Response to Barbara's Article,
What You Need to Know About Spyware,
the Alexa Toolbar, Free Software, & Anti-spyware Programs

A Spokesperson for Alexa Explains
How its Toolbar Works
(and why it isn’t Spyware, as many contend)
by Kelly Dragoo
Alexa Internet Customer Service
As a manager in customer service at Alexa Internet.
I’m writing because I found your post on our Toolbar when searching the
Web. I hope you will read my letter despite its length, for which I
apologize. I also hope you’ll
pardon my largely colloquial tone—because I’m a customer service person
rather than a PR person, I tend to be better at expressing myself
casually, so I hope you won’t mistake anything in my message for
condescension or insinuation.
First, I’m glad my search brought me to your site because it’s nice
to see. It’s hard to find articles written with minimal jargon on topics
of interest to the general computer user or entrepreneur. You have a lot
of information on your site that is accessible to those of us somewhat
numbed by industry-speak.
Because I work for Alexa, I’m hoping to clarify a few things with
regard to your article. Reading about your experience, it seems you had
a lot of variables in addition to an entirely atypical Alexa Toolbar
experience, then ran into some common misconceptions about spyware and
Alexa with which I am, given my position, all too familiar. In short, I
don’t believe your browser’s difficulty could have been caused by the
Alexa Toolbar; I find myself talking to people on a daily basis who have
actual spyware and mistake Alexa for the culprit; spyware killers are
just as complicated as some of the spyware out there; and I wish I or
someone else in our support department had been able to consult with you
as this was happening.
The main thing that led me to know there was something else
troubling your system was this paragraph:
Curiously, when I had tried earlier to remove the Alexa program from
my system using the add/removal tool in my control panel, I got a
message saying a certain file couldn’t be found, so I couldn’t delete
the program. But the program finally disappeared from view after
Ad-Aware removed all the Alexa-planted Rootkey files from my registry,
along with all the other unwanted spyware files and cookies planted
there by others. I’ve had no Internet Explorer problems since."
That is most certainly not by design—if Alexa’s uninstaller couldn’t
find the file to uninstall, something else was definitely confusing
things.
The Alexa Toolbar really is a tiny, innocuous download. It does what
it claims to do and nothing more. As a member of our customer service
team, I don’t have access to a set of standard operating procedures for
when we hose someone’s browser because we don’t have that kind of impact
with our download. The Toolbar and any registry entries that come with
it do one thing: you visit a page with the Toolbar turned on, your
browser asks Alexa’s servers for information about that URL, and
displays information we have relevant to the site. We are "The Web
Navigation Service That Learns from People."
While most spyware out there
has some goody and some secret tracking software, Alexa is erroneously
called spyware because we are transparent about what the Toolbar is
there for and what it does—there’s no way to download and use the
Toolbar without realizing that your browser sends us the URL you’re on
and we reply with what we’re able to report on the site in question
based on our crawls of the Web and analyses of our Toolbar users’
surfing habits in the aggregate. Because we have so small an impact on
the browser, I’m certain your degraded performance was coincidental with
your download of the Toolbar. Using the Toolbar could never wreak the
kind of havoc on your system that you describe.
Your spyware killers found more than Alexa. Your mention that roughly
a third of the objects it found were ours. It seems, then, that your
faulting the Toolbar based on it having been the straw that broke the
camel’s back ignored the other two thirds of things that were not Alexa.
One reason we can be reasonably sure of our minimal impact on system
performance is that we know what we install, and it’s been working with
IE since 1997. If our product crashed people’s machines, there’s no way
we’d still be around and in such wide use today. I’m sure that something
else caused the trouble with your browser, and I’m sorry we were in the
wrong place at the wrong time. Because I’m familiar with one thing, the
Alexa Toolbar, I’m convinced there was something else (or over a hundred
somethings by your estimate) gumming your works, and this became
apparent for some unknown reason coincidentally with your installation
of the Alexa Toolbar.
As for the spyware label, it’s a real pain. We don’t like spyware
ourselves, but it seems to be open season on calling anyone spyware. As
for Alexa, I think if you download a Toolbar that gives you information
about URLs as you visit them, it’s not really fair to call that spyware.
Most definitions of spyware talk about signing up for one thing and
getting something else along with it that spies on you—with the Alexa
Toolbar, you get one thing, and it’s hard to imagine what one would
think one was getting if not the relevant data as you surf. A key point
made by many is that Alexa admits that if there is potentially
personally identifiable information in a URL, that information may be
transmitted to Alexa—but by the time that gets spun into the spyware
killers’ descriptions of Alexa, it sounds like our software snoops all
over your hard drive and into your passwords, none of which is true. If
you think you’re getting a purple gorilla that will sing songs and tell
jokes, and you get something else that reports your surfing to another
company’s servers, that’s the sort of thing that’s clearly spying,
whereas reacting to the Alexa Toolbar as if it were spyware, often seems
to me like getting creeped out because my cell phone knows I dialed my
mom yesterday: on the one hand, you anticipate such a transfer of
information in exchange for enhanced functionality, whereas the purple
gorilla is clearly snooping when all it claims to be doing is telling
jokes. (And if this example doesn’t bring a particular piece of software
called Bonzai Buddy to mind, count yourself incredibly fortunate.)
A big problem we have with spyware killers like AdAware is along the
lines of who’s watching the watchers. I can say I found this on your
system and it’s spyware, but at what point is trusting me any more
prudent than trusting Alexa? As far as I can tell, this is an
under-covered topic. Most spyware companies seem to get their
definitions (lists of what spyware is and where it comes from) from one
company—any time we follow up with a company in an attempt to have them
clarify their information on our Toolbar, we find out it has come from
this one company. It doesn’t appear there is any standard to which they
are held in terms of what they identify, or do not, as spyware.
Specifically with regards to AdAware, it would have found Alexa on your
system had you never installed the Toolbar or visited our site. What it
would have found is a registry key that works in conjunction with the
"Show Related Links" command in the Tools menu of IE. (This feature,
when selected from the Tools menu, opens what we call a Related Info
Sidebar in the left side of IE and fills it with Alexa’s data on the URL
your browser is on. The total of Alexa’s gain from the transaction is
that we know someone using IE somewhere in the world requested
information on a URL.) AdAware knows this, but still finds it when they
scan, likely precisely because they know they can find it, and their
bottom line depends on their finding things to protect you from. Not
plain dealing, really, but they don’t have to explain themselves.
Thank you for reading this message, and giving me the opportunity to
present a different view of Alexa to your readers.