4 ms·
We regularly call out random browser extensions doing the same thing, it's not sensationalized to call out a top 10 manufacturer in the "security" space on this
by tastroder 7y ago
We regularly call out random browser extensions doing the same thing, it's not sensationalized to call out a top 10 manufacturer in the "security" space on this behaviour. Anonymization of search histories has, time and time again, been shown to be largely ineffective.
https://www.avast.com/eula https://www.avast.com/eula does not mention Jumpshot and grepping around does not indicate any sensible anonymization and aggregation efforts, just the default legalese whereas the demo video on https://www.jumpshot.com/solutions/industry/retail https://www.jumpshot.com/solutions/industry/retail leads me to believe that while they might not tie histories to a single user, they show statistics like "XX% of users shopping at A, went on to buy at B" which indicates at least some level of unaggregated data / tracking.
If the Vice article is to be believed, that's certainly enough to at least raise an eyebrow. The opt-in the article talks about is likely to be an underspecified mess that's intended to decieve the user, this functionality has simply no place in an AV package. Let's not act like it's hard to get users to press a shiny green button these days. That might be found GDPR compliant in court, it's still not morally right.
- speedgoose 7y agoNo way this is GDPR compliant.
- BlueTemplar 7y agoYeah. But courts are relatively slow. It will likely take half a decade before they get to face real consequences?
- klohto 7y agoYou’re correct about the EULA, any idea when it was last changed? I’ll look into this and correct myself but since I know few people working there, I heard stories about the process and how regulated it is.
- tastroder 7y agoThe top of that page says "Version 1.11 (Revised April 1, 2019)", the history seems to be this (linked at the bottom): https://www.avast.com/eula-legacy https://www.avast.com/eula-legacy I'll give them the benefit of the doubt but if the Vice report is accurate, the business practice needs changing, not their terms of service.