www.broadbandreports.com
  
Search:  

 
   AllHot TopicsCable SupportTelco SupportHardware etcSecurityClubsGallery»»






how-to block ads


 
Forums » Up and Running » Security » Security » Apple using iTunes update to auto-install Safari
 
Search Topic:
  Social:
topic feed
 
Posting
toggle:
flat / full
normal / watch
Post a:
Post a:
No hope for John/Jane, since security pros are confused too. »
« Authentium pushing a new "safe browsing" product  
page: 1 · 2 · 3 · 4 ...8 · 9 · 10
AuthorAll Replies


Doctor Four
My other vehicle is a TARDIS
Premium
join:2000-09-05
Dallas, TX
·AT&T U-Verse
·RoadRunner Cable
·AT&T Yahoo


edit:
March 22nd, @08:37PM

 Apple using iTunes update to auto-install Safari

Yesterday Apple released an update to iTunes as part of its software update, and included Safari as an update, making it checked by default. Mozilla CEO John Lilly doesn't like this, and after seeing it occur on his daughter's PC, he had this to say:

quote:
What Apple is doing now with their Apple Software Update on Windows is wrong. It undermines the trust relationship great companies have with their customers, and that’s bad — not just for Apple, but for the security of the whole Web. What they did yesterday was to use their updater for iTunes to also install their Safari Web browser –what follows is some background and analysis.

»john.jubjubs.net/2008/03/21/appl···-update/

And apparently he is not alone. Sandi Hardmeier, the owner of the Spyware Sucks blog, posted a rant about Apple's Software Update on her site:

quote:
If users on my network have QuickTime installed (which, unfortunately, is required by some law courts that use Quicktime for recording official proceedings) then I CANNOT let them update QuickTime at their own behest.

Why? Because Apple insists on trying to shove iTunes down our throats every time we try to update QuickTime, and I cannot depend on my extremely busy staff to pause long enough to read what is on the screen and untick iTunes.

And now, it gets worse. Apple is now trying to shove Safari down our throats.. you know, Safari... the Web browser that doesn't even have a phishing filter for chrissakes.

»msmvps.com/blogs/spywaresucks/De···eIndex=1
--
"The trouble with computers, of course, is that they are very sophisticated idiots." - Doctor Who (from Robot)


GeekNJ
Premium
join:2000-09-23
Waldwick, NJ
·Verizon FIOS

It's not like it's installing anything without the user taking an action. It's right out in the open. Yes, it's checked. Yes, I unchecked it when I updated iTunes.

Is it great, not really. Is it wrong, no. Is it sneaky, no.

It also isn't the iTunes updater but the Apple Software updater. It actually runs at startup as part of a standard iTunes install.



--
Tweaked your connection? | Mail Parse | Speed Converter

Hangetsu

join:2007-12-22
West Chester, PA

reply to Doctor Four
Fine, its the Apple Software UPDATER. Not the Apple Software INSTALLER. Its extremely sneaky, and I plan to remove the software from my machine unless Apple makes a statement that they will provide some means of "opting out" of additional software installs.

Its bad enough I need QuickTime on my machine.

Mele20
Premium
join:2001-06-05
Hilo, HI

Get yourself a classic HIPS to control Apple Software Updater. I have Safari for Windows and if it had decent cookie handling I would use it a lot because it has sharper display on my flat panel digital LCD monitor than does Fx, IE or Opera. Safari is far superior in ease of reading a web page when used on LCD's than any other browser. It is optimized for LCD monitors and you can really tell the difference.

Safari though tried to install ITunes (whiich I have no interest in having) through the Apple Software Updater that comes with Safari. First time it tried, ProcessGuard blocked it and asked me what I wanted to do. I told PG to block it permanently. I don't have QuickTime as that is a very ill behaved player. I use Winamp only. If something won't play in Winamp then I simply don't see or hear it. So, for me, the Apple Software Updater came with Safari rather than ITunes and tries to install ITunes instead of Safari.

BTW, I love that Safari has no phishing filter. I hate those things and turn them off in other browsers. People who are so naive as to fall for phishing schemes probably shouldn't be on the internet.
--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason


SneakyAppleSU

@rr.com

reply to Doctor Four
The real problem is with Apple's stand alone Safari installer. Even if you uncheck both Bonjour and Software Update-it installs them anyway. That is sneaky. The easiest work around is to use a utility like 7zip to extract the installer, delete everything except the Safari installer and then install it.


Cudni
La Merma - La Guerrilla
Premium,MVM
join:2003-12-20
Someshire
·BTOpenworld

said by SneakyAppleSU :

Even if you uncheck both Bonjour and Software Update-it installs them anyway.
Indeed
»Apple updates. WTF?

Cudni
--
"Mercifully, he hit him with the soft end of the pistol."
Help yourself so God can help you.
Microsoft MVP, 2006-2007


hayc59
Voodoo Child
Premium
join:2001-02-26
In A Dream
reply to Doctor Four
Not to change the subject but do you
need 'BonJour' for running ITunes??


Ctrl Alt Del
Premium
join:2002-02-18

said by hayc59 See Profile :

Not to change the subject but do you
need 'BonJour' for running ITunes??
Bonjour is not needed. But it may be used to share your iTunes library on your local network. So if you're not sharing your library, you can uninstall Bonjour.
--
less talk, more music


antdude
A Ninja Ant
Premium,VIP
join:2001-03-25

 reply to Doctor Four
On one of my older machines with Windows 2000 SP4 (all updates) and the latest iTunes that works in Windows 2000, I was offered Safari too. On download page (»www.apple.com/safari/download/), it says "Windows XP or Vista". Umm, Apple goofed? [sighs]
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer


hayc59
Voodoo Child
Premium
join:2001-02-26
In A Dream
·Comcast

reply to Ctrl Alt Del
said by Ctrl Alt Del See Profile :

said by hayc59 See Profile :

Not to change the subject but do you
need 'BonJour' for running ITunes??
Bonjour is not needed. But it may be used to share your iTunes library on your local network. So if you're not sharing your library, you can uninstall Bonjour.
thank you and gone!!


lawilson2
Premium
join:2001-04-30
Chicago, IL
·CCLHosting
·surpasshosting

reply to Doctor Four
I don't like that in order to update Quicktime I have to install iTunes. I have no use for iTunes and hate that those two are bundled together; the OP has a good point. As for the Safari, I can choose whether or not to install that or not. It's not being forced. iTunes, though, is. Why aren't people up in arms about that?


Ctrl Alt Del
Premium
join:2002-02-18

said by lawilson2 See Profile :

I don't like that in order to update Quicktime I have to install iTunes. I have no use for iTunes and hate that those two are bundled together; the OP has a good point. As for the Safari, I can choose whether or not to install that or not. It's not being forced. iTunes, though, is. Why aren't people up in arms about that?
You can download QuickTime, by itself, without iTunes, from this webpage: »www.apple.com/quicktime/download/

Select "QuickTime 7.4.1 for Windows XP or Vista"
--
less talk, more music


lawilson2
Premium
join:2001-04-30
Chicago, IL
·CCLHosting
·surpasshosting

I'm not referring to the website; I'm already aware of that. I'm referring to a pop up box that I receive in the morning or whenever an update of iTunes/Quicktime comes up that wants me to update. There is no way that this isn't bundling at its worst. If it's going to pop up on my computer, I should at least have the option to choose which component I want to install.


Ctrl Alt Del
Premium
join:2002-02-18

 
QuickTime has a built in update utility that will only update QuickTime itself.
--
less talk, more music


Doctor Four
My other vehicle is a TARDIS
Premium
join:2000-09-05
Dallas, TX
·AT&T U-Verse
·RoadRunner Cable
·AT&T Yahoo


edit:
March 23rd, @12:38AM

reply to Doctor Four
A Slashdot post by a Mozilla user on this pretty much sums
up the point that both John and Sandi are making:

said by asa :
The problem is that they have used "software update" to install a *new* piece of software. Safari is not a software update for QuickTime and it's not a software update for iTunes. It's an entirely new piece of software being pushed by Apple as if it was an update when it's clearly not.

This is a problem because it waters down the meaning of "software update" -- something that vendors depend on to keep users safe and secure and that users should be able to trust. Users shouldn't second guess themselves when clicking "OK" on a software update dialog. If they're afraid of software update services, it'll be impossible for vendors to keep them safe with security and stability updates.

It's this trust relationship being abused by Apple that's the problem
--
"The trouble with computers, of course, is that they are very sophisticated idiots." - Doctor Who (from Robot)


Jarmann
Will eat for food
Premium
join:2003-05-25

reply to Ctrl Alt Del
said by Ctrl Alt Del See Profile :

said by lawilson2 See Profile :

I don't like that in order to update Quicktime I have to install iTunes. I have no use for iTunes and hate that those two are bundled together; the OP has a good point. As for the Safari, I can choose whether or not to install that or not. It's not being forced. iTunes, though, is. Why aren't people up in arms about that?
You can download QuickTime, by itself, without iTunes, from this webpage: »www.apple.com/quicktime/download/

Select "QuickTime 7.4.1 for Windows XP or Vista"
...or use quicktime alternative that has npo sneaky parts:
»www.free-codecs.com/download/Qui···tive.htm

People are not up in arms about Itunes because most people are sheep who readily bend over to get the newest and coolest tech-stuff.

impala

join:2008-03-08
Clemson, SC
reply to Doctor Four
This stinks. But it isn't any worse than SUN installing the google toolbar with their java updates.

zteardrop

join:2005-12-20
Brooklyn, NY

edit:
March 24th, @11:00AM

reply to Doctor Four
Both Google and Apple suck. Their iTunes software is the worst piece of junk I've seen for Windows in a long time.


clickwir

join:2001-06-21
Dickson City, PA
·Vonage

reply to Doctor Four
Forcing or even default checking extra programs to be installed like that is a dirty tactic. Dirty and low. I stopped using quicktime just because of that. It forced me to install other apple crap. NO thanks. I don't need quicktime that bad that I need my system boogered up by what apple thinks is a good idea. Hell with you apple, hell with you.


clickwir

join:2001-06-21
Dickson City, PA
·Vonage

reply to impala
said by impala See Profile :

This stinks. But it isn't any worse than SUN installing the google toolbar with their java updates.
Yes, quite different. What you are referring to is an extra bit of software you can opt out of, during install... not during a regular software update.
Forums » Up and Running » Security » SecurityNo hope for John/Jane, since security pros are confused too. »
« Authentium pushing a new "safe browsing" product  
page: 1 · 2 · 3 · 4 ...8 · 9 · 10

Most commented news this week
· [366] Comcast Considering 250GB Cap, Overage Fees
· [195] Cable Broadband Users, Get Ready For Overage Fees
· [113] SecuRom's New Internet-Required PC Game DRM
· [111] Comcast Mocks AT&T For Lawn Cabinets While Deploying Their Own
· [60] AT&T Offering Dual U-Verse HD Streams In St. Louis
· [59] New Buzz Phrase: 'Protocol Agnostic'
· [58] Comcast Scraps P2P 'Bill Of Rights' Idea
· [53] Test Your ISP For BitTorrent Shenanigans
· [47] Viacom Wants Piracy Filters In Networking Hardware
· [43] Sprint Xohm, Clearwire To Merge, Create Ultra-WiMax Robot
Friday, 09-May
15:19:31
Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
8th year online! © 1999-2008 dslreports.com.
page compression OFF