17

Lets think there is a virus that acts like a software. Its acting like a regular software. It's installation is visible to user and again like a regular software, it asks user to accept its End-user License Agreement.

Everyday, we all install softwares to our computers but none of us actually read that seven page long and legalized agreement. We all just accept that without reading it to enable installation process. I see a great opportunity for malicious guys here. Someone create an adware or some kind of spyware, maybe a botnet client, and publish it as a regular software or maybe embed it to a software itself. That guy writes a complete detailed EULA that explains what that virus can do (send some data to third-parties), what virus allowed to do (download and run its so called 'updates'), what virus won't do and adds its disclaimer says any damage that this system or data take is something that software is not responsible.

Can a spyware or a virus act legally with EULA?

Is this a valid against court of law? Can a virus harm our computers and costs us money and effort, or just send our computer data to third-parties, is this agreement restricts us to sue that software or its owner and make this actions legal? Are parental control softwares, observation systems and remote access softwares do something like this?

Improve this question
3
  • 3
    Quite often is software distributed with terms like these. For instance, the MIT License says that "IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY". This is usually because the creators are small (often 1 person) and cannot handle a court case. More often than not, the software is perfectly fine, and any damages are not directly its fault, anyway.
    – Ky -
    May 27, 2015 at 14:19
  • 9
    Spyware and viruses are just computer software; computer software cannot break any laws. Laws are broken by people. The question, in my mind, is simpler when understood according to this principle. It would seem to constitute fraud to misrepresent the software as not being "malware" if a reasonable person would consider it such. I don't think a EULA is going to help you if the download link says "Hello Kitty Island Adventure" and it's really just going to make your computer a botnet zombie. But if the link says "Download this cool new virus today! It'll wreck your computer!" that seems legit.
    – Patrick87
    Sep 22, 2015 at 14:17
  • 2
    Origin (EA's knockoff of Steam) has a term in its EULA which allows it to see, change, transfer, and use in any way any file on any storage medium on your device or which was ever connected to your device. I think. It's been a few years since I read the EULA, noticed something along those lines, cancelled the Origin installation, and returned my EA games. But I wouldn't be surprised if such a thing was OK in the name of "anti-piracy" or "anti-cheating".
    – Nic
    Dec 3, 2018 at 17:32

1 Answer 1

Reset to default
11

An EULA, or "End User License Agreement", is a contract between the software user and the software publisher. It usually protects the interest of the software publisher, e.g. you can only use it on one computer; you may not alter it or distribute it without written agreement etc.

In this case, the EULA specifies that:

  1. The software may be harmful to the user's computer
  2. The user's personal data may be sent to third parties
  3. The software may used to aid or perform illegal activities
  4. The software publisher is not responsible for any damage caused by using this software

First thing first, is this a valid contract? Let's take a look at the essential elements of a contract:

  1. Offer and Acceptance
  2. Intention
  3. Consideration
  4. Capacity
  5. Consent
  6. Legality
  7. Possibility of performance

The Legality element specifies that the contract must not be something disapproved by law. Botnets are used for attacking other computers, i.e. an unlawful act. Installing botnets may violate the Section 3A of the Computer Misuse Act 1990 in the UK.

Sharing user's personal data may also violate data privacy laws.

Let us, for the moment, assume the contract is valid. Item number 4 still causes a problem: an overly broad liability waiver. While liability waivers are common and normal, one can argue that the said waiver in this case seems to cover intentional or reckless acts. Such items in a contract are deemed as unenforceable.

Parental control systems and remote observation systems are different. They can be used legally, and this legal use is common. Thus, distribution of these systems is legal. Needless to say, it is very difficult to argue that virus and botnets share the same. Of course, one can still use a remote observation system in an illegal way. In this case, the software user is liable, but the software publisher is not liable because the user's behavior is beyond their control.

Improve this answer
6
  • If the agreement explicitly says it will share user data with 3rd party somewhere in 4th page, does it still violate privacy law as user has clicked 'I agree' ?
    – balki
    Jun 17, 2015 at 13:51
  • 1
    @balki that depends on what data is shared and how it is used. Privacy laws can be very complicated and various significantly between jurisdiction. I recommend posting that as another question if you are interested.
    – kevin
    Jun 17, 2015 at 15:27
  • "Parental control and remote observation systems are legal to use because they can be used legally"?
    – user253751
    Aug 5, 2015 at 10:29
  • 1
    @Immibis it's legal to distribute them with the intent to use them legally. Just like, you can sell kitchen knifes just fine, but you cannot sell fire arms (in most countries).
    – kevin
    Aug 6, 2015 at 14:09
  • 2
    @kevin Even in the US, and I might be wrong on this, I believe it's illegal to sell someone a gun if you have reason to believe they're going to use it in the commission of a crime. In fact, I think that's the most self-evident thing I've said today.
    – Patrick87
    Sep 22, 2015 at 14:19

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .