Slashdot Mirror

> With Flash, we could easily browse Slashdot offline, we could have our client synchronize at
> regular intervals, or simply whenever the hell we wanted.

Errrr, ummmm, have you ever heard of nntp ? You know, the thing that use to be called "the internet" before the days of the web. I follow some of the Mozilla development newsgroups on a public news server. You can use various clients on just about any OS. With Flash, you need to run a stinkin GUI to view text... duhhhhh !!!

> For Slashdot, Flash could provide an encrypted and an embedded ad-delivery system. It probably wouldn't be tamper-proof, but at least it would
> ensure 99% of us could not read the content without disabling the ads.

Die, Suckwave-Flush, Die ! Fortunately, it's a plug-in that I cna manually remove from its directory in Mozilla.

> "Programmability?" Yes. Since version 5.0 it is. It's a fully-functioning object-oriented
> language and just like its brother, Javascript, Flash Actionscript can kick some serious ass.

Oh boy, just what we need. Yet another programmable language like Active-hacks and Javascript that can download code from infected websites and infect your computer. Remember, that was one of the vectors that NIMDA used for its propagation.

> You sound just like my pointy-hair headed boss. When Java first came out, he hated it because he
> thought Java was only for applets!

I understand the power of the whole concept. That's exactly what scares me. I hit the big 5 oh last October, and I remember the days when BBS was king. The one item that had to be constantly pounded into people's heads was not to download and execute every file you find. We were winning that battle before the web came along. Now we have websites *DEMANDING* that you download and execute code from their pages. Some of them don't even ask you to click yes before installing their code. Do a Google usenet search on all the people who've been victimized by visiting http://www.gohip.com and ended up with the website in their sigfile. And let's not forget "comet cursors". I await the "wonders" of "a fully-functioning object-oriented language" in the hands of marketeers and skript-kiddies. It'll make the gazillion-windows-on-close ("mousetrapping") stunt look tame by comparison. I refuse to surrender control of my computer.

There's another "legitimate" portal site called Go Hip! that also uses viral advertising.

If you use Outlook and Explorer, the virus will add another "toolbar" to your browser (which only contains banner ads), and attaches an advertisement for itself onto the end of every email you send out. The program does all of this without the users knowledge or permission.

I would normally call this just merely annoying except for the fact that it is impossible to uninstall it via any normal means. I removed it from my registry, but it just copied itself back. The only way to remove it is to dig deep in Go Hip!'s customer service page and run a "remove" utility.

Their licensing is actually fairly specific (though it is at the end of the license.)

By installing the "Free Video Update"browser enhancement you understand and agree that the following changes will be made to your World Wide Web program: Your DEFAULT LINK to your Home page will take you to GoHip! Your SEARCH DEFAULT will take you to the GoHip! search. A BOOKMARK feature will be added to your file. This feature will add additional BOOKMARKS to your directory. Your SIGNATURE LINE on all of your outbound e-mails will be modified to promote the GoHip! Free Video Update, making your e-mail recipients eligible for free video.

Very sleazy business practice, in my opinion, but they -did- tell you. Another good reason to read through licensing agreements.

On one of your links (http://www.gohip.com/remove_br owser_enhancement.html) it sends you to another page to remove GoHip as your IE Search Engine; you have to download a registry update file! Excuse me, but if a company used malicious code to change my e-mail signature (among other things), I'm not letting them modify my registry!

"Of course I trust them!"....NOT!

Pablo Nevares, "the freshmaker".

On one of your links (http://www.gohip.com/remove_br owser_enhancement.html) it sends you to another page to remove GoHip as your IE Search Engine; you have to download a registry update file! Excuse me, but if a company used malicious code to change my e-mail signature (among other things), I'm not letting them modify my registry!

"Of course I trust them!"....NOT!

Pablo Nevares, "the freshmaker".

Did you see the terms and conditions?

I especially like the part under "E-Mail."
Your acceptance of the "Free Video Update" browser enhancement constitutes your agreement to receive periodic communications from GoHip! and THIRD PARTIES, via e-mail.

So, you have no choice but to let them sell your email address to spammers. In fact, you agree to this when you click "Accept" on the license agreement that nobody reads. This has nothing to do with ActiveX security of course, but it's just more evidence that GoHip is run by criminals.

First, in the article, those "fine print software agreements" were discussed...the legal validity of such have been under question for a while now. Due to various legal details, those "click Next to continue installing" agreements are considered by many to be too automatic and do not require enough action on the agreeing party to be legally binding...

Second, I was amused that GoHip.com considers what they do a Browser Enhancement.

Third, ActiveX ever since it's first incarnation has been horribly gigantic a gaping security hole. Anyone even remotely self-respecting computer security-savvy individual would never dream of having ActiveX enabled on their computer. Unfortunately, the average Joe might not know this...hopefully, they will be educated in time.
Here's one (of many) place I definitely like Java a whole lot better...

Fourth, in the end, this really isn't that big of a deal, as it was relatively benign. Hopefully, however, it will educate people as to the dangers of ActiveX, in general. I think David Kroll said it best: "I think it's pretty tacky what they did". Although he and Finjin did get it wrong when they said: "this is the first time a company has used ActiveX to alter personal information on someone's computer." Just see the ActiveX Exploder link mentioned above! I think they'd be more accurate in saying this is the first time it's been done purposefully and on a large scale by a corporation.

Fifth, this reveals an interesting problem with "signing" such programs with things like Verisign. That signature doesn't really mean as much as most people think that is does, as Verisign said: "Verisign spokesman Gray Chapman confirmed that GoHip is certified by Verisign, but stressed that his company was not in the business of passing judgment on the business practice of its client."

Sixth, GoHip.com sounds horribly sketchy. No phone numbers, bouncing e-mail addresses...is anyone surprised?...But finally, I have to admit to being horribly amused at the final quote by one of the "infected" GoHip.com visitors: "I compliment GoHip for a fine marketing effort as I certainly know who they are. I hate them, but I know who they are". In the end, capitalism seems to be all that matters again...