Bruce Schneier asks Is Sears Engaging in Criminal Hacking Behavior?
Sears.com is distributing spyware that tracks all of your internet usage, including banking, purchases and anything else. All you have to do is sign up for My SHC Community
. The fact that they are spying on you is somewhat obscurely described in the EULA, but it's certainly not going to be obvious to most users. As Schneier points out if a kid with a scary hacker name did this sort of thing, he'd be arrested, but this is Sears. In other Sears news
, if you register for Sears' managemyhome.com, you can look up major purchases for any address, not just your own. A goldmine for Sears' competitors as well as nosy neighbors. Someone in Sears' top management needs to buy a clue, but they probably won't find it in the clue department at Sears.
Followup: It looks like Sears has fixed
the managemyhome.com hole.