News

Groups: Ad Firm Used by ISPs Spies on Users

A targeted advertising vendor being used by several U.S. broadband providers hijacks browsers, spies on users and employs man-in-the-middle attacks, according to a report released Wednesday by two advocacy groups.

By Grant Gross, IDG News Service (Washington Bureau)

Two members of the U.S. House of Representatives Energy and Commerce Committee, Representatives Ed Markey, a Massachusetts Democrat, and Joe Barton, a Texas Republican, wrote to Charter in mid-May, asking the company to delay rollout of the plan until they could have a discussion about the proposal.

Any collection of cable subscribers' personal data without their consent "raises substantial questions" about whether it is legal under the Communications Act, the two congressmen wrote.

Topolski, in his report, says he tested a connection on WideOpenWest in late May and early June. NebuAd's service injected new script into his browser session, preloaded identifying cookies on his machine, and monitored his browsing, he wrote.

Topolski compared NebuAd's methods to browser hijacking, cross-site scripting and other forms of computer attacks. NebuAd is engaged in "eavesdropping on the content of Web messages as they were being sent and received," he wrote.

"This report shows that NebuAd's Internet wiretapping is highly questionable," Marvin Ammori, Free Press general counsel, said in a statement. "Phone and cable companies should press pause on NebuAd and any similar venture until consumers and members of Congress can address the serious concerns raised by this report."

• Email
• Print
• Comments
• Digg This
• SlashDot