Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
The Internet

The Wayback Machine is Deleting Evidence of Malware Sold To Stalkers (vice.com) 92

The Internet Archive's Wayback Machine is a service that preserves web pages. But the site has been deleting evidence of companies selling malware to illegally spy on spouses, Motherboard reported Tuesday. From the report: The company in question is FlexiSpy, a Thailand-based firm which offers desktop and mobile malware. The spyware can intercept phone calls, remotely turn on a device's microphone and camera, steal emails and social media messages, as well as track a target's GPS location. Previously, pages from FlexiSpy's website saved to the Wayback Machine showed a customer survey, with over 50 percent of respondents saying they were interested in a spy phone product because they believe their partner may be cheating. That particular graphic was mentioned in a recent New York Times piece on the consumer spyware market.

In another example, a Wayback Machine archive of FlexiSpy's homepage showed one of the company's catchphrases: "Many spouses cheat. They all use cell phones. Their cell phone will tell you what they won't." Now, those pages are no longer on the Wayback Machine. Instead, when trying to view seemingly any page from FlexiSpy's domain on the archiving service, the page reads "This URL has been excluded from the Wayback Machine."

This discussion has been archived. No new comments can be posted.

The Wayback Machine is Deleting Evidence of Malware Sold To Stalkers

Comments Filter:
  • robots.txt (Score:5, Interesting)

    by Thad Boyd ( 880932 ) on Tuesday May 22, 2018 @01:06PM (#56654476) Homepage
    The Wayback Machine obeys robots.txt [archive.org], even retroactively. If a site puts up a robots.txt file, archive.org will remove old versions of the site.
    • Indeed, it's not an immutable archive of all that ever was. I would hope they would actively preserve the data if presented with a court order, at least.
      • Re:robots.txt (Score:4, Insightful)

        by gnick ( 1211984 ) on Tuesday May 22, 2018 @01:46PM (#56654746) Homepage

        The thing about preserving data is that you need to do it before the court order to be of any use.

        • Re: (Score:2, Informative)

          by Anonymous Coward

          the wayback machine does not delete stuff. It will remove it from the public site at the request of robots.txt, but it doesn't actually delete its archive. If robots.txt changes again, it comes back

    • by Anonymous Coward on Tuesday May 22, 2018 @01:40PM (#56654702)

      It is very annoying, but that's how it works. The worst is when a site that is owned by an entity who goes out of business is preserved by the wayback machine, but then another entity gets the domain, puts up a robots.txt and there goes all the history.
      For all the good it is doing, it would be so much better if it did not apply robots.txt retroactively. It doesn't even make sense, robots.txt says "bots stay out", which is not nearly the same as "bots, forget whatever you had visited in the past"...

    • Re:robots.txt (Score:4, Interesting)

      by jythie ( 914043 ) on Tuesday May 22, 2018 @01:50PM (#56654774)
      It is not all that mysterious that such a policy or mechanism exists, but it still highlight's the piece's argument that we need more archives since a single point of failure is, well, a single point of failure. I remember growing up people talking about how 'the internet is forever' and 'once it is out there it is always there', but over the decades one slowly finds more and more things that seem to be gone for good if they fail to be popular enough to keep spreading.
    • by Anonymous Coward

      And then they stopped obeying it: https://blog.archive.org/2017/04/17/robots-txt-meant-for-search-engines-dont-work-well-for-web-archives/ [archive.org]

      Which is bad and will lead to countermeasures from an increasing number of people. I for one intend my web sites to be a transient form of communication. I don't care if you personally make a copy for yourself, but the pages are not for someone who didn't read them when they were published. I absolutely do not want to fuel any stalking, mild or threatening. I am not a pol

    • Re:robots.txt (Score:5, Interesting)

      by rahvin112 ( 446269 ) on Tuesday May 22, 2018 @02:50PM (#56655134)

      The internet archive (Wayback Machine) does not delete the data for sites with robots.txt that restrict data access. It simply marks the pages as unavailable if it already has them. Now I don't know if they will download new copies once the robots.txt is changed but they don't delete data they already have.

    • Yes it does, which is unfortunate. In the past I've noticed this when domain squatters acquire an expired domain and the Web Archive begins denying access to archived pages from the original site.

      This appears to be a misread of the robots.txt [moz.com] intent.

      Apparently, the "Robot Exclusion Protocol" was intended to prevent unattended crawlers.
      However, the Internet Archive also prevents human initiated crawls, and retroactively removes access to previous crawls.

      Here is a quote from the FAQ of Archive.is [archive.is], an internet

  • by Anonymous Coward

    with robot.txt i read that this causes wayback to remove *all* previous references to site. Correct me if i'm wrong :)

  • by Anonymous Coward on Tuesday May 22, 2018 @01:12PM (#56654518)

    See https://archive.org/about/faqs... [archive.org]
    If you want to delete your site from the wayback machine, all you have to do is ask them. They are not obligated to keep any page in the archive, whether it contains "evidence" or not. You can also exclude ia_archiver user agent in your robots.txt, which will prevent your site from being indexed in the first place. This way you will not even have to ask them.

  • by Anonymous Coward on Tuesday May 22, 2018 @01:12PM (#56654522)

    It wasnt malware, in the American language it would be called something like a "analytics's and management platform, with realtime reporting and active asset monitoring and protection"

  • I guess legally separated couples might be an exception but seriously, how do you "stalk" someone you are already married to? It wouldn't even rate "stalking" if you were just checking up on someone you were dating to see if they were being loyal. As a married couple you'd generally own whatever device you are putting malware on and at worst have a definite legal claim to ownership until the spouse proved you didn't contribute financially directly or indirectly to them being able to have that device.

    Thanks
    • by jythie ( 914043 )
      Having a pre-existing relationship doesn't make anything more or less stalkery.
    • by Anonymous Coward

      Regardless of legality, putting spyware on your significant other's phone is stalking, plain and simple, and is a sure sign of an abusive relationship.

      • by Shotgun ( 30919 )

        Would hiring a private investigator also be considered abusive stalking?

        There are significant legal and financial ramifications to being married to a cheating spouse, and one thing you have to have is proof. But, I guess you feel that only those able to afford a private investigator deserve justice.

    • I'll just go out on a limb here and say that I'm sure this law varies state to state.
    • ... how do you "stalk" someone you are already married to?

      Gee, I dunno, maybe you could "intercept phone calls, remotely turn on a device's microphone and camera, steal emails and social media messages, as well as track a target's GPS location".

      • Which would be stalking... if you were doing it without some sort of legal relationship that gives a party the legal right to that information or even to authorize others to it like say an ISP agreement or a LEGAL MARRIAGE.

        Remember a few years back DOD funding resulted in a process that let researchers extract an image someone had seen from their visual cortex? Your spouse can consent on your behalf to have that procedure done and see the results.

        How is this any different than hiring a private investigator?
        • "Remember a few years back DOD funding resulted in a process that let researchers extract an image someone had seen from their visual cortex?..."

          uh, no? we're easily decades away from that, if it's possible at all, but it's pretty easy to cook up a "demo" that's convincing enough to part rubes from their money. of course, there are plenty of cash-flush rubes in DOD... good old financial incentives can get scientists and engineers to accomplish anything, even the impossible, as long as you don't look too clo

    • by imidan ( 559239 )
      If you mistrust your wife so much that you feel like you need to install software on her phone to spy on her, what you should be thinking about is not whether this is legal because you technically part-own the phone. You should be thinking about getting a divorce. You're obviously unhappy, and your paranoia and controlling behavior is probably not making her life any better, either.
      • by Anonymous Coward

        Considering the statistics on cheating (roughly half of both married men and women will admit to researchers they have cheated on their spouse at least once), the odds are very much in the favor of truth not paranoia if you think your spouse is cheating.

        Once you get to that point it doesnâ(TM)t matter who or how often or whatever unless youâ(TM)re in one of those shitty places that require a reason for divorce.

        Thank God for no-fault divorce.

        â"happier now after dumping that bitch

  • Comment removed based on user account deletion
    • by tepples ( 727027 )

      If the owner of a particular domain wishes that the HTML documents available through that domain be made available indefinitely, even after the domain owner's insolvency, what should the domain owner do to prevent the domain from being snapped up by a third party that sets robots.txt?

      • Comment removed based on user account deletion
      • Don't sell the domain? Make your own copy of the html documents in question and publish them elsewhere? Publish a copy from the backups you kept?

        These are simple solutions which don't require you to rely on a third-party to do stuff for you for free...

        • even after the domain owner's insolvency

          Don't sell the domain?

          Domains expire even if not sold. Once a domain has expired, someone else can register it and park it with robots.txt.

          Make your own copy of the html documents in question and publish them elsewhere? Publish a copy from the backups you kept?

          What sort of "elsewhere" would you recommend?

    • by Anonymous Coward

      Bullshit, there's no reason for a robots.txt to be retroactive. I corresponded with someone at archive.org probably 15 years ago and they don't get that domains change ownership and there's no reason or really any right of a new owner to disallow information that archive.org's robots previously collected, especially as a domain parking company or reseller can, for no good reason block access to a site that although at the time had the same domain, was never theirs. Think of a museum that allowed pictures t

  • by Anonymous Coward

    Great, now all we need is a Wayback Wayback Machine Machine!

  • by h4ck7h3p14n37 ( 926070 ) on Tuesday May 22, 2018 @02:49PM (#56655126) Homepage

    If you think your partner is cheating isn't that enough to end the relationship? Why go to the effort of obtaining proof?

    If you find out your partner isn't cheating, how does that resolve the feelings that made you suspect infidelity in the first place?

    • by novakyu ( 636495 )

      Probably matters in divorce proceedings (leverage, etc.). Remember: divorce turns marriage into a business transaction!

    • by AmiMoJo ( 196126 )

      Proof theoretically puts you in a better position during the divorce, although if it was discovered that you obtained it with malware it could be very bad for you too.

    • In some jurisdictions there are legal ramifications (including distribution of shared assets) associated with "who is to blame" in the breakup of a relationship.
  • It's very good that they find malicious sites that do illegal surveillance of people and that the main thing is that even if they delete these sites from the Internet, Google will download all the sites to the archive in order to later prove it is not right. I'm glad that at least someone is following the order. Just recently I knew that the guys from PaperCheap [papercheap.co.uk] writes a good essay very cheap. They can help you anytime)

"If there isn't a population problem, why is the government putting cancer in the cigarettes?" -- the elder Steptoe, c. 1970

Working...