How VeriSign Could Stop Drive-By Downloads

emcron writes "Ben Edelman has been doing great forensic work looking at spyware, adware, and malware. His latest piece, How VeriSign Could Stop Drive-By Downloads, turns the harsh light of public scrutiny on VeriSign's grubby practices in issuing digital certificates to vendors who try to install spyware by tricking users into clicking 'yes' with low-down dirty lying dialog boxes. Now, Ben wants VeriSign to clean up its act: it should refuse to issue certificates to companies that use obviously fake names (such as "CLICK YES TO CONTINUE") or that use those certificates to deceive consumers."

Comments

New Times?

[HateBreeder]

Perhaps, one day after Drive-By Downloads are stopped, a new era could emerge...
A time in which east-side nerds could live side by side with west-side nerds.

I have a dream...

but my company name really is

[Anonymous Coward]

I DARE YOU TO CLICK YES

we were also considering

CLICK YES YOU MORON

OMG, WERE YOU SERIOUSLY GOING TO CLICK NO

and

THIS IS SO COOL, YOU GOTTA SEE WHAT HAPPENS WHEN YOU CLICK YES

Click yes to continue

[Anonymous Coward]

Reminds me of a comment on politics which also appeared on /. some time ago.

It was proposed to change one's name to None Of The Above and run for presidency.

Clicking Yes to continue...

[Bob64]

From what I have seen, I believe that the employees at Verisign are "Clicking yes to continue" when approving certificate requests. Or someone mistakenly clicked the "Yes to All" button.

Re:Meanwhile

[thatnerdguy]

setting "sex bits" on IP packets to indicate sexual content.
Are those like the Evil Bits?

Re:Meanwhile

[itchy92]

"CLICK HERE TO INSTALL" is not a legitimate name, not even a legitimate business name

Sir, I resent your libelous filth and my legal counsel will be conacting you shortly.

Aaron Firouz
CEO
CLICK HERE TO INSTALL, LLC.