Pardon replying to a months old topic, but ... given the amount of data mining, the lack of disclosure, etc... I'm actually surprised that nobody has reported him to law enforcement - FBI, etc - as I'd imagine the extend of his methods, the lack of disclosure, and the vulnerabilities it poses to your system, and personal information, is VERY illegal. (IANAL though). Not saying **I'd** do it, of course, just that the guy seemed to be taking ENORMOUS risk (whether knowingly or unknowingly).