le Bonniec reports that Apple made a practice of " "surreptitiously activating the Siri software to <a href=\"https://www." "politico.eu/wp-content/uploads/2020/05/Public-Statement-Siri-recordings-TLB." "pdf\"> record users' conversations when they had not activated Siri</a>. " "This was not just occasional, it was systematic practice." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "His job was to listen to these recordings, in a group that made transcripts " "of them. He does not believes that Apple has ceased this practice." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The only reliable way to prevent this is, for the program that controls " "access to the microphone to decide when the user has “activated” " "any service, to be free software, and the operating system under it free as " "well. This way, users could make sure Apple can't listen to them." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "“Bossware” is malware that bosses <a href=\"https://www.eff.org/" "deeplinks/2020/06/inside-invasive-secretive-bossware-tracking-workers\"> " "coerce workers into installing in their own computers</a>, so the bosses can " "spy on them." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This shows why requiring the user's “consent” is not an adequate " "basis for protecting digital privacy. The boss can coerce most workers into " "consenting to almost anything, even probable exposure to contagious disease " "that can be fatal. Software like this should be illegal and bosses that " "demand it should be prosecuted for it." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Most apps are malware, but Trump's campaign app, like Modi's campaign app, " "is <a href=\"https://www.technologyreview.com/2020/06/21/1004228/trumps-data-" "hungry-invasive-app-is-a-voter-surveillance-tool-of-extraordinary-scope/\"> " "especially nasty malware, helping companies snoop on users as well as " "snooping on them itself</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The article says that Biden's app has a less manipulative overall approach, " "but that does not tell us whether it has functionalities we consider " "malicious, such as sending data the user has not explicitly asked to send." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "TV manufacturers are able to <a href=\"https://www.zdnet.com/article/fbi-" "warns-about-snoopy-smart-tvs-spying-on-you/\">snoop every second of what the " "user is watching</a>. This is illegal due to the Video Privacy Protection " "Act of 1988, but they're circumventing it through EULAs." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.wired.com/story/ripple20-iot-vulnerabilities/\"> A " "disasterous security bug</a> touches millions of products in the Internet of " "Stings." msgstr "" #. type: Content of: <div><ul><li><p> msgid "As a result, anyone can sting the user, not only the manufacturer." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Xiaomi phones <a href=\"https://www.forbes.com/sites/" "thomasbrewster/2020/04/30/exclusive-warning-over-chinese-mobile-giant-xiaomi-" "recording-millions-of-peoples-private-web-and-phone-use/\">report many " "actions the user takes</a>: starting an app, looking at a folder, visiting a " "website, listening to a song. They send device identifying information too." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Other nonfree programs snoop too. For instance, Spotify and other streaming " "dis-services make a dossier about each user, and <a href=\"/malware/" "proprietary-surveillance.html#M201508210\"> they make users identify " "themselves to pay</a>. Out, out, damned Spotify!" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Forbes exonerates the same wrongs when the culprits are not Chinese, but we " "condemn this no matter who does it." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The CIA exploited existing vulnerabilities in “smart” TVs and " "phones to design a malware that <a href=\"https://www.independent.co.uk/tech/" "wikileaks-vault-7-android-iphone-cia-phones-handsets-tv-smart-julian-assange-" "a7616651.html\"> spies through their microphones and cameras while making " "them appear to be turned off</a>. Since the spyware sniffs signals, it " "bypasses encryption." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Alipay Health Code app estimates whether the user has Covid-19 and <a " "href=\"https://www.nytimes.com/2020/03/01/business/china-coronavirus-" "surveillance.html\"> tells the cops directly</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Internet-tethered Amazon Ring had a security vulnerability that enabled " "attackers to <a href=\"https://www.commondreams.org/newswire/2019/11/07/" "amazons-ring-doorbells-leaks-customers-wi-fi-username-and-password\"> access " "the user's wifi password</a>, and snoop on the household through connected " "surveillance devices." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Knowledge of the wifi password would not be sufficient to carry out any " "significant surveillance if the devices implemented proper security, " "including encryption. But many devices with proprietary software lack this. " "Of course, they are also used by their manufacturers for snooping." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The ToToc messaging app seems to be a <a href=\"https://www.nytimes." "com/2019/12/22/us/politics/totok-app-uae.html\"> spying tool for the " "government of the United Arab Emirates</a>. Any nonfree program could be " "doing this, and that is a good reason to use free software instead." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>Note: this article uses the word “free” in the sense of " "“gratis.”</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Some Avast and AVG extensions for Firefox and Chrome were found to <a href=" "\"https://www.itpro.co.uk/security/internet-security/354417/avast-and-avg-" "extensions-pulled-from-chrome\"> snoop on users' detailed browsing habits</" "a>. Mozilla and Google removed the problematic extensions from their stores, " "but this shows once more how unsafe nonfree software can be. Tools that are " "supposed to protect a proprietary system are, instead, infecting it with " "additional malware (the system itself being the original malware)." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many Android apps fool their users by asking them to decide what permissions " "to give the program, and then <a href=\"https://nakedsecurity.sophos." "com/2019/07/10/android-apps-sidestepping-permissions-to-access-sensitive-" "data/\"> bypassing these permissions</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Android system is supposed to prevent data leaks by running apps in " "isolated sandboxes, but developers have found ways to access the data by " "other means, and there is nothing the user can do to stop them from doing " "so, since both the system and the apps are nonfree." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Most modern cars now <a href=\"https://boingboing.net/2019/12/17/cars-now-" "run-on-the-new-oil.html\"> record and send various kinds of data to the " "manufacturer</a>. For the user, access to the data is nearly impossible, as " "it involves cracking the car's computer, which is always hidden and running " "with proprietary software." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "iMonsters and Android phones, when used for work, give employers powerful <a " "href=\"https://www.fastcompany.com/90440073/if-you-use-your-personal-phone-" "for-work-say-goodbye-to-your-privacy\"> snooping and sabotage capabilities</" "a> if they install their own software on the device. Many employers demand " "to do this. For the employee, this is simply nonfree software, as " "fundamentally unjust and as dangerous as any other nonfree software." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Amazon Ring app does <a href=\"https://www.theguardian.com/" "technology/2020/jan/29/ring-smart-doorbell-company-surveillance-eff-report" "\"> surveillance for other companies as well as for Amazon</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Safari occasionally <a href=\"https://blog.cryptographyengineering." "com/2019/10/13/dear-apple-safe-browsing-might-not-be-that-safe/\"> sends " "browsing data from Apple devices in China to the Tencent Safe Browsing " "service</a>, to check URLs that possibly correspond to “" "fraudulent” websites. Since Tencent collaborates with the Chinese " "government, its Safe Browsing black list most certainly contains the " "websites of political opponents. By linking the requests originating from " "single IP addresses, the government can identify dissenters in China and " "Hong Kong, thus endangering their lives." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Chinese Communist Party's “Study the Great Nation” app " "requires users to grant it <a href=\"https://www.ndtv.com/world-news/chinese-" "app-allows-officials-access-to-100-million-users-phone-report-2115962\"> " "access to the phone's microphone, photos, text messages, contacts, and " "internet history</a>, and the Android version was found to contain a back-" "door allowing developers to run any code they wish in the users' phone, as " "“superusers.” Downloading and using this app is mandatory at " "some workplaces." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Facebook app <a href=\"https://eu.usatoday.com/story/tech/" "talkingtech/2019/09/09/facebook-app-social-network-tracking-your-every-" "move/2270305001/\"> tracks users even when it is turned off</a>, after " "tricking them into giving the app broad permissions in order to use one of " "its functionalities." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Some nonfree period-tracking apps including MIA Fem and Maya <a href=" "\"https://www.buzzfeednews.com/article/meghara/period-tracker-apps-facebook-" "maya-mia-fem\"> send intimate details of users' lives to Facebook</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Tesla users claim Tesla <a href=\"https://www.reuters.com/article/us-tesla-" "battery/tesla-owner-lawsuit-claims-software-update-fraudulently-cut-battery-" "capacity-idUSKCN1UY2TW/\">force-installed software to cut down on battery " "range</a>, rather than replace the defective batteries. Tesla did this to " "avoid having to run their warranty." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This means that proprietary software can potentially be a way to commit " "perjury with impunity." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Keeping track of who downloads a proprietary program is a form of " "surveillance. There is a proprietary program for adjusting a certain " "telescopic rifle sight. <a href=\"https://www.forbes.com/sites/" "thomasbrewster/2019/09/06/exclusive-feds-demand-apple-and-google-hand-over-" "names-of-10000-users-of-a-gun-scope-app/\"> A US prosecutor has demanded the " "list of all the 10,000 or more people who have installed it</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "With a free program there would not be a list of who has installed it." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A series of vulnerabilities <a href=\"https://www.forbes.com/sites/" "gordonkelly/2019/08/31/apple-iphone-ipad-security-ios-upgrade-iphone-xs-max-" "xr-update/\">found in iOS allowed attackers to gain access to sensitive " "information including private messages, passwords, photos and contacts " "stored on the user's iMonster</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The deep insecurity of iMonsters is even more pertinent given that Apple's " "proprietary software makes users totally dependent on Apple for even a " "modicum of security. It also means that the devices do not even try to " "offer security against Apple itself." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A game published on Facebook <a href=\"https://revealnews.org/article/so-" "your-child-racked-up-unwanted-credit-card-charges-playing-video-games-now-" "what/\">aimed at leading children to spend</a> large amounts of their " "parents' money without explaining it to them." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "When Apple suspects a user of fraud, it judges the case secretly and " "presents the verdict as a fait accompli. The punishment to a user found " "guilty <a href=\"https://qz.com/1683460/what-happens-to-your-itunes-account-" "when-apple-says-youve-committed-fraud\">is being cut off for life, which " "more-or-less cripples the user's Apple devices forever</a>. There is no " "appeal." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Out of 21 gratis Android antivirus apps that were tested by security " "researchers, eight <a href=\"https://www.comparitech.com/antivirus/android-" "antivirus-vulnerabilities/\"> failed to detect a test virus</a>. All of them " "asked for dangerous permissions or contained advertising trackers, with " "seven being more risky than the average of the 100 most popular Android apps." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>(Note that the article refers to these proprietary apps as “" "free”. It should have said “gratis” instead.)</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many unscrupulous mobile-app developers keep finding ways to <a href=" "\"https://www.cnet.com/tech/mobile/more-than-1000-android-apps-harvest-your-" "data-even-after-you-deny-permissions/\"> bypass user's settings</a>, " "regulations, and privacy-enhancing features of the operating system, in " "order to gather as much private data as they possibly can." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Thus, we can't trust rules against spying. What we can trust is having " "control over the software we run." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Google “Assistant” records users' conversations <a href=" "\"https://arstechnica.com/information-technology/2019/07/google-defends-" "listening-to-ok-google-queries-after-voice-recordings-leak/\">even when it " "is not supposed to listen</a>. Thus, when one of Google's subcontractors " "discloses a thousand confidential voice recordings, users were easily " "identified from these recordings." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Since Google “Assistant” uses proprietary software, there is no " "way to see or control what it records or sends." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Rather than trying to better control the use of recordings, Google should " "not record or listen to the person's voice. It should only get commands " "that the user wants to send to some Google service." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many Android apps can track users' movements even when the user says <a href=" "\"https://www.theverge.com/2019/7/8/20686514/android-covert-channel-" "permissions-data-collection-imei-ssid-location\"> not to allow them access " "to locations</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This involves an apparently unintentional weakness in Android, exploited " "intentionally by malicious apps." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Google Chrome is an <a href=\"https://www.mercurynews.com/2019/06/21/google-" "chrome-has-become-surveillance-software-its-time-to-switch/\"> instrument of " "surveillance</a>. It lets thousands of trackers invade users' computers and " "report the sites they visit to advertising and data companies, first of all " "to Google. Moreover, if users have a Gmail account, Chrome automatically " "logs them in to the browser for more convenient profiling. On Android, " "Chrome also reports their location to Google." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The best way to escape surveillance is to switch to <a href=\"/software/" "icecat/\">IceCat</a>, a modified version of Firefox with several changes to " "protect users' privacy." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "In spite of Apple's supposed commitment to privacy, iPhone apps contain " "trackers that are busy at night <a href=\"https://www.oregonlive.com/" "opinion/2019/05/its-3-am-do-you-know-who-your-iphone-is-talking-to.html\"> " "sending users' personal information to third parties</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The article mentions specific examples: Microsoft OneDrive, Intuit's Mint, " "Nike, Spotify, The Washington Post, The Weather Channel (owned by IBM), the " "crime-alert service Citizen, Yelp and DoorDash. But it is likely that most " "nonfree apps contain trackers. Some of these send personally identifying " "data such as phone fingerprint, exact location, email address, phone number " "or even delivery address (in the case of DoorDash). Once this information is " "collected by the company, there is no telling what it will be used for." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Amazon Alexa collects a lot more information from users than is necessary " "for correct functioning (time, location, recordings made without a " "legitimate prompt), and sends it to Amazon's servers, which store it " "indefinitely. Even worse, Amazon forwards it to third-party companies. Thus, " "even if users request deletion of their data from Amazon's servers, <a href=" "\"https://web.archive.org/web/20190507014804/https://www.ctpost.com/business/" "article/Alexa-has-been-eavesdropping-on-you-this-whole-13822095.php\"> the " "data remain on other servers</a>, where they can be accessed by advertising " "companies and government agencies. In other words, deleting the collected " "information doesn't cancel the wrong of collecting it." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Data collected by devices such as the Nest thermostat, the Philips Hue-" "connected lights, the Chamberlain MyQ garage opener and the Sonos speakers " "are likewise stored longer than necessary on the servers the devices are " "tethered to. Moreover, they are made available to Alexa. As a result, Amazon " "has a very precise picture of users' life at home, not only in the present, " "but in the past (and, who knows, in the future too?)" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Some of users' commands to the Alexa service are <a href=\"https://www.smh." "com.au/technology/alexa-is-someone-else-listening-to-us-sometimes-someone-" "is-20190411-p51d4g.html\"> recorded for Amazon employees to listen to</a>. " "The Google and Apple voice assistants do similar things." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A fraction of the Alexa service staff even has access to <a href=\"https://" "news.bloomberglaw.com/tech-and-telecom-law/amazons-alexa-reviewers-can-" "access-customers-home-addresses\"> location and other personal data</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Since the client program is nonfree, and data processing is done “<a " "href=\"/philosophy/words-to-avoid.html#CloudComputing\">in the cloud</" "a>” (a soothing way of saying “We won't tell you how and where " "it's done”), users have no way to know what happens to the recordings " "unless human eavesdroppers <a href=\"https://web.archive.org/" "web/20240416214211/https://www.bnnbloomberg.ca/three-cheers-for-amazon-s-" "human-eavesdroppers-1.1243033\"> break their non-disclosure agreements</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "As of April 2019, it is <a href=\"https://www.bleepingcomputer.com/news/" "software/major-browsers-to-prevent-disabling-of-click-tracking-privacy-risk/" "\">no longer possible to disable an unscrupulous tracking anti-feature</a> " "that <a href=\"https://html.spec.whatwg.org/multipage/links.html#hyperlink-" "auditing\">reports users when they follow ping links</a> in Apple Safari, " "Google Chrome, Opera, Microsoft Edge and also in the upcoming Microsoft Edge " "that is going to be based on Chromium." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Data collected by menstrual and pregnancy monitoring apps is often <a href=" "\"https://www.theguardian.com/world/2019/apr/13/theres-a-dark-side-to-womens-" "health-apps-menstrual-surveillance\"> available to employers and insurance " "companies</a>. Even though the data is “anonymized and aggregated," "” it can easily be traced back to the woman who uses the app." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This has harmful implications for women's rights to equal employment and " "freedom to make their own pregnancy choices. Don't use these apps, even if " "someone offers you a reward to do so. A free-software app that does more or " "less the same thing without spying on you is available from <a href=" "\"https://search.f-droid.org/?q=menstr\">F-Droid</a>, and <a href=\"https://" "web.archive.org/web/20231230011724/https://dcs.megaphone.fm/BLM6228935164." "mp3?key=23a58d3f686794e6d8b8678a5204887b&" "request_event_id=36469053-3d0b-4724-bf2d-6dbeeeac282e\"> a new one is being " "developed</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Volkswagen programmed its car engine computers to <a href=\"https://petri." "com/volkswagen-used-software-to-cheat-on-emissions/\"> detect the " "Environmental Protection Agency's emission tests</a>, and run dirty the rest " "of the time. In real driving, the cars exceeded emissions standards by a " "factor of up to 35." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Using free software would not have stopped Volkswagen from programming it " "this way, but would have made it harder to conceal, and given the users the " "possibility of correcting the deception." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Former executives of Volkswagen are being <a href=\"https://www.theguardian." "com/business/2019/apr/15/former-head-of-volkswagen-could-face-10-years-in-" "prison\"> sued over this fraud</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Google tracks the movements of Android phones and iPhones running Google " "apps, and sometimes <a href=\"https://www.nytimes.com/interactive/2019/04/13/" "us/google-location-tracking-police.html\"> saves the data for years</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Nonfree software in the phone has to be responsible for sending the location " "data to Google." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "An Android phone was observed to track location even while in airplane mode. " "It didn't send the location data while in airplane mode. Instead, <a href=" "\"https://www.thesun.co.uk/tech/7811918/google-is-tracking-you-even-with-" "airplane-mode-turned-on/\"> it saved up the data, and sent them all later</" "a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "OfficeMax cheated customers by <a href=\"https://arstechnica.com/tech-" "policy/2019/03/office-depot-tricked-people-into-buying-pc-support-with-fake-" "virus-scans/\"> using proprietary “PC Health Check” software</a> " "rigged to give false results, deceiving the customer into thinking per " "computer was infected and buy unneeded support services from the company." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Medtronics Conexus Telemetry Protocol has <a href=\"https://www." "startribune.com/750-000-medtronic-defibrillators-vulnerable-to-" "hacking/507470932/\"> two vulnerabilities that affect several models of " "implantable defibrillators</a> and the devices they connect to." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This protocol has been around since 2006, and similar vulnerabilities were " "discovered in an earlier Medtronics communication protocol in 2008. " "Apparently, nothing was done by the company to correct them. This means you " "can't rely on proprietary software developers to fix bugs in their products." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many Android phones come with a huge number of <a href=\"https://web.archive." "org/web/20190326145122/https://elpais.com/elpais/2019/03/22/" "inenglish/1553244778_819882.html\"> preinstalled nonfree apps that have " "access to sensitive data without users' knowledge</a>. These hidden apps may " "either call home with the data, or pass it on to user-installed apps that " "have access to the network but no direct access to the data. This results in " "massive surveillance on which the user has absolutely no control." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Tesla cars collect lots of personal data, and <a href=\"https://www.cnbc." "com/2019/03/29/tesla-model-3-keeps-data-like-crash-videos-location-phone-" "contacts.html\"> when they go to a junkyard the driver's personal data goes " "with them</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A study of 24 “health” apps found that 19 of them <a href=" "\"https://www.vice.com/en/article/pan9e8/health-apps-can-share-your-data-" "everywhere-new-study-shows\"> send sensitive personal data to third parties</" "a>, which can use it for invasive advertising or discriminating against " "people in poor medical condition." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Whenever user “consent” is sought, it is buried in lengthy terms " "of service that are difficult to understand. In any case, “" "consent” is not sufficient to legitimize snooping." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Low-priced Chromebooks for schools are <a href=\"https://www.eff.org/wp/" "school-issued-devices-and-student-privacy\"> collecting far more data on " "students than is necessary, and store it indefinitely</a>. Parents and " "students complain about the lack of transparency on the part of both the " "educational services and the schools, the difficulty of opting out of these " "services, and the lack of proper privacy policies, among other things." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "But complaining is not sufficient. Parents, students and teachers should " "realize that the software Google uses to spy on students is nonfree, so they " "can't verify what it really does. The only remedy is to persuade school " "officials to <a href=\"/education/edu-schools.html\"> exclusively use free " "software</a> for both education and school administration. If the school is " "run locally, parents and teachers can mandate their representatives at the " "School Board to refuse the budget unless the school initiates a switch to " "free software. If education is run nation-wide, they need to persuade " "legislators (e.g., through free software organizations, political parties, " "etc.) to migrate the public schools to free software." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "A cracker would be able to <a href=\"https://uploadvr.com/hackable-webcam-" "oculus-sensor-be-aware/\"> turn the Oculus Rift sensors into spy cameras</a> " "after breaking into the computer they are connected to." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>(Unfortunately, the article <a href=\"/philosophy/words-to-avoid." "html#Hacker\">improperly refers to crackers as “hackers”</a>.)</" "small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "In China, it is mandatory for electric cars to be equipped with a terminal " "that <a href=\"https://apnews.com/article/north-america-ap-top-news-" "international-news-shanghai-china-4a749a4211904784826b45e812cff4ca\"> " "transfers technical data, including car location, to a government-run " "platform</a>. In practice, <a href=\"/proprietary/proprietary-surveillance." "html#car-spying\"> manufacturers collect this data</a> as part of their own " "spying, then forward it to the government-run platform." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Ring doorbell camera is designed so that the manufacturer (now Amazon) " "can watch all the time. Now it turns out that <a href=\"https://web.archive." "org/web/20190918024432/https://dojo.bullguard.com/dojo-by-bullguard/blog/" "ring/\"> anyone else can also watch, and fake videos too</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The third party vulnerability is presumably unintentional and Amazon will " "probably fix it. However, we do not expect Amazon to change the design that " "<a href=\"/proprietary/proprietary-surveillance.html#M201901100\">allows " "Amazon to watch</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The AppCensus database gives information on <a href=\"https://www.appcensus." "io/\"> how Android apps use and misuse users' personal data</a>. As of March " "2019, nearly 78,000 have been analyzed, of which 24,000 (31%) transmit the " "<a href=\"/proprietary/proprietary-surveillance.html#M201812290\"> " "Advertising ID</a> to other companies, and <a href=\"https://web.archive.org/" "web/20240501141046/https://blog.appcensus.io/2019/02/14/ad-ids-behaving-" "badly/\"> 18,000 (23% of the total) link this ID to hardware identifiers</" "a>, so that users cannot escape tracking by resetting it." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Collecting hardware identifiers is in apparent violation of Google's " "policies. But it seems that Google wasn't aware of it, and, once informed, " "was in no hurry to take action. This proves that the policies of a " "development platform are ineffective at preventing nonfree software " "developers from including malware in their programs." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Facebook offered a convenient proprietary library for building mobile apps, " "which also <a href=\"https://boingboing.net/2019/02/23/surveillance-" "zucksterism.html\"> sent personal data to Facebook</a>. Lots of companies " "built apps that way and released them, apparently not realizing that all the " "personal data they collected would go to Facebook as well." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "It shows that no one can trust a nonfree program, not even the developers of " "other nonfree programs." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Vizio TVs <a href=\"https://www.theverge.com/2019/1/7/18172397/airplay-2-" "homekit-vizio-tv-bill-baxter-interview-vergecast-ces-2019\"> collect “" "whatever the TV sees,”</a> in the own words of the company's CTO, and " "this data is sold to third parties. This is in return for “better " "service” (meaning more intrusive ads?) and slightly lower retail " "prices." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "What is supposed to make this spying acceptable, according to him, is that " "it is opt-in in newer models. But since the Vizio software is nonfree, we " "don't know what is actually happening behind the scenes, and there is no " "guarantee that all future updates will leave the settings unchanged." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "If you already own a Vizio “smart” TV (or any “" "smart” TV, for that matter), the easiest way to make sure it isn't " "spying on you is to disconnect it from the Internet, and use a terrestrial " "antenna instead. Unfortunately, this is not always possible. Another option, " "if you are technically oriented, is to get your own router (which can be an " "old computer running completely free software), and set up a firewall to " "block connections to Vizio's servers. Or, as a last resort, you can replace " "your TV with another model." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Twenty nine “beauty camera” apps that used to be on Google Play " "had one or more malicious functionalities, such as stealing users' photos " "instead of “beautifying” them, <a href=\"https://www." "androidpolice.com/2019/02/03/google-bans-29-beauty-camera-apps-from-the-play-" "store-that-steal-your-photos/\"> pushing unwanted and often malicious ads on " "users, and redirecting them to phishing sites</a> that stole their " "credentials. Furthermore, the user interface of most of them was designed to " "make uninstallation difficult." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Users should of course uninstall these dangerous apps if they haven't yet, " "but they should also stay away from nonfree apps in general. <em>All</em> " "nonfree apps carry a potential risk because there is no easy way of knowing " "what they really do." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many nonfree apps have a surveillance feature for <a href=\"https://" "techcrunch.com/2019/02/06/iphone-session-replay-screenshots/\"> recording " "all the users' actions</a> in interacting with the app." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "An investigation of the 150 most popular gratis VPN apps in Google Play " "found that <a href=\"https://www.top10vpn.com/research/free-vpn-" "investigations/risk-index/\"> 25% fail to protect their users' privacy</a> " "due to DNS leaks. In addition, 85% feature intrusive permissions or " "functions in their source code—often used for invasive " "advertising—that could potentially also be used to spy on users. Other " "technical flaws were found as well." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Moreover, a previous investigation had found that <a href=\"https://www." "top10vpn.com/research/free-vpn-investigations/ownership/\">half of the top " "10 gratis VPN apps have lousy privacy policies</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<small>(It is unfortunate that these articles talk about “free apps." "” These apps are gratis, but they are <em>not</em> <a href=\"/" "philosophy/free-sw.html\">free software</a>.)</small>" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Google invites people to <a href=\"https://www.commondreams.org/" "views/2019/02/04/google-screenwise-unwise-trade-all-your-privacy-cash?cd-" "origin=rss\"> let Google monitor their phone use, and all internet use in " "their homes, for an extravagant payment of $20</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This is not a malicious functionality of a program with some other purpose; " "this is the software's sole purpose, and Google says so. But Google says it " "in a way that encourages most people to ignore the details. That, we " "believe, makes it fitting to list here." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Around 40% of gratis Android apps <a href=\"https://privacyinternational.org/" "report/2647/how-apps-android-share-data-facebook-report\"> report on the " "user's actions to Facebook</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Often they send the machine's “advertising ID,” so that Facebook " "can correlate the data it obtains from the same machine via various apps. " "Some of them send Facebook detailed information about the user's activities " "in the app; others only say that the user is using that app, but that alone " "is often quite informative." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This spying occurs regardless of whether the user has a Facebook account." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Foundry's graphics software <a href=\"https://torrentfreak.com/software-" "company-fines-pirates-after-monitoring-their-computers-181102/\"> reports " "information to identify who is running it</a>. The result is often a legal " "threat demanding a lot of money." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The fact that this is used for repression of forbidden sharing makes it even " "more vicious." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "This illustrates that making unauthorized copies of nonfree software is not " "a cure for the injustice of nonfree software. It may avoid paying for the " "nasty thing, but cannot make it less nasty." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Until 2015, any tweet that listed a geographical tag <a href=\"http://web-" "old.archive.org/web/20190115233002/https://www.wired.com/story/twitter-" "location-data-gps-privacy/\"> sent the precise GPS location to Twitter's " "server</a>. It still contains these GPS locations." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Amazon Ring “security” devices <a href=\"https://www.engadget." "com/2019-01-10-ring-gave-employees-access-customer-video-feeds.html\"> send " "the video they capture to Amazon servers</a>, which save it long-term." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "In many cases, the video shows everyone that comes near, or merely passes " "by, the user's front door." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The article focuses on how Ring used to let individual employees look at the " "videos freely. It appears Amazon has tried to prevent that secondary abuse, " "but the primary abuse—that Amazon gets the video—Amazon expects " "society to surrender to." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The Weather Channel app <a href=\"https://www.theguardian.com/" "technology/2019/jan/04/weather-channel-app-lawsuit-location-data-selling\"> " "stored users' locations to the company's server</a>. The company is being " "sued, demanding that it notify the users of what it will do with the data." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "We think that lawsuit is about a side issue. What the company does with the " "data is a secondary issue. The principal wrong here is that the company gets " "that data at all." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "<a href=\"https://www.vice.com/en/article/gy77wy/stop-using-third-party-" "weather-apps\"> Other weather apps</a>, including Accuweather and " "WeatherBug, are tracking people's locations." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Facebook's app got “consent” to <a href=\"https://www." "theguardian.com/technology/2018/dec/06/facebook-emails-reveal-discussions-" "over-call-log-consent\"> upload call logs automatically from Android phones</" "a> while disguising what the “consent” was for." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Many web sites use JavaScript code <a href=\"https://gizmodo.com/before-you-" "hit-submit-this-company-has-already-logge-1795906081\"> to snoop on " "information that users have typed into a form but not sent</a>, in order to " "learn their identity. Some are <a href=\"https://www.manatt.com/insights/" "newsletters/advertising-law/sites-illegally-tracked-consumers-new-suits-" "allege\"> getting sued</a> for this." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The chat facilities of some customer services use the same sort of malware " "to <a href=\"https://gizmodo.com/be-warned-customer-service-agents-can-see-" "what-youre-t-1830688119\"> read what the user is typing before it is posted</" "a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Nearly all “home security cameras” <a href=\"https://www." "consumerreports.org/privacy/d-link-camera-poses-data-security-risk--consumer-" "reports-finds-a8814384448/\"> give the manufacturer an unencrypted copy of " "everything they see</a>. “Home insecurity camera” would be a " "better name!" msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "When Consumer Reports tested them, it suggested that these manufacturers " "promise not to look at what's in the videos. That's not security for your " "home. Security means making sure they don't get to see through your camera." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Some Android apps <a href=\"https://web.archive.org/web/20210418052600/" "https://www.androidauthority.com/apps-uninstall-trackers-917539/amp/\"> " "track the phones of users that have deleted them</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Apple and Samsung deliberately <a href=\"https://www.theguardian.com/" "technology/2018/oct/24/apple-samsung-fined-for-slowing-down-phones\">degrade " "the performance of older phones to force users to buy their newer phones</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "GM <a href=\"https://boingboing.net/2018/10/23/dont-touch-that-dial.html\"> " "tracked the choices of radio programs</a> in its “connected” " "cars, minute by minute." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "GM did not get users' consent, but it could have got that easily by sneaking " "it into the contract that users sign for some digital service or other. A " "requirement for consent is effectively no protection." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "The cars can also collect lots of other data: listening to you, watching " "you, following your movements, tracking passengers' cell phones. <em>All</" "em> such data collection should be forbidden." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "But if you really want to be safe, we must make sure the car's hardware " "cannot collect any of that data, or that the software is free so we know it " "won't collect any of that data." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Printer manufacturers are very innovative—at blocking the use of " "independent replacement ink cartridges. Their “security " "upgrades” occasionally impose new forms of cartridge DRM. <a href=" "\"https://www.vice.com/en/article/pa98ab/printer-makers-are-crippling-cheap-" "ink-cartridges-via-bogus-security-updates\"> HP and Epson have done this</a>." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "Researchers have discovered how to <a href=\"https://news.rub.de/english/" "press-releases/2018-09-24-it-security-secret-messages-alexa-and-co\"> hide " "voice commands in other audio</a>, so that people cannot hear them, but " "Alexa and Siri can." msgstr "" #. type: Content of: <div><ul><li><p> msgid "" "In MacOS and iOS, the procedure for <a href=\"https://support.apple.com/" "guide/photos/export-photos-videos-and-slideshows-pht6e157c5f/mac\"> " "converting images from the Photos format</a> to a free format is so tedious " "and time-consuming that users just give up if they have a lot of them." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2018-2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Addictions - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Addictions" msgstr "" #. type: Content of: <div><div><p> msgid "" "This page deals with malicious functionalities that are added to some " "programs for the sole purpose of luring users into more and more frequent " "and intensive use of the program, with the risk of getting addicted." msgstr "" #. type: Content of: <div><div><h3> msgid "How software is made addictive" msgstr "" #. type: Content of: <div><div><h4> msgid "Games" msgstr "" #. type: Content of: <div><div><p> msgid "" "Many games are designed to keep gamers compulsively playing—and " "spending money on the game. To achieve this result, developers use <a href=" "\"https://www.cracked.com/article_18461_5-creepy-ways-video-games-are-trying-" "to-get-you-addicted.html\"> techniques that derive from behavioral and brain " "research</a>:" msgstr "" #. type: Content of: <div><div><dl><dt> msgid "The Skinner Box" msgstr "" #. type: Content of: <div><div><dl><dd> msgid "" "An environment in which the user is trained to “push the lever“, " "i.e. do a certain action over and over again in order to get a reward. This " "is also known as “grinding.”" msgstr "" #. type: Content of: <div><div><dl><dt> msgid "Virtual food pellets" msgstr "" #. type: Content of: <div><div><dl><dd> msgid "" "Items that have nothing to do with the game itself, but are valuable to " "gamers because of the work required to obtain them (e.g., EverQuest); some " "people will end up collecting them for the sake of collecting." msgstr "" #. type: Content of: <div><div><dl><dt> msgid "Random rewards" msgstr "" #. type: Content of: <div><div><dl><dd> msgid "" "They turn the game into the equivalent of a slot machine (e.g., World of " "Warcraft, ZT Online)." msgstr "" #. type: Content of: <div><div><dl><dt> msgid "Elaborate cycles" msgstr "" #. type: Content of: <div><div><dl><dd> msgid "" "Gamers' behavior can be “shaped” by making cycles (progress from " "one level to the next) slower and slower, designing complex tasks that are " "difficult to get out of (e.g. World of Warcraft), or conversely dividing " "them up in small chunks to avoid frustration (e.g., New Super Mario Bros." "Wii)." msgstr "" #. type: Content of: <div><div><dl><dt> msgid "Decay of game assets" msgstr "" #. type: Content of: <div><div><dl><dd> msgid "" "This makes it necessary for a gamer to keep playing, without vacations, " "simply to avoid losing what they have earned so far (e.g., Farmville, Ultima " "Online, Animal Crossing)." msgstr "" #. type: Content of: <div><div><p> msgid "" "Games such as World of Warcraft, which are considered very addictive, use " "several of these techniques." msgstr "" #. type: Content of: <div><div><p> msgid "There are even more elaborate ways to get users addicted to a game." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "“Loot boxes” are a direct application of the random reward " "mechanism, and their addictiveness is enhanced by seductive animation. They " "are <a href=\"https://www.pcgamer.com/behind-the-addictive-psychology-and-" "seductive-art-of-loot-boxes/\"> akin to gambling</a>." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "<a href=\"https://wikipedia.org/wiki/Gacha_game\"><i>Gacha</i></a> systems, " "widely used by Japanese games since 2010, may be considered the ancestors of " "loot boxes. A <i>gacha</i> is the virtual equivalent of a capsule-toy " "vending machine. Its addictiveness is based on random rewards, and also on " "the basic instinct of people to collect items." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "The developers of gratis (“free-to-play”) games apply the " "techniques described above to <a href=\"https://www.psychguides.com/interact/" "the-psychology-of-freemium/\"> turn their products into slot machines</a>. " "This is clearly described in an infographic. The revenue generated by these " "games is directly related to the number of strongly addicted gamers (called " "“<a href=\"https://www.gamedeveloper.com/business/chasing-the-whale-" "examining-the-ethics-of-free-to-play-games\">whales</a>”), and to the " "amount of money they are willing to spend. Thus developers carefully study " "the behavior of millions of users to increase the addictiveness of their " "games, and apply <a href=\"https://www.uxreviewer.com/home/2019/3/7/5-" "incredibly-powerful-monetisation-patterns-using-behavioural-economics-in-ux-" "design\"> classical marketing techniques</a> such as the decoy effect to " "squeeze as much money as possible from gamers." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "<a href=\"https://keepthescore.com/blog/posts/leaderboards-in-gaming/\"> " "Leader boards</a> can increase addictiveness, because some people are so " "eager to see their name at the top of the board that they will spend an " "unreasonable amount of time playing." msgstr "" #. type: Content of: <div><div><p> msgid "" "<small>(Unfortunately, some of the articles referenced above use “" "free” to mean “zero price.” We recommend saying “" "gratis” instead.)</small>" msgstr "" #. type: Content of: <div><div><p> msgid "" "However, the addictiveness of a game is only one of the determinants of " "addiction. Equally important are the psychological make-up and life " "circumstances of the gamer. Gaming addiction, like other addictions, is a " "form of mental escape from an unrewarding life. The sad truth is that, in " "the long run, it leads to an even worse life." msgstr "" #. type: Content of: <div><div><p> msgid "" "<small><em>Note:</em> We are not gamers. If you think we have " "misunderstood some point, or have suggestions for making this text clearer " "or more correct, please send them to <<a href=\"mailto:webmasters@gnu.org" "\">webmasters@gnu.org</a>>.</small>" msgstr "" #. type: Content of: <div><div><h4> msgid "Online gambling" msgstr "" #. type: Content of: <div><div><p> msgid "" "Online gambling services (and their nonfree client programs) are <a href=" "\"https://www.theguardian.com/society/2019/feb/22/gambling-apps-more-" "dangerous-than-fobts-study-finds\"> designed to be addictive</a>, much like " "on-line games. They achieve this with various different malfunctionalities, " "often in combination." msgstr "" #. type: Content of: <div><div><p> msgid "" "Many of these malfunctionalities are implemented by the server and the " "client program together. In some cases, there is no honest way that the " "client program could counteract the nastiness—for instance, when the " "server manipulates amounts won in order to get the user addicted, the only " "way the client program could block that is to pretend the win did not " "happen. But users would not want that modification." msgstr "" #. type: Content of: <div><div><p> msgid "" "However, modification of the client program could cover up some addictive " "behaviors without losing the user anything." msgstr "" #. type: Content of: <div><div><h4> msgid "Social networks" msgstr "" #. type: Content of: <div><div><p> msgid "" "The major social networks are continuously optimizing their design to <a " "href=\"https://medium.com/thrive-global/how-technology-hijacks-peoples-minds-" "from-a-magician-and-google-s-design-ethicist-56d62ef5edf3\"> grab users' " "attention</a> by taking advantage of the psychological vulnerabilities " "described above, eventually leading some to addiction. For these people, a " "phone becomes the equivalent of a slot machine. Many of the addictive " "features (menu, “likes,” photo tagging, autoplay, etc.) are " "built into the client software, and can't be removed because the software is " "proprietary." msgstr "" #. type: Content of: <div><div><p> msgid "" "Thus, some social networking apps <a href=\"https://www.jeffbullas.com/" "facebook-creates-addiction/\">try to merge into your daily routine</a> by " "exploiting social pressure and your natural desire for socialization, " "converting habitual gestures into thorough addiction. As already noted for " "games, addictiveness is essentially based on random rewards. In the present " "case, the rewards are messages from friends and followers, “likes," "” news, interesting videos, etc. The software is designed to trigger " "users' desire for these rewards, and keep this desire alive as long as " "possible." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "By default, notifications are sent every time a new item comes in, instead " "of, say, once a day. They are associated with sounds or vibrations which " "make them even more compelling. (Remember Pavlov's experiments with rats.) " "These triggers are often opt-out, and many users don't try to turn them off. " "They are most effective when the app is installed on a mobile device which " "is always on and never leaves the user. As a side effect, they may " "contribute to the <a href=\"https://www.psychologytoday.com/us/blog/reading-" "between-the-headlines/201307/smartphone-addiction\"> addictiveness of “" "smart” phones</a>." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "Users are served selected material that is likely to interest them, based on " "<a href=\"https://theconversation.com/facebook-is-killing-democracy-with-its-" "personality-profiling-data-93611\"> profiling</a>. (This paves the way to <a " "href=\"/proprietary/proprietary-manipulation.html\">manipulation</a>, by the " "way.)" msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "The app interface is designed to make users stay on the site as long as " "possible, using <a href=\"https://uxplanet.org/ux-infinite-scrolling-vs-" "pagination-1030d29376f1\"> infinite scrolling</a> for example." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "The company that owns the social network tries to cover users' needs as " "extensively as possible, by <a href=\"https://en.wikipedia.org/wiki/" "List_of_mergers_and_acquisitions_by_Facebook\"> acquiring other companies</" "a> if needed. Once users have concentrated most of their online activities " "and a lot of their personal data on a single platform (or a set of platforms " "that belong to the same group), they find it <a href=\"https://www." "theguardian.com/lifeandstyle/2018/jan/01/antisocial-media-why-decided-cut-" "back-facebook-instagram\"> almost impossible to leave</a>. And even if they " "wanted to, they would have a hard time digging out the relevant options, and " "the app would aggressively nag them to stay." msgstr "" #. type: Content of: <div><div><p> msgid "" "A good way to minimize the risk of addiction, short of avoiding social media " "altogether, is to turn off notifications and leave as little as possible of " "your own data on the platform." msgstr "" #. type: Content of: <div><div><h4> msgid "Nonfree smartphone software" msgstr "" #. type: Content of: <div><div><p> msgid "" "Parents are very concerned about the <a href=\"https://www.freerangekids.com/" "worried-your-child-is-already-a-screen-addict-theres-hope/\"> intentional " "addictiveness of the software that their children use on snoop-phones</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "The “<a href=\"https://www.nysun.com/article/how-manipulative-tech-a-" "mashup-of-psychology-and-technology-keeps-children-glued-to-screens" "\">manipulative tech</a>,” which underpins addictive features that the " "article naively attributes to “screens,” is in fact implemented " "by software: partly in the operating system and partly in some apps. These " "features can be designed to do nasty things because they are <a href=" "\"https://fsf.org/tedx\">nonfree software</a>: their code is controlled by " "some “owner,” in this case a powerful company, rather than by " "the users. If they were free programs, the user community could reprogram " "them so as to be less addictive." msgstr "" #. type: Content of: <div><div><p> msgid "" "By freeing ourselves from these companies' power to require use of software " "they control for accessing their “services,” we will also reduce " "the harm that online dis-services can do." msgstr "" #. type: Content of: <div><div><h3> msgid "Examples of addictive software" msgstr "" #. type: Content of: <div><p> msgid "" "Copyright © 2019, 2020, 2021, 2022, 2023, 2024 Free Software " "Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Tyrants - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Tyrants" msgstr "" #. type: Content of: <div><div><p> msgid "" "A <em>tyrant</em> is a malicious device that refuses to allow users to " "install a different operating system or a modified operating system. These " "devices have measures to block execution of anything other than the “" "approved” system versions. We also refer to this practice as " "<em>tivoization</em>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple devices lock users in <a href=\"https://gizmodo.com/homepod-is-the-" "ultimate-apple-product-in-a-bad-way-1822883347\"> solely to Apple services</" "a> by being designed to be incompatible with all other options, ethical or " "unethical." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple arbitrarily <a href=\"https://9to5mac.com/2014/12/01/ios-8-1-signing-" "window-closed/\">blocks users from installing old versions of iOS</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://soylentnews.org/article.pl?sid=14/03/15/1912255\"> Intel " "processors will have tyrant software built in</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Motorola, then owned by Google, made <a href=\"https://web.archive.org/" "web/20250422121516/http://blog.azimuthsecurity.com/2013/04/unlocking-" "motorola-bootloader.html\"> Android phones that are tyrants</a> (though " "someone found a way to crack the restriction)." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Samsung “Smart” TVs have <a href=\"https://wiki.samygo.tv/index." "php?title=SamyGO_for_DUMMIES#What_are_Restricted_Firmwares.3F\"> turned " "Linux into the base for a tyrant system</a> so as to impose DRM. What " "enables Samsung to do this is that Linux is released under GNU GPL version " "2, <a href=\"/licenses/rms-why-gplv3.html\">not version 3</a>, together with " "a weak interpretation of GPL version 2." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some LG TVs <a href=\"https://web.archive.org/web/20190917164647/http://" "openlgtv.org.ru/wiki/index.php/Achievements\"> are tyrants</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Apple iThings are tyrant devices. There is a port of Android to the " "iThings, but installing it requires <a href=\"https://web.archive.org/" "web/20150721065208/http://www.idroidproject.org/wiki/Status\"> finding a bug " "or “exploit”</a> to make it possible to install a different " "system." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2014-2023, 2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Google's Software Is Malware - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Google's Software is Malware" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Types of Google malware" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#censorship\">Censorship</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#manipulation\">Manipulation</a>" msgstr "" #. type: Content of: <div><div><h3> msgid "Censorship" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google now allows Android apps to detect whether a device has been rooted, " "<a href=\"https://www.androidpolice.com/2017/05/13/netflix-confirms-blocking-" "rootedunlocked-devices-app-still-working-now/\">and refuse to install if so</" "a>. The Netflix app uses this ability to enforce DRM by refusing to install " "on rooted Android devices." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Update: Google <i>intentionally</i> changed Android so that apps <a href=" "\"https://torrentfreak.com/netflix-use-of-google-drm-means-rooted-android-" "devices-are-banned-170515/\">can detect rooted devices and refuse to run on " "them</a>. The Netflix app is proprietary malware, and one shouldn't use it. " "However, that does not make what Google has done any less wrong." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Chrome <a href=\"https://boingboing.net/2017/01/30/google-quietly-makes-" "optiona.html\">implements DRM</a>. So does Chromium, through nonfree " "software that is effectively part of it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://issues.chromium.org/issues/40504000\">More information</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Android <a href=\"https://developer.android.com/reference/android/drm/" "package-summary.html\"> contains facilities specifically to support DRM</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20180816030205/http://www.spiegel.de/" "international/world/privacy-scandal-nsa-can-spy-on-smart-phone-data-a-920971." "html\"> The NSA can tap data in smart phones, including iPhones, Android, " "and BlackBerry</a>. While there is not much detail here, it seems that this " "does not operate via the universal back door that we know nearly all " "portable phones have. It may involve exploiting various bugs. There are <a " "href=\"https://www.osnews.com/story/27416/the-second-operating-system-hiding-" "in-every-mobile-phone/\"> lots of bugs in the phones' radio software</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "This section gives examples of Google software harassing or annoying the " "user, or causing trouble for the user. These actions are like sabotage but " "the word “sabotage” is too strong for them." msgstr "" #. type: Content of: <div><div><h3> msgid "Manipulation" msgstr "" #. type: Content of: <div><div><p> msgid "" "The wrongs in this section are not precisely malware, since they do not " "involve making the program that runs in a way that hurts the user. But they " "are a lot like malware, since they are technical Google actions that harm " "the users of specific Google software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some Google apps on Android <a href=\"https://www.theguardian.com/" "technology/2018/aug/13/google-location-tracking-android-iphone-mobile\"> " "record the user's location even when users disable “location " "tracking”</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "There are other ways to turn off the other kinds of location tracking, but " "most users will be tricked by the misleading control." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Android tracks location for Google <a href=\"https://www.techdirt." "com/2017/11/21/investigation-finds-google-collected-location-data-even-with-" "location-services-turned-off/\"> even when “location services” " "are turned off, even when the phone has no SIM card</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google's new voice messaging app <a href=\"https://www.theverge." "com/2016/9/21/12994362/allo-privacy-message-logs-google\">logs all " "conversations</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Play (a component of Android) <a href=\"https://www.extremetech.com/" "mobile/235594-yes-google-play-is-tracking-you-and-thats-just-the-tip-of-a-" "very-large-iceberg\"> tracks the users' movements without their permission</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Even if you disable Google Maps and location tracking, you must disable " "Google Play itself to completely stop the tracking. This is yet another " "example of nonfree software pretending to obey the user, when it's actually " "doing something else. Such a thing would be almost unthinkable with free " "software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Chrome makes it easy for an extension to do <a href=\"https://labs." "detectify.com/2015/07/28/how-i-disabled-your-chrome-security-extensions/" "\">total snooping on the user's browsing</a>, and many of them do so." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Chrome includes a module that <a href=\"https://www." "privateinternetaccess.com/blog/google-chrome-listening-in-to-your-room-shows-" "the-importance-of-privacy-defense-in-depth/\"> activates microphones and " "transmits audio to its servers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Nest thermometers send <a href=\"https://bgr.com/general/google-nest-" "jailbreak-hack/\">a lot of data about the user</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Chrome <a href=\"https://web.archive.org/web/20151018132125/http://" "www.brad-x.com/2013/08/04/google-chrome-is-spyware/\"> spies on browser " "history, affiliations</a>, and other installed software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Spyware in Android phones (and Windows? laptops): The Wall Street Journal " "(in an article blocked from us by a paywall) reports that <a href=\"https://" "www.theverge.com/2013/8/1/4580718/fbi-can-remotely-activate-android-and-" "laptop-microphones-reports-wsj\"> the FBI can remotely activate the GPS and " "microphone in Android phones and laptops</a> (presumably Windows laptops). " "Here is <a href=\"https://cryptome.org/2013/08/fbi-hackers.htm\">more info</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Spyware is present in some Android devices when they are sold. Some " "Motorola phones, made when this company was owned by Google, use a modified " "version of Android that <a href=\"http://www.beneaththewaves.net/Projects/" "Motorola_Is_Listening.html\"> sends personal data to Motorola</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A Motorola phone <a href=\"https://web.archive.org/web/20170629175629/http://" "www.itproportal.com/2013/07/25/motorolas-new-x8-arm-chip-underpinning-the-" "always-on-future-of-android/\"> listens for voice all the time</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Play intentionally sends app developers <a href=\"https://gadgets360." "com/apps/news/google-play-store-policy-raises-privacy-concerns-331116\"> the " "personal details of users that install the app</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Merely asking the “consent” of users is not enough to legitimize " "actions like this. At this point, most users have stopped reading the " "“Terms and Conditions” that spell out what they are “" "consenting” to. Google should clearly and honestly identify the " "information it collects on users, instead of hiding it in an obscurely " "worded EULA." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "However, to truly protect people's privacy, we must prevent Google and other " "companies from getting this personal information in the first place!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many web sites report all their visitors to Google by using the Google " "Analytics service, which <a href=\"https://www.pcworld.com/article/460787/" "google_analytics_breaks_norwegian_privacy_laws_local_agency_said.html\"> " "tells Google the IP address and the page that was visited</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google Chrome contains a key logger that <a href=\"https://web.archive.org/" "web/20190126075111/http://www.favbrowser.com/google-chrome-spyware-confirmed/" "\"> sends Google every URL typed in</a>, one key at a time." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2017-2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Obsolescence - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Obsolescence" msgstr "" #. type: Content of: <div><div><p> msgid "" "Programmed obsolescence is one of the malicious functionalities that may be " "designed into proprietary software." msgstr "" #. type: Content of: <div><div><p> msgid "" "Computer technology inevitably has an environmental impact, but proprietary " "software makes it worse because it is often designed to lead or pressure " "users to discard devices sooner because support for them has ceased, or to " "discard defective hardware which could have been made repairable." msgstr "" #. type: Content of: <div><div><p> msgid "" "Here are examples of proprietary programs that make hardware devices " "prematurely obsolete." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple will stop <a href=\"https://www.theguardian.com/technology/2017/jun/06/" "iphone-ipad-apps-games-apple-5-5c-obsolete\">fixing bugs for older model " "iThings</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Meanwhile, Apple stops people from fixing problems themselves; that's the " "nature of proprietary software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The <a href=\"https://michaelweinberg.org/post/137045828005/free-the-cube\"> " "“Cube” 3D printer was designed with DRM</a>: it won't accept " "third-party printing materials. It is the Keurig of printers. Now it is " "being discontinued, which means that eventually authorized materials won't " "be available and the printers may become unusable." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "With a <a href=\"https://www.fsf.org/resources/hw/endorsement/aleph-objects" "\"> printer that gets the Respects Your Freedom</a>, this problem would not " "even be a remote possibility." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "How pitiful that the author of that article says that there was “" "nothing wrong” with designing the device to restrict users in the " "first place. This is like putting a “cheat me and mistreat me” " "sign on your chest. We should know better: we should condemn all companies " "that take advantage of people like him. Indeed, it is the acceptance of " "their unjust practice that teaches people to be doormats." msgstr "" #. type: Content of: <title> msgid "Proprietary Fraud - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Fraud" msgstr "" #. type: Content of: <div><div><p> msgid "" "Here are some examples of proprietary software that defrauds users—" "taking their money by trickery." msgstr "" #. type: Content of: <div><p> msgid "" "Copyright © 2019, 2020, 2021, 2022, 2023 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Malware in Webpages - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Malware in Webpages" msgstr "" #. type: Content of: <div><div><p> msgid "" "This page lists web sites containing proprietary JavaScript programs that " "spy on users or mislead them. They make use of what we call the <a href=\"/" "philosophy/javascript-trap.html\">JavaScript Trap</a>. Of course, many sites " "collect information that the user sends, via forms or otherwise, but here " "we're not talking about that." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "British Airways used <a href=\"https://www.theverge.com/2018/7/19/17591732/" "british-airways-gdpr-compliance-twitter-personal-data-security\">nonfree " "JavaScript on its web site to give other companies personal data on its " "customers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Verify browser extension by Storyful <a href=\"https://www.theguardian." "com/world/2018/may/17/revealed-how-storyful-uses-tool-monitor-what-" "journalists-watch\">spies on the reporters that use it</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some JavaScript malware <a href=\"https://www.theverge." "com/2017/12/30/16829804/browser-password-manager-adthink-princeton-research" "\"> swipes usernames from browser-based password managers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some websites send JavaScript code to collect all the user's input, <a href=" "\"https://freedom-to-tinker.com/2017/11/15/no-boundaries-exfiltration-of-" "personal-data-by-session-replay-scripts/\">which can then be used to " "reproduce the whole session</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "If you use LibreJS, it will block that malicious JavaScript code." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "When a page uses Disqus for comments, the proprietary Disqus software <a " "href=\"https://blog.dantup.com/2017/01/visiting-a-site-that-uses-disqus-" "comments-when-not-logged-in-sends-the-url-to-facebook/\">loads a Facebook " "software package into the browser of every anonymous visitor to the page, " "and makes the page's URL available to Facebook</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Online sales, with tracking and surveillance of customers, <a href=\"https://" "www.theguardian.com/commentisfree/2016/dec/06/cookie-monsters-why-your-" "browsing-history-could-mean-rip-off-prices\">enables businesses to show " "different people different prices</a>. Most of the tracking is done by " "recording interactions with servers, but proprietary software contributes." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A <a href=\"https://research.csiro.au/isp/wp-content/uploads/" "sites/106/2016/08/paper-1.pdf\"> research paper</a> that investigated the " "privacy and security of 283 Android VPN apps concluded that “in spite " "of the promises for privacy, security, and anonymity given by the majority " "of VPN apps—millions of users may be unawarely subject to poor " "security guarantees and abusive practices inflicted by VPN apps.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Here are two examples, taken from the research paper, of proprietary VPN " "apps that use JavaScript to track users and infringe their privacy:" msgstr "" #. type: Content of: <div><div><ul><li><dl><dt> msgid "VPN Services HotspotShield" msgstr "" #. type: Content of: <div><div><ul><li><dl><dd> msgid "" "Injects JavaScript code into the HTML pages returned to the users. The " "stated purpose of the JS injection is to display ads. Uses roughly five " "tracking libraries. Also, it redirects the user's traffic through valueclick." "com (an advertising website)." msgstr "" #. type: Content of: <div><div><ul><li><dl><dt> msgid "WiFi Protector VPN" msgstr "" #. type: Content of: <div><div><ul><li><dl><dd> msgid "" "Injects JavaScript code into HTML pages, and also uses roughly five tracking " "libraries. Developers of this app have confirmed that the non-premium " "version of the app does JavaScript injection for tracking the user and " "displaying ads." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "E-books can contain JavaScript code, and <a href=\"https://www.theguardian." "com/books/2016/mar/08/men-make-up-their-minds-about-books-faster-than-women-" "study-finds\"> sometimes this code snoops on readers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Flash and JavaScript are used for <a href=\"https://arstechnica.com/" "information-technology/2013/10/top-sites-and-maybe-the-nsa-track-users-with-" "device-fingerprinting/\"> “fingerprinting” devices</a> to " "identify users." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many web sites rat their visitors to advertising networks that track users. " "Of the top 1000 web sites, <a href=\"https://www.law.berkeley.edu/research/" "bclt/research/privacy-at-bclt/web-privacy-census/\">84% (as of 5/17/2012) " "fed their visitors third-party cookies, allowing other sites to track them</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many web sites try to collect users' address books (the user's list of other " "people's phone numbers or email addresses). This violates the privacy of " "those other people." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Pages that contain “Like” buttons <a href=\"https://www.smh.com." "au/technology/facebooks-privacy-lie-aussie-exposes-tracking-as-new-patent-" "uncovered-20111004-1l61i.html\"> enable Facebook to track visitors to those " "pages</a>—even users that don't have Facebook accounts." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Flash Player's <a href=\"https://web.archive.org/web/20200808151607/http://" "www.imasuper.com/2008/10/09/flash-cookies-the-silent-privacy-killer/\"> " "cookie feature helps web sites track visitors</a>." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2017-2023, 2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Malware In Cars - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Malware In Cars" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "AI-powered driving apps can <a href=\"https://www.vice.com/en/article/43nz9p/" "ai-powered-driving-apps-can-track-your-every-move\"> track your every move</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Bad security in some cars makes it possible to <a href=\"https://cve.mitre." "org/cgi-bin/cvename.cgi?name=CVE-2017-14937\"> remotely activate the " "airbags</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The mobile apps for communicating <a href=\"https://www.bleepingcomputer.com/" "news/security/millions-of-smart-cars-vulnerable-due-to-insecure-android-apps/" "\">with a smart but foolish car have very bad security</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is in addition to the fact that the car contains a cellular modem that " "tells big brother all the time where it is. If you own such a car, it would " "be wise to disconnect the modem so as to turn off the tracking." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://jalopnik.com/america-figured-out-a-new-way-audi-cheated-on-" "emissions-1788630969\"> Audi's proprietary software used a simple method to " "cheat on emissions tests</a>: to activate a special low-emission " "gearshifting mode until the first time the car made a turn." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Due to weak security, <a href=\"https://jalopnik.com/almost-every-volkswagen-" "built-since-1995-is-vulnerable-1785159844\">it is easy to open the doors of " "100 million cars built by Volkswagen</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Computerized cars with nonfree software are <a href=\"http://www." "thelowdownblog.com/2016/07/your-cars-been-studying-you-closely-and.html\"> " "snooping devices</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Nissan Leaf has a built-in cell phone modem which allows effectively " "anyone to <a href=\"https://www.troyhunt.com/controlling-vehicle-features-of-" "nissan/\"> access its computers remotely and make changes in various " "settings</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "That's easy to do because the system has no authentication when accessed " "through the modem. However, even if it asked for authentication, you " "couldn't be confident that Nissan has no access. The software in the car is " "proprietary, <a href=\"/philosophy/free-software-even-more-important.html" "\">which means it demands blind faith from its users</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Even if no one connects to the car remotely, the cell phone modem enables " "the phone company to track the car's movements all the time; it is possible " "to physically remove the cell phone modem, though." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Security researchers discovered a <a href=\"https://www.theguardian.com/" "technology/2015/aug/12/hack-car-brakes-sms-text\"> vulnerability in " "diagnostic dongles used for vehicle tracking and insurance</a> that let them " "take remote control of a car or lorry using an SMS." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Crackers were able to <a href=\"https://arstechnica.com/information-" "technology/2015/07/fiat-chrysler-connected-car-bug-lets-hackers-take-over-" "jeep-remotely/\"> take remote control of the Jeep</a> “connected " "car”. They could track the car, start or stop the engine, and activate " "or deactivate the brakes, and more." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "We expect that Chrysler and the NSA can do this too." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If you own a car that contains a phone modem, it would be a good idea to " "deactivate this." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.eff.org/deeplinks/2013/11/drm-cars-will-drive-" "consumers-crazy\"> DRM in cars will drive consumers crazy</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tesla cars allow the company to extract data remotely and determine the " "car's location at any time. (See Section 2, paragraphs b and c of the <a " "href=\"https://www.tesla.com/sites/default/files/pdfs/en_US/" "tmi_privacy_statement_external_6-14-2013_v2.pdf\"> privacy statement</a>.) " "The company says it doesn't store this information, but if the state orders " "it to get the data and hand it over, the state can store it." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Proprietary software in cars <a href=\"https://www.usatoday.com/story/money/" "cars/2013/03/24/car-spying-edr-data-privacy/1991751/\"> records information " "about drivers' movements</a>, which is made available to car manufacturers, " "insurance companies, and others." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The case of toll-collection systems, mentioned in this article, is not " "really a matter of proprietary surveillance. These systems are an " "intolerable invasion of privacy, and should be replaced with anonymous " "payment systems, but the invasion isn't done by malware. The other cases " "mentioned are done by proprietary malware in the car." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It is possible to <a href=\"https://www.pcworld.com/article/495592/" "with_hacking_music_can_take_control_of_your_car.html\"> take control of some " "car computers through malware in music files</a>. Also <a href=\"https://" "www.nytimes.com/2011/03/10/business/10hack.html\"> by radio</a>. More " "information in <a href=\"https://web.archive.org/web/20240308015157/http://" "www.autosec.org/faq.html\"> Automotive Security And Privacy Center</a>." msgstr "" #. type: Content of: <title> msgid "Proprietary Incompatibility - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Incompatibility" msgstr "" #. type: Content of: <div><div><p> msgid "" "One of these malicious functionalities is the deliberate incompatibility of " "a program with third party software that operates on the same data types." msgstr "" #. type: Content of: <div><div><p> msgid "" "A fairly common sort of incompatibility is the use of secret formats or " "protocols. This directly blocks or hinders users from switching to any other " "program—and, in particular, from switching to free software which can " "liberate the device the software runs on." msgstr "" #. type: Content of: <div><div><p> msgid "" "Apart from being deliberately anticompetitive, secret formats put users' " "digital data at risk. For instance, retrieval of old data will become very " "difficult if support for the proprietary software that can read it is " "discontinued." msgstr "" #. type: Content of: <div><div><p> msgid "" "Another sort of incompatibility occurs when a system makes some important " "operation which would be necessary for migrating data to any other system so " "cumbersome or so slow that it isn't doable for more than a small amount of " "data." msgstr "" #. type: Content of: <div><div><p> msgid "" "More generally, the major tech companies tend to impose <a href=\"https://" "www.eff.org/deeplinks/2019/07/interoperability-fix-internet-not-tech-" "companies\"> artificial restrictions</a> on the interoperability of their " "products to monopolize the market, and this is often achieved through " "proprietary malware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "iWork (office software that runs on MacOS, iOS and iCloud) uses secret " "formats and <a href=\"https://en.wikipedia.org/wiki/IWork\">provides no " "means of converting them to or from Open Document Formats</a>. iWork formats " "have changed several times since they were first introduced. This may have " "had the effect of thwarting <a href=\"https://gothub.projectsegfau.lt/" "obriensp/iWorkFileFormat/\">reverse engineering efforts</a>, thus preventing " "free software from fully supporting them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "iWork formats are considered <a href=\"https://wiki.harvard.edu/confluence/" "download/attachments/204385883/Format%20profile%20-%20Apple%20iWork%20Pages" "%20v04.docx?version=1&modificationDate=1459873751000&api=v2\"> unfit " "for document preservation</a>." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2018-2021, 2023, 2024 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "" "Malware in Educational Technology - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Malware in Educational Technology" msgstr "" #. type: Content of: <div><div><p> msgid "" "Tech corporations have invaded the education system introducing their " "proprietary products filled with malware. Education is a field that allows " "these companies to easily spread their unjust software in all directions, " "infecting deeply every area of society." msgstr "" #. type: Content of: <div><div><p> msgid "" "<a href=\"/education/edu-team.html\">Join us</a> in the fight against the " "use of nonfree software in schools." msgstr "" #. type: Content of: <div><div><p> msgid "" "This page lists malicious functionalities found in software used in " "educational environments." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2021, 2022, 2023, 2024 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "" "Apple's Operating Systems are Malware - GNU Project - Free Software " "Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Apple's Operating Systems Are Malware" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Types of Apple malware" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#incompatibility\">Incompatibility</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#pressuring\">Pressuring</a>" msgstr "" #. type: Content of: <div><div><p> msgid "" "Apple mainly uses iOS, which is a typical jail, to impose censorship through " "the Apple Store. Please refer to the <a href=\"#jails\">Apple Jails</a> " "section for more information." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple is putting DRM on iPhone batteries, and the system proprietary " "software <a href=\"#M201908150\">turns off certain features when batteries " "are replaced other than by Apple.</a>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "DRM makes the iPhone 7 nearly <a href=\"#iphone7-sabotage\">unrepairable</a> " "by anyone else but Apple." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.vice.com/en/article/bmvxp4/switzerland-wants-a-single-" "universal-phone-charger-by-2017\"> Apple uses DRM software to prevent people " "from charging an iThing with a generic USB cable</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.eff.org/deeplinks/2008/11/apple-downgrades-macbook-" "video-drm\"> DRM (digital restrictions mechanisms) in MacOS</a>. This " "article focuses on the fact that a new model of Macbook introduced a " "requirement for monitors to have malicious hardware, but DRM software in " "MacOS is involved in activating the hardware. The software for accessing " "iTunes is also responsible." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://arstechnica.com/gadgets/2007/08/aacs-tentacles/\"> DRM " "that caters to Blu-ray disks</a>. (The article focused on Windows and said " "that MacOS would do the same thing subsequently.)" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "iTunes videos have DRM, which allows Apple to <a href=\"https://en.wikipedia." "org/wiki/FairPlay\">dictate where its customers can watch the videos they " "purchased</a>." msgstr "" #. type: Content of: <div><div><h3> msgid "Incompatibility" msgstr "" #. type: Content of: <div><div><p> msgid "" "In this section, we list characteristics of Apple programs that block or " "hinder users from switching to any alternative program—and, in " "particular, from switching to free software which can liberate the device " "the software runs on." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A vulnerability in Apple's Image I/O API allowed an attacker to <a href=" "\"https://www.theguardian.com/technology/2016/jul/22/stagefright-flaw-ios-" "iphone-imessage-apple\">execute malicious code from any application which " "uses this API to render a certain kind of image file</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A bug in the iThings Messages app <a href=\"https://theintercept." "com/2016/04/12/apple-bug-exposed-chat-history-with-a-single-click/\">allowed " "a malicious web site to extract all the user's messaging history</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "Various proprietary programs are designed to harass, annoy or cause trouble " "for the user. They are like sabotage, but they are not grave enough to " "qualify for the word “sabotage”. Nonetheless, they are nasty and " "wrong. This section describes examples of Apple committing interference." msgstr "" #. type: Content of: <div><div><p> msgid "" "Jails are systems that impose censorship on which application programs a " "user can install." msgstr "" #. type: Content of: <div><div><h3> msgid "Pressuring" msgstr "" #. type: Content of: <div><div><p> msgid "" "Proprietary companies can take advantage of their customers by imposing " "arbitrary limits to their use of the software. This section reports " "examples of hard sell and other unjust commercial tactics by Apple." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple Siri <a href=\"https://www.theguardian.com/technology/2015/oct/27/" "apple-music-subscribers-siri-questions\">refuses to give you information</a> " "about music charts if you're not an Apple Music subscriber." msgstr "" #. type: Content of: <div><div><p> msgid "" "These are situations in which Apple employs its power over users to directly " "intervene in ways that harm them or block their work." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple has <a href=\"https://www.theverge.com/2018/5/31/17412396/telegram-" "apple-app-store-app-updates-russia\">blocked Telegram from upgrading its app " "for a month</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This evidently has to do with Russia's command to Apple to block Telegram in " "Russia." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Telegram client is free software on other platforms, but not on iThings. " "Since <a href=\"/proprietary/proprietary-jails.html#apple\">they are jails</" "a>, they don't permit any app to be free software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "MacOS High Sierra forcibly reformats SSD boot drives, and <a href=\"https://" "www.macworld.com/article/230582/apple-file-system-apfs-faq.html\"> changes " "the file system from HFS+ to APFS</a>, which cannot be accessed from GNU/" "Linux, Windows or even older versions of MacOS." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The iPhone 7 contains DRM specifically designed to <a href=\"https://www." "vice.com/en/article/kbjm8e/iphone-7-home-button-unreplaceable-repair-" "software-lock\"> brick it if an “unauthorized” repair shop fixes " "it</a>. “Unauthorized” essentially means anyone besides Apple." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(The article uses the term “lock” to describe the DRM, " "but we prefer to use the term <a href=\"/philosophy/words-to-avoid." "html#DigitalLocks\"> digital handcuffs</a>.)</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple <a href=\"https://www.theregister.com/2016/04/14/" "uninstall_quicktime_for_windows/\"> stops users from fixing the security " "bugs in Quicktime for Windows</a>, while refusing to fix them itself." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Apple Music client program <a href=\"https://web.archive.org/" "web/20170520213355/https://blog.vellumatlanta.com/2016/05/04/apple-stole-my-" "music-no-seriously/\">scans the user's file system for music files, copies " "them to an Apple server, and deletes them</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "iOS version 9 for iThings <a href=\"https://www.theguardian.com/money/2016/" "feb/05/error-53-apple-iphone-software-update-handset-worthless-third-party-" "repair\">sabotages them irreparably if they were repaired by someone other " "than Apple</a>. Apple eventually backed off from this policy under criticism " "from the users. However, it has not acknowledged that this was wrong." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple forced millions of iThings to <a href=\"https://discussions.apple.com/" "thread/7256669?tstart=0\">download a system upgrade without asking the " "users</a>. Apple did not forcibly install the upgrade but the downloading " "alone caused lots of trouble." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple <a href=\"https://www.theguardian.com/technology/2014/dec/04/apple-" "deleted-music-ipods-rivals-steve-jobs\"> deleted from iPods the music that " "users had got from internet music stores that competed with iTunes</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20230315024447/https://www." "computerworld.com/article/2541250/update--apple-plays-hardball--upgrade--" "bricks--unlocked-iphones.html\"> An Apple firmware “upgrade” " "bricked iPhones that had been unlocked</a>. The “upgrade” also " "deactivated applications not approved by <a href=\"/proprietary/proprietary-" "jails.html\">Apple censorship</a>. All this was apparently intentional." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adware Doctor, an ad blocker for MacOS, <a href=\"https://www.vice.com/en/" "article/wjye8x/mac-anti-adware-doctor-app-steals-browsing-history\">reports " "the user's browsing history</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The DMCA and the EU Copyright Directive make it <a href=\"https://boingboing." "net/2017/11/25/la-la-la-cant-hear-you.html\"> illegal to study how iOS " "cr…apps spy on users</a>, because this would require circumventing " "the iOS DRM." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In the latest iThings system, “turning off” WiFi and Bluetooth " "the obvious way <a href=\"https://www.theguardian.com/technology/2017/sep/21/" "ios-11-apple-toggling-wifi-bluetooth-control-centre-doesnt-turn-them-off\"> " "doesn't really turn them off</a>. A more advanced way really does turn them " "off—only until 5am. That's Apple for you—“We know you " "want to be spied on”." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple proposes <a href=\"https://www.theguardian.com/technology/2017/feb/15/" "apple-removing-iphone-home-button-fingerprint-scanning-screen\">a " "fingerprint-scanning touch screen</a>—which would mean no way to use " "it without having your fingerprints taken. Users would have no way to tell " "whether the phone is snooping on them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "iPhones <a href=\"https://theintercept.com/2016/11/17/iphones-secretly-send-" "call-history-to-apple-security-firm-says/\">send lots of personal data to " "Apple's servers</a>. Big Brother can get them from there." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "iThings automatically upload to Apple's servers all the photos and videos " "they make." msgstr "" #. type: Content of: <div><div><ul><li><blockquote><p> msgid "" "iCloud Photo Library stores every photo and video you take, and keeps them " "up to date on all your devices. Any edits you make are automatically updated " "everywhere. […]" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "(From <a href=\"https://web.archive.org/web/20150921152044/https://www.apple." "com/icloud/photos/\">Apple's iCloud information</a> as accessed on 24 Sep " "2015.) The iCloud feature is <a href=\"https://support.apple.com/en-us/" "HT202033\">activated by the startup of iOS</a>. The term “cloud” " "means “please don't ask where.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "There is a way to <a href=\"https://support.apple.com/en-us/HT201104\"> " "deactivate iCloud</a>, but it's active by default so it still counts as a " "surveillance functionality." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Unknown people apparently took advantage of this to <a href=\"https://www." "theguardian.com/technology/2014/sep/01/naked-celebrity-hack-icloud-backup-" "jennifer-lawrence\">get nude photos of many celebrities</a>. They needed to " "break Apple's security to get at them, but NSA can access any of them " "through <a href=\"/philosophy/surveillance-vs-democracy.html#digitalcash" "\">PRISM</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple has made various <a href=\"https://www.theguardian.com/technology/2014/" "nov/04/apple-data-privacy-icloud\"> MacOS programs send files to Apple " "servers without asking permission</a>. This exposes the files to Big " "Brother and perhaps to other snoops." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It also demonstrates how you can't trust proprietary software, because even " "if today's version doesn't have a malicious functionality, tomorrow's " "version might add it. The developer won't remove the malfeature unless many " "users push back hard, and the users can't remove it themselves." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "MacOS automatically <a href=\"https://web.archive.org/web/20170831144456/" "https://www.washingtonpost.com/news/the-switch/wp/2014/10/30/how-one-mans-" "private-files-ended-up-on-apples-icloud-without-his-consent/\"> sends to " "Apple servers unsaved documents being edited</a>. The things you have not " "decided to save are <a href=\"https://www.schneier.com/blog/archives/2014/10/" "apple_copies_yo.html?utm_source=twitterfeed&utm_medium=twitter/\"> even " "more sensitive</a> than the things you have stored in files." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apple admits the <a href=\"https://www.intego.com/mac-security-blog/" "spotlight-suggestions-in-os-x-yosemite-and-ios-are-you-staying-private/\"> " "spying in a search facility</a>, but there's a lot <a href=\"https://gothub." "projectsegfau.lt/fix-macosx/yosemite-phone-home/\"> more snooping that Apple " "has not talked about</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Various operations in <a href=\"https://lifehacker.com/safari-and-spotlight-" "can-send-data-to-apple-heres-how-1648453540\"> the latest MacOS send reports " "to Apple</a> servers." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/technology/2014/jul/23/iphone-" "backdoors-surveillance-forensic-services\"> Several “features” " "of iOS seem to exist for no possible purpose other than surveillance</a>. " "Here is the <a href=\"http://www.zdziarski.com/blog/wp-content/" "uploads/2014/07/iOS_Backdoors_Attack_Points_Surveillance_Mechanisms_Moved.pdf" "\"> Technical presentation</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://finance.yahoo.com/blogs/the-exchange/privacy-advocates-" "worry-over-new-apple-iphone-tracking-feature-161836223.html\"> Spotlight " "search</a> sends users' search terms to Apple." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The <a class=\"not-a-duplicate\" href=\"https://finance.yahoo.com/blogs/the-" "exchange/privacy-advocates-worry-over-new-apple-iphone-tracking-" "feature-161836223.html\"> iBeacon</a> lets stores determine exactly where " "the iThing is, and get other info too." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20190924053515/https://www.zerohedge." "com/news/2013-12-30/how-nsa-hacks-your-iphone-presenting-dropout-jeep\"> " "Either Apple helps the NSA snoop on all the data in an iThing, or it is " "totally incompetent</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The iThing also <a href=\"https://www.theregister.com/2013/08/08/" "ios7_tracking_now_its_a_favourite_feature/\"> tells Apple its geolocation</" "a> by default, though that can be turned off." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "There is also a feature for web sites to track users, which is <a href=" "\"https://nakedsecurity.sophos.com/2012/10/17/how-to-disable-apple-ios-user-" "tracking-ios-6/\"> enabled by default</a>. (That article talks about iOS 6, " "but it is still true in iOS 7.)" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Users cannot make an Apple ID (<a href=\"https://apple.stackexchange.com/" "questions/49951/how-can-i-download-free-apps-without-registering-an-apple-id" "\">necessary to install even gratis apps</a>) without giving a valid email " "address and receiving the verification code Apple sends to it." msgstr "" #. type: Content of: <title> msgid "Proprietary Deception - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Deception" msgstr "" #. type: Content of: <div><div><p> msgid "" "Deception is a malicious functionality that makes the program dishonest or " "conceals trickery. Here are examples of such malicious functionalities. " "Cases of deception that involve taking people's money are listed in <a href=" "\"/proprietary/proprietary-fraud.html#main-heading\"> Proprietary Fraud</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Twenty nine “beauty camera” apps that used to be on Google Play " "had one or more malicious functionalities, such as <a href=\"https://www." "androidpolice.com/2019/02/03/google-bans-29-beauty-camera-apps-from-the-play-" "store-that-steal-your-photos/\"> stealing users' photos instead of “" "beautifying” them</a>, pushing unwanted and often malicious ads on " "users, and redirecting them to phishing sites that stole their credentials. " "Furthermore, the user interface of most of them was designed to make " "uninstallation difficult." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many proprietary programs secretly <a href=\"https://www.theregister." "com/2016/08/05/payperinstall_study/\">install other proprietary programs " "that the users don't want</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The proprietor of the Pokémon Go game <a href=\"https://www.theguardian.com/" "technology/2016/jul/14/pokemon-go-sponsored-locations-restaurants-business" "\"> invites restaurants and other businesses to pay to have the game lure " "people there</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A top-ranking proprietary Instagram client promising to tell users who's " "been watching their pictures was in reality <a href=\"https://www." "theguardian.com/technology/2015/nov/11/top-ranking-free-app-stole-instagram-" "passwords\">stealing their credentials</a>, advertising itself on their " "feed, and posting images without their consent." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2015-2023, 2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary DRM - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary DRM" msgstr "" #. type: Content of: <div><div><p> msgid "" "Here are examples of proprietary programs and systems that implement " "<em>digital restrictions management</em> (DRM): functionalities designed " "intentionally to restrict what users can do. These functionalities are also " "called <em>digital handcuffs</em>." msgstr "" #. type: Content of: <div><div><p> msgid "" "DRM is reinforced by <a href=\"http://www.theguardian.com/technology/" "blog/2014/feb/05/digital-rights-management\"> censorship laws</a> that ban " "software (and hardware) that can break the handcuffs. Instead of these " "laws, DRM itself ought to be illegal. Please support our campaign to <a " "href=\"http://DefectiveByDesign.org/\">abolish DRM</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://itstillworks.com/kindle-drm-17841.html\"> The Amazon " "Kindle has DRM</a>. That article is flawed in that it fails to treat DRM as " "an ethical question; it takes for granted that whatever Amazon might do to " "its users is legitimate. It refers to DRM as digital “rights” " "management, which is the spin term used to promote DRM. Nonetheless it " "serves as a reference for the facts." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We refer to that product as the <a href=\"/philosophy/why-call-it-the-" "swindle.html\"> Amazon Swindle</a> because of this and <a href=\"/philosophy/" "ebooks.html\"> other malicious functionalities</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "HP's firmware downgrade <a href=\"https://www.theguardian.com/" "technology/2016/sep/20/hp-inkjet-printers-unofficial-cartridges-software-" "update\">imposed DRM on some printers, which now refuse to function with " "third-party ink cartridges</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Philips “smart” lightbulbs had initially been designed to " "interact with other companies' smart light bulbs, but <a href=\"https://www." "techdirt.com/2015/12/14/lightbulb-drm-philips-locks-purchasers-out-third-" "party-bulbs-with-firmware-update/\"> later the company updated the firmware " "to disallow interoperability</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If a product is “smart”, and you didn't build it, it is cleverly " "serving its manufacturer <em>against you</em>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Netflix Android app <a href=\"https://torrentfreak.com/netflix-cracks-" "down-on-vpn-and-proxy-pirates-150103/\"> forces the use of Google DNS</a>. " "This is one of the methods that Netflix uses to enforce the geolocation " "restrictions dictated by the movie studios." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Adobe made “Digital Editions,” the e-reader used by most US " "libraries, spy on the user <a href=\"https://web.archive.org/" "web/20141220181015/http://www.computerworlduk.com/blogs/open-enterprise/drm-" "strikes-again-3575860/\">for the sake of DRM.</a>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20131007102857/http://www.nclnet.org/" "technology/73-digital-rights-management/124-whos-driving-the-copyright-laws-" "consumers-insist-on-the-right-to-back-it-up\"> DVDs and Blu-ray disks have " "DRM</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "That page uses spin terms that favor DRM, including <a href=\"/philosophy/" "words-to-avoid.html#DigitalRightsManagement\"> digital “rights” " "management</a> and <a href=\"/philosophy/words-to-avoid.html#Protection" "\">“protect”</a>, and it claims that “artists” " "(rather than companies) are primarily responsible for putting digital " "restrictions management into these disks. Nonetheless, it is a reference " "for the facts." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Every Blu-ray disk (with few, rare exceptions) has DRM—so don't use " "Blu-ray disks!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "DRM does more nastiness to published works than merely stopping people from " "looking at and/or copying them. Even when it allows you to look, it harasses " "you in many ways. Cory Doctorow's article presents <a href=\"https://" "boingboing.net/2010/02/18/infographic-buying-d.html\"> DVDs as an example</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We condemn the propaganda term “pirate” when it is applied to " "people that share copies. Many of these DVDs are made and distributed " "commercially; in reference to that practice, “pirate” might be " "partly justified. But not when they protect users from harassment." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The fundamental cause of this harassment, and the fundamental wrong of the " "DRM in DVDs, is the requirement to use nonfree software to play the DVD. " "Fortunately we have free replacement software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://en.wikipedia.org/wiki/High-" "bandwidth_Digital_Content_Protection\"> HDCP</a> is a DRM system that " "encrypts video and audio data from the processor to the monitor. It is " "implemented mainly in hardware, but the system software also participates, " "which makes it qualify as malware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Besides controlling users, HDCP denies their fair-use rights and causes " "numerous practical problems." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.eff.org/deeplinks/2008/02/adobe-pushes-drm-flash\"> " "DRM in Flash Player</a>." msgstr "" #. type: Content of: <title> msgid "Proprietary Surveillance - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Surveillance" msgstr "" #. type: Content of: <div><div><a> msgid "<a href=\"/graphics/dog.html\">" msgstr "" #. type: Attribute 'alt' of: <div><div><a><img> msgid "" "Cartoon of a dog, wondering at the three ads that popped up on his computer " "screen..." msgstr "" #. type: Content of: <div><div><p> msgid "“How did they find out I'm a dog?”" msgstr "" #. type: Content of: <div><div><p> msgid "" "A common malicious functionality is to snoop on the user. This page records " "<strong>clearly established cases of proprietary software that spies on or " "tracks users</strong>. Manufacturers even refuse to <a href=\"https://" "techcrunch.com/2018/10/19/smart-home-devices-hoard-data-government-demands/" "\">say whether they snoop on users for the state</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "All appliances and applications that are tethered to a specific server are " "snoopers by nature. We do not list them here because they have their own " "page: <a href=\"/proprietary/proprietary-tethers.html#about-page" "\">Proprietary Tethers</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "There is a similar site named <a href=\"https://spyware.neocities.org" "\">Spyware Watchdog</a> that classifies spyware programs, so that users can " "be more aware that they are installing spyware." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Table of Contents" msgstr "" #. type: Content of: <div><div><div><h4> msgid "<a href=\"#Introduction\">Introduction</a>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "<a href=\"#OSSpyware\">Spyware in Laptops and Desktops</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInWindows\">Windows</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInMacOS\">MacOS</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInBIOS\">BIOS</a>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "<a href=\"#SpywareOnMobiles\">Spyware on Mobiles</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInTelephones\">All “Smart” Phones</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareIniThings\">iThings</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInAndroid\">Android Telephones</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInElectronicReaders\">E-Readers</a>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "<a href=\"#SpywareInApplications\">Spyware in Applications</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInDesktopApps\">Desktop Apps</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInMobileApps\">Mobile Apps</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInSkype\">Skype</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInGames\">Games</a>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "<a href=\"#SpywareInEquipment\">Spyware in Connected Equipment</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInTVSets\">TV Sets</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInCameras\">Cameras</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInToys\">Toys</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInDrones\">Drones</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareAtHome\">Other Appliances</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareOnWearables\">Wearables</a>" msgstr "" #. type: Content of: <div><div><div><ul><li><ul><li> msgid "<a href=\"#SpywareOnSmartWatches\">“Smart” Watches</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInVehicles\">Vehicles</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInVR\">Virtual Reality</a>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "<a href=\"#SpywareOnTheWeb\">Spyware on the Web</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInChrome\">Chrome</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInJavaScript\">JavaScript</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#SpywareInFlash\">Flash</a>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "<a href=\"#SpywareInNetworks\">Spyware in Networks</a>" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Introduction" msgstr "" #. type: Content of: <div><div><p> msgid "" "For decades, the Free Software movement has been denouncing the abusive " "surveillance machine of <a href=\"/proprietary/proprietary.html" "\">proprietary software</a> companies such as <a href=\"/proprietary/malware-" "microsoft.html\">Microsoft</a> and <a href=\"/proprietary/malware-apple.html" "\">Apple</a>. In the recent years, this tendency to watch people has spread " "across industries, not only in the software business, but also in the " "hardware. Moreover, it also spread dramatically away from the keyboard, in " "the mobile computing industry, in the office, at <a href=\"https://www." "theguardian.com/world/2023/sep/07/uk-owners-of-smart-home-devices-being-" "asked-for-swathes-of-personal-data\"> home</a>, in transportation systems, " "and in the classroom." msgstr "" #. type: Content of: <div><div><h4> msgid "Aggregate or anonymized data" msgstr "" #. type: Content of: <div><div><p> msgid "" "Many companies, in their privacy policy, have a clause that claims they " "share aggregate, non-personally identifiable information with third parties/" "partners. Such claims are worthless, for several reasons:" msgstr "" #. type: Content of: <div><div><ul><li> msgid "They could change the policy at any time." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "They can twist the words by distributing an “aggregate” of " "“anonymized” data which can be reidentified and attributed to " "individuals." msgstr "" #. type: Content of: <div><div><ul><li> msgid "" "The raw data they don't normally distribute can be taken by data breaches." msgstr "" #. type: Content of: <div><div><ul><li> msgid "The raw data they don't normally distribute can be taken by subpoena." msgstr "" #. type: Content of: <div><div><p> msgid "" "Therefore, we must not be distracted by companies' statements of what they " "will <em>do</em> with the data they collect. The wrong is that they collect " "it at all." msgstr "" #. type: Content of: <div><div><p> msgid "" "Entries in each category are in reverse chronological order, based on the " "dates of publication of linked articles. The latest additions are listed on " "the <a href=\"/proprietary/proprietary.html#latest\">main page</a> of the " "Malware section." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Spyware in Laptops and Desktops" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#OSSpyware\">#OSSpyware</a>)</" "span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "Windows" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInWindows" "\">#SpywareInWindows</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "HP's proprietary operating system <a href=\"https://www.bbc.com/news/" "technology-42309371\">includes a proprietary keyboard driver with a key " "logger in it</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20150905163414/http://www.pocket-lint." "com/news/134954-cortana-is-always-listening-with-new-wake-on-voice-tech-even-" "when-windows-10-is-sleeping\"> Intel devices will be able to listen for " "speech all the time, even when “off.”</a>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20140219183154/http://www.techrepublic." "com/blog/asian-technology/japanese-government-warns-baidu-ime-is-spying-on-" "users/\"> Baidu's Japanese-input and Chinese-input apps spy on users</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "Microsoft's snooping on users did not start with Windows 10. There's a lot " "more <a href=\"/proprietary/malware-microsoft.html\"> Microsoft malware</a>." msgstr "" #. type: Content of: <div><div><div><h4> msgid "MacOS" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInMacOS" "\">#SpywareInMacOS</a>)</span>" msgstr "" #. type: Content of: <div><div><p> msgid "" "There's a lot more <a href=\"#SpywareIniThings\">iThing spyware</a>, and <a " "href=\"/proprietary/malware-apple.html\">Apple malware</a>." msgstr "" #. type: Content of: <div><div><div> msgid "<span id=\"SpywareAtLowLevel\"></span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "BIOS" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInBIOS" "\">#SpywareInBIOS</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.computerworld.com/article/2984889/lenovo-collects-" "usage-data-on-thinkpad-thinkcentre-and-thinkstation-pcs.html\"> Lenovo " "stealthily installed crapware and spyware via BIOS</a> on Windows installs. " "Note that the specific sabotage method Lenovo used did not affect GNU/Linux; " "also, a “clean” Windows install is not really clean since <a " "href=\"/proprietary/malware-microsoft.html\">Microsoft puts in its own " "malware</a>." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Spyware on Mobiles" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareOnMobiles" "\">#SpywareOnMobiles</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "All “Smart” Phones" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInTelephones" "\">#SpywareInTelephones</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The natural extension of monitoring people through “their” " "phones is <a href=\"https://news.northwestern.edu/stories/2016/01/fool-" "activity-tracker\"> proprietary software to make sure they can't “" "fool” the monitoring</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "According to Edward Snowden, <a href=\"https://www.bbc.com/news/" "uk-34444233\">agencies can take over smartphones</a> by sending hidden text " "messages which enable them to turn the phones on and off, listen to the " "microphone, retrieve geo-location data from the GPS, take photographs, read " "text messages, read call, location and web browsing history, and read the " "contact list. This malware is designed to disguise itself from investigation." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Portable phones with GPS <a href=\"https://www.aclu.org/issues/privacy-" "technology/location-tracking/you-are-being-tracked\"> will send their GPS " "location on remote command, and users cannot stop them</a>. (The US says it " "will eventually require all new portable phones to have GPS.)" msgstr "" #. type: Content of: <div><div><div><h4> msgid "iThings" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareIniThings" "\">#SpywareIniThings</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "Android Telephones" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInAndroid" "\">#SpywareInAndroid</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some portable phones <a href=\"https://www.prnewswire.com/news-releases/" "kryptowire-discovered-mobile-phone-firmware-that-transmitted-personally-" "identifiable-information-pii-without-user-consent-or-disclosure-300362844." "html\">are sold with spyware sending lots of data to China</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Samsung phones come with <a href=\"https://arstechnica.com/gadgets/2015/07/" "samsung-sued-for-loading-devices-with-unremovable-crapware-in-china/\">apps " "that users can't delete</a>, and they send so much data that their " "transmission is a substantial expense for users. Said transmission, not " "wanted or requested by the user, clearly must constitute spying of some kind." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"/proprietary/proprietary-back-doors.html#samsung\"> Samsung's back " "door</a> provides access to any file on the system." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some manufacturers add a <a href=\"https://androidsecuritytest.com/features/" "logs-and-services/loggers/carrieriq/\"> hidden general surveillance package " "such as Carrier IQ</a>." msgstr "" #. type: Content of: <div><div><div><h4> msgid "E-Readers" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInElectronicReaders" "\">#SpywareInElectronicReaders</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Spyware in many e-readers—not only the Kindle: <a href=\"https://www." "eff.org/pages/reader-privacy-chart-2012\"> they report even which page the " "user reads at what time</a>." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Spyware in Applications" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInApplications" "\">#SpywareInApplications</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "Desktop Apps" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInDesktopApps" "\">#SpywareInDesktopApps</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "Mobile Apps" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInMobileApps" "\">#SpywareInMobileApps</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Spanish football streaming app <a href=\"https://boingboing." "net/2018/06/11/spanish-football-app-turns-use.html\">tracks the user's " "movements and listens through the microphone</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "This makes them act as spies for licensing enforcement." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We expect it implements DRM, too—that there is no way to save a " "recording. But we can't be sure from the article." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If you learn to care much less about sports, you will benefit in many ways. " "This is one more." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "More than <a href=\"https://www.theguardian.com/technology/2018/apr/16/child-" "apps-games-android-us-google-play-store-data-sharing-law-privacy\">50% of " "the 5,855 Android apps studied by researchers were found to snoop and " "collect information about its users</a>. 40% of the apps were found to " "insecurely snitch on its users. Furthermore, they could detect only some " "methods of snooping, in these proprietary apps whose source code they cannot " "look at. The other apps might be snooping in other ways." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This is evidence that proprietary apps generally work against their users. " "To protect their privacy and freedom, Android users need to get rid of the " "proprietary software—both proprietary Android by <a href=\"https://" "replicant.us\">switching to Replicant</a>, and the proprietary apps by " "getting apps from the free software only <a href=\"https://f-droid.org/\">F-" "Droid store</a> that <a href=\"https://f-droid.org/docs/Anti-Features/\"> " "prominently warns the user if an app contains anti-features</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Grindr collects information about <a href=\"https://www.commondreams.org/" "news/2018/04/02/egregious-breach-privacy-popular-app-grindr-supplies-third-" "parties-users-hiv-status\"> which users are HIV-positive, then provides the " "information to companies</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Grindr should not have so much information about its users. It could be " "designed so that users communicate such info to each other but not to the " "server's database." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The moviepass app and dis-service spy on users even more than users " "expected. It <a href=\"https://techcrunch.com/2018/03/05/moviepass-ceo-" "proudly-says-the-app-tracks-your-location-before-and-after-movies/\">records " "where they travel before and after going to a movie</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "Don't be tracked—pay cash!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tracking software in popular Android apps is pervasive and sometimes very " "clever. Some trackers can <a href=\"https://theintercept.com/2017/11/24/" "staggering-variety-of-clandestine-trackers-found-in-popular-android-apps/\"> " "follow a user's movements around a physical store by noticing WiFi networks</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Sarahah app <a href=\"https://theintercept.com/2017/08/27/hit-app-" "sarahah-quietly-uploads-your-address-book/\"> uploads all phone numbers and " "email addresses</a> in user's address book to developer's server." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(Note that this article misuses the words “<a href=\"/" "philosophy/free-sw.html\">free software</a>” referring to zero price.)" "</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "20 dishonest Android apps recorded <a href=\"https://arstechnica.com/" "information-technology/2017/07/stealthy-google-play-apps-recorded-calls-and-" "stole-e-mails-and-texts/\">phone calls and sent them and text messages and " "emails to snoopers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google did not intend to make these apps spy; on the contrary, it worked in " "various ways to prevent that, and deleted these apps after discovering what " "they did. So we cannot blame Google specifically for the snooping of these " "apps." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "On the other hand, Google redistributes nonfree Android apps, and therefore " "shares in the responsibility for the injustice of their being nonfree. It " "also distributes its own nonfree apps, such as Google Play, <a href=\"/" "philosophy/free-software-even-more-important.html\">which are malicious</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Could Google have done a better job of preventing apps from cheating? There " "is no systematic way for Google, or Android users, to inspect executable " "proprietary apps to see what they do." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google could demand the source code for these apps, and study the source " "code somehow to determine whether they mistreat users in various ways. If it " "did a good job of this, it could more or less prevent such snooping, except " "when the app developers are clever enough to outsmart the checking." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "But since Google itself develops malicious apps, we cannot trust Google to " "protect us. We must demand release of source code to the public, so we can " "depend on each other." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apps for BART <a href=\"https://web.archive.org/web/20171124190046/https://" "consumerist.com/2017/05/23/passengers-say-commuter-rail-app-illegally-" "collects-personal-user-data/\"> snoop on users</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "With free software apps, users could <em>make sure</em> that they don't " "snoop." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "With proprietary apps, one can only hope that they don't." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A study found 234 Android apps that track users by <a href=\"https://www." "bleepingcomputer.com/news/security/234-android-applications-are-currently-" "using-ultrasonic-beacons-to-track-users/\">listening to ultrasound from " "beacons placed in stores or played by TV programs</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Faceapp appears to do lots of surveillance, judging by <a href=\"https://web." "archive.org/web/20170426191242/https://www.washingtonpost.com/news/the-" "intersect/wp/2017/04/26/everything-thats-wrong-with-faceapp-the-latest-" "creepy-photo-app-for-your-face/\"> how much access it demands to personal " "data in the device</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Users are suing Bose for <a href=\"https://web.archive.org/" "web/20170423010030/https://www.washingtonpost.com/news/the-switch/" "wp/2017/04/19/bose-headphones-have-been-spying-on-their-customers-lawsuit-" "claims/\"> distributing a spyware app for its headphones</a>. Specifically, " "the app would record the names of the audio files users listen to along with " "the headphone's unique serial number." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The suit accuses that this was done without the users' consent. If the fine " "print of the app said that users gave consent for this, would that make it " "acceptable? No way! It should be flat out <a href=\"/philosophy/surveillance-" "vs-democracy.html\"> illegal to design the app to snoop at all</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Pairs of Android apps can collude to transmit users' personal data to " "servers. <a href=\"https://www.theatlantic.com/technology/archive/2017/04/" "when-apps-collude-to-steal-your-data/522177/\">A study found tens of " "thousands of pairs that collude</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Verizon <a href=\"https://yro.slashdot.org/story/17/03/30/0112259/verizon-to-" "force-appflash-spyware-on-android-phones\"> announced an opt-in proprietary " "search app that it will</a> pre-install on some of its phones. The app will " "give Verizon the same information about the users' searches that Google " "normally gets when they use its search engine." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Currently, the app is <a href=\"https://www.eff.org/deeplinks/2017/04/update-" "verizons-appflash-pre-installed-spyware-still-spyware\"> being pre-installed " "on only one phone</a>, and the user must explicitly opt-in before the app " "takes effect. However, the app remains spyware—an “" "optional” piece of spyware is still spyware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Meitu photo-editing app <a href=\"https://theintercept.com/2017/01/21/" "popular-selfie-app-sending-user-data-to-china-researchers-say/\">sends user " "data to a Chinese company</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Uber app tracks <a href=\"https://techcrunch.com/2016/11/28/uber-" "background-location-data-collection/\">clients' movements before and after " "the ride</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This example illustrates how “getting the user's consent” for " "surveillance is inadequate as a protection against massive surveillance." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Following is a non-exhaustive list, taken from the research paper, of some " "proprietary VPN apps that track users and infringe their privacy:" msgstr "" #. type: Content of: <div><div><ul><li><dl><dt> msgid "SurfEasy" msgstr "" #. type: Content of: <div><div><ul><li><dl><dd> msgid "" "Includes tracking libraries such as NativeX and Appflood, meant to track " "users and show them targeted ads." msgstr "" #. type: Content of: <div><div><ul><li><dl><dt> msgid "sFly Network Booster" msgstr "" #. type: Content of: <div><div><ul><li><dl><dd> msgid "" "Requests the <code>READ_SMS</code> and <code>SEND_SMS</code> permissions " "upon installation, meaning it has full access to users' text messages." msgstr "" #. type: Content of: <div><div><ul><li><dl><dt> msgid "DroidVPN and TigerVPN" msgstr "" #. type: Content of: <div><div><ul><li><dl><dd> msgid "" "Requests the <code>READ_LOGS</code> permission to read logs for other apps " "and also core system logs. TigerVPN developers have confirmed this." msgstr "" #. type: Content of: <div><div><ul><li><dl><dt> msgid "HideMyAss" msgstr "" #. type: Content of: <div><div><ul><li><dl><dd> msgid "" "Sends traffic to LinkedIn. Also, it stores detailed logs and may turn them " "over to the UK government if requested." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Facebook's new Magic Photo app <a href=\"https://www.theregister." "com/2015/11/10/facebook_scans_camera_for_your_friends/\"> scans your mobile " "phone's photo collections for known faces</a>, and suggests you circulate " "the picture you take according to who is in the frame." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This spyware feature seems to require online access to some known-faces " "database, which means the pictures are likely to be sent across the wire to " "Facebook's servers and face-recognition algorithms." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If so, none of Facebook users' pictures are private anymore, even if the " "user didn't “upload” them to the service." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Facebook's app listens all the time, <a href=\"https://www.independent.co.uk/" "tech/facebook-using-people-s-phones-to-listen-in-on-what-they-re-saying-" "claims-professor-a7057526.html\">to snoop on what people are listening to or " "watching</a>. In addition, it may be analyzing people's conversations to " "serve them with targeted advertisements." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Apps that include <a href=\"https://web.archive.org/web/20180913014551/" "http://techaeris.com/2016/01/13/symphony-advanced-media-software-tracks-your-" "digital-life-through-your-smartphone-mic/\"> Symphony surveillance software " "snoop on what radio and TV programs are playing nearby</a>. Also on what " "users post on various sites such as Facebook, Google+ and Twitter." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "“Cryptic communication,” unrelated to the app's functionality, " "was <a href=\"https://news.mit.edu/2015/data-transferred-android-apps-" "hiding-1119\"> found in the 500 most popular gratis Android apps</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article should not have described these apps as “free”—" "they are not free software. The clear way to say “zero price” " "is “gratis.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article takes for granted that the usual analytics tools are legitimate, " "but is that valid? Software developers have no right to analyze what users " "are doing or how. “Analytics” tools that snoop are just as " "wrong as any other snooping." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "More than 73% and 47% of mobile applications, for Android and iOS " "respectively <a href=\"https://techscience.org/a/2015103001/\">hand over " "personal, behavioral and location information</a> of their users to third " "parties." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Like most “music screaming” disservices, Spotify is based on " "proprietary malware (DRM and snooping). In August 2015 it <a href=\"https://" "www.theguardian.com/technology/2015/aug/21/spotify-faces-user-backlash-over-" "new-privacy-policy\"> demanded users submit to increased snooping</a>, and " "some are starting to realize that it is nasty." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This article shows the <a href=\"https://www.theregister.com/2015/08/21/" "spotify_worse_than_the_nsa/\"> twisted ways that they present snooping as a " "way to “serve” users better</a>—never mind whether they " "want that. This is a typical example of the attitude of the proprietary " "software industry towards those they have subjugated." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "Out, out, damned Spotify!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.cl.cam.ac.uk/~arb33/papers/FerreiraEtAl-Securacy-" "WiSec2015.pdf\"> A study in 2015</a> found that 90% of the top-ranked gratis " "proprietary Android apps contained recognizable tracking libraries. For the " "paid proprietary apps, it was only 60%." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article confusingly describes gratis apps as “free”, but " "most of them are not in fact <a href=\"/philosophy/free-sw.html\">free " "software</a>. It also uses the ugly word “monetize”. A good " "replacement for that word is “exploit”; nearly always that will " "fit perfectly." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Gratis Android apps (but not <a href=\"/philosophy/free-sw.html\">free " "software</a>) connect to 100 <a href=\"https://www.theguardian.com/" "technology/2015/may/06/free-android-apps-connect-tracking-advertising-" "websites\">tracking and advertising</a> URLs, on the average." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Widely used <a href=\"https://freedom-to-tinker.com/2015/04/06/scan-this-or-" "scan-me-user-privacy-barcode-scanning-applications/\">proprietary QR-code " "scanner apps snoop on the user</a>. This is in addition to the snooping done " "by the phone company, and perhaps by the OS in the phone." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Don't be distracted by the question of whether the app developers get users " "to say “I agree”. That is no excuse for malware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many proprietary apps for mobile devices report which other apps the user " "has installed. <a href=\"https://techcrunch.com/2014/11/26/twitter-app-" "graph/\">Twitter is doing this in a way that at least is visible and " "optional</a>. Not as bad as what the others do." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Simeji keyboard is a smartphone version of Baidu's <a href=\"/" "proprietary/proprietary-surveillance.html#baidu-ime\">spying <abbr title=" "\"Input Method Editor\">IME</abbr></a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The nonfree Snapchat app's principal purpose is to restrict the use of data " "on the user's computer, but it does surveillance too: <a href=\"https://www." "theguardian.com/media/2013/dec/27/snapchat-may-be-exposed-hackers\"> it " "tries to get the user's list of other people's phone numbers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Brightest Flashlight app <a href=\"https://www.theguardian.com/" "technology/2013/dec/06/android-app-50m-downloads-sent-data-advertisers\"> " "sends user data, including geolocation, for use by companies</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The FTC criticized this app because it asked the user to approve sending " "personal data to the app developer but did not ask about sending it to other " "companies. This shows the weakness of the reject-it-if-you-dislike-snooping " "“solution” to surveillance: why should a flashlight app send any " "information to anyone? A free software flashlight app would not." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "FTC says most mobile apps for children don't respect privacy: <a href=" "\"https://arstechnica.com/information-technology/2012/12/ftc-disclosures-" "severely-lacking-in-kids-mobile-appsand-its-getting-worse/\"> https://" "arstechnica.com/information-technology/2012/12/ftc-disclosures-severely-" "lacking-in-kids-mobile-appsand-its-getting-worse/</a>." msgstr "" #. type: Content of: <div><div><div><h4> msgid "Skype" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInSkype" "\">#SpywareInSkype</a>)</span>" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInGames" "\">#SpywareInGames</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Spyware in Connected Equipment" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInEquipment" "\">#SpywareInEquipment</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The bad security in many Internet of Stings devices allows <a href=\"https://" "www.techdirt.com/2017/08/28/iot-devices-provide-comcast-wonderful-new-" "opportunity-to-spy-you/\">ISPs to snoop on the people that use them</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "Don't be a sucker—reject all the stings." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(It is unfortunate that the article uses the term <a href=\"/" "philosophy/words-to-avoid.html#Monetize\">“monetize”</a>.)</" "small>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "TV Sets" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInTVSets" "\">#SpywareInTVSets</a>)</span>" msgstr "" #. type: Content of: <div><div><p> msgid "" "Emo Phillips made a joke: The other day a woman came up to me and said, " "“Didn't I see you on television?” I said, “I don't know. " "You can't see out the other way.” Evidently that was before Amazon " "“smart” TVs." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Vizio “smart” <a href=\"https://www.ftc.gov/business-guidance/" "blog/2017/02/what-vizio-was-doing-behind-tv-screen\">TVs report everything " "that is viewed on them, and not just broadcasts and cable</a>. Even if the " "image is coming from the user's own computer, the TV reports what it is. The " "existence of a way to disable the surveillance, even if it were not hidden " "as it was in these TVs, does not legitimize the surveillance." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some web and TV advertisements play inaudible sounds to be picked up by " "proprietary malware running on other devices in range so as to determine " "that they are nearby. Once your Internet devices are paired with your TV, " "advertisers can correlate ads with Web activity, and other <a href=\"https://" "arstechnica.com/tech-policy/2015/11/beware-of-ads-that-use-inaudible-sound-" "to-link-your-phone-tv-tablet-and-pc/\"> cross-device tracking</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Vizio goes a step further than other TV manufacturers in spying on their " "users: their <a href=\"https://www.propublica.org/article/own-a-vizio-smart-" "tv-its-watching-you\"> “smart” TVs analyze your viewing habits " "in detail and link them your IP address</a> so that advertisers can track " "you across devices." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It is possible to turn this off, but having it enabled by default is an " "injustice already." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tivo's alliance with Viacom adds 2.3 million households to the 600 millions " "social media profiles the company already monitors. Tivo customers are " "unaware they're being watched by advertisers. By combining TV viewing " "information with online social media participation, Tivo can now <a href=" "\"https://www.reuters.com/article/viacom-tivo-idUSL1N12U1VV20151102/\"> " "correlate TV advertisement with online purchases</a>, exposing all users to " "new combined surveillance by default." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Vizio “smart” TVs recognize and <a href=\"https://www.engadget." "com/2015-07-24-vizio-ipo-inscape-acr.html\">track what people are watching</" "a>, even if it isn't a TV channel." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Verizon cable TV <a href=\"https://arstechnica.com/information-" "technology/2015/05/verizon-fios-reps-know-what-tv-channels-you-watch/\"> " "snoops on what programs people watch, and even what they wanted to record</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Vizio <a href=\"https://boingboing.net/2015/04/30/telescreen-watch-vizio-" "adds-s.html\"> used a firmware “upgrade” to make its TVs snoop " "on what users watch</a>. The TVs did not do that when first sold." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Samsung “Smart” TV <a href=\"https://www.consumerreports.org/" "cro/news/2015/02/who-s-the-third-party-that-samsung-and-lg-smart-tvs-are-" "sharing-your-voice-data-with/index.htm\"> transmits users' voice on the " "internet to another company, Nuance</a>. Nuance can save it and would then " "have to give it to the US or some other government." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Speech recognition is not to be trusted unless it is done by free software " "in your own computer." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In its privacy policy, Samsung explicitly confirms that <a href=\"https://" "theweek.com/speedreads/538379/samsung-warns-customers-not-discuss-personal-" "information-front-smart-tvs\">voice data containing sensitive information " "will be transmitted to third parties</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Amazon “Smart” TV is <a href=\"https://www.theguardian.com/" "technology/shortcuts/2014/nov/09/amazon-echo-smart-tv-watching-listening-" "surveillance\"> snooping all the time</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "More or less all “smart” TVs <a href=\"https://myce.wiki/news/" "reseachers-all-smart-tvs-spy-on-you-sony-monitors-all-channel-switches-72851/" "\">spy on their users</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "The report was as of 2014, but we don't expect this has got better." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This shows that laws requiring products to get users' formal consent before " "collecting personal data are totally inadequate. And what happens if a user " "declines consent? Probably the TV will say, “Without your consent to " "tracking, the TV will not work.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Proper laws would say that TVs are not allowed to report what the user " "watches—no exceptions!" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "LG <a href=\"https://www.techdirt.com/2014/05/20/lg-will-take-smart-out-your-" "smart-tv-if-you-dont-agree-to-share-your-viewing-search-data-with-third-" "parties/\"> disabled network features</a> on <em>previously purchased</em> " "“smart” TVs, unless the purchasers agreed to let LG begin to " "snoop on them and distribute their personal data." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Spyware in LG “smart” TVs <a href=\"http://doctorbeet.blogspot." "co.uk/2013/11/lg-smart-tvs-logging-usb-filenames-and.html\"> reports what " "the user watches, and the switch to turn this off has no effect</a>. (The " "fact that the transmission reports a 404 error really means nothing; the " "server could save that data anyway.)" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Even worse, it <a href=\"https://rrrrambles.wordpress.com/2013/11/21/lg-tv-" "logging-filenames-from-network-folders/\"> snoops on other devices on the " "user's local network</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "LG later said it had installed a patch to stop this, but any product could " "spy this way." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Meanwhile, LG TVs <a href=\"https://www.techdirt.com/2014/05/20/lg-will-take-" "smart-out-your-smart-tv-if-you-dont-agree-to-share-your-viewing-search-data-" "with-third-parties/\"> do lots of spying anyway</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Spyware in LG “smart” TVs <a href=\"https://doctorbeet.blogspot." "com/2013/11/lg-smart-tvs-logging-usb-filenames-and.html\"> reports what the " "user watches, and the switch to turn this off has no effect</a>. (The fact " "that the transmission reports a 404 error really means nothing; the server " "could save that data anyway.)" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"http://www.dailymail.co.uk/sciencetech/article-2249303/Hackers-" "penetrate-home-Crack-Samsungs-Smart-TV-allows-attacker-seize-control-" "microphone-cameras.html\"> Crackers found a way to break security on a " "“smart” TV</a> and use its camera to watch the people who are " "watching TV." msgstr "" #. type: Content of: <div><div><div><h4> msgid "Cameras" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInCameras" "\">#SpywareInCameras</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Over 70 brands of network-connected surveillance cameras have <a href=" "\"https://web.archive.org/web/20250117130741/http://www.kerneronsec." "com/2016/02/remote-code-execution-in-cctv-dvrs-of.html\"> security bugs that " "allow anyone to watch through them</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Nest Cam “smart” camera is <a href=\"https://www.bbc.com/" "news/technology-34922712\">always watching</a>, even when the “" "owner” switches it “off.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A “smart” device means the manufacturer is using it to outsmart " "you." msgstr "" #. type: Content of: <div><div><div><h4> msgid "Toys" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInToys" "\">#SpywareInToys</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A remote-control sex toy was found to make <a href=\"https://www.theverge." "com/2017/11/10/16634442/lovense-sex-toy-spy-surveillance\">audio recordings " "of the conversation between two users</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A computerized vibrator <a href=\"https://www.theguardian.com/" "technology/2016/aug/10/vibrator-phone-app-we-vibe-4-plus-bluetooth-hack\"> " "was snooping on its users through the proprietary control app</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The app was reporting the temperature of the vibrator minute by minute " "(thus, indirectly, whether it was surrounded by a person's body), as well as " "the vibration frequency." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Note the totally inadequate proposed response: a labeling standard with " "which manufacturers would make statements about their products, rather than " "free software which users could have checked and changed." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The company that made the vibrator <a href=\"https://www.theguardian.com/us-" "news/2016/sep/14/wevibe-sex-toy-data-collection-chicago-lawsuit\"> was sued " "for collecting lots of personal information about how people used it</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The company's statement that it was anonymizing the data may be true, but it " "doesn't really matter. If it had sold the data to a data broker, the data " "broker would have been able to figure out who the user was." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Following this lawsuit, <a href=\"https://www.theguardian.com/" "technology/2017/mar/14/we-vibe-vibrator-tracking-users-sexual-habits\"> the " "company has been ordered to pay a total of C$4m</a> to its customers." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "“CloudPets” toys with microphones <a href=\"https://www." "theguardian.com/technology/2017/feb/28/cloudpets-data-breach-leaks-details-" "of-500000-children-and-adults\"> leak childrens' conversations to the " "manufacturer</a>. Guess what? <a href=\"https://www.vice.com/en/article/" "pgwean/internet-of-things-teddy-bear-leaked-2-million-parent-and-kids-" "message-recordings\"> Crackers found a way to access the data</a> collected " "by the manufacturer's snooping." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "That the manufacturer and the FBI could listen to these conversations was " "unacceptable by itself." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The “smart” toys My Friend Cayla and i-Que can be <a href=" "\"https://www.forbrukerradet.no/siste-nytt/connected-toys-violate-consumer-" "laws/\">remotely controlled with a mobile phone</a>; physical access is not " "necessary. This would enable crackers to listen in on a child's " "conversations, and even speak into the toys themselves." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This means a burglar could speak into the toys and ask the child to unlock " "the front door while Mommy's not looking." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The “smart” toys My Friend Cayla and i-Que transmit <a href=" "\"https://www.forbrukerradet.no/siste-nytt/connected-toys-violate-consumer-" "laws/\">children's conversations to Nuance Communications</a>, a speech " "recognition company based in the U.S." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Those toys also contain major security vulnerabilities; crackers can " "remotely control the toys with a mobile phone. This would enable crackers to " "listen in on a child's speech, and even speak into the toys themselves." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Barbie <a href=\"https://www.mirror.co.uk/news/technology-science/technology/" "wi-fi-spy-barbie-records-childrens-5177673\">is going to spy on children and " "adults</a>." msgstr "" #. type: Content of: <div><div><div><h4> msgid "Drones" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInDrones" "\">#SpywareInDrones</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "While you're using a DJI drone to snoop on other people, DJI is in many " "cases <a href=\"https://www.theverge.com/2017/8/4/16095244/us-army-stop-" "using-dji-drones-cybersecurity\">snooping on you</a>." msgstr "" #. type: Content of: <div><div><div><h4> msgid "Other Appliances" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareAtHome" "\">#SpywareAtHome</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Crackers found a way to break the security of an Amazon device, and <a href=" "\"https://boingboing.net/2018/08/12/alexa-bob-carol.html\"> turn it into a " "listening device</a> for them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It was very difficult for them to do this. The job would be much easier for " "Amazon. And if some government such as China or the US told Amazon to do " "this, or cease to sell the product in that country, do you think Amazon " "would have the moral fiber to say no?" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(These crackers are probably hackers too, but please <a href=" "\"https://stallman.org/articles/on-hacking.html\"> don't use “" "hacking” to mean “breaking security”</a>.)</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A medical insurance company <a href=\"https://wolfstreet.com/2018/04/14/our-" "dental-insurance-sent-us-free-internet-connected-toothbrushes-and-this-is-" "what-happened-next/\"> offers a gratis electronic toothbrush that snoops on " "its user by sending usage data back over the Internet</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Sonos <a href=\"https://www.zdnet.com/article/sonos-accept-new-privacy-" "policy-speakers-cease-to-function/\"> told all its customers, “" "Agree” to snooping or the product will stop working</a>. <a href=" "\"https://www.consumerreports.org/consumerist/sonos-holds-software-updates-" "hostage-if-you-dont-sign-new-privacy-agreement/\"> Another article</a> says " "they won't forcibly change the software, but people won't be able to get any " "upgrades and eventually it will stop working." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Lots of “smart” products are designed <a href=\"https://www.cnet." "com/pictures/products-with-alexa-built-in-smart-home/?ftag=CAD6b2b181&" "bhid=27417204357610908031812337994022\">to listen to everyone in the house, " "all the time</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Today's technological practice does not include any way of making a device " "that can obey your voice commands without potentially spying on you. Even " "if it is air-gapped, it could be saving up records about you for later " "examination." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://web.archive.org/web/20180911191954/http://consumerman.com/" "Rent-to-own%20giant%20accused%20of%20spying%20on%20its%20customers.htm\"> " "Rent-to-own computers were programmed to spy on their renters</a>." msgstr "" #. type: Content of: <div><div><div><h4> msgid "Wearables" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareOnWearables" "\">#SpywareOnWearables</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tommy Hilfiger clothing <a href=\"https://www.theguardian.com/fashion/2018/" "jul/26/tommy-hilfiger-new-clothing-line-monitor-customers\">will monitor how " "often people wear it</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "This will teach the sheeple to find it normal that companies monitor every " "aspect of what they do." msgstr "" #. type: Content of: <div><div><h5> msgid "“Smart” Watches" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A very cheap “smart watch” comes with an Android app <a href=" "\"https://www.theregister.com/2016/03/02/" "chinese_backdoor_found_in_ebays_popular_cheap_smart_watch/\"> that connects " "to an unidentified site in China</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The article says this is a back door, but that could be a misunderstanding. " "However, it is certainly surveillance, at least." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "An LG “smart” watch is designed <a href=\"https://www." "huffingtonpost.co.uk/2014/07/09/lg-kizon-smart-watch_n_5570234.html\"> to " "report its location to someone else and to transmit conversations too</a>." msgstr "" #. type: Content of: <div><div><div><h4> msgid "Vehicles" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInVehicles" "\">#SpywareInVehicles</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "Virtual Reality" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInVR\">#SpywareInVR</" "a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "VR equipment, measuring every slight motion, creates the potential for the " "most intimate surveillance ever. All it takes to make this potential real <a " "href=\"https://theintercept.com/2016/12/23/virtual-reality-allows-the-most-" "detailed-intimate-digital-surveillance-yet/\">is software as malicious as " "many other programs listed in this page</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "You can bet Facebook will implement the maximum possible surveillance on " "Oculus Rift devices. The moral is, never trust a VR system with nonfree " "software in it." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Spyware on the Web" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareOnTheWeb" "\">#SpywareOnTheWeb</a>)</span>" msgstr "" #. type: Content of: <div><div><p> msgid "" "In addition, many web sites spy on their visitors. Web sites are not " "programs, so it <a href=\"/philosophy/network-services-arent-free-or-nonfree." "html\"> makes no sense to call them “free” or “" "proprietary”</a>, but the surveillance is an abuse all the same." msgstr "" #. type: Content of: <div><div><div><h4> msgid "JavaScript" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInJavaScript" "\">#SpywareInJavaScript</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "Flash" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInFlash" "\">#SpywareInFlash</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h4> msgid "Chrome" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInChrome" "\">#SpywareInChrome</a>)</span>" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Spyware in Networks" msgstr "" #. type: Content of: <div><div><div> msgid "" "<span class=\"anchor-reference-id\">(<a href=\"#SpywareInNetworks" "\">#SpywareInNetworks</a>)</span>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Investigation Shows <a href=\"https://www.techdirt.com/2016/06/03/" "investigation-shows-gchq-using-us-companies-nsa-to-route-around-domestic-" "surveillance-restrictions/\">GCHQ Using US Companies, NSA To Route Around " "Domestic Surveillance Restrictions</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Specifically, it can collect the emails of members of Parliament this way, " "because they pass it through Microsoft." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Cisco TNP IP phones are <a href=\"https://boingboing.net/2012/12/29/your-" "cisco-phone-is-listening.html\"> spying devices</a>." msgstr "" #. type: Content of: <title> msgid "Malware in Mobile Devices - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Malware in Mobile Devices" msgstr "" #. type: Content of: <div><div><p> msgid "" "Nearly all mobile phones do two grievous wrongs to their users: tracking " "their movements, and listening to their conversations. This is why we call " "them “Stalin's dream”." msgstr "" #. type: Content of: <div><div><p> msgid "" "Tracking users' location is a consequence of how the cellular network " "operates: it needs to know which cell towers the phone is near, so it can " "communicate with the phone via a nearby tower. That gives the network " "location data which it saves for months or years. See <a href=\"#phone-" "communications\">below</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "Listening to conversations works by means of a universal <a href=" "\"#universal-back-door-phone-modem\">back door</a> in the software of the " "processor that communicates with the phone network." msgstr "" #. type: Content of: <div><div><p> msgid "" "In addition, the nonfree operating systems for “smart” phones " "have specific malicious functionalities, described in <a href=\"/proprietary/" "malware-apple.html\">Apple's Operating Systems are Malware</a> and <a href=" "\"/proprietary/malware-google.html\">Google's Software Is Malware</a> " "respectively." msgstr "" #. type: Content of: <div><div><p> msgid "Many phone apps are malicious, too. See <a href=\"#TOC\">below</a>." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Network location tracking" msgstr "" #. type: Content of: <div><div><div><p> msgid "" "This section describes a malicious characteristic of mobile phone networks: " "location tracking. The phone network <a href=\"https://ssd.eff.org/playlist/" "privacy-breakdown-mobile-phones\"> tracks the movements of each phone</a>." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "Strictly speaking, this tracking is not implemented by any specific software " "code; it is inherent in the cellular network technology. The network needs " "to know which cell towers the phone is near, so it can communicate with the " "phone via a nearby tower. There is no technical way to block or avoid the " "tracking and still have cellular communication with today's cellular " "networks." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "Networks do not limit themselves to using that data momentarily. Many " "countries (including the US and the EU) require the network to store all " "location data for months or years, and while stored it is available for " "whatever use the network permits, or the State requires. This can put the " "user in great danger." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "Designs for networks that wouldn't track phones have been developed, but " "using those methods would call for new networks as well as new phones." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Types of malware in mobiles" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#addictions\">Addictions</a>" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid "<a href=\"#deception\">Deception</a>" msgstr "" #. type: Content of: <div><div><h3> msgid "Addictions" msgstr "" #. type: Content of: <div><div><p> msgid "" "Almost every phone's communication processor has a universal back door which " "is <a href=\"https://www.schneier.com/blog/archives/2006/12/" "remotely_eavesd_1.html\"> often used to make a phone transmit all " "conversations it hears</a>." msgstr "" #. type: Content of: <div><div><p> msgid "" "The back door <a class=\"not-a-duplicate\" href=\"https://www.osnews.com/" "story/27416/the-second-operating-system-hiding-in-every-mobile-phone/\"> may " "take the form of bugs that have gone 20 years unfixed</a>. The choice to " "leave the security holes in place is morally equivalent to writing a back " "door." msgstr "" #. type: Content of: <div><div><p> msgid "" "The back door is in the “modem processor”, whose job is to " "communicate with the radio network. In most phones, the modem processor " "controls the microphone. In most phones it has the power to rewrite the " "software for the main processor too." msgstr "" #. type: Content of: <div><div><p> msgid "" "A few phone models are specially designed so that the modem processor does " "not control the microphone, and so that it can't change the software in the " "main processor. They still have the back door, but at least it is unable to " "turn the phone unto a listening device." msgstr "" #. type: Content of: <div><div><p> msgid "" "The universal back door is apparently also used to make phones <a href=" "\"http://www.slate.com/blogs/future_tense/2013/07/22/" "nsa_can_reportedly_track_cellphones_even_when_they_re_turned_off.html\"> " "transmit even when they are turned off</a>. This means their movements are " "tracked, and may also make the listening feature work." msgstr "" #. type: Content of: <div><div><h3> msgid "Deception" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Siri, Alexa, and all the other voice-control systems can be <a href=" "\"https://www.fastcompany.com/90139019/a-simple-design-flaw-makes-it-" "astoundingly-easy-to-hack-siri-and-alexa\"> hijacked by programs that play " "commands in ultrasound that humans can't hear</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some Samsung phones randomly <a href=\"https://www.theverge.com/" "circuitbreaker/2018/7/2/17528076/samsung-phones-text-rcs-update-messages" "\">send photos to people in the owner's contact list</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many Android devices <a href=\"https://arstechnica.com/information-" "technology/2017/04/wide-range-of-android-phones-vulnerable-to-device-hijacks-" "over-wi-fi/\"> can be hijacked through their Wi-Fi chips</a> because of a " "bug in Broadcom's nonfree firmware." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Samsung phones <a href=\"https://www.bleepingcomputer.com/news/security/sms-" "exploitable-bug-in-samsung-galaxy-phones-can-be-used-for-ransomware-attacks/" "\">have a security hole that allows an SMS message to install ransomware</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://techcrunch.com/2016/07/29/research-shows-deleted-whatsapp-" "messages-arent-actually-deleted/\">“Deleted” WhatsApp messages " "are not entirely deleted</a>. They can be recovered in various ways." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A bug in a proprietary ASN.1 library, used in cell phone towers as well as " "cell phones and routers, <a href=\"https://arstechnica.com/information-" "technology/2016/07/software-flaw-puts-mobile-phones-and-networks-at-risk-of-" "complete-takeover/\">allows taking control of those systems</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Samsung's “Smart Home” has a big security hole; <a href=" "\"https://arstechnica.com/information-technology/2016/05/samsung-smart-home-" "flaws-lets-hackers-make-keys-to-front-door/\"> unauthorized people can " "remotely control it</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Samsung claims that this is an “open” platform so the problem is " "partly the fault of app developers. That is clearly true if the apps are " "proprietary software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Anything whose name is “Smart” is most likely going to screw you." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many proprietary payment apps <a href=\"https://www.bloomberg.com/news/" "articles/2016-03-10/many-mobile-payments-startups-aren-t-properly-securing-" "user-data\">transmit personal data in an insecure way</a>. However, the " "worse aspect of these apps is that <a href=\"/philosophy/surveillance-vs-" "democracy.html\">payment is not anonymous</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://phys.org/news/2015-05-app-vulnerability-threatens-millions-" "users.html\"> Many smartphone apps use insecure authentication methods when " "storing your personal data on remote servers</a>. This leaves personal " "information like email addresses, passwords, and health information " "vulnerable. Because many of these apps are proprietary it makes it hard to " "impossible to know which apps are at risk." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "An app to prevent “identity theft” (access to personal data) by " "storing users' data on a special server <a href=\"https://arstechnica.com/" "tech-policy/2014/05/id-theft-protector-lifelock-deletes-user-data-over-" "concerns-that-app-isnt-safe/\">was deactivated by its developer</a> which " "had discovered a security flaw." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "That developer seems to be conscientious about protecting personal data from " "third parties in general, but it can't protect that data from the state. " "Quite the contrary: confiding your data to someone else's server, if not " "first encrypted by you with free software, undermines your rights." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The <a href=\"https://arstechnica.com/information-technology/2014/02/crypto-" "weaknesses-in-whatsapp-the-kind-of-stuff-the-nsa-would-love/\">insecurity of " "WhatsApp</a> makes eavesdropping a snap." msgstr "" #. type: Content of: <div><div><p> msgid "" "This section gives examples of mobile apps harassing or annoying the user, " "or causing trouble for the user. These actions are like sabotage but the " "word “sabotage” is too strong for them." msgstr "" #. type: Content of: <div><div><p> msgid "" "See above for the general universal back door in essentially all mobile " "phones, which permits converting them into <a class=\"not-a-duplicate\" href=" "\"#universal-back-door-phone-modem\"> full-time listening devices</a>." msgstr "" #. type: Content of: <title> msgid "Proprietary Software - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <style> #, no-wrap msgid " .reduced-width { width: 55em; }\n" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Software Is Often Malware" msgstr "" #. type: Content of: <div><div><p> msgid "<a href=\"#TOC\">Table of contents</a>" msgstr "" #. type: Content of: <div><div><p> msgid "<a href=\"#latest\">Latest additions</a>" msgstr "" #. type: Content of: <div><div><p> msgid "" "Proprietary software, also called nonfree software, means software that " "doesn't <a href=\"/philosophy/free-sw.html\">respect users' freedom and " "community</a>. A proprietary program puts its developer or owner <a href=\"/" "philosophy/free-software-even-more-important.html\"> in a position of power " "over its users.</a> This power is in itself an injustice." msgstr "" #. type: Content of: <div><div><p> msgid "" "The point of this directory is to show by examples that the initial " "injustice of proprietary software often leads to further injustices: " "malicious functionalities." msgstr "" #. type: Content of: <div><div><p> msgid "" "Power corrupts; the proprietary program's developer is tempted to design the " "program to mistreat its users. (Software designed to function in a way that " "mistreats the user is called <em>malware</em>.) Of course, the developer " "usually does not do this out of malice, but rather to profit more at the " "users' expense. That does not make it any less nasty or more legitimate." msgstr "" #. type: Content of: <div><div><p> msgid "" "Yielding to that temptation has become ever more frequent; nowadays it is " "standard practice. Modern proprietary software is typically an opportunity " "to be tricked, harmed, bullied or swindled." msgstr "" #. type: Content of: <div><div><p> msgid "" "Online services are not released software, but in regard to all the bad " "aspects, using a service is equivalent to using a copy of released " "software. In particular, a service can be designed to mistreat the user, " "and many services do that. However, we do not list instances of malicious " "dis-services here, for two reasons. First, a service (whether malicious or " "not) is not a program that one could install a copy of, and there is no way " "at all for users to change it. Second, it is so obvious that a service can " "mistreat users if the owner wishes that we hardly need to prove it." msgstr "" #. type: Content of: <div><div><p> msgid "" "However, most online services require the user to run a nonfree app. The " "app <em>is</em> released software, so we do list malicious functionalities " "of these apps. Mistreatment by the service itself is imposed by use of the " "app, so sometimes we mention those mistreatments too—but we try to " "state explicitly what is done by the app and what is done by the dis-service." msgstr "" #. type: Content of: <div><div><p> msgid "" "When a web site provides access to a service, it very likely sends nonfree " "JavaScript software to execute in the user's browser. Such JavaScript code " "is released software, and it's morally equivalent to other nonfree apps. If " "it does malicious things, we want to mention them here." msgstr "" #. type: Content of: <div><div><p> msgid "" "When talking about mobile phones, we do list <a href=\"/proprietary/malware-" "mobiles.html#phone-communications\">one other malicious characteristic, " "location tracking</a> which is caused by the underlying radio system rather " "than by the specific software in them." msgstr "" #. type: Content of: <div><p> msgid "" "As of March 2025, the pages in this directory list around 650 instances of " "malicious functionalities (with more than 750 references to back them up), " "but there are surely thousands more we don't know about." msgstr "" #. type: Content of: <div><p> msgid "" "Ideally we would list every instance. If you come across an instance which " "we do not list, please write to webmasters@gnu.org to tell us about it. " "Please include a reference to a reputable article that describes the " "malicious behavior clearly; we won't list an item without documentation to " "point to." msgstr "" #. type: Content of: <div><p> msgid "" "If you want to be notified when we add new items or make other changes, " "subscribe to the <a href=\"https://lists.gnu.org/mailman/listinfo/www-" "malware-commits\">mailing list <www-malware-commits@gnu.org></a>." msgstr "" #. type: Content of: <div><table><tr><th> msgid "Injustices or techniques" msgstr "" #. type: Content of: <div><table><tr><th> msgid "Products or companies" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-addictions.html\">Addictions</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/proprietary-back-doors.html\">Back doors</a> (<a " "href=\"#f1\">1</a>)" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-censorship.html\">Censorship</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-coercion.html\">Coercion</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-coverups.html\">Coverups</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-deception.html\">Deception</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/proprietary-drm.html\">DRM</a> (<a href=" "\"#f2\">2</a>)" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-fraud.html\">Fraud</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/proprietary-incompatibility.html\">Incompatibility</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-insecurity.html\">Insecurity</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-interference.html\">Interference</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/proprietary-jails.html\">Jails</a> (<a href=" "\"#f3\">3</a>)" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-manipulation.html\">Manipulation</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-obsolescence.html\">Obsolescence</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-sabotage.html\">Sabotage</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/proprietary-subscriptions.html\">Subscriptions</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/proprietary-surveillance.html\">Surveillance</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/proprietary-tethers.html\">Tethers</a> (<a href=" "\"#f4\">4</a>)" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/proprietary-tyrants.html\">Tyrants</a> (<a href=" "\"#f5\">5</a>)" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/potential-malware.html\">In the pipe</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-appliances.html\">Appliances</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-cars.html\">Cars</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "" "<a href=\"/proprietary/malware-in-online-conferencing.html\">Conferencing</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-edtech.html\">EdTech</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-games.html\">Games</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-mobiles.html\">Mobiles</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-webpages.html\">Webpages</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-adobe.html\">Adobe</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-amazon.html\">Amazon</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-apple.html\">Apple</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-google.html\">Google</a>" msgstr "" #. type: Content of: <div><table><tr><td><ul><li> msgid "<a href=\"/proprietary/malware-microsoft.html\">Microsoft</a>" msgstr "" #. type: Content of: <div><table><tr><td><ol><li> msgid "" "<em>Back door:</em> any feature of a program that enables someone who " "is not supposed to be in control of the computer where it is installed to " "send it commands." msgstr "" #. type: Content of: <div><table><tr><td><ol><li> msgid "" "<em>Digital restrictions management, or “DRM”:</em> " "functionalities designed to restrict what users can do with the data in " "their computers." msgstr "" #. type: Content of: <div><table><tr><td><ol><li> msgid "" "<em>Jail:</em> system that imposes censorship on application programs." msgstr "" #. type: Content of: <div><table><tr><td><ol><li> msgid "" "<em>Tether:</em> functionality that requires permanent (or very " "frequent) connection to a server." msgstr "" #. type: Content of: <div><table><tr><td><ol><li> msgid "" "<em>Tyrant:</em> system that rejects any operating system not “" "authorized” by the manufacturer." msgstr "" #. type: Content of: <div><p> msgid "" "Users of proprietary software are defenseless against these forms of " "mistreatment. The way to avoid them is by insisting on <a href=\"/" "philosophy/free-software-even-more-important.html\">free (freedom-" "respecting) software</a>. Since free software is controlled by its users, " "they have a pretty good defense against malicious software functionality." msgstr "" #. type: Content of: <div><p> msgid "<a href=\"/proprietary/all.html\">More items…</a>" msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2013-2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Insecurity - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Insecurity" msgstr "" #. type: Content of: <div><div><p> msgid "" "This page lists clearly established cases of insecurity in proprietary " "software that has grave consequences or is otherwise noteworthy. Even though " "most of these security flaws are unintentional, thus are not malicious " "functionalities in a strict sense, we report them to show that proprietary " "software is not as secure as mainstream media may say." msgstr "" #. type: Content of: <div><div><p> msgid "" "This doesn't imply that free software is immune to bugs or insecurities. " "The difference between free and proprietary software in this respect is the " "handling of the bugs: free software users are able to study the program and/" "or fix the bugs they find, often in communities as they are able to share " "the program, while proprietary program users are forced to rely on the " "program's developer for fixes." msgstr "" #. type: Content of: <div><div><p> msgid "" "If the developer does not care to fix the problem — often the case for " "embedded software and old releases — the users are sunk. But if the " "developer does send a corrected version, it may contain new malicious " "functionalities as well as bug fixes." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"/proprietary/uhd-bluray-denies-your-freedom.html\">UHD Blu-ray " "disks are loaded with malware of the worst kinds</a>. Among other things, " "playing them on a PC requires Intel SGX (Software Guard Extensions), which " "not only has numerous security vulnerabilities, but also was deprecated and " "removed from mainstream Intel CPUs in 2022." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "One of the dangers of the “internet of stings” is that, if you " "lose your internet service, you also <a href=\"https://torrentfreak.com/" "piracy-notices-can-mess-with-your-thermostat-isp-warns-171224/\"> lose " "control of your house and appliances</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "For your safety, don't use any appliance with a connection to the real " "internet." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Amazon recently invited consumers to be suckers and <a href=\"https://www." "techdirt.com/2017/11/22/vulnerability-found-amazon-key-again-showing-how-" "dumber-tech-is-often-smarter-option/\"> allow delivery staff to open their " "front doors</a>. Wouldn't you know it, the system has a grave security flaw." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A “smart” intravenous pump designed for hospitals is connected " "to the internet. Naturally <a href=\"https://www.techdirt.com/2017/09/22/" "smart-hospital-iv-pump-vulnerable-to-remote-hack-attack/\"> its security has " "been cracked</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(Note that this article misuses the term <a href=\"/philosophy/words-" "to-avoid.html#Hacker\">“hackers”</a> referring to crackers.)</" "small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many models of Internet-connected cameras <a href=\"/proprietary/proprietary-" "back-doors.html#InternetCameraBackDoor\"> have backdoors</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "That is a malicious functionality, but in addition it is a gross insecurity " "since anyone, including malicious crackers, <a href=\"https://arstechnica." "com/information-technology/2017/06/internet-cameras-expose-private-video-" "feeds-and-remote-controls/\">can find those accounts and use them to get " "into users' cameras</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many models of Internet-connected cameras are tremendously insecure. They " "have login accounts with hard-coded passwords, which can't be changed, and " "<a href=\"https://arstechnica.com/information-technology/2017/06/internet-" "cameras-expose-private-video-feeds-and-remote-controls/\">there is no way to " "delete these accounts either</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Intel's CPU backdoor—the Intel Management Engine—had a <a href=" "\"https://arstechnica.com/information-technology/2017/05/intel-patches-" "remote-code-execution-bug-that-lurked-in-cpus-for-10-years/\">major security " "vulnerability for 10 years</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The vulnerability allowed a cracker to access the computer's Intel Active " "Management Technology (AMT) <a href=\"https://arstechnica.com/information-" "technology/2017/05/the-hijacking-flaw-that-lurked-in-intel-chips-is-worse-" "than-anyone-thought/\"> web interface with an empty password and gave " "administrative access</a> to access the computer's keyboard, mouse, monitor " "among other privileges." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It does not help that in newer Intel processors, it is impossible to turn " "off the Intel Management Engine. Thus, even users who are proactive about " "their security can do nothing to protect themselves besides using machines " "that don't come with the backdoor." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The proprietary code that runs pacemakers, insulin pumps, and other medical " "devices is <a href=\"https://www.bbc.com/news/technology-40042584\"> full of " "gross security faults</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Conexant HD Audio Driver Package (version 1.0.0.46 and earlier) pre-" "installed on 28 models of HP laptops logged the user's keystroke to a file " "in the filesystem. Any process with access to the filesystem or the " "MapViewOfFile API could gain access to the log. Furthermore, <a href=" "\"https://modzero.com/modlog/archives/2017/05/11/en_keylogger_in_hewlett-" "packard_audio_driver/index.html\">according to modzero</a> the “" "information-leak via Covert Storage Channel enables malware authors to " "capture keystrokes without taking the risk of being classified as malicious " "task by AV heuristics”." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "When Miele's Internet of Stings hospital disinfectant dishwasher is <a href=" "\"https://www.vice.com/en/article/pg9qkv/a-hackable-dishwasher-is-connecting-" "hospitals-to-the-internet-of-shit\"> connected to the Internet, its security " "is crap</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "For example, a cracker can gain access to the dishwasher's filesystem, " "infect it with malware, and force the dishwasher to launch attacks on other " "devices in the network. Since these dishwashers are used in hospitals, such " "attacks could potentially put hundreds of lives at risk." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "If you buy a used “smart” car, house, TV, refrigerator, etc., " "usually <a href=\"https://boingboing.net/2017/02/20/the-previous-owners-of-" "used.html\">the previous owners can still remotely control it</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "4G LTE phone networks are drastically insecure. They can be <a href=" "\"https://www.theregister.com/2016/10/23/" "every_lte_call_text_can_be_intercepted_blacked_out_hacker_finds/\"> taken " "over by third parties and used for man-in-the-middle attacks</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Ransomware <a href=\"https://www.pentestpartners.com/security-blog/" "thermostat-ransomware-a-lesson-in-iot-security/\"> has been developed for a " "thermostat that uses proprietary software</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Antivirus programs have so many errors that <a href=\"https://" "theconversation.com/as-more-vulnerabilities-are-discovered-is-it-time-to-" "uninstall-antivirus-software-61374\">they may make security worse</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "GNU/Linux does not need antivirus software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Malware was found on <a href=\"http://www.slate.com/blogs/" "future_tense/2016/04/11/" "security_cameras_sold_through_amazon_have_malware_according_to_security.html" "\"> security cameras available through Amazon</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A camera that records locally on physical media, and has no network " "connection, does not threaten people with surveillance—neither by " "watching people through the camera, nor through malware in the camera." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "FitBit fitness trackers have a <a href=\"https://www.tripwire.com/state-of-" "security/latest-security-news/10-second-hack-delivers-first-ever-malware-to-" "fitness-trackers/\"> Bluetooth vulnerability</a> that allows attackers to " "send malware to the devices, which can subsequently spread to computers and " "other FitBit trackers that interact with them." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Due to bad security in a drug pump, crackers could use it to <a href=" "\"https://www.wired.com/2015/06/hackers-can-send-fatal-doses-hospital-drug-" "pumps/\"> kill patients</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Hospira infusion pumps, which are used to administer drugs to a patient, " "were rated “<a href=\"https://securityledger.com/2015/05/researcher-" "drug-pump-the-least-secure-ip-device-ive-ever-seen/\">least secure IP device " "I've ever seen</a>” by a security researcher." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Depending on what drug is being infused, the insecurity could open the door " "to murder." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Lots of <a href=\"https://www.wired.com/2014/04/hospital-equipment-" "vulnerable/\"> hospital equipment has lousy security</a>, and it can be " "fatal." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.bunniestudios.com/blog/?p=3554\"> Some flash memories " "have modifiable software</a>, which makes them vulnerable to viruses." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We don't call this a “back door” because it is normal that you " "can install a new system in a computer, given physical access to it. " "However, memory sticks and cards should not be modifiable in this way." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.theguardian.com/world/2013/sep/05/nsa-gchq-encryption-" "codes-security\">The NSA has put back doors into nonfree encryption " "software</a>. We don't know which ones they are, but we can be sure they " "include some widely used systems. This reinforces the point that you can " "never trust the security of nonfree software." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The FTC punished a company for making webcams with <a href=\"https://www." "nytimes.com/2013/09/05/technology/ftc-says-webcams-flaw-put-users-lives-on-" "display.html\"> bad security so that it was easy for anyone to watch through " "them</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"http://spritesmods.com/?art=hddhack&page=6\"> Replaceable " "nonfree software in disk drives can be written by a nonfree program</a>. " "This makes any system vulnerable to persistent attacks that normal forensics " "won't detect." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "It is possible to <a href=\"https://siliconangle.com/2013/07/27/famed-hacker-" "barnaby-jack-dies-days-before-scheduled-black-hat-appearance/\"> kill people " "by taking control of medical implants by radio</a>. More information in <a " "href=\"https://www.bbc.com/news/technology-17631838\">BBC News</a> and <a " "href=\"https://ioactive.com/broken-hearts-how-plausible-was-the-homeland-" "pacemaker-hack/\"> IOActive Labs Research blog</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"https://www.forbes.com/sites/kashmirhill/2013/07/26/smart-homes-" "hack/\"> “Smart homes”</a> turn out to be stupidly vulnerable to " "intrusion." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2013, 2015-2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Proprietary Coverups - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Coverups" msgstr "" #. type: Content of: <div><div><p> msgid "" "This page lists instances where proprietary software had a bug, and the " "developers converted it into a malicious functionality by trying to cover up " "the existence of the bug." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Price Waterhouse Coopers tried to suppress knowledge of a security flaw by " "<a href=\"https://www.zdnet.com/article/pwc-sends-security-researchers-cease-" "and-desist-letter-instead-of-fixing-security-flaw/\"> making legal threats " "against the security company that found it</a>." msgstr "" #. type: Content of: <title> msgid "Proprietary Sabotage - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Proprietary Sabotage" msgstr "" #. type: Content of: <div><div><p> msgid "" "Some malicious functionalities mediate sabotage, i.e. abusive interference " "of the developer into the use of the software, with harmful consequences for " "the users. Examples of such situations are listed below." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<a href=\"/proprietary/uhd-bluray-denies-your-freedom.html\">UHD Blu-ray " "disks are loaded with malware of the worst kinds</a>. Not only does " "playback of these disks on a PC require proprietary software and hardware " "that enforce AACS, a very nasty DRM, but developers of software players are " "forbidden from disclosing any source code. The user could also lose the " "ability to play AACS-restricted disks anytime by attempting to play a new " "Blu-ray disk." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Tesla used software to limit customers to using just <a href=\"https://" "techcrunch.com/2017/09/09/tesla-flips-a-switch-to-increase-the-range-of-some-" "cars-in-florida-to-help-people-evacuate/\">part of the battery of some cars</" "a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The developer of Ham Radio Deluxe <a href=\"https://www.techdirt." "com/2016/12/22/software-company-shows-how-not-to-handle-negative-review/" "\">sabotaged a customer's installation as punishment for posting a negative " "review</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Most proprietary software companies don't use their power so harshly, but it " "is an injustice that they all <em>have</em> such power." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Amazon <a href=\"https://www.techdirt.com/2015/03/24/while-bricking-" "jailbroken-fire-tvs-last-year-amazon-did-same-to-kindle-devices/\"> " "downgraded the software in users' Swindles</a> so that those already rooted " "would cease to function at all." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Oracle's nonfree Java plug-in for browsers <a href=\"https://www.zdnet.com/" "article/a-close-look-at-how-oracle-installs-deceptive-software-with-java-" "updates/\">sneakily installs other annoying proprietary software</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "That article disregards all other bad things about proprietary software. " "For instance, it regards the inclusion of proprietary Flash Player (which " "has a <a href=\"https://web.archive.org/web/20200808151607/http://www." "imasuper.com/2008/10/09/flash-cookies-the-silent-privacy-killer/" "\">surveillance feature</a> and DRM) in Chrome as a good thing. Chrome is a " "proprietary browser with a universal back door." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "We don't agree with the article's views on those issues, but we present it " "as a factual reference." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "In 2014, <a href=\"https://www.computerworld.com/article/2715615/oracle-will-" "continue-to-bundle--crapware--with-java.html\"> Oracle insisted on " "continuing this practice</a>." msgstr "" #. type: Content of: <title> msgid "Malware in Online Conferencing - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Malware in Online Conferencing" msgstr "" #. type: Content of: <div><p> msgid "" "Copyright © 2020, 2021, 2022, 2023, 2024, 2025 Free Software " "Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Amazon's Software Is Malware - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Amazon's Software Is Malware" msgstr "" #. type: Content of: <div><div><div><ul><li> msgid " <a href=\"#swindle\">Kindle Swindle</a> " msgstr "" #. type: Content of: <div><div><div><ul><li> msgid " <a href=\"#echo\">Echo</a> " msgstr "" #. type: Content of: <div><div><div><ul><li> msgid " <a href=\"#misc\">Other products</a> " msgstr "" #. type: Content of: <div><div><div><h3> msgid "Kindle Swindle" msgstr "" #. type: Content of: <div><div><p> msgid "" "We refer to this product as the <a href=\"/philosophy/why-call-it-the-" "swindle.html\">Amazon Swindle</a> because it has <a href=\"/proprietary/" "proprietary-drm.html\">Digital restrictions management (DRM)</a> and <a href=" "\"/philosophy/ebooks.html\"> other malicious functionalities</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Kindle also has a <a href=\"https://web.archive.org/web/20120715070050/" "http://www.amazon.com/gp/help/customer/display.html/?nodeId=200774090\"> " "universal back door</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Electronic Frontier Foundation has examined and found <a href=\"https://" "www.eff.org/pages/reader-privacy-chart-2012\">various kinds of surveillance " "in the Swindle and other e-readers</a>." msgstr "" #. type: Content of: <div><div><div><h3> msgid "Echo" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Other products" msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2014-2024 Free Software Foundation, Inc." msgstr "" #. type: Content of: <title> msgid "Malware in Appliances - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><h2> msgid "Malware in Appliances" msgstr "" #. type: Content of: <div><div><div><h3> msgid "Don't trust “connected” appliances" msgstr "" #. type: Content of: <div><div><div><p> msgid "" "Most of the devices listed here are “connected”—they try " "to talk over the internet with someone (typically a company) other than the " "nominal owner. Such an appliance is inherently untrustworthy: no matter " "what company it is, you should never trust it <em>that far</em>." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "The appliances we are dealing with contain software, almost always nonfree " "software. It is reasonable to treat this software as <a href=\"/philosophy/" "free-hardware-designs.html#boundary\">equivalent to a bunch of circuits</a>, " "provided it is <em>never</em> changed (not even if the change is called an " "“upgrade”)." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "In a connected appliance, it is hard to ensure that software won't be " "changed. Typically a connected appliance will have a universal back " "door—a feature that allows the company to remotely replace the " "software in it, over the internet. Some appliances might be exceptions, but " "we can never verify that a given appliance is an exception. Thus, we can " "never be sure that software in it won't be changed." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "In practice, these “upgrades” can amount to sabotage. Let's " "assume, for instance, that your printer accepts third-party ink cartridges. " "You have no guarantee that, some day, the manufacturer will not install " "malicious code to reject them. With a connected device, you must expect " "this." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "The manufacturer may try to justify these “upgrades” in the name " "of “security.” You can respond by asking: “Whose security? " "Security for me, or for the manufacturer against me?” If the " "manufacturer writes the software, in practice it implements security for " "itself against the customers." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "Even without changing the code in the device, the company can use the “" "connection” to do nasty things to you—for instance, snoop on " "you, your family and your guests, or make it stop running at all." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "The reliable way to prevent abuse of this sort is to block the appliance " "from communicating by internet with anything other than <em>your own " "computer</em>. (You can make your own computer more secure by running " "exclusively free software in it.)" msgstr "" #. type: Content of: <div><div><div><p> msgid "" "In an ideal world, appliances would contain 100% free software, so our " "community could correct any problems the software might have. The free " "software would obey <em>us</em>, not companies. That software would not let " "anyone change it without entering passwords that the <em>owners</em> chose." msgstr "" #. type: Content of: <div><div><h3> msgid "Examples of malware in appliances" msgstr "" #. type: Content of: <div><div> msgid "<a href=\"#content\"><span>BACK TO TOP </span>▲</a>" msgstr "" #. type: Content of: <div><div><h3> msgid "Proprietary malware" msgstr "" #. type: Content of: <div><div><dl><dt> msgid "" "<a href=\"/proprietary/all.html#content\">All items added since 2018</a>" msgstr "" #. type: Content of: <div><div><dl><dt> msgid "By type" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-addictions.html#content\">Addictions</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-back-doors.html#content\">Back doors</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-censorship.html#content\">Censorship</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-coercion.html#content\">Coercion</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-coverups.html#content\">Coverups</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-deception.html#content\">Deception</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-drm.html#content\">DRM</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-fraud.html#content\">Fraud</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-incompatibility.html#content" "\">Incompatibility</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-insecurity.html#content\">Insecurity</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-interference.html#content\">Interference</" "a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-jails.html#content\">Jails</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-manipulation.html#content\">Manipulation</" "a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-obsolescence.html#content\">Obsolescence</" "a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-sabotage.html#content\">Sabotage</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-subscriptions.html#content" "\">Subscriptions</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/proprietary-surveillance.html#content\">Surveillance</" "a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-tethers.html#content\">Tethers</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/proprietary-tyrants.html#content\">Tyrants</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/potential-malware.html#content\">In the pipe</a>" msgstr "" #. type: Content of: <div><div><dl><dt> msgid "By product" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-appliances.html#content\">Appliances</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-cars.html#content\">Cars</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/malware-in-online-conferencing.html#content" "\">Conferencing</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-edtech.html#content\">EdTech</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-games.html#content\">Games</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-mobiles.html#content\">Mobiles</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-webpages.html#content\">Webpages</a>" msgstr "" #. type: Content of: <div><div><dl><dt> msgid "By company" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-adobe.html#content\">Adobe</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-amazon.html#content\">Amazon</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-apple.html#content\">Apple</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-google.html#content\">Google</a>" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "<a href=\"/proprietary/malware-microsoft.html#content\">Microsoft</a>" msgstr "" #. type: Content of: <div><div><dl><dt> msgid "Articles" msgstr "" #. type: Content of: <div><div><dl><dd><ul><li> msgid "" "<a href=\"/proprietary/articles/uhd-bluray-denies-your-freedom\">UHD Blu-ray " "Denies Your Freedom</a>" msgstr ""