http://newteevee.com/2010/08/04/hadopi-gone-wild-france-plans-spyware-for-three-strikes/French Internet users could soon be asked to install spyware on their PCs that tracks their surfing habits and analyzes the applications installed on their machines in order to prevent file sharing piracy. Plans for this type of surveillance surfaced this week when a paper authored by the French Hadopi agency, which was put in place to police the French Internet and prevent copyright infringement as part of the country’s three strikes legislation, leaked online.
The paper is part of an ongoing consultation process about the implementation of the French three strikes law, which is supposed to punish repeat infringers with the termination of their Internet access. The law came into effect this June, but many technical details are still up in the air, including the question of how to make sure that a certain Internet account was actually used by its owner, and not by a neighbor piggybacking on an insecure WiFi connection. Hadopi apparently wants to enlist users to secure evidence through spyware installed on their machines. The authenticity of the paper has been confirmed by French media, according to heise.de.
Hadopi’s spyware would log Internet usage on the machine in question with an encrypted log file as well as a clear text log file, and it would include the option to block certain websites or services outright through the use of a black list. An additional grey list would lead to users having to prompt that they really want to download a certain file, even if it meant they might infringe. The paper states that the software could be part of antivirus or spyware solutions, but also mentions the possibility of directly including it into routers.
Log files are supposed to include very detailed information about the date and time certain applications were launched as well as the search for keywords that are blacklisted, and are supposed to be kept in encrypted form for a year. The system would even record if a user accessed a video stream.
The paper states that the use of such an application would have to be voluntary, and that account holders would have to have a chance to disable the application at their will. However, the app would log each time it gets disabled, and it could be distributed as an automatic download by ISPs, which could essentially make it quasi-mandatory.
The French Internet rights group Quadrature du Net has condemned the proposal, with spokesperson Jérémie Zimmermann saying: “It is obscene that taxpayers’ money is used to carry out mad scientist experiments which are dangerous and doomed to failure.”
"Hadopi’s spyware would log Internet usage on the machine in question with an encrypted log file"
"The paper states that the software could be part of antivirus or spyware solutions, but also mentions the possibility of directly including it into routers"
"The app would log each time it gets disabled, and it could be distributed as an automatic download by ISPs, which could essentially make it quasi-mandatory"“It is obscene that taxpayers’ money is used to carry out mad scientist experiments which are dangerous and doomed to failure"I'm not sure who they expect to volunteer to accept government sponsored spyware. The more opressive suggestion is that it would be compulsorily added to antivirus programs, spyware programs and routers. This brings in a far more dangerous scenario. Is this French politicians supposedly representing the views of their electorate? I very much doubt it. If the French public don't shout this move down they will deserve what they get.