By Heather McLean, 22 February 2002 14:25
NEWS Microsoft has denied allegations that it is spying on the movie-watching habits of individual users of its Windows Media Player XP (MPXP). The denial comes after an independent researcher in the US accused the software giant of employing 'cookie-synch' tricks. Jonathan Usher, group manager for Microsoft's Windows Digital Media Division, said the MPXP software uses cookies to enhance user experience but does not store personal information. Usher said: "Under no circumstances is any personally identifying information ever transferred to Microsoft as a result of DVD playback." However, independent internet privacy and security expert Richard Smith carried out research into MPXP and found Microsoft not only used cookies to track individual users, it could use the information gathered for marketing purposes. Smith stated in his research: "A number of design choices were made in Windows Media player which allow Microsoft to individually track what DVD movies consumers are watching on their Windows PC. Using various well-known 'cookie-synch' tricks, an email address can be associated with a cookie value at any time." Each time a DVD is downloaded from the net, Smith said the MPXP software contacts a Microsoft web server to obtain information on the movie for the user. Microsoft can spy on users because the web server relays an "electronic fingerprint" that identifies the DVD about to be downloaded and a cookie that identifies the individual MPXP software that sent the request for information, Smith claims. However, Usher denied the accusations. He said MPXP does not follow individuals and that the company has signed the Safe Harbour agreement which shows it complies with European Union data protection legislation. Usher said: "When a player contacts WindowsMedia.com to get DVD media information, it sends a cookie that includes no personally identifying information. "Users who don't want cookies to be sent or received can disable cookies in Internet Explorer," he added.
In order to post a comment you need to be registered and logged in.
Log in or create your silicon.com account below