Wednesday, August 27th, 2003
Scott: Again, not to argue for the sake of arguing, but just for the sake of hapless Googlers who end up here searching for “Webshots spyware” or some such thing, Webshots does not download other programs. In fact, Webshots itself downloads nothing at all, ever. If you use your web browser to download compressed images in .wbz format, Webshots is registered as the handler for those data files and will automatically extract the images from them and put them in the appropriate place on disk, but it downloads absolutely nothing itself (except for, as I mentioned earlier, the information needed to let the user know new images are available). Webshots requires you to use the web browser to download images for several reasons, at least one of which is that banner ads are one of their two main sources of revenue. The other is premium subscribers, like me. I think they also sell collections of images on CD, but I’ve got a high-speed link, so I’ve never looked closely.
Finally, I’ve never used password protection on my screen saver, so I hadn’t encountered the security hole you linked. However, I just tested with Webshots 2.0 (currently in beta) and it does not use its own password routine as the previous version did, but instead relies on windows password security, and so is not any more easily defeated than MS’s own screen savers.
Of course, it’s a beta program, which probably violates (and should probably violate) another company policy, so we are at an impasse. :)
Amusingly, while visiting the web page to check which version I’ve got and whether it is still beta, I noted the following text on the Webshots download page:
The Webshots Desktop software DOES NOT contain any spyware!The Webshots Desktop software does not contain spyware of any kind. It does not install any tracking software on your system, or collect personal information about you and your browsing habits.
Anyway, thanks for forcing me to investigate some of this. I really feel more than ever that my $30 2-year premium membership was a good investment. ;)
SoBig sucks. It has made scanning my spam-traps for false positives too difficult to be worth the effort. Ugh.












