Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Microsoft Says IE8 Phoning Home Is "Pretty Innocuous"

Posted by kdawson on Sun Sep 14, 2008 10:53 PM
from the unlike-that-other-browser dept.
CWmike writes "Microsoft has defended the IE8 tool that suggests sites based on URLs typed into its address bar, saying that the browser 'phones home' only a limited amount of information to Microsoft and that the company discards all user IP addresses almost immediately. Company managers also contrasted IE8 Beta 2's 'Suggested Sites' feature with the 'Suggest' feature used by Google Chrome, saying that Microsoft's requires the user's explicit permission before it's used. They did acknowledge a bug that prevents the request from reappearing when users reinstall the browser. Cyra Richardson, a Microsoft principal program manager on the IE team, said: 'Suggested Sites is connected to the browser's history, and it's not looking at each of the keystrokes. IE only captures the URL as it is navigated [to], when that URL goes into your history.' Nor does Suggested Sites log and transmit cookies to Microsoft's servers, as does Google Suggest, Richardson said. 'The data we log is actually pretty innocuous.'"
+ -
story

Related Stories

This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by line-bundle (235965) on Sunday September 14 2008, @10:59PM (#25005111) Homepage Journal

    "We are going to use the data to sell you Zunes?"

    • As long as it works with a Zune.

    • by jellomizer (103300) on Monday September 15 2008, @07:56AM (#25008507)

      If Google does it, it is because they are using the information to help us.
      If Microsoft does it, it is used for evil.

      CONSISTENCY PEOPLE!

      • by Anonymous Coward on Monday September 15 2008, @08:07AM (#25008687)

        Or could you choose another browser?

        Now, can you remove IE from windows?

        RATIONAL THOUGHT, PEOPLE!

      • Re: (Score:3, Interesting)

        If Google does it, it is because they are using the information to help us.
        If Microsoft does it, it is used for evil.
        CONSISTENCY PEOPLE!

        Except we know Google will store and OWN all the data. And, if it comes from someone criticizing the Chinese government, it will turn over said data to said government.

  • by Anonymous Coward on Sunday September 14 2008, @11:01PM (#25005121)

    If Google does it, they do it because they "probably have to." Luckily, they said they "do no evil" so that means they're absolute good and thus immune to scrutiny.

    If Microsoft does it, then they're obviously logging all the data on you and plan to sell it to the highest bidder, to use to pay for restrictive DRM technologies and run over old ladies in the street. Though you do not have facts to back up the last statement, you've always conceded that they are a luxury around here. Besides, Microsoft is a convicted monopolist, which somehow magically changes all the rules on logical arguments, or something.

    Did I get it all right? I know there's nothing about Apple in here, but I'll try harder next time.

    • by lewp (95638) on Sunday September 14 2008, @11:28PM (#25005297) Journal

      Eh, privacy nuts get on Google about things like crazy nowadays. I seriously doubt either company is up to some nefarious plot to stealz mah dataz through my web browser, but I don't mind some of the more paranoid folks keeping them honest. If they have to explain to an angry person every time they collect a piece of info, I figure they'll be less likely to try and pull a fast one.

      • by cbiltcliffe (186293) on Monday September 15 2008, @12:01AM (#25005505) Homepage Journal

        My question is, what does "almost immediately" mean?

        In my experience, PR/advertising/lawyer types are very careful what they say. They don't lie outright, but will frequently mislead with seemingly innocuous statements that seem to mean one thing, but when they are really looked at, mean something else entirely.
        If they'd said that IP addresses were discarded immediately, that would mean that as soon as the information transaction is completed, the IP address is no longer needed, so it's discarded.

        Saying "almost" immediately, means it is not discarded at this point. What does "almost" mean in this context, coming from a Microsoft PR person?
        Is it discarded almost immediately, after a "small" amount of data analysis is done for marketing purposes?
        Is it discarded almost immediately after a scheduled task to purge their server logs once a day?
        Is it discarded almost immediately after the DOJ gets on their case about keeping it?

        • by Screaming Cactus (1230848) on Monday September 15 2008, @01:26AM (#25005961)

          "Almost immediately" means it's discarded right after the URL is linked to your profile in their Global Database of Evil and forwarded to hundreds of Cheap Viagra internet companies and the NSA, all of which takes about a second, which IS almost immediately.

        • Re:Just remember... (Score:5, Informative)

          by Anonymous Coward on Monday September 15 2008, @01:40AM (#25006057)

          Well if you'd just RTFA... you'd see that "PR/advertising/lawyer types" did not say "almost immediately", the journalist did.

          What was said by Microsoft about the IP was quite clear:

          "We capture as little uniquely identifiable information as possible," said Cyra Richardson, a Microsoft principal program manager on the IE team. "We capture the URL that the user is visiting, the version of the browser and general locale information."

          To determine the latter, and to know where to send the suggested site results, Microsoft also captures the IP address of the user, said Richardson. But unlike Google, Microsoft tosses the IP address as soon as it delivers the recommendations. "We take the IP address, get all the information that we need from it and then throw out the address," said Andy Zeigler, a program manager with the IE group. Richardson confirmed that the Suggested Sites database contained no user IP addresses.

          But I guess that's no good for your water-cooler soap-box look-at-me speech, is it?

          • Re:Just remember... (Score:4, Interesting)

            by CastrTroy (595695) on Monday September 15 2008, @07:43AM (#25008343) Homepage
            Just because they throw out the original IP Address, doesn't mean they can't identify you on subsequent visits. Let's say they make a hash of your IP Address, combined with your ISP, which could be obtained based on your IP address. This would probably make the hashes mostly unique, or even completely unique if the key in the database was Hash(IPAddress), ServiceProviderID. They could throw out your IP address, and nobody would be able to figure out your IP based on their data, but they'd still be able to uniquely identify you.
            • we take the IP address, get all the information that we need from it...

              ie, "We only record the first four bytes of the IP address, then we toss the rest"

            • by I'm Don Giovanni (598558) on Monday September 15 2008, @12:59PM (#25013799)

              In other words, no matter what Microsoft says or does, you'll condemn them, so what's the point? You've made up your mind to condemn Microsoft regardless while giving Google a pass for much worse.

              You're logic is astonishing. Microsoft's Suggested Sites feature is much less intrusive than Google's yet you condemn Microsoft because they might become more intrusive in the future? Meanwhile you give Google a pass for being more intrusive than Microsoft in the present? Are you for real?

    • by blahplusplus (757119) * on Sunday September 14 2008, @11:46PM (#25005417)

      "If Google does it, they do it because they "probably have to." Luckily, they said they "do no evil" so that means they're absolute good and thus immune to scrutiny."

      It's been obvious to anyone with half a brain that google (and most other websites who are able to and have a clue) logs damn near everything. Many are just covert / quiet about it.

      Technically makes privacy pretty moot unless we pass laws enforcing companies to build encryption into everything. The truth is the majority of people are not educated enough, nor even have an inkling of an idea of how computers work and that everything they do is recorded, that when you're on the internet you are totally naked.

      The nature of networks themselves by having to communicate back and forth with one another in order to 'browse' (really in the ultimate sense sending and receiving files and bits of data). Means you are constantly broadcasting and receiving data, thereby leaving all those breadcrumbs for everyone who has a clue to read about you and compile on you.

      The fact is though we have done this to ourselves by adopting technologies and caring more about content and what value it adds to our lives then any amount of the values in regards to privacy we claim to care about... the internet and our lack of encryption/laws, etc, enforcing security of information from the get go proves we don't give a fuck about privacy very much. Simply because it's too inconvenient.

      The really hard core about privacy (tor, encryption, etc) are evidence of the common man, and probably common slashdotter's total lack of concern about his or her own privacy. Otherwise we'd be using them and demanding these services but no one wants to expend the political energy an/or the money to pay for them. Hence we don't really give as much of a fuck as we seem to since our actions do not match our words in regards to the amount of whining about privacy we output.

    • Re: (Score:2, Insightful)

      The difference, of course, is that Microsoft has been obviously evil for a long time, and google hasn't been sprung eviling it up yet (aside from bundling that toolbar, but as that doesn't affect me personally i don't care, but i digress). On past experience, i trust google a lot more than ms. Despite this google is definately not immune to nerd rage as everyone jumps on them as soon as they look like they're collecting data on anything, so i don't really see how this is unfair to microsoft, they've been
    • Re:Just remember... (Score:5, Interesting)

      by Koiu Lpoi (632570) <koiulpoi&gmail,com> on Sunday September 14 2008, @11:51PM (#25005463)

      Though you do not have facts to back up the last statement, you've always conceded that they are a luxury around here.

      Holy Jesus man, have you even been to any other web forum? Compared to the normal signal-to-noise ratio on the internet, Slashdot (if you browse at +3 or +4) is a cut or three above just about anything else, and almost exclusively so for unmoderated forums. But yeah, other than that, you hit the "groupthink" idea right on, except for that a lot of people, lately, have been getting annoyed at google's "collect data for everything" policy, among other things.

    • Re: (Score:3, Informative)

      Its all about track record.

      Microsoft has a track record for shady business practices.

      Google does not.

      Of course people are going to be quicker to bash Microsoft than Google.

      • Re: (Score:3, Funny)

        Whoosh!

        Boom!

        The Whoosh! was the humour in the OP apparently flying over your head.

        The Boom! when the joke broke the humour barrier and put the mods into a case of shock, apparently causing them to mod you up.

  • Suggestions? (Score:5, Insightful)

    by Waccoon (1186667) on Sunday September 14 2008, @11:02PM (#25005133) Homepage

    So, we see "targeted" ads and have "suggestive" sponsorship in other browsers in exchange for getting the browser for free.

    Isn't IE a part of Windows, and don't we sort of pay for it already?

  • damn right...almost (Score:3, Interesting)

    by ILuvRamen (1026668) on Sunday September 14 2008, @11:04PM (#25005147)
    Google bought youtube and has shown me videos related to ones I watched about a month after they bought them. Their horrible privacy standards need to be complained about a little louder. I think a big spyware browser that follows you around and reports back where you go is where we should draw the line. However, Microsoft doesn't seem to understand that just because google's browser is worse, that doesn't mean IE8 is okay.
  • pr0n (Score:5, Funny)

    by pizzach (1011925) <pizzach@@@gmail...com> on Sunday September 14 2008, @11:06PM (#25005161) Homepage
    I absolutely hate site suggestions when I mistype an URL. Why? Because if the url contains the phrase "kicks-ass", my ISP starts advertising porn.
    • Re: (Score:3, Funny)

      by Anonymous Coward

      Whats your ISP? I'd like to use it to... erm... do "research".

    • Re: (Score:2, Funny)

      by Anonymous Coward

      The same happens to me with URLs containing penisland, cummingfirst, and whorepresents.

    • I absolutely hate site suggestions when I mistype an URL. Why? Because if the url contains the phrase "kicks-ass", my ISP starts advertising porn.

      You don't even need a 'suggestions' feature for that. S[pc]ammers and pr0n site operators have bought up every conceivable typo/variation of any popular domains already.

      • You don't even need a 'suggestions' feature for that. S[pc]ammers and pr0n site operators have bought up every conceivable typo/variation of any popular domains already.

        True. But since I'm paying for the isp, I expect them to be a little bit more professional. Since I had gotten the search page, the url at least didn't exist in that type/variation. A default safe search filter would be the very conservative thing to do.

      • Re:pr0n (Score:5, Funny)

        by pyrrhonist (701154) on Monday September 15 2008, @01:18AM (#25005927)

        I get porn suggested just b/c i type in 'tea-bag' but then I'm like..hmmm this looks interesting.

        ProTip: Instead of searching, bookmark Bungie.net for when you want to see your Halo profile.

  • by kclittle (625128) on Sunday September 14 2008, @11:09PM (#25005179)
    A big, powerful, arrogant company is telling me that their very iffy handling of my personal data is "OK" because some other big, powerful and arrogant company is already doing pretty much the same?

    Oh, I feel much better now...
    • by Stan Vassilev (939229) on Sunday September 14 2008, @11:44PM (#25005405) Homepage

      A big, powerful, arrogant company is telling me that their very iffy handling of my personal data is "OK" because some other big, powerful and arrogant company is already doing pretty much the same?

      Spinning things against Microsoft/Google even if there's no basis for your statements, is just as bad as Microsoft/Google spinning things in their favor when there IS basis.

      In both cases, it's disinformation which promotes acting on "gut feelings" and ignorance.

      The feature is quite innocent and handy, as it's apparent that anything less would be torn apart from the community.

      Last couple of years Microsoft is showing some signs of listening to their customers and they're well on track repairing their IE/Vista fiascos. If all they get in return is the same overly negative responses, they'll just stop trying.

    • Do you live in the US? You'd have to be used to this by now, if you follow politics at all. One big, powerful, arrogant party tells you that, yes, what they're doing might be wrong, but it's "OK" because the other big, powerful, and arrogant party already does it.
  • Open up the protocol (Score:5, Interesting)

    by henrypijames (669281) on Sunday September 14 2008, @11:13PM (#25005193) Homepage

    Microsoft and Google should just publish the exact data exchange protocol used by their respective "smart search" features -- and keeps those documentations up to date, of course.

    The protocols are gonna get out, anyway -- someone will snoop them out soon enough. Better have an official documentation than endless wild rumors, and the whole thing would hardly cost any resources.

    • Re: (Score:3, Insightful)

      Publishing the protocol is pointless. You'll still have to take their word on what they do with the data after they receive it.

    • And an opt-out option, FFS (if not making the tool opt-in). And I mean that across all browsers, not just MSIE8 and Chrome.

      I hope it would be safe to assume that when you've got porn mode enabled (err, I mean private browsing) that this data transfer wouldn't happen regardless of whether you've opted-in/out.

  • Nor does Suggested Sites log and transmit cookies to Microsoft's servers, as does Google Suggest, Richardson said. 'The data we log is actually pretty innocuous.'"

    Well, as long as it's "pretty" innocuous, I guess it's OK. /sarcasm

    As for that annoying Google Suggest, I killed that by having my proxy add the "SG=0" item to the PREF cookie. Dear Google (and Ask), Traffic for every keystroke is messed up.

  • If Microsoft wants to log data back to the home base for IE 8, it should do one of 2 things, since it's a beta. 1) before install, clearly acknowledge that they WILL be collecting data, and more precisely, describe exactly what the data will be or 2) ask users if they wish to let Microsoft receive data and again, a description of what that data will be.

    Would one not think that it would be just common courtesy to do that?

  • by StefanJ (88986) on Sunday September 14 2008, @11:28PM (#25005293) Homepage Journal

    1) After installing IE8, webcam tracks your movements around the room.

    2) Strange giggling from PC speakers when you Agree to the EULA.

    3) When you start Spybot Search & Destroy you get a phone call from someone sounding an awful lot like Jerry Seinfeld threatening your pets.

    4) Paperclip is back, and now its mad.

    5) The next time you hear the phrase "actually pretty innocuous" is in President Palin's speech about what happens in Loyal Citizens' Youth Brigade moral rectification camps.

    6) You printer puts job sheets at the beginning of each document. Job sheets with coupons for Brawndo.

    7) Activity gadget in upper right hand corner of browser is a Total Information Awareness icon.

    8) Entering URL for Chrome download page redirects to gay furry bondage snuff porn site.

    9) After refusing to upgrade to IE8 you wake up to find the Firefox's severed head on your bed.

    10) Ghost of grandmother appears to you in dream, begging you to install Ubuntu. Which is just plain weird because she was a Slackware fan!

  • by fuzzyfuzzyfungus (1223518) on Sunday September 14 2008, @11:36PM (#25005361) Journal
    I am sick of hearing how XYZ is ok because "Look, foo does bar!". It annoys me in politics, and it annoys me in the disgusting race to the bottom that is our handling of the "consumer desktop". Yes, I know that google is injecting ads into my dreams, that doesn't mean I want microsoft pulling my url history. Yes, I know that EA prefers DRM that is draconian and incompetent, that doesn't make "fairplay" any fairer.

    People need to stop hiding behind the even worse failings of others, and start justifying themselves in terms of why they don't suck rather than why the suck incrementally less than the other guy. FFS.

    /rant
    • by RobertM1968 (951074) on Sunday September 14 2008, @11:46PM (#25005419) Homepage Journal

      Wow... an intelligent post!!! Someone mod this -1 Overrated or -1 Offtopic, or some other minus moderation quickly! ;-)

      Or... maybe someone with mod points can mod it up, since it is one of the most insightful posts in this topic so far. Fuzzy is right on the mark... Microsoft's (and too many other companies who are starting to play the same game) answer sounds like my brother and I when we were little kids... "But he did that!!!"

      This isn't elementary school. These are supposed to be businesses.

    • Re: (Score:3, Insightful)

      So then don't use that feature? I see nothing wrong with a company offering a feature that you need to trade a little privacy to take advantage of, as long as it is your choice whether or not you use it.
  • by syousef (465911) on Monday September 15 2008, @12:30AM (#25005671) Journal

    After all most users who pirate Microsoft products discard most of them almost immediately.

    Yeah that works doesn't it? If you violate someone's right's it's not okay just because you do it for a short time! Cuts both ways.

  • evil (Score:4, Funny)

    by David Gerard (12369) <slashdot@@@davidgerard...co...uk> on Monday September 15 2008, @02:17AM (#25006263) Homepage

    "We're not evil [today.com]," said Google. "We just want to know your confidential business data, bank account details, medical information, personal preferences in pornography and DNA code. Microsoft ... they want to make you use Windows Live Search."

  • A better feature (Score:5, Interesting)

    by CrackedButter (646746) on Monday September 15 2008, @03:27AM (#25006619) Homepage Journal
    would be for browsers to have auto correction feature in the address bar. I've typed a comma many times into the bar by accident and no website uses them but why does the browser insist on searching first before telling me the address is incorrect. It should note the error and replace it with the full stop.
  • and... (Score:3, Funny)

    by Shads (4567) <shadus AT shadus DOT org> on Monday September 15 2008, @05:25AM (#25007341) Homepage Journal

    ... me not upgrading to IE 8 is pretty innocuous too!

    • Re: (Score:2, Insightful)

      They should be sued for electronic monitoring without a warrant!

      They explicitly ask you if you like to get suggestions or not. You can say NO.

      • do they also explain how suggestions works? something like: 'if you choose to allow suggestions, we will gather the addresses of all the pages you look at for analysis'.
    • by jamstar7 (694492) on Monday September 15 2008, @01:04AM (#25005855)
      Um, in both cases, you, the consumer, are the product in that you're using a product/service that's ultimately for someone else's good. In Google's case, it's the advertisers. In Microsoft's case, it's themselves and with the introduction of Vista, it's also the media companies vis a vis the DRM built into it.