|
@josephfcox | |||||
|
New: leaked documents, data, contracts show how hugely popular antivirus Avast now harvests internet browsing data and sells it for millions of dollars. Clients included Home Depot, Google, Microsoft. Documents show a product called "All Clicks Feed"
vice.com/en_us/article/…
|
||||||
|
||||||
|
Joseph Cox
@josephfcox
|
27. sij |
|
Last year Avast was caught harvesting users' browsing data through its browser extensions. Google, Mozilla, etc removed them. But we've found through leaked documents + other info that the collection hasn't stopped. It now happens through the AV itself vice.com/en_us/article/… pic.twitter.com/FuTc2UtakS
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
27. sij |
|
In short, Avast collects the data by its antivirus product being installed on peoples' computers. It then provides that data to its subsidiary Jumpshot, which then sells products based on the data to clients vice.com/en_us/article/… pic.twitter.com/qKClRX1OKW
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
27. sij |
|
We obtained information on past, current, and potential clients (such as those the company has had conversations with). They include huge consulting firms, tech giants, everyday brands, web services. There is a secretive business for selling browsing data vice.com/en_us/article/… pic.twitter.com/qhhTJIsyKl
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
27. sij |
|
Before selling the data Jumpshot/Avast removes personal info like names. But multiple experts believe you could identify people inside it. The data itself is also highly sensitive, being able to see specific porn videos and searches people looked at vice.com/en_us/article/… pic.twitter.com/DCLEP0qbXB
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
27. sij |
|
Was taken aback by the bluntness of Avast/Jumpshot's internal documents on its sale of users' browsing data.
"The data set is almost like an Apache log for the entire Internet for every device in the panel." vice.com/en_us/article/… pic.twitter.com/fvwpR25q1S
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
27. sij |
|
Here is the description of the All Clicks Feed from an internal document. Data taken from users of Avast antivirus, put into this product, and then data provided to clients in granular detail.
"All Clicks Feeds will let you see all of the activity." vice.com/en_us/article/… pic.twitter.com/nl1LFi6djr
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
27. sij |
|
And selling this browsing data is big business. A Jumpshot contract we obtained showed sales of browsing data for over $2,000,000 a year, to just one client. vice.com/en_us/article/… pic.twitter.com/NAgJDq5gXi
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
27. sij |
|
After being caught selling user data, Avast is currently getting its entire userbase to opt into the data collection. But multiple users I spoke to didn't even know Avast sells browsing data; suggesting its not really informed consent vice.com/en_us/article/… pic.twitter.com/h8ef60PF3o
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
27. sij |
|
Statement from Senator Wyden, whose office has been engaging with Avast directly to get answers on why the company sells browsing data. Wyden concerned Avast has not committed to delete the browsing data it collected without consent vice.com/en_us/article/… pic.twitter.com/SXhb2otW87
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
27. sij |
|
Avast said it is not possible to identify individual users from its sold browsing data. Some clients, like Home Depot, we spoke to said the same. Experts think otherwise though, especially when a client combines Avast data with their own vice.com/en_us/article/… pic.twitter.com/quCuXZUal8
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
27. sij |
|
This piece on Avast browsing data selling was a collaboration between Motherboard and PCMag. In their own piece, PCMag goes more into how the data could be de-anonymized. The outlet has now also pulled Avast from its recommendations of free antivirus pcmag.com/news/the-cost-… pic.twitter.com/3uauOev24I
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
27. sij |
|
This is the new opt-in message that should be popping up on more Avast antivirus users' screens soon. It arguably isn't clear on what Jumpshot really does with this data: collect browsing history which can see what site you were on at what time, sells it vice.com/en_us/article/… pic.twitter.com/caL71F9fJm
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
27. sij |
|
New: in response to our investigation into Avast, Senator Mark Warner says the FTC is not doing enough on the sale of browsing data
"No consumer would realistically have an inkling that their antivirus software could be selling their browsing data" vice.com/en_us/article/…
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
27. sij |
|
Updated from FTC on Avast selling its antivirus users' browsing data: "We are very familiar with how these markets for data operate, and will not hesitate to take appropriate action as necessary where we find conduct that violates the laws we enforce."
vice.com/en_us/article/… pic.twitter.com/Ex6qm4FsfN
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
28. sij |
|
After our piece on Avast antivirus selling users’ data: Bernie Sanders Thinks Companies That Sell Your Browser History Are ‘Trampling Over the Rights of Consumers’ vice.com/en_us/article/…
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
29. sij |
|
"We are continuing to explore further changes we can make to improve transparency and choice for users of our products and will provide further updates in due course." pcmag.com/news/avast-def…
|
||
|
|
||
|
Joseph Cox
@josephfcox
|
30. sij |
|
Update: Avast is stopping this data collection and closing its data selling company with immediate effect. Original investigation updated with this note vice.com/en_us/article/… pic.twitter.com/SmwGi6IiQZ
|
||
|
|
||