<!--#include virtual="/server/header.html" -->
<!-- Parent-Version: 1.86 1.92 -->
<!--#set var="DISABLE_TOP_ADDENDUM" value="yes" -->
<!-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                  Please do not edit lists with items such as <li id="Mnnnnnnnn">! <ul class="blurbs">!
    Instead, edit /proprietary/workshop/mal.rec, then regenerate pages.
           See explanations in /proprietary/workshop/README.md.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-->
<title>Potential Malware
- GNU Project - Free Software Foundation</title>
<link rel="stylesheet" type="text/css" href="/side-menu.css" media="screen,print" />
 <!--#include virtual="/proprietary/po/potential-malware.translist" -->
<!--#include virtual="/server/banner.html" -->
<div class="nav">
<a id="side-menu-button" class="switch" href="#navlinks">
 <img id="side-menu-icon" height="32"
      src="/graphics/icons/side-menu.png"
      title="Section contents"
      alt=" [Section contents] " />
</a>

<p class="breadcrumb">
 <a href="/"><img src="/graphics/icons/home.png" height="24"
    alt="GNU Home" title="GNU Home" /></a> /
 <a href="/proprietary/proprietary.html">Malware</a> /
 By type /
</p>
</div>
<!--GNUN: OUT-OF-DATE NOTICE-->
<!--#if expr="$OUTDATED_SINCE" --><!--#else -->
<!--#if expr="$LANGUAGE_SUFFIX" -->
<!--#set var="DISABLE_TOP_ADDENDUM" value="no" -->
<!--#include virtual="/server/top-addendum.html" -->
<!--#endif -->
<!--#endif -->
<div style="clear: both"></div>
<div id="last-div" class="reduced-width">
<h2>Potential Malware</h2>

<p><a href="/proprietary/proprietary.html">Other examples

<div class="infobox">
<hr class="full-width" />
<p>Nonfree (proprietary) software is very often malware (designed to
mistreat the user). Nonfree software is controlled by its developers,
which puts them in a position of proprietary
malware</a></p> power over the users; <a
href="/philosophy/free-software-even-more-important.html">that is the
basic injustice</a>. The developers and manufacturers often exercise
that power to the detriment of the users they ought to serve.</p>

<p>This typically takes the form of malicious functionalities.</p>
<hr class="full-width" />
</div>

<div class="article">
<div class="comment"> class="italic">
  <p>This page describes malicious techniques that proprietary
  software might use in the future for malicious purposes.  We don't
  have any evidence that they are in use yet.</p>
</div>
<div class="column-limit" id="potential-malware"></div>

<ul class="blurbs">
  <li id="M201903280">
    <p>Car companies are coming up with a list of clever reasons why <a
    href="https://www.nytimes.com/2019/03/28/business/autonomous-cars-technology-privacy.html">
    they “have to” put cameras and microphones in the
    car</a>.</p>

    <p>BMW says its software does not store any driver-monitoring
    information.  If this means none of the data that come out of the
    cameras and microphones can be seen by anyone else, the cameras and
    microphones are not dangerous.  But should we trust this claim?
    The only way it can deserve rational trust is if the software is
    free.</p>
  </li>

  <li id="M201903200">
    <p>Volvo plans to <a
    href="https://www.theguardian.com/business/2019/mar/20/volvo-to-install-cameras-in-new-cars-to-reduce-road-deaths">
    install cameras inside cars</a> to monitor the driver for signs of
    impairment that could cause an accident.</p>

    <p>However, there is nothing to prevent these cameras from doing
    other things, such as biometrically identifying the driver or
    passengers, other than proprietary software which Volvo—or
    various governments and criminals—could change at any time.</p>
  </li>

  <li id="M201903080">
    <p>Malware installed into the processor in a hard drive could <a
    href="https://yro.slashdot.org/story/19/03/08/1928257/hard-disks-can-be-turned-into-listening-devices-researchers-find">
    use the disk itself as a microphone to detect speech</a>.</p>

    <p>The article refers to the “Linux operating system” but
    seems to mean <a href="/gnu/linux-and-gnu.html">GNU/Linux</a>. That
    hack would not require changing Linux itself.</p>
  </li>

  <li id="M201902200">
    <p>Some portable surveillance
    devices (“phones”) now have <a
    href="https://www.theguardian.com/technology/2019/feb/20/samsung-galaxy-s10-launch-triple-cameras-ultrasonic-fingerprint-sensors-and-5g">
    fingerprint sensors in the display</a>. Does that imply they could
    take the fingerprint of anyone who operates the touch screen?</p>
  </li>

  <li id="M201712130">
    <p>Patent applications show that Google and Amazon are interested in <a
    href="http://www.consumerwatchdog.org/privacy-technology/home-assistant-adopter-beware-google-amazon-digital-assistant-patents-reveal">
    making “digital assistants” study people's activities to
    learn all about them</a>.</p>

    <p>AI programs would understand what people say to each other,
    observe the clothing they wear and the objects they carry (including
    the marketing messages on them), and use sound to track people's
    activities, including in the toilet or in bed.</p>

    <p>It should be illegal to have such a device in your apartment
    without getting signed consent from the people that live in the other
    appartments
    apartments in the building.</p>
  </li>

  <li id="M201708160">
    <p>Any device that has a microphone and a speaker could be <a
    href="http://www.washington.edu/news/2017/08/16/computer-scientists-use-music-to-covertly-track-body-movements-activity/">turned
    into a sonar system that would track the movements of people in the
    same room or other rooms nearby</a>.</p>
  </li>
</ul>


</div><!-- for id="content", starts in the include above
</div>

</div>
<!--#include virtual="/proprietary/proprietary-menu.html" -->
<!--#include virtual="/server/footer.html" -->
<div id="footer">
<div class="unprintable">

<p>Please send general FSF & GNU inquiries to
<a href="mailto:gnu@gnu.org"><gnu@gnu.org></a>.
There are also <a href="/contact/">other ways to contact</a>
the FSF.  Broken links and other corrections or suggestions can be sent
to <a href="mailto:webmasters@gnu.org"><webmasters@gnu.org></a>.</p>

<p><!-- TRANSLATORS: Ignore the original text in this paragraph,
        replace it with the translation of these two:

        We work hard and do our best to provide accurate, good quality
        translations.  However, we are not exempt from imperfection.
        Please send your comments and general suggestions in this regard
        to <a href="mailto:web-translators@gnu.org">
        <web-translators@gnu.org></a>.</p>

        <p>For information on coordinating and submitting contributing translations of
        our web pages, see <a
        href="/server/standards/README.translations.html">Translations
        README</a>. -->
Please see the <a
href="/server/standards/README.translations.html">Translations
README</a> for information on coordinating and submitting contributing translations
of this article.</p>
</div>

<!-- Regarding copyright, in general, standalone pages (as opposed to
     files generated as part of manuals) on the GNU web server should
     be under CC BY-ND 4.0.  Please do NOT change or remove this
     without talking with the webmasters or licensing team first.
     Please make sure the copyright date is consistent with the
     document.  For web pages, it is ok to list just the latest year the
     document was modified, or published.
     
     If you wish to list earlier years, that is ok too.
     Either "2001, 2002, 2003" or "2001-2003" are ok for specifying
     years, as long as each year in the range is in fact a copyrightable
     year, i.e., a year in which the document was published (including
     being publicly visible on the web or in a revision control system).
     
     There is more detail about copyright years in the GNU Maintainers
     Information document, www.gnu.org/prep/maintain. -->

<p>Copyright © 2017, 2018 2017-2020 Free Software Foundation, Inc.</p>

<p>This page is licensed under a <a rel="license"
href="http://creativecommons.org/licenses/by/4.0/">Creative
Commons Attribution 4.0 International License</a>.</p>

<!--#include virtual="/server/bottom-notes.html" -->

<p class="unprintable">Updated:
<!-- timestamp start -->
$Date: 2020/06/24 05:37:10 $
<!-- timestamp end -->
</p>
</div>
</div><!-- for class="inner", starts in the banner include -->
</body>
</html>