Gnutella and Spyware

I wonder if anybody knows anything about Gnutella servers and clients and SpyWare. I read Bearshare has spyware in it. Obviously I am not happy with that. Has anybody any info on spyware in any Gnutella applications?????

[ryan15575]

Use an OpenSource client such as Phex and you know for sure that there is nothing 'extra' in it.

[Vinnie]

This is a copy of a response to a user with a similar question who posted on BearShare.Net

---

>I posted this message under another
>discussion, but I want to
>make sure someone sees it.

I see it, I'll do the best I can to help you understand what's going on.

>I'm confused about spyware and
>what it does and how
>to get rid of it.

"Spyware" is software which is usually sneaked onto your computer by another program. These programs collect information about you and send them to a company.

What kind of information? Why is it collected?

Usually, these programs collect information that would be useful for advertising. For example, if you had a lot of games on your computer, an advertiser might show you a banner for a gaming related product like a joystick or something like that.

If you have programs like Word and Excel, then a game banner would not be appropriate and you might get an advertisement for something business related.

This information is valuable, because it helps advertisers waste less money by getting their message to the right people.

For example, if you are a woman, you are probably not interested in seeing ads for adult content or Viagra.

>When I downloaded and installed, I
>chose only to install Bearshare
>and none of the others.
>This is my work computer,
>so I can't put too
>much extra stuff on it
>without getting noticed.

The other products you are talking about are "Onflow", "New.net", and "SaveNow". A description of each:

Onflow is designed basically to let advertisers create very attractive banners and interstitials (popups) that have animation. These ads can also be animated. Onflow only DOES something if you visit a site that has Onflow content (for example, http://www.onflow.com in the Gallery). One of the cool features is that the ads are EXTREMELY small to download, since the Onflow player (installed on your computer) has special functions built into it that let it do rich graphics. Some users object to Onflow, because it sends a report of banner activity to their web site periodically. The report includes the number of times you saw an ad, how many times you clicked, and how long you saw the advertisement. This information is extremely useful, and increases the value of the advertisements.

New.net is a plug-in that lets you resolve new "top level domains". The existing top level domains (.com, .net, .org, etc...) are all controlled by one organization called ICANN. Recently, they have expanded the number of top level domains to include seven new ones. However, many companies are disappointed with their choices and there were a lot of politics involved. New.net, a product of IdeaLab, offers their own alternate domans like .mp3 and .shop for example. Since their domains are not "officially approved", some extra software is required in order to use their service. Some users object to New.net, because they believe it is spyware, however there is no evidence that New.net sends any information about you.

SaveNow is an "offer companion" program which runs in the background and periodically shows you a popup window while you surf the web that is relevant to the site you are visiting. For example, if you visit Amazon.com you might see a popup with a coupon for 30% off your next purchase at Half.com (a site that offers quality used CDs for less). SaveNow must periodically contact its server in order to download an updated list of new offers. Some users object to SaveNow because they believe that it "spies" on you by sending information during this communication. However, there has been extensive analysis of SaveNow communication and it has been proven it does no such thing. In fact, the company which produces the product, WhenU.com, has taken steps to make sure that the communication is done in plain clear text. The SaveNow program "targets" the popup windows by analyzing the web site you visit (based on the URL), without sending or storing any of this information.

>When I
>found out that Bearshare has
>spyware attached, I tried to
>read up on it, but
>I don't know that much
>when it comes to technical
>computer jargon.

This is completely understandable. A lot of people have critized BearShare, and used this forum to spread lies and misinformation.

BearShare does not have "spyware attached". It comes with three additional products from different companies which offer an optional installation. These products were selected because they protect your privacy and offer useful functions (like saving you money when you shop).

If you want to do some reading, try looking up "Gator", "Webhancer", "Flyswat", and "Comet cursor".

These are TRUE SPYWARE programs. In their privacy statement, they basically tell you that they are going to collect as much information as possible, and then sell it to third parties.

BearShare is free - it is supported through advertising and our relationships with third party companies. Free Peers, Inc. has been very selective with the companies it chooses to do business with, and any sane rational person who takes the time to truly research these products, as well as the other true spyware products I mentioned, would see a huge difference.

>I got confused
>when reading all the info
>about what it does. I
>did decide that I would
>download Ad-Aware so that none
>of my information would be
>shared with anyone- once again
>it's a WORK computer and
>I don't need to be
>transmitting WORK info out there.

This is a misconception - the "information" which is valuable to advertisers has nothing to do with your "work information". Work information is things like reports, charts, spreadsheets, etc...

I do not know of any programs that collect that type of information, it is simply not valuable and could also be considered illegal.

The "information" which is of value is things related to your surfing habits, your personal preferences, and your demographic information.

For example, a teenager would probably not be interested in anti-wrinkle cream.

>When I ran it, sure
>enough, there are 3 spyware
>cookies that come up for
>me to delete. I opted
>out of the bundled software,
>but I still get them.
>If we have a choice,
>then why do I have
>spyware on my computer?

First of all, cookies are technically not 'spyware'. Second, these cookies were not introduced by BearShare, or any of the bundled products.

You got these cookies when you surfed the Internet and saw ad banners.

>What really bothers me, though, is
>that I have to delete
>the files all the time.
>They keep reappearing. What is
>going on?? Why can't I
>just get rid of them?

In order to eliminate cookies, you have to turn cookies off in the browser. Surfing the Internet without cookies is NOT fun! You will have to re-enter your passwords and information on any sites that you visit with a login, like Yahoo!, or Amazon.com.

Once again let me point out that neither BearShare nor any of the other bundled products included with BearShare use cookies.

>If anyone has some info about
>what kind of info I
>am transmitting out of here
>(in plain English!), I'd really
>like to know more about
>this program.

>For instance, I've
>read some posts about how
>all this illegle porn is
>available for download on Bearshare.
>If someone is getting all
>the info on our computers,
>can't they tell who is
>downloading that stuff?

This is a misconception. There is no existing program that "gets all the info on our computers". Its not like someone presses a button and POW your entire computer is transmitted over the Internet!

Another misconception, is that you need to install spyware to see who is downloading pornography.

This is not true. If someone wanted to, they could set up a server that offered files with pornographic names, and keep a log of who came to download them.

In fact, this is exactly what Zeropaid.com did with their "wall of shame", in an attempt to expose the extent to which child pornography has invaded the Internet.

Unless you are very technical and use anonymous proxies, along with special software, there is no way to prevent a web site from knowing your IP ADDRESS when you visit. This is how the Internet works (more specifically, this is how TCP/IP, the fundamental communication protocol, works).

>Seems like
>a good way to catch
>child porn people to me.
>I've read the "busted" comments
>too- how are people getting
>tracked down for downloading or
>sharing copywrited files? How does
>that work?

It works like this: a company passively listens in on the Gnutella network and makes a note of files they believe are copyrighted, along with the IP ADDRESS of the user sharing the file. Then, they attempt to download the file and see if it contains infringing content.

If it does, they make a note of the time and day that IP ADDRESS was connected to the Internet. Using public resources and websites, they find out the Internet Service Provider (ISP) which owns the IP ADDRESS, and submit a request with the address and the time and date. The ISP usually keeps a log of who was connected at what time, and what IP ADDRESS they had.

This way, they can correlate an IP ADDRESS with an actual user's billing information and therefore identity.

>I'd basically like to know what
>Spyware is capable of, and
>what it is used for
>on Bearshare.

BearShare is not spyware, does not use spyware, and does not transmit nor collect personal information about you.


By the way, thanks for coming out and asking the tough questions, but in a nice way. You are a good example of how users should behave in the forum when they have questions, comments, or desire more information.

You are always welcome here.

[bodhi]

Bearshare is very questionable. It has these intrusive ad-ware programs that are bundled with the installation and unless you are careful you may very well wind up installing them unintentionally. Once they are installed they are difficult to remove, and several people have had their entire Operating Systems ruined trying to uninstall them.

In addition, there has been some question about non-standard encrypted data packets which only Bearshare uses. Vinnie has claimed that these are harmless and are only used for detection of obsolete versions of Bearshare, but they really could be anything. If you read these forums you will also discover that Vinnie is a rather unstable personality and should probaly not be completely trusted.

The upshot of all of this is that there are a number of stable, working servents available which are reliable and don't raise any of these issues in any way. Bearshare is no better or no worse than most of them, so why put yourself in a position of having to even think about these things when you can be using an open source servent that won't keep you up at night worrying or trying to re-install your Windows.

Try Gnucleus, Phex, Gnotella, of Limewire instead.

Hope this helps...

Thanks Vinnie for this really good explanation of what all those side programs are and will do when one isntalls Bearshare.

Very much appreciated. This information should accompany every Bearshare installation!

You are wrong in one point however.
What these additional programs are IS spyware.

They get into computers, mostly unwittingly, not by people wanting them there!
But they are more or less forced into them and provide information on surfing habits and press people to look at certain popups.

THIS IS WHAT SPYWARE DOES AND WHERE THE NAME COMES FROM AND WHAT THE NAME 'SPYWARE' IMPLIES.

That is where you make 'normal' Gnutella Net users like myself into advisaries, and get us to make others aware of what Bearshare does on the FREE Gnutella Network, without telling it to unsuspecting and software illiterate users, which there are millions of out there on the web.

Not good, dear Vinnie. You are going the wrong direction with Gnutella, by trying to make money out of it.
Stop working on your Bearshare program, if you think you don't get paid enough for it! Get a job instead.

There are others, who will spend their spare time and make some greats Gnutella Net clients, which do NOTHING MORE than what one expects they do!

Please post your information to more forums (re Onflow, Savenow etc.) and package it into the Bearshare installation, and ENSURE that people MUST READ it, before they install BEARSHARE.
If Bearshare is a very good client (and it certainly looks like you have done a very good work with it, it is stable and provides great features), you may consider creating your own 'Bearshare Net' for Bearshare users, which is quite easy to do, and leave the 'Gnutella Net' alone for true free file sharing enthusiasts like myself.

JD

I want to thank Vinnie for his response in this thread regarding BearShare and New.net.

My own experience with BearShare was this:

I already had Limewire on my system... I decided to try BearShare.

After installing BearShare I immediately began having problems with errors and freezes.. I also began having problems with Limewire and my browsers. I thought the problems were associated with BearShare and uninstalled it.

The problems continued.

It began to appear that the problems were actually associated with the file: newdotnet2_109dll.

I didn't know where this file came from or what it was about. After some searching on the Usenet I learned the file was created by installing the New.net plugin on my system and that others were experiencing problems with this file or variations of it. I hadn't been aware that I'd installed the New.net plugin. Apparently I did when I installed BearShare and not payed much attention to the choices present during the installation process.

After getting the New.net plugin and the newdotnet dll file off my system my I'm running fine.

I will probably try BearShare again at some point. I will be paying attention to the installation and be very careful about what actually is installed.