PDA

View Full Version : Comodo Firewall Privacy Intrusion !?


hiro
August 5th, 2007, 01:14 PM
The Comodo firewall by the installation and registration creates a unique tracking number, Unique Identifier. This number and other information is transmitted, without asking, to Comodo servers.
A Unique Identifier is a piece of data that unequivocally identifies something, and tracking the firewall user. Unique Identifier used in sending data to a particular person or object. For example, an "IP address", "Mail address" or "MAC address", but is not limited to!

These functions to be unacceptable violations of consumer privacy.
Comodo may have breached both civil and criminal laws. In an age of Internet-enabled appliances it is vital to privacy that consumers understand and control the information reported about their behavior.

The reporting functions are especially objectionable because they were actively kept secret. Nothing in the software EULA and Privacy Policy http://www.comodo.com/repository/privacy_agreement.html mentioned the existence of a Unique Identifier.
Transmissions of data were actually hiden, which suggests an intention to conceal a wrongdoing. This surreptitious transfer of information without the consumer's knowledge or consent is a kind of "Trojan Horse" attack that should constitute "exceeding authorized access" under the Computer Fraud and Abuse.

Take notice that the Act also includes a private right of action, which could form the basis of individual and class action lawsuits. Why Comodo should not be considered to have broken this law.

To consumers recommending they discontinue using and to uninstall all Comodo products, at least until these demands are met.
Finally, I urge Comodo to be open and honest in your response to this situation.Fully disclose and publish details of the information that the Comodo software reports and collects, and what is done with this information.

Have fun....

Stem
August 5th, 2007, 01:24 PM
Hi hiro,

From my last installations of Comodo (on clean windows W2K/XP) There was no need to register, this was an option I disabled. Personally, I am more interested with the HTTPS comms made when connecting at their forums.

sukarof
August 5th, 2007, 01:31 PM
Do you mean that Comodo tracks what the user does on the net? Comodo knows all the sites I´ve visited? and they are storing that for the future? What do they do with all the data they collect? What data is it btw? Have you or anyone else used a sniffer to see what Comodo sends out? Is it encrypted?

hiro
August 5th, 2007, 01:36 PM
@ Stem
If you register or not, Unique Identifier (UI) is created, and comodo send it by update or by "send suspicious file to comodo" function.

@ sukarof
answer on all is YES.

Stem
August 5th, 2007, 01:49 PM
{QUOTE-> If you register or not, Unique Identifier (UI) is created, and comodo send it by update or by "send suspicious file to comodo" function. <-QUOTE}My installations of Comodo (as with any firewall/security app) are made with all update functions disabled (no internet connections are allowed untill these settings are made). I have not seen any attempt by Comodo to connect to any site. I can certainly look at this again, but with the ability of the user to block all comodo processes within the firewall (and I have not seen these rules bypassed), and the fact I have not seen attempted bypassing of this(injection to browser etc), I seriously believe any comms made would need to be allowed by the user. Now if these comms are allowed, as to what info in sent I do not know at this time.

hiro
August 5th, 2007, 02:06 PM
@ Stem
Then you will learn more, as Unique Identifier works.

Stem
August 5th, 2007, 02:34 PM
{QUOTE-> ......Unique Identifier works. <-QUOTE}I know this, but a firewall needs to bypass user rules to give me concern. Data collection is made whenever you connect to the internet, be it from your ISP or search engine etc etc. (your ISP will log you for 6 months)

EDIT:
please note:- For me, only bypass (or attempt via other methods) of user rules is a concern to me in this thread

sukarof
August 5th, 2007, 02:43 PM
{QUOTE->

@ sukarof
answer on all is YES. <-QUOTE}

Mighty big claims you have there, care to show us some evidence? I am a pretty paranoid person, but I would like to see at least some meat on the bone before I jump to conclusions.
If you have the proof then show us, otherwise it will just be a unfounded conspiracy theory.
When Mark Russinovich found the rootkit in sony music cd´s he didnt just say this and that, he produced evidence that anyone could validate, even noobs like me.

Stem
August 5th, 2007, 02:52 PM
{QUOTE-> Have you or anyone else used a sniffer to see what Comodo sends out? Is it encrypted? <-QUOTE}On all firewalls I do this (on external gateway). As I mentioned in my earlier post, the only question I have is in regards to the HTTPS traffic when connecting to the Comodo forums.

sukarof
August 5th, 2007, 03:09 PM
{QUOTE-> On all firewalls I do this (on external gateway). As I mentioned in my earlier post, the only question I have is in regards to the HTTPS traffic when connecting to the Comodo forums. <-QUOTE}

Maybe a stupid question but couldnt it be the Comodo certificate at the right lower corner of the screen?

Coolio10
August 6th, 2007, 08:17 AM
{QUOTE-> Maybe a stupid question but couldnt it be the Comodo certificate at the right lower corner of the screen? <-QUOTE}

LOL. Just noticed that was there. Definitely is.

dave88
August 6th, 2007, 09:08 PM
I've had some hesitation to totally trust comodo from the get go. I remember a (security?) toolbar they used to provide, it was classified as spyware by some anti-spyware softwares. I think the final verdict was that it was not spyware though? Anyway that and the nature of their business led me to be a bit wary.

Stem
August 6th, 2007, 10:39 PM
{QUOTE-> Maybe a stupid question but couldnt it be the Comodo certificate at the right lower corner of the screen? <-QUOTE}I would need to know why the amount of data transfer, and why the HTTPS connection is first made to Google (72.14.215.97).

Bls440
August 6th, 2007, 11:14 PM
really disappointing :(
We use firewalls to protect against identity theft and here Comodo, which is considered nowadays as the best solution available, steals our surfing habits ...

Perman
August 6th, 2007, 11:49 PM
Hi, folks: This privacy intrusion thing only in firewall or has been spread into other Commodo products such as BoClean and AV ?

acr1965
August 7th, 2007, 12:00 AM
{QUOTE-> I would need to know why the amount of data transfer, and why the HTTPS connection is first made to Google (72.14.215.97). <-QUOTE}

Have you asked this in the Comodo forum? I realize they have a bunch of flag waivers over there but sometimes there are some answers from admins.

dave88
August 7th, 2007, 01:52 AM
{QUOTE-> really disappointing :(
We use firewalls to protect against identity theft and here Comodo, which is considered nowadays as the best solution available, steals our surfing habits ... <-QUOTE}

I wouldn't jump to the conclusion that it "steals our surfing habits..."

But apparently it is doing some communication that it probably shouldn't be?

dave88
August 7th, 2007, 01:54 AM
{QUOTE-> I would need to know why the amount of data transfer, and why the HTTPS connection is first made to Google (72.14.215.97). <-QUOTE}

Hmmm, is there any business connection between google and comodo?

hiro
August 7th, 2007, 05:42 AM
{QUOTE-> Originally Posted by Perman
Hi, folks: This privacy intrusion thing only in firewall or has been spread into other Commodo products such as BoClean and AV ? <-QUOTE}
I don't know for CAV and CBOC, but read this Comodo BOClean EULA:
{QUOTE-> Comodo has the right to gather information regarding the use of the Program, including, but not limited to, IP Address, MAC Address, and admin email address to guarantee the proper use of the Program as granted by this Agreement. http://www.comodo.com/boclean/boeula.html <-QUOTE}

Again violations of consumer privacy. Again nothing in the software EULA and Privacy Statement mentioned HOW!

Strange how nobody have question?
How Comodo product gater and transmit all this data, if Comodo product by installation not create condition to do this?
How Comodo can control "proper use of the Program" if not constantly monitor your PC?
How transfer of information without the consumer's knowledge?
What do you think of it?

Have fun...... with Comodo product.

fax
August 7th, 2007, 06:13 AM
Here they say its all BS/FUD
http://forums.comodo.com/help/phoning_home-t11317.0.html

Fax

sukarof
August 7th, 2007, 06:37 AM
{QUOTE->

Have fun...... with Comodo product. <-QUOTE}

Ok, so all you have as evidence is your view on the eula, no data about comodo gathering information as surfing habits and all the other info you think they harvest. I bet you have not confirmed your suspicion by actually monitor what comodo does*.
Nothing but product bashing until you produce something to chew on. All we have is your word against Comodo´s that say that they dont gather anything else than how many have the software. I have no reason to doubt them, but will do so the second someone cares to produce some evidence. I have my tin foil hat in my closet until then.

*If you read at the comodo forum they give qite detailed info on how you can check what comodo does.

fax
August 7th, 2007, 06:49 AM
{QUOTE-> Nothing but product bashing until you produce something to chew on. <-QUOTE}

I guess this is an impossible task for any current user of Comodo firewall since data may travel on encrypted channels as already mentioned by Stem...

Fax

sukarof
August 7th, 2007, 07:54 AM
{QUOTE-> I guess this is an impossible task for any current user of Comodo firewall since data may travel on encrypted channels as already mentioned by Stem...

Fax <-QUOTE}

Stem might correct me on this if I misunderstood, but the HTTPS traffic only happens on Comodo site and having comodo firewall installed (or not) hasnt anything to do with that traffic. I think I will step out of this thread until there is more substantial to go on.

I am sorry that I accused you ,hiro, for bashing. It was unnessesary. There is so much of that against companies that stands out so I am just a bit tired of it.

hiro
August 7th, 2007, 08:31 AM
{QUOTE-> Originally Posted by sukarof
I bet you have not confirmed your suspicion by actually monitor what comodo does*. <-QUOTE}
Sorry, but I think that many user are not expected to understand this. And any discussion in this direction become circumvention how I see.
{QUOTE-> I have no reason to doubt them..... <-QUOTE}
This is your and more other Comodo firewall user problem, but if you read carefully maybe some doubt arrive in a low voice. Compare this two thinks:
{QUOTE-> Comodo say:
A cookie is a piece of data stored on a computer's hard disk containing information about the owner. At the time of publishing this statement Comodo may employ the use of cookies for measuring the success of advertising and affiliate network membership. Our partners may use cookies. Comodo does not exercise any access or control of such cookies. <-QUOTE}
If you use comodo firewall and you run "firewall update" this put in your "Registry" this: UNICODE "FEATURE_COOKIE_KB932044". What is "FEATURE_COOKIE_KB932044" you can read:
http://support.microsoft.com/default.aspx/kb/932044

- question: Why and because comodo forward your OS update if not use cookies?

fax
August 7th, 2007, 08:59 AM
{QUOTE-> Stem might correct me on this if I misunderstood, but the HTTPS traffic only happens on Comodo site and having comodo firewall installed (or not) hasnt anything to do with that traffic. I think I will step out of this thread until there is more substantial to go on. <-QUOTE}

In any event, I would personally hope that users habits or whatever information is sent out, is sent in encrypted form so to at least ensure that the data is only readable to the software owner/developer and nobody else.

Fax

Stem
August 7th, 2007, 10:32 AM
{QUOTE-> Here they say its all BS/FUD
http://forums.comodo.com/help/phoning_home-t11317.0.html

Fax <-QUOTE}I personally do not post BS/FUD. although I know some whould like to make it look like I do.

OK, if we look at a direct connection to the Comodo forums. this is the chain of events/connections:-(I made no attempt to search the forums, I simply went to the site):-

192414

You will notice the first re-direct onto HTTPS is to 72.14.215.97, this is Google (Analytics), http://www.google.com/analytics/ information gathering.
This can be seen as no big deal, but for me, on a security site, there should be no re-directs to 3rd party logging sites, and I would still like to know the info contained in the HTTPS to Comodo.
The last time I checked these connections while Comodo was installed, I did notice an increase in data transfer,.. maybe just a coincidence at that time? I will try to find time to re-install Comodo and re-check.

hiro
August 7th, 2007, 06:32 PM
On Comodo forum Melih and company have respond about this discusion.
For they all this is only FUD.
OK. I have first concrete qustion for boys on comodo child forum:

1. when registration popup appear, and I enter email e.i. comodo@comodo.com, after reboot is created
thread "auto dial" /products/!PlaceOrder?emailAddress=&1_PPP=180&licenc>, and begin hiden connection to secure.comodo.net?

To Melih and company.
On concrete (first) question I await concrete answer!, not only br br br and how you wasting your money building all these top notch products for free, and how you wasting your money to make world better.
And how all this is only FUD.

acr1965
August 7th, 2007, 09:03 PM
I posted something similar on the Comodo forum, but I saw that Agnitum.com (makers of Outpost firewall) also uses Google Analytics. But they reveal that in their Privacy Policy.

"Cookies

Agnitum websites use Google Analytics, a web analytics service provided by Google, Inc. (”Google”). Google Analytics uses cookies to help us to analyse how users use Agnitum sites. The information generated by the cookie about your use of our sites (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of our sites, compiling reports on website activity for us and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of Agnitum sites. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. "

http://www.agnitum.com/privacy_policy.php


I wonder if Comodo uses IP addresses in the same way? (i.e.- sending the IP addresses to Google) FWIW- use of Google Analytics is not mentioned in the Comodo Privacy Policy that I read.

Stem
August 8th, 2007, 07:16 AM
{QUOTE-> "Cookies...........
I wonder if Comodo uses IP addresses in the same way? (i.e.- sending the IP addresses to Google) FWIW- use of Google Analytics is not mentioned in the Comodo Privacy Policy that I read. <-QUOTE}Google Analytics does not use cookies (well certainly not on their own), it uses embedded script (tracking code) within the webpages of the sites, so all trace info and browsing of the site is sent directly to Google.

Have a search for "Google Analytics", you will find some interesting reading.
Here are just 3 examples.
{QUOTE-> Google Analytics has been re-designed to help you learn even more about where your visitors come from and how they interact with your site. (http://www.google.com/analytics/) <-QUOTE}
{QUOTE-> will know already, Google Analytics is a new, free traffic analysis service for websites from Google. It’s essentially the functionality that Google acquired from Urchin, except that instead of money you pay for the service by giving Google full knowledge of all of the hits to your site.............................................
It’s one thing to give Google full access to all of the information I enter into Google. It’s another thing to share with a third party the complete session history of everyone on my site. (http://thebogles.com/blog/2005/11/google-analytics-and-end-user-privacy/) <-QUOTE}
{QUOTE-> Urchin 5 analyzes traffic for one or more websites and provides accurate and easy-to-understand reports on your visitors - where they come from, how they use your site, what converts them into customers, and much more. (http://www.google.com/analytics/urchin_software.html) <-QUOTE}

sukarof
August 8th, 2007, 09:16 AM
{QUOTE->
1. when registration popup appear, and I enter email e.i. comodo@comodo.com, after reboot is created
thread "auto dial" /products/!PlaceOrder?emailAddress=&1_PPP=180&licenc>, and begin hiden connection to secure.comodo.net?

To Melih and company.
On concrete (first) question I await concrete answer!, not only br br br and how you wasting your money building all these top notch products for free, and how you wasting your money to make world better.
And how all this is only FUD. <-QUOTE}

Now you are producing something :thumb:
What answers do you get from Melih at comodo forum? Please provide the link (at comodo forum) to where you ask these questions so I can follow.

hiro
August 8th, 2007, 09:41 AM
Hi ,
Just read CEO reaction, poor devil.
http://forums.comodo.com/help/phoning_home-t11317.0.html
Relax Melih relax, what is happening? you have a fit of anger?
we've so much question further, we've plenty of time, relax.
Is not pull off.
Melih, did u just tried to piss off yourself again?

Yours sincerely President of Kukuland LOL.

twl845
August 8th, 2007, 09:44 AM
{QUOTE-> really disappointing :(
We use firewalls to protect against identity theft and here Comodo, which is considered nowadays as the best solution available, steals our surfing habits ... <-QUOTE}
Before anyone gets all in a dither, check out the post in the Comodo FW forum entitled "calling home".::)

Stem
August 8th, 2007, 11:17 AM
{QUOTE-> 1. when registration popup appear, and I enter email e.i. comodo@comodo.com, after reboot is created
thread "auto dial" /products/!PlaceOrder?emailAddress=&1_PPP=180&licenc>, and begin hiden connection to secure.comodo.net? <-QUOTE}If you enter an e-mail address into the popup (which also has an option to "sign me up for news of Comodo), then would this not indicate that you want to register the firewall, and to register, the firewall would need to connect to the comodo server. As I have posted, when I have installed Comodo, with no e-mail entered (and the sign me up unchecked) I have seen no attempt for this connection.
I would also question the "Hidden connection", as I would need to know the installation made, is the installation made with "automatically allow known applications"?, or is a scan made and the comodo applications are added to be allowed?, or what rules are in place for the comodo applications?

sukarof
August 8th, 2007, 11:57 AM
{QUOTE-> Hi ,
Just read CEO reaction, poor devil.
http://forums.comodo.com/help/phoning_home-t11317.0.html
Relax Melih relax, what is happening? you have a fit of anger?
we've so much question further, we've plenty of time, relax.
Is not pull off.
Melih, did u just tried to piss off yourself again?

Yours sincerely President of Kukuland LOL. <-QUOTE}

I cant see you posting there? What nick do you use? Why dont you post your concerns directly in their forum? All you have to do is to write your concerns in a civil manner and ask for an explanation. It seems pretty pointless to come here and make accusations instead of confronting "the bad guys" directly. Whats the point in making those disparaging comments about Melih, here? How will they help you get answers to your questions?
Not knowing so much about hidden connections and stuff, so I actually for a second thought you had something in your last post, but it seems it wasnt as simple as you put it...

Stem
August 8th, 2007, 12:36 PM
Hi sukarof,
{QUOTE-> Not knowing so much about hidden connections and stuff,..... <-QUOTE}Saying a firewall is making hidden connections is quite a strong accusation, it would infer that the firewall is bypassing user rules (Hard_coded) or making some form of injection into another application to make this "make a connection on its behalf", there are of course other forms/ways of possible outbound bypass (look at leaktests).
I have not seen any of this with Comodo, but I still check on each release (as I do with any other firewall), and if I did find any form of hidden connections, I would certainly post the logs etc for this.

.

mercurie
August 8th, 2007, 12:58 PM
I assume that my internet connections are not totally private. I assume that software I have loaded myself (not malware) may do some tracking.

However, unique identifiers are another matter.

One final point how is the data being used. A very key question no matter what you are using and where you are going or what business you are doing. These are all important considerations.

One can be overly alarmed about such matters imho. ;)

Bls440
August 8th, 2007, 02:01 PM
Just did some Spyware Doctor scan today ...

http://img522.imageshack.us/my.php?image=20070808200520ng1.jpg

Also I should precise that I had uninstalled Comodo already ...

Bubba
August 8th, 2007, 02:41 PM
Ladies and gents,

If this discussion is to continue it will do so without the back and forth linking to the Comodo forums and a similar discussion. I would also ask that if accusations are to be made....it is prudent for the accuser to provide somewhat more than just lip service. Otherwise one could characterize those words as FUD also.

Once again....this discussion can remain but without the somewhat forum flame war material\links being posted.

Thanks,
Bubba

hiro
August 9th, 2007, 10:05 AM
OK, relax and we go from begining, because all what I say is a FUD.

Comodo firewall create and sends a unique ID number that' embedded in each copy of the program; the server logs the ID, then sends back a new number that gets patched into the code, allowing the creators to track the program as it's re-distributed across the networks.

Unique ID use a scheme to send information from your computer to a company called Comodo. Even after uninstalling the software.

Everytime you launch your browser and visit Comodo site or comodo Partners site server logs the ID, and tracking where you go, what you do, what software you are using.

Users each have a unique ID that lets Comodo know who is online. which applications they are using, sites visited, and for how long they are online. This also allows Comodo to deliver specific advertisements to specific users based on their criteria...."

What my thought is: invasion of privacy, and a few others. Since they are using your computers processing and storage without your knowledge or permission.

Finally, I urge Comodo again to be open and honest in your response to this situation. Fully disclose and publish details of the Unique ID and where is stored on user HD (not my, I know).

This is not FUD, Comodo recognition existence of Unique ID, question is just where?
Because must be secret, is on user PC, and is benign no?

Hipgnosis
August 9th, 2007, 12:11 PM
{QUOTE-> ......Fully disclose and publish details of the Unique ID and where is stored on user HD (not my, I know). <-QUOTE}

I don't use Comodo (I did in the past but my PC has been wiped clean and rebuilt twice since then)...anyway....if you know the location of the Unique ID why not share that info here so that others who do use Comodo can look on their PC's for this ID?

19monty64
August 9th, 2007, 12:40 PM
{QUOTE-> Unique ID use a scheme to send information from your computer to a company called Comodo. Even after uninstalling the software.
<-QUOTE}
If the highlighted is true, I expect as much "backlash" as KAV's-id/tags-fiasco. Sharing info with 3rd-parties is one thing, but even after uninstalling??? I'll re4mat if that is proven true!!!

gdiloren
August 9th, 2007, 01:27 PM
Hey man, I have a NAME, that doesn't mean I'm spied. I'll have a name even when I'm dead. So what??? Is it a leak of privacy. DON'T PANIC!

19monty64
August 9th, 2007, 01:35 PM
{QUOTE-> Hey man, I have a NAME, that doesn't mean I'm spied. I'll have a name even when I'm dead. So what??? Is it a leak of privacy. DON'T PANIC! <-QUOTE}
What???

Perman
August 9th, 2007, 04:32 PM
Hi, folks: I just just wish Hiro's findings were not true, but...what if it were to be so, especially that unique ID thing is so unique that it remains in your box even after comodo fw has been uninstalled? Folks, what else security applications can we trust from now on? It is not just a privacy intrusion, it IS a VIOLATION of Privacy, very serious charge! We, as end users should be worry, but the cyber security app developers as a whole should IMO team up together asking Comodo to clear up the air, and once for all. A self-regulatory body should be set up to police their own breed, allow ONLY those with same feather to be flocked together. A wake up call to all of us indeed. Like my elderly mother always says do not trust anyone unless you know one inside out. Her theory holds true in this incident. Have a smart thinking.

ccsito
August 9th, 2007, 05:04 PM
{QUOTE-> What??? <-QUOTE}

Not to barge in, but I think the other message post was stating that just because you have some unique identifier (such as a Social Security Number), that does not, in and of itself, mean that you are being tracked or spied on. But the internet is one tangled web and there are many interconnections that we are never aware of. People make $$$ by referring or sharing customer information with others. It's a fact of life. :-X

innerpeace
August 9th, 2007, 05:40 PM
For those interested in ideas on how to block Google Analytics see posts 6,12,15,18 from this current thread. http://www.wilderssecurity.com/showthread.php?t=182089

innerpeace

fce
August 9th, 2007, 05:53 PM
{QUOTE-> OK, relax and we go from begining, because all what I say is a FUD.

Comodo firewall create and sends a unique ID number that' embedded in each copy of the program; the server logs the ID, then sends back a new number that gets patched into the code, allowing the creators to track the program as it's re-distributed across the networks.

Unique ID use a scheme to send information from your computer to a company called Comodo. Even after uninstalling the software.

Everytime you launch your browser and visit Comodo site or comodo Partners site server logs the ID, and tracking where you go, what you do, what software you are using.

Users each have a unique ID that lets Comodo know who is online. which applications they are using, sites visited, and for how long they are online. This also allows Comodo to deliver specific advertisements to specific users based on their criteria...."

What my thought is: invasion of privacy, and a few others. Since they are using your computers processing and storage without your knowledge or permission.

Finally, I urge Comodo again to be open and honest in your response to this situation. Fully disclose and publish details of the Unique ID and where is stored on user HD (not my, I know).

This is not FUD, Comodo recognition existence of Unique ID, question is just where?
Because must be secret, is on user PC, and is benign no? <-QUOTE}

this information is very hard accusation.
and since comodo never extend their hand on this website to depend their firewall, I said i remove for now the comodo freebie in my old laps.

i dont want comodo monitor my visited porn site. ;D :shifty:

Nebulus
August 9th, 2007, 06:37 PM
Hiro, it would be nice to show some evidence about what you are claiming (logs, HTTP sessions, etc)...

ccsito
August 9th, 2007, 06:41 PM
{QUOTE->
i dont want comodo monitor my visited porn site. ;D :shifty: <-QUOTE}

:o :-[

Seer
August 9th, 2007, 06:56 PM
@ the President of Kukuland ;D

you have alarmed quite a few users here, I already saw fear, uncertainity & doubt on this thread. And people are actually uninstalling Comodo firewall because of this!? >:(
So, you say this is not FUD?

I believe this thread should be closed, so hiro could start a fresh new one, but this time in a proper way. A proof in post #1. No excuses and no more talking.

BTW, what's this? -

{QUOTE-> is created thread "auto dial" /products/!PlaceOrder?emailAddress=&1_PPP=180&licenc>, and begin hiden connection <-QUOTE}

What's a 'hidden connection'?

EDIT: Just to add.. remember "Outpost suite rootkits" thread, hiro? I do...

twl845
August 9th, 2007, 07:31 PM
Hiro, I've seen guys like yourself before proclaiming the sky is falling, the sky is falling. But the common denominator is the fact that you are just spinning your wheels. You never say, "according to these facts" or "click on this link and you will see for yourself that so and so is selling your info". You are simply an agitator looking to discredit someone, probably because at some point in the recent past you had a personal problem with Comodo. My challange to you is: Put up or shut up.>:(

hiro
August 9th, 2007, 08:23 PM
They defend itself in this mode on firewall home forum, if this is enough and acceptable for firewall user, and come from serious company with honest work, I no comment.

~removed post quote content that was from Commodo Forums....Bubba~

just to start, EVIDENCE:

1. existence of Unique ID
2. small part of code when firewall istalations create Unique ID
============================================================
/products/!PlaceOrder?emailAddress=&1_PPP=180&licenc>
"FEATURE_COOKIE_KB932044"
"FEATURE_RESPECT_OBJECTSAFETY_POLICY_KB905547"
============================================================
Comodo must to answer user on this question not I.
Fully disclose and publish details of the Unique ID and where is stored on user HD.

PS: Seer, Singidunum is capital of Kukuland? or I have wrong. (konju j.)

Bls440
August 9th, 2007, 08:48 PM
And what about the spyware I've found thanks to spyware doctor ? ;) that's an evidence.
(see my previous post)

dave88
August 9th, 2007, 09:30 PM
{QUOTE-> Just did some Spyware Doctor scan today ...

http://img522.imageshack.us/my.php?image=20070808200520ng1.jpg

Also I should precise that I had uninstalled Comodo already ... <-QUOTE}


Is this a false positive or ?

Mr. Malware
August 9th, 2007, 09:31 PM
{QUOTE-> Mr. Malware (the only malware you are spreading is thru your FUD) <-QUOTE}

I don't spread Malware I use Linux.

As far as I'm concerned Comodo company needs to tell the truth to its users about what going on with this breach in privacy.

Perman
August 9th, 2007, 09:31 PM
{QUOTE-> And what about the spyware I've found thanks to spyware doctor ? ;) that's an evidence.
(see my previous post) <-QUOTE}
Hi, just curious. I have heard that on comodo's forums, postings are very selective. I wonder that have you post your SD findings there yet or---has been censored? I guess it will be an one more F.P. that " I say so." eh? Security firm, security application--- but in the end , nothing but a sticky hand caught in the cookie jar! What a cyber world. What a mission against malwares.

Bls440
August 9th, 2007, 09:47 PM
I'm gonna post it on Comodo's forum. I'll keep you up to date :)

Edit : feels like someone already copy pasted my post. Comodo says this is a false positive. Who to believe, I have no clue :)

Perman
August 9th, 2007, 10:06 PM
Hi, folks: Since Mr. Hiro has finally disclosed evidence to substantiate his claims, now the ball is in Comodo's court. Dispute it OR find a fall guy and let the AXE fallen. The whole thing will be over and tomorrow will be another new day. Just a loonie-sense advice.

Pedro
August 9th, 2007, 10:10 PM
{QUOTE-> Since Mr. Hiro has finally disclosed evidence to substantiate his claims <-QUOTE}
He did?

Perman
August 9th, 2007, 10:24 PM
{QUOTE-> He did? <-QUOTE}
Hi, did'nt he publish something on post#52 ? or just a question for an impossible reply ?

Stem
August 9th, 2007, 11:22 PM
Hello hiro,
{QUOTE-> just to start, EVIDENCE:

1. existence of Unique ID <-QUOTE}This as always been known, and if users who install the firewall do not know this, then they obviously dont take note of the popups during installation:-
192490
But, as I have mentioned, if no e-mail is entered, and the option "Sign me up" is unchecked, I do not see any attempt by the firewall to connect out.

{QUOTE-> 2. small part of code when firewall istalations create Unique ID <-QUOTE}Again, this just shows an ID is made. This does not mean that the Vendor is then going to "Track you". If this was the case, then we should also look at all other firewalls that have a "Unique ID", which they have, they are called a "License". We would also need to look at windows itself, the AV`s we install, and anything else that has a license(Unique ID) that connects to the internet.

This only shows that an ID is generated, nothing else.

LowWaterMark
August 9th, 2007, 11:54 PM
{QUOTE-> But, as I have mentioned, if no e-mail is entered, and the option "Sign me up" is unchecked, I do not see any attempt by the firewall to connect out. <-QUOTE}{QUOTE-> Again, this just shows an ID is made. This does not mean that the Vendor is then going to "Track you". If this was the case, then we should also look at all other firewalls that have a "Unique ID", which they have, they are called a "License". We would also need to look at windows itself, the AV`s we install, and anything else that has a license(Unique ID) that connects to the internet.

This only shows that an ID is generated, nothing else. <-QUOTE}Thank you Stem! 8)

If anyone is to be believed here, it is certainly you, not the Spreader of FUD - hiro.

hiro - You are posting crap on Wilder Security Forums, and that is not welcome here. You really need to leave now!

People - I am definitely not the biggest supporter of Comodo around, but, I do NOT believe this FUD at all, and I encourage you all to reject it, as well!! (I'm talking about any of their software products doing any illicit tracking. Whether they use Google Analytics or not on their website is not the issue. Tens of thousands of sites use that. But, no reputable vendor codes tracking calls into their firewall software - Comodo included!)

I totally and completely doubt they are tracking everyone in the way Hiro has posted. I encourage everyone to read the threads over at the Comodo forums, and draw your own conclusions which I believe will tell you that they are not bad people at all. :isay:

hiro - take your FUD to some other place on the Internet.