Slashdot Mirror


Consumer Friendly Downloads?

* * Beatles-Beatles writes to tell us Yahoo and AOL will be offering a new anti-spyware initiative to begin next year. The new initiative will allow vendors to get their software "certified" as easy to remove and not containing spyware. From the article: "It creates market incentives that will change how consumers see software," said Doug Leeds, Yahoo's vice president for product justice. Backers of the initiative believe that consumers wouldn't benefit much from a system in which good products simply display seals of approval. "They are looking for us to do it for them," Leeds said."

23 of 169 comments (clear)

  1. Recycled versign? by sumdumass · · Score: 5, Insightful

    This sort of sounds like a recycled verisign sig. Unfortunatyl i doubt it would mean much to anyone at first. The majority of uasy to remove and not containing spyware. From the article: "It creates market incentives that will change how consumers see software," said Doug Leeds, Yahoo's vice president for product justice. Backers of the initiative believe that consumers wouldn't benefit much from a system in which good products simply display seals of approval. "They are looking for us to do it for them," Leeds said."sers i encounter think you only get trojans from visitiing porn sites and spyware from the same.

    Maybe this is a good thing. The interweb won't be the same.

    1. Re:Recycled versign? by KDR_11k · · Score: 2, Insightful

      You laugh but for some people even that is too complicated.

      --
      Justice is the sheep getting arrested while an impartial judge declares the vote void.
  2. This reminds me of another article by ThatGeek · · Score: 5, Insightful

    Way back in March, Slashdot carried an article saying Office Depot will only carry Windows XP approved software.

    Don't get me wrong, I think spyware is bad. I also think a big company only supporting a few software titles (and probably charging a bit to do it) is bad too.

    I'd really prefer to see some kind of meta-moderated system by users to rate software as clear of spyware as it would give small vendors more of a chance. Otherwise, we will just further entrench big monopolies.

    --
    What are you eating? isItVeg?.
  3. A chain of trust ... by Aceticon · · Score: 4, Insightful

    ... is only as strong as it weakest link.

    It all boils down to:
    - Do we trust AOL and Yahoo to be honest in this sort of thing.
    - Do we trust that AOL and Yahoo have the technical capability to effectivelly detect both reported and not yet reported forms of spyware.

    1. Re:A chain of trust ... by Homology · · Score: 4, Insightful
      It all boils down to:
      - Do we trust AOL and Yahoo to be honest in this sort of thing.

      Yahoo have no problems helping the Chineese government hunting down dissident journalists, and other US companies have been shown to actively help surpress free speech and democracy. So no, I certainly dont trust Yahoo in this. I do trust that Yahoo will do anything, given enough money.

  4. Good idea... by mister_llah · · Score: 4, Insightful

    Sure, it is old hat, but one of these days, there might be a "(insert company name approved) software" program that actually holds its weight and is useful/consistent/trustworthy...

    I'm not exactly saying infinite monkeys/infinite typewriters, here, I'm just saying we've only had one major company do this so far (as far as I know) ... perhaps AOL/Yahoo will do it better? ... of course, considering the advertising on Yahoo... I'm not going to count on it from them, but it might inspire a knock-off.

    --
    MoM++ - A Classic Expanded - [Master of Magic 1.5]
    http://mompp.sourceforge.net/
    1. Re:Good idea... by Smallpond · · Score: 2, Insightful

      I have just started a company called, let me see, Certified Software, LLC which will place our well-known "Safe As Houses" seal of approval on your low-cost software package for only $99. The large enterprise edition puts the "Rock-Solid Software" seal on for $2999. It includes an actual tamper-proof seal similar to the type that prevent you from opening bags of weed killer. Does that make you feel better? Diebold is our first big customer.

  5. What about the vendors? by mwvdlee · · Score: 3, Insightful

    Let me guess... any vendor, no matter how small, will have to pay a shitload of money to get certified?

    --
    Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
  6. Captain Cynical Returns by Ckwop · · Score: 5, Insightful

    Let me get this straight. One company decides what is malware and what isn't. Ask yourself this, would Sony's rootkit have been considered a safe download? I think you'd find the answer is yes. This isn't an objective panel of experts deciding what is safe or what isn't, it's a company and this inherently flawed.

    I find it hard to believe that any company, regardless of their otherwise good intentions, would refuse money from a company as Sony. In short, it may work in stoping the small spyware vendor but this is not nearly enough.

    Simon.

    1. Re:Captain Cynical Returns by Tim+C · · Score: 4, Insightful

      Some companies would not be buyable; most individuals would be buyable for the right sum of money. Don't forget that companies are run by collections of individuals - some of them are going to be as principled as you imagine your panel of experts to be.

      If Sony waved a couple of million dollars under your nose to claim that their rootkit wasn't malware, would you really turn it down? You can retire on that - hell, invested properly, your kids can retire on it. All just for saying "Hey, you know what, this DRM isn't so bad after all..."

      If you genuinely would turn it down, then I applaud your ability to stand by your principles; I really don't think I'd be able to myself.

    2. Re:Captain Cynical Returns by Wordsmith · · Score: 4, Insightful

      Stopping the small spyware vendor does quite a lot. A vendor like Sony, which is -generally- above-board (meaning it doesn't spend most of its time torturing puppies and whatnot) and accountable to millions of customers, shareholders and legal parters has a lot to lose when it does something nasty. Witness the massive backlash against the root kit, and Sony's eventual decision to pull it once it became a PR nightmare. An aware consumer market can fight back when someone like Sony pulls this nonsense.

      It's a lot harder to fight back against the fly-by-night spyware vendor who is looking to collect some quick info - maybe even dangerous info like credit card numbers and banking site passwords - then disapear. You can't hold those people accountable. You can't threaten to stop using their services. You can't even sue them, if you can't find them.

      Ideally, we'd be able to find a tool that's entirely trustworthy for routing at malware, but as you said, that's simply not going to happen. That's why I'm generally careful with what I download, but still run a few competing anti-malware apps, just in case I get something borderline one of those products choses not to flag for whatever reason - questionable dealings or simple ignorance of the malware's existence.

      Having one more tool at my disposal for IDing spyware, even an imperfect tool, seems like a good thing. How useful it is will depend on what reputation Yahoo/AOL can build for being forthright.

    3. Re:Captain Cynical Returns by kawika · · Score: 2, Insightful

      The players here already have blood on their hands. Yahoo's Overture division is the primary source of revenue for Claria Corporation, one of the biggest offenders out there. TRUSTe makes big money to certify web sites and basically takes the company's word about their answers to a form.

      It's not just about spying or offering an uninstall link. For example, the Ask Jeeves folks make a toolbar that is bundled with a cute little utility named Smiley Central that is heavily advertised on game and kids sites. When you install it, it reconfigures your search setup to funnel all searches to Ask Jeeves. It also tacks little advertisements for itself onto your outgoing emails. But remember, you agreed to all that in the EULA, or at least your 10-year-old must have. Sure it has an uninstall, although the average computer user doesn't even know Add/Remove Programs exists much less what should be removed.

  7. A Good Start would be their toolbar ... by Anonymous Coward · · Score: 1, Insightful

    ... which comes with many software products in a bundle nowadays, and I'm pretty sure I don't want it.

  8. AOL/Yahoo are backing TRUSTe by Anyd · · Score: 2, Insightful

    I had the same thought at first, but the article states:
    TRUSTe, an organization that already certifies and monitors Web site privacy and e-mail practices for businesses, will rely on testing by two outside labs for the vetting. It would not name the labs.
    A user-run system of moderation is a great idea though. Although TRUSTe seems to be somewhat independant we have just recently seen that the big media corporations aren't exactly the most trustworthy entities when it comes to our personal privacy *cough...sony*, and there is sure to be alot of money at stake.

  9. Install mania by e-bart · · Score: 3, Insightful

    I'm not sure if this solves the problem. The problem is that there are a lot of not-so-professional people out there that just install anything they lay their hands on. It's like: "Hey! It's a PC! *Must* install stuff on this!" If the PC asks OK or Cancel? they click OK. And then to remove programs they're suddenly "smart" enough to find C:\Program Files\ and delete anything they don't understand. In the end all they need is a browser, an email client, an IM client, a Wordprocessor and perhaps something to mash up some Photo's. Installing anything more will just result in making it worse.

    The problem isn't the software. It's the people using the software! As long as they don't know what they're doing there will always be others abusing this.

  10. Fear Will Make Money by TheZorch · · Score: 1, Insightful

    It will succeed because of one important thing; FEAR.

    The recent mess with Sony's rootkit, security threats all over the place, and scares over the latest batch of nasty viruses have the average Joe-User terrified. Your average Techie like yourself and me know better and have enough smarts to keep safe, but Grandma sitting at her PC chatting in AIM will be scared out of her bloomers.

    Its the reason why Antivirus companies are racking in the dough with virus definition update subscriptions and also why Adware recently nixed their free spyware scanner so you have to pay for it now. The only one that still free is Microsoft's beta program and a few smaller other scanners.

    Fear of Spyware that compromises your computer and might let someone steal your identity online or infect you with a virus is what will drive the Average User (the majority of the Internet's population) to use these services. All of you fellow Slashdotters should have figured this out already...shame on you.

    --
    Michael "TheZorch" Haney
    thezorch@gmail.com
    http://thezorch.googlepages.com/home
  11. Re:We need an open source version of apt-get for w by n0dalus · · Score: 2, Insightful

    Windows programs generally have no dependancies, so a project like this is not really needed. It has been tried before, and there are various projects still taking a stab at this, but I don't think they'll get anywhere.

  12. Re:Four words by DrXym · · Score: 2, Insightful
    Probably "nothing" to consumers if you're already signed up to their respective premium services. See also AOL's virus checker etc. To software suppliers I expect it will cost $$$$ for what is essentially a useless service.

    What do I as the user care if AOL "certifies" a programme is easy to install? If software followed the Windows XP guidelines (sufficient to qualify to show the logo), it would already be easy to install. Therefore, the good guys already have an incentive to seek certification - from Microsoft. They don't need AOL or Yahoo! to do the same. In fact, if AOL were that concerned about spyware they would have dumped the IE a long time ago since that is the primary vector for such things. Who knows, it might even lower their support calls having to deal with stupid users who've installed malware and are now complaining about all the porn popups they see online.

  13. Nor the average geek... by xtracto · · Score: 2, Insightful

    Do you use Firefox?

    Tell me ONE (1) extension you have installed that does not say "UNSIGNED" in red black font?

    Do you panick when you see those? do you avoid installing such extensions.

    What is the meaning of that field anyway?

    --
    Ubuntu is an African word meaning 'I can't configure Debian'
  14. Re:Small business owners will pay, though. by computerjunkie · · Score: 2, Insightful

    It's what I do for a living Mr. Business Owner is fixing messes that you made... What really sucks for you is your MS Office and devices and specialized apps that you bought thinking you understood technology and your playing "IT Guy" when you actually make money doing something else. Holy crap I don't understand cheapskate small business owners. I am one too and if I need my business taxes done I pay somebody that knows what the hell they are doing. I've seen people spend several days monkeying around with comnputer problems cause they're too cheap to call me and in frustration they give in and I fix it in minutes. How much is their time worth? Apparently not much if they can afford to screw around for days playing "IT Guy". Me? I make a lot more money fixing things for people than I do trying to muddle through taxes or change the oil in my car, or whatever, so I pay the people that know what they're doing to perform those tasks.

    Sorry to get off on a rant but you pretty much sound like a lot of my customer base. If y'all would stick to what it is that you make money at then you wouldn't be frustrated playing "IT Guy" and oh, NO you won't pay extra. You already admitted that you spend too much time playing "IT Guy". You should just pay and let someone who enjoys it handle it for you so you can focus on the core objective of your business.

  15. Re:AOL certifies software as 'easy to remove'??!!? by wpiman · · Score: 2, Insightful

    How about "AOL will certify companies as prompt in stopping charging credit cards the moment service is cancelled.".

  16. Re:I just never understood... by Hosiah · · Score: 2, Insightful
    How DirectRevenue and Bullseye network get away with forcing you to download an uninstaller, and fill out a fucking survey, respectively, before you can uninstall their adware. Unbelievable.

    *cough* *choke* You'd ACTUALLY DO this? Even when I knew no better than to run Windows, I got ahold of the MS-port of Emacs, guaranteed to find all files hidden everywhichway on your system (and able to read binaries in hexl-mode as well; you can get an idea of what a program does this way). I always simply deleted the files/directories associated with the questionable programs. Each one uses a stinky trick to try to stop this, but don't worry: if their programmers were any good for a goddamn thing at all, they cold get jobs writing REAL programs! Ad/mal/spyware has about 6 tricks that it uses over and over; learn them all (after your sixth time being attacked), and you'll never have a problem dealing with them again. Emacs is also good for editing .ini and .bat files, for those nasty programs that write themselves into the system configuration.

    Uninstaller, my ass! You know what an install program does? It copies files/directories to a destination folder and registers the process with Windows and tells it where the icon is so it can draw the little picture for the program for you in the Start menu's program files. What does an uninstaller do? Same thing in reverse, only it usually leaves behind a huge mess of folders and data cruft that you have to remove manually (for instance, did you once run and then uninstall the Sims? If so, you can reclaim 1 whole Gig of disk space just by deleting the leftover "Maxis" folder). Now, the whole process of harrassing you before "uninstalling" the program probably (a) records your data to ensure that you'll get plenty of spam in the future, and (b) might possibly just replace your malware with *more* malware that's harder to detect.

    My number-one tipoff that a program was bad news on windows: (a) it was new and I didn't recognize it, and (b) the program's folder had no README.txt, uninstaller.exe, or any other courtesy conventions usually observed by professionals, and (c) tried to obfuscate it's purpose (never trust a program named .MQ345tyuII1Pzx334l?112.345, for instance). At the very least, I'd delete the executables (SHIFT-delete, no trash can!). What's the worst that could happen that way? I'd just have *broken* malware that didn't work anymore.

  17. Re:Small business owners will pay, though. by lwagner · · Score: 2, Insightful
    I don't think you meant to be funny when you called your customers stupid... these same stupid people are hiring you. I'm amused.

    Your rant exemplifies why I would prefer doing it myself versus hiring someone. It's not being cheap that's the problem.