Valong / article
Miss Xu, Hangzhou is the old user of Tencent QQ, but the recent QQ number has been sealed, and Miss Xu has gone to vigorously, and it is horror until I am angry.
(1) Event - QQ number is seized
One day in June, Miss Xu opened the computer on the computer as usual, suddenly popped up a window, prompting "Forbidden use", Miss Xu tried several times, still this. Miss Xu later recalled: "I first inquired by email, no one cares about me, after a week, I finally couldn't help but call the long-distance call to Shenzhen, ask Tencent's customer service, to give me a reason for me. The customer service is found in a few minutes, saying that I downloaded a political sensitive document, which is recorded, so the number will be seized. "
After the consent of Miss Xu, the reporter called Shenzhen Tencent, understanding the number of seizures, after reporting the QQ number and password, after reporting the QQ number and password, a few minutes After that, the customer service staff told reporters that this QQ number downloaded sensitive information on May 30, so they were seized, and "it is impossible to come back"!
According to Miss Xu's memories, she did have downloaded a document. "If it is not Tencent's record, I can't think of it. But I haven't seen it all, and I have no spread, which is also a number?" The strange thing is that Miss Xu did not download the document using Tencent's Te Browser.
Miss Xu suspects that if you install QQ, you can monitor the user's computer usage, and you can return the information in the user's computer to Tencent's server? If this is this, then what personal privacy does it? Moreover, Miss Xu, who is a QQ member, her own ID number, mobile phone number is recorded in accordance with Tencent's request.
In fact, it is not only such a simple privacy problem. If there is a government department or a business agency to have QQ in the computer, it is possible to cause serious information leakage safety hazards. QQ Bundle of TE browser provides the "Who I am" with my "" function, you can track and understand QQ users to visit those sites.
(2) Survey - user information is recorded
An industry insiders who have studied in software security issues confirmed that through IRIS captain software, it can be seen that QQ can pass unknown data to the server, and these data is encrypted.
An article published by the Scientific Times also shows that Tencent attaches the browser program in the QQ program, which is the function of "who is in the same" with me ", allowing any users to find the currently browsing page. What other Tencent QQ users can also be monitored while monitoring which pages are visible, these collections are browsed, which can be commercialized.
Just at the reporter began to investigate and asked Tencent to interview. Miss Xu's QQ number actually unsaptive, which can be used.
The reporter called Tencent's Marketing Department and sent an interview outline to interview through email. The main problem with the reporter is:
1, is QQ to monitor the usage of each user? Including access to those websites, what documents downloaded?
2, QQ monitors this information over how this information is monitored.
3, as a private business, user personal information and usage habits not to be used by him?
4. For QQ's monitoring function, if the hacker or other intelligence agency is used, Tencent should be responsible?
5. Can Tencent can be known for the secret of government departments or commercial companies?
(3) Reasons - Enterprises political color
After the reporter's interview opening, Tencent did not give any written text reply, nor did it formally an interview arrangement, but through a public relations company in Beijing and correspondence communication with reporters. The public relations company dials the reporter's phone according to the number left by the reporter, trying to convince the reporter not to investigate and report on the matter, she told reporters that Tencent is currently in powerful rising trend, and various communication software on the market It is also endless, the competition is very intense. If the reporter's report, Tencent QQ is not expected to be in terms of Tencent.
For Miss Xu QQ number, the public relations company disclosed that Tencent received an instruction from the relevant department of the higher level to monitor the user's usage and sealed her number. She refused to reveal which department is required? Tencent did this, just warned the reporter, if the report is reported, it may "sacrifice". It is obviously trying to put the business problems on a layer of political color. After hearing this news, Miss Xu said shocked and angry: "How do I feel 阴 森 森 森? Take me as the country's enemy?" Miss Xu also vowed to ensure that the reporter was guaranteed, she did not release anything through QQ Bad information, "If there is, let them take evidence, who is sent?"
According to reporter investigations, for network companies and communication software companies, the superior authority is indeed proposed, technical filtration and shielding of bad information on the network, not spreading and spreading, but no company has received The instructions of monitoring the user usage are required.
(4) Be wary - communication software security has hidden dangers
A communications software company's technicians told reporters that in instant messaging software, the monitoring program is added, and it is difficult to implement, as long as several keyword retrieval and filtering on the user, you can return the critical information back to the server. Not to monitor all chat records.
According to some people say that instant messaging software has a safety hazard. As a consumer is entitled to these, but as a business company has no right to monitor the user's operation record, respect and protect the privacy and security of users are international. Pass business guidelines.
According to the CCID, June 14, the Office of the Chief Prosecutor in New York, USA said that the Netscape of Warner, AOL Times, will pay $ 100,000 and a solution, which is complained in complaints due to the use of the software to track the user download.
On the other hand, due to the security performance defects of QQ itself, various hacking software for QQ is growing. In the history of China software, QQ should be the most online instant messaging software that attacks. Many commercial companies have realized QQ security issues, some units and commercial companies in Beijing are strictly forbidden to use QQ software.
Before the reporter published, Tencent passed an email, and sent a written reply to the editor, and Miss Xu, Hangzhou said that she would not be good, she wants to "call". " But in any case, Tencent records the user's usage information, which cannot cause more users to pay attention to the security issues of network communication software.
Appendix: Tencent's written reply comments
Hello, I am:
Regarding the outline of the Hangzhou user number, Tencent's formal reply is as follows, I hope you will report with an objective justice attitude.
First of all, it is necessary to strictly declare that under the information of massive information, Tencent adopts a point-to-peer message transceiver, determines Tencent to monitor the operation of the user on the computer. Any unit or individual who is not real-in-case is required to be responsible. As for the detection of your email, in the case of operator background, network environment, use software, operation steps are unclear, we can't judge the authenticity of this detection, and cannot respond. As an instant communication software, Tencent QQ is technically used by the principle of a point. That is, in most cases, the communication between the user is from one user to another, and does not need to be transferred through the Tencent server. The Tencent server will only help users save and transfer messages in special cases of network instability, network condition complex or user offline. According to the provisions of the higher network security information processing, through the message transferred by the server, the message issued by Tencent will pass the information security filtering mechanism, which is because the user has transferred the message content containing sensitive vocabulary through the Tencent server. Therefore, Tencent made a title. As for later unscence, it is because the user's message contains sensitive content, but it is not intended to spread illegal content. In order to protect user rights, we understand this number to the process.
Tencent has always paid attention to and protects user privacy. Regarding the message content of the user, the transmission time and the other party number, Tencent cannot be available.
Tencent will be available in the absence of a legal procedure if necessary.
Tencent QQ provides a service for massive users, with more than 20 million users to communicate, chat. The amount of sending messages is from 1 billion, and Tencent is not necessary to save each user's message record, and more do not talk about the computer usage behavior of monitoring 10 million users.
Under the requirements of the competent department, Tencent will cooperate with the competent department to assist network security work and do some processing according to the competent authorities. All behaviors are in line with relevant regulations and requirements.
Tencent
June 23, 2003
