Slashdot Mirror


Apple Pushes Unwanted Software To PCs, Again

itwbennett writes "Blogger Steven J. Vaughan-Nichols wags his finger at Apple for indiscriminately pushing the iPhone Configuration Utility 2.1 update out to Windows users, since it is a tool for business system administrators to set up and administer corporate iPhones — the blogger himself (and practically every other iPhone user) not being of the corporate iPhone user persuasion. But more than just unnecessary, the update actually puts him and millions of other iPhone owners/Windows PC users at increased risk by installing 'not just a configuration program, but the Apache Web server as well,' says Vaughan-Nichols. 'A Web server like the one Apple [is] adding to your PC... [is] a gateway just asking to be hammered on by an attacker. Managed properly Apache is as safe a Web server as you'll ever find, but ordinary PC users shouldn't try to manage it, and even an expert can't do anything with it if they don't know it's there.'" Reader CWMike notes that Apple pulled the iPhone Configuration Utility from the update list after a few hours.

20 of 267 comments (clear)

  1. Any verification on the Apache web server? by diamondsw · · Score: 4, Insightful

    No one else reporting on this "issue" (it was a mistake folks - chill out) has mentioned installing Apache, which would definitely be a huge issue.

    Has anyone here independently seen this supposed Apache installation?

    --
    I don't know what kind of crack I was on, but I suspect it was decaf.
    1. Re:Any verification on the Apache web server? by zn0k · · Score: 5, Informative

      I have the iPhone Configuration Utility installed on a work machine as we support a few dozen iPhones at work. Just checked, and there's no Apache process (just an iPCU.exe) when running the app. One of the links in the summary also mentioned using a browser against localhost:3000 for configuration, netstat shows no process listening on that port.

  2. Re:Not really... by Anonymous Coward · · Score: 5, Informative

    I'm sorry, but this is NOT even close to true. It has been offered for at least a week, and came up again on my machine last night. I've had it "offered" several times now on both machines. I don't know who first said it was only a few hours but that is just dead wrong.

  3. Re:Not really... by Colonel+Korn · · Score: 4, Informative

    the update actually puts him and millions of other iPhone owners/Windows PC users at increased risk by installing

    Millions? Lets see here, the update was only recommended for a few hours and was quickly pulled. How many people do you think update constantly? If Windows updates are any indication (and most just install in the background with almost no user interaction) chances are very few. We aren't talking about "millions" but a few thousand in the worst case.

    Well iTunes has been installing the Apple Updater Thingy by default for a long time, so the question is how often that checks for updates. And according to Ars Technica (http://arstechnica.com/apple/news/2009/09/apple-pushes-unwanted-enterprise-tool-to-windows-users.ars) the update was actually pushed "earlier this month" and only came to the attention of the online media today. It sounds like it was pulled a few hours after it hit half the computer-related news sites, not a few hours after it was pushed out to users.

    --
    "I zero-index my hamsters" - Willtor (147206)
  4. Re:Not really... by MichaelSmith · · Score: 4, Informative

    My sister in law runs itunes on her windows laptop. When she bought it I installed firefox for her to use then she called me to report some strange behavior. She had somehow started running Safari. Firefox had disappeared. So either it happened automatically or she was tricked into installing it.

  5. Re:Not really... by eldavojohn · · Score: 5, Insightful

    I was at my sister's house this weekend and Saturday at around 11 am CST I saw it pop up on her old Dell machine.

    The big problem I had with it was what it was called which was "iPhone Configuration Utility" and the kicker is she owns an iPhone. Which confused me because she had nothing installed on there for her iPhone, only her iPod. So there I was debating on whether or not to install this for her because it sounded applicable and useful to her. I didn't install it but if I did, I would pissed to know that her five year old piece of crap Windows machine is now running an Apache server. Additionally, I had to uncheck Safari. Then I have to go into msconfig and uncheck the damned Quicktime (try installing iTunes without that!) run on startup shit that is always reset when you install iTunes. Because everyone wants that running non stop in the background especially when you have only 512 MB of SDRAM. So I did the little dance and I've bitched about it before but no one seems to care. It's bloatware and it sucks. Her computer can't even run iTunes videos, she just uses it for music but no one seems to care about that. Apple's the king of usability, design and interface chic!

    Now we get this story where someone points it out. Do we see people roll in and viciously attack Apple like we all would attack Microsoft if IE8 had Bing's Javascript Attackable Toolbar checked by default on installation? Or Microsoft's indexing service that eats up all your cycles whenever it feels like it? No, no, what we get is "there were maybe a thousand people, relax" or "it's not pushing, you could have unchecked it" or "the Windows people don't know how to update anyway."

    Unbelievable. How many free passes does Apple get before you start to question their infallibility? Hey, everyone makes mistakes but you guys are dreaming up probables and likely scenarios that somehow excuse Apple. Why?

    --
    My work here is dung.
  6. Re:Not really... by Plasmic · · Score: 5, Insightful

    Do you seriously not understand the difference between having something show up on a list of updates that are available and actually having it download and install behind your back?

    How much research do you think people do before checking a box in an iTunes dialog? The onus is on Apple to not offer stupid things that would coincidentally inflate the installed base of an enterprise utility.

    Do you seriously not understand the use case of a typical end-user, e.g. teenager, that thinks they want the 'iPhone Configuration Utility' since it's offered by Apple iTunes and they ... have an iPhone? "Hey, I might want to configure my iPhone. And I've always downloaded every other iTunes update with iPhone in the title." (Anyone that can read the description and decipher that it's for enterprise device management doesn't fit the definition of "typical end-user".)

    The results speak for themselves: millions of users installed this software because it looked like a standard iPhone update.

  7. Re:Not really... by MichaelSmith · · Score: 5, Insightful

    My sister in law runs itunes on her windows laptop. When she bought it I installed firefox for her to use then she called me to report some strange behavior. She had somehow started running Safari. Firefox had disappeared. So either it happened automatically or she was tricked into installing it.

    Or she just went ahead and clicked OK. It's OK to admit that your sister in law might have done that.

    She is not sophisticated enough to understand the implications. iTunes should manage music. Not the operating system.

  8. Re:Not really... by Hognoxious · · Score: 5, Funny

    It just works!

    Even when you don't want it to, apparently.

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  9. Re:Not really... by timothyf · · Score: 4, Insightful

    Users don't read dialog boxes. It could've had red flashing lights around it, and it wouldn't have mattered. It would still have remained checked by default and users would click the "OK" button to make the thing go away.

    Also, think about the actual action they'd need to perform to not install the software. Sure, it's easy to say "just uncheck it," but think about what that means. Unchecking the dialog box means that you have to know what the iPhone Configuration Utility is and why you absolutely don't need it. Unchecking it means risking that something will go wrong, because you didn't install something that your computer told you you needed.

    *That* is why it's a problem.

  10. Re:Not really... by Techman83 · · Score: 4, Insightful

    It would have been an "Opt-Out" option, which is nearly as bad as the common theme for windows apps and damn toolbars or other "partner" software. If a friend desperately needs/wants iTunes and I know for a fact they will install it against my advice anyway, I use this method. iTunes, without full quicktime, no updater, no bonjour, updater etc. I stipulate that I won't fix their machine if they choose to update it themselves. It works, keeps them happy and saves me the effort of diagnosing a slow computer.

    Why an F'ing music syncing application needs something like 8 persistently running services is absolutely beyond me.

    --
    # cat /dev/mem | strings | grep -i cat
    Damn, my RAM is full of cats. MEOW!!
  11. The # of Free Passes by weston · · Score: 5, Insightful

    How many free passes does Apple get before you start to question their infallibility?

    Probably about as many as there are strawman constructions of people's conceptions of Apple as a company.

  12. Re:Not really... by Brian+Gordon · · Score: 5, Informative

    Defending Apple? In my slashdot?

    This was a stupid move and Apple's not as innocent as you claim. Defaulting the box to checked is almost equivalent to installing it without consent and Apple knows it. In both cases you end up with users loaded down with crap they don't need and distrusting updates, which has real dollar costs. The only difference is that in the former case the tech crowd squeals a little less, so that's the route they choose.

    Honestly, even if they were really stupid enough to not see any problem when they did it the first time, they have no excuse for doing it a second time. Why would they put it out and then withdraw it a few hours later? Did they forget the user backlash from the first time?

  13. Re:Not really... by Brian+Gordon · · Score: 5, Insightful

    Yes, operating systems should periodically pop up cryptic dialogues asking you to solve an obscure computer science problem, and if you get it wrong then it changes your wallpaper and your file type associations.

    There's no reason to make it harder than it has to be, which is what Apple's doing by presenting users with an option they didn't ask for and don't know how to answer.

  14. Re:Not really... by shutdown+-p+now · · Score: 5, Insightful

    Thank you. And in addition, it was listed in a check-box list of items. True, it was enabled by default, but the user still had to hit the button to install it.

    About 95% of all adware/malware crap, like those browser toolbars, uses precisely this technique to get installed. It has long stopped being considered adequate. The default for any "extra software" should always be off (Google, I'm looking at you, too).

  15. Re:Risking karma here but shovelware? You can opt by dave562 · · Score: 5, Insightful

    This makes owning and supporting a computer more difficult for users. I don't have time to answer questions from my friends every time a software publisher pushes out a new update. I've taken to telling them, "If it's a Microsoft auto update, install it. If it's an Apple auto update, install it. If it's an Adobe auto update, install it." When Apple starts pushing out software that is not necessary as part of their update process, it adds unnecessary confusion and software bloat. Like another poster above said, he only has Quicktime installed but the Apple updater is pushing iPhone utilities and Safari onto his desktop. Doing that is just bad form, no matter how descriptive the accompanying text is.

  16. Re:Not really... by Culture20 · · Score: 5, Insightful

    There's no reason to make it harder than it has to be, which is what Apple's doing by presenting users with an option they didn't ask for and don't know how to answer.

    It's almost as if Apple is trying to make Windows look hard to use...

  17. Re:Risking karma here but shovelware? You can opt by bloodhawk · · Score: 5, Insightful

    For the average user it has been just "snuck" onto their PC. The average user knows very little about there machine or the updates, my sister would not have the faintest idea what safari or boujour are or whether she needed to update them, they have learnt over time that the right thing to do is keep your machine UPDATED and the result is that a heap of garbage gets installed as users stick with the default selected options. apple is abusing the trust people play in updates.

  18. Re:Risking karma here but shovelware? You can opt by adolf · · Score: 5, Insightful

    Additionally, in my experience, these Apple updates happen mostly when launching iTunes.

    Picture it, if you will: A user wants to play some music, download a sitcom, or just sync their iPhone. So they launch iTunes, just like they have before. And instead of getting to do those things, they get an annoying thing that won't fucking ever go away until they press OK. Sure, they can cancel it (but then it just comes back), or they can read it and deselect things, but why should they be forced to do these things?

    They just want to instruct the computer to provide some manner of entertainment. Instead, the computer ends up instructing them.

    This, I think, the paradigm which bothers me most: That the computer switches from being told by the user what it should be doing, to telling (or at least suggesting to) the user what to do.

  19. Re:Saw this update a week ago! by Rockoon · · Score: 4, Insightful

    So ninjas are visible and easily disabled in your world, eh?

    In my world, if a program is called 'iPhone Configuration Utility' yet it does not perform configurations relevant to the average owner of an iPhone, then its big-time ninja.

    And for the record, it has only been a single year since the iTunes update (version 8) installed...

    Apple Mobile Device Support
    Bonjour
    MobileMe

    ...without any method of preventing it, or any notification that that was happening.

    You claim that I am filled with nerd rage, eh? I claim that you are fucking ignorant.

    --
    "His name was James Damore."