
how-to block ads
|
Uniqs: 26386 |
Share Topic  |
 |
|
|
|
| | WhenU Enters the Anti-Spyware Market Hi All:
You might have heard about the recent arrangement between Aluria (makers of Spyware Eliminator, a version of which is bundled with AOL 9.0) and WhenU, one of the more well-known distributors of adware. See here for the press release:
»www.prnewswire.com/cgi-bin/stori···62&EDATE
Aluria agreed to de-list WhenU from the defintions it uses for Spyware Eliminator. Suzi at Spyware Warrior has blogged about this:
»www.netrn.net/spywareblog/
And there's a news story on the same subject here at DSLR/BBR:
»It's Adware, Not Spyware!
But I just discovered that the situation is much worse than I originally thought. What we have here is more than a case of a little mutual back scratching with cross-promotion and links. See:
»www.whenu.com/whenu_solution.html
From that page:
said by WhenU: WhenU is committed to protecting consumers' privacy and consumer PCs against dangerous spyware. This is why WhenU has teamed up with Aluria Software, a leading provider of anti-spyware tools, to provide WhenU consumers with UControl.
UControl is the first product in the online advertising industry that provides a comprehensive scan of your computer and removes unwanted spyware programs, while continuing to provide the deals, offers and value consumers have come to expect from WhenU contextual products.
See also:
Anti-Spyware Portal »www.whenu.com/take_control.html
Free Scan »www.whenu.com/scan_pc.html
In other words, WhenU is now in the anti-spyware business now with Aluria. And a major anti-spyware vendor has now agreed to de-list an adware vendor and start working the same vendor to market its anti-spyware product.
I am stunned and amazed.
Eric L. Howes | |
|  jaykaykay4 Ever YoungPremium,MVM join:2000-04-13 Scottsdale, AZ kudos:19 Reviews:
·Speakeasy
| Re: WhenU Enters the Anti-Spyware Market Yuck. Mutual back scratching is right. So many that use AOL no nothing about the outside world and wouldn't understand all of this, which is a shame. Otherwise, it might be just the thing to convince my friends to stop using it. No such luck with them and so many others. AOL just seems to do what is good for them, and so many of their users who know nothing about so much just go on trusting them. What a shame...or is that sham.:( | |
|  | | By the way, it's not the first time that one of these "adware" companies has tried a ballsy move like this. Claria makes WebSecureAlert that protects you from unauthorized changes to your system configuration and cleans up your tracks: »www.gainpublishing.com/global/so···ureAlert
This does seem like the first time that an anti-spyware company has been persuaded to ignore a product based on a licensing deal though. Could just be a coincidence...
I still want to see WhenU explain why 80% of their "users" can't recall installing their applications. Maybe WhenU software causes memory loss. »www.pcpitstop.com/spycheck/whenu.asp | |
|  |  SnowymIRC unix.ro UnderNetPremium join:2003-04-05 Kailua, HI kudos:5 Reviews:
·RoadRunner Cable
·Clearwire Wireless
| Re: WhenU Enters the Anti-Spyware Market A link on Aluria's Partner page pointed to this page titled Not Spyware, Not Adware »www.weatherbug.com/aws/notSpyware.html This statement below seemed easy enough to verify, so I DL'ed WeatherBug using the link provided & then scanned with the first of 9 anti-spyware scanners they listed as them being familiar with (happened to be AdAware). AdAware found MySearch had been bundled with WeatherBug, which came as news to me. It appears AdAware's parameters of what qualifies as Ad/Spyware is at odds with Aluria's Spy/Adware qualifying prerequisites. Considering that AdAware hasn't any financial interest in listing or delisting MySearch, it seems prudent to trust the definitions of the unbiased scanner & let it remove the MySearch entries. I don't see Aluria ever being used as a serious benchmarker of what Ad/Spyware is or is not using their current definition of what "is" is.
"We require any software that is integrated with WeatherBug, including the WeatherBug Browser Companion powered by My Search, to be spyware- and adware-free, too. In order to insure that your computer is free from spyware and other problem applications, we recommend downloading and running a detection program. While WeatherBug does not endorse any specific detection product, here are links to companies with which we are familiar. The developers of these products advertise them as reliable and effective programs for detecting spyware." -- Dave said "By the way, 4294967295 is just another way to write -1". | |
|
 | | Hi All:
Back with more. Some have noted that one problem with the partnership between Aluria and WhenU is the potential for conflict and controversy over the detections used by anti-spyware vendors. WhenU now has leverage to charge that other anti-spyware vendors are completely out of line in detecting WhenU's products, because WhenU was "certified" clean by Aluria, and that the only motivation for continuing to detect WhenU would be to scare customers and drum up sales.
While that is true, Aluria has now created an even bigger problem for other anti-spyware vendors than just confusion and controversy over detections. See:
»www.whenu.com/optimize.html
It now appears that the Aluria scanner is actually bundled or integrated into the WhenUSearch Toolbar. In other words, by removing the WhenUSearch toolbar, other anti-spyware vendors will effectively be removing a competing anti-spyware product. Still worse, WhenU itself is now a competitor to other anti-spyware vendors.
Aluria must have foreseen the potential conflicts here. Aluria, it should be noted, is a charter member of COAST (the Coalition Of Anti-Spyware Technology vendors):
»www.coast-info.org/pr_launch.htm
Earlier this year COAST admitted to its membership NoAdware...
»www.coast-info.org/members.htm
...New.net...
»www.coast-info.org/newdotnetpr.htm
and WeatherBug
»www.coast-info.org/awspr.htm
Eric L. Howes | |
|  |  | | Re: WhenU Enters the Anti-Spyware Market said by eburger68:It now appears that the Aluria scanner is actually bundled or integrated into the WhenUSearch Toolbar. In other words, by removing the WhenUSearch toolbar, other anti-spyware vendors will effectively be removing a competing anti-spyware product. Still worse, WhenU itself is now a competitor to other anti-spyware vendors. Aluria must have foreseen the potential conflicts here. Aluria, it should be noted, is a charter member of COAST (the Coalition Of Anti-Spyware Technology vendors): Whoa, that is truely sinister, the melding of malware with a supposedly anti-malware scanner tool. It would seem that for competing anti-malware tools, that would present quite a potential legal landmine. Btw, about COAST, isn't that the same group that LavaSoft helped found, and then voluntarily left, after "creative differences" with their opinion on where that organization should have been heading?
Buckle up, kids, this sounds like it's going to be a wild ride. :| | |
|
 2 edits | Hi All:
Still more interesting information about the new UControl anti-spyware scanner from WhenU and Aluria.
I downloaded the free scanner from WhenU's site and tested it. It flagged six items on my box as "suspect" (see screenshots 1 & 2 above). Four of the six are false positives (the DyFuca items are actually InstallShield setup keys; the WinFavorites.Bridge item is a CLSID for a Microsoft file, ATL.DLL; the ClearSearch item is an innocent CLSID for "Microsoft Url Search Hook").
The two FlashGet items are especially interesting. FlashGet is a download manager that comes in two versions ( »www.amazesoft.com/ ):
1) adware supported -- the "free" version of FlashGet displays ads in the FlashGet GUI, somewhat like the free version of Eurdora. The advertising is disclosed in the EULA during installation. Moreover, users can remove the inline banner by purchasing and registering FlashGet (see screenshots 3 & 4, which were taken after uninstalling the registered version of FlashGet and installing the latest ad-supported version).
2) full version -- the full, registered version of FlashGet displays no ads whatsoever.
The UControl anti-spyware application flagged FlashGet, which is installed on my computer. The problem is that it flagged the full, registered version as "suspect," not distinguishing between the ad-supported version and the full, registered version.
What does this mean? It means that WhenU's anti-spyware scanner is flagging a competing adware product -- a product that uses a similar advertising model as WhenU's own products and that competes with WhenU for advertising dollars. Unfair competitition?
Still worse, WhenU's scanner is flagging an adware application that is arguably MORE CONSUMER FRIENDLY than WhenU's own applications because FlashGet allows users to remove the advertising permanently.
What we have here is a case of utter hypocrisy -- an adware vendor who effectively bought protection from an anti-spyware vendor by partnering with that anti-spyware vendor is now distributing an anti-spyware product that flags the non-ad supported version of a product from a competing adware company that is arguably more consumer friendly than WhenU itself. And Aluria is distributing its spyware application through an adware company that is arguably less consumer friendly than the adware its own anti-spyware product flags and removes.
The makers of FlashGet would be quite justified in being a little miffed at the treatment they're getting from the competition.
Best,
Eric L. Howes | |
|  mers2Premium,MVM join:2004-03-20 USA kudos:8 | Spywareinfo has delisted Aluria Spyware Eliminator from it's recommneded software with an explanation of Aluria's alliance with WhenU. Hopefully the word will spread the resulting loss of income/reputation for Aluria will serve as an example when integrity is thrown out for sake of profit. I personally find Aluria's actions unconscienable. I expected no different from a slime company like WhenU. Thanks Eric for posting this here. -- Kerry/Edwards 2004 | |
|  Reviews:
·Shaw
| Its nice to know that WhenU has been given the all clear by Aluria, and is only something relatively benign like Adware, and only makes use of your cpu cycles. I can now bask in the comfort of knowing that all my online gambling, betting and bingo needs will be well taken care of by WhenU, and should I find myself in an awkward financial position as a result of the former, WhenU has insured that I have access to quick cash, refinancing or even a "payday loan": Advertisers Using WhenU | |
|  LoPhatPhuudPremium,VIP,MVM join:2002-01-06 Albuquerque, NM kudos:23 Reviews:
·Comcast
| Sad. This will be the beginning of the end of Aluria as a reputable manufacturer. After this type of alliance I don't believe there is any way to ever get their "reputation" back.
Would you be willing to trust them again? -- "If you pick up a starving dog and make him prosperous, he will not bite you. This is the principal difference between a dog and a man."----- Mark Twain | |
|  muf9Captain of the axePremium join:2003-01-04 uk | This is an early April fool, right? Please say it is because if it's true then Aluria's reputation has just nosedived straight down the plughole.
muf -- We want... a shrubbery! | |
|  siggyxSiggyPremium join:2003-12-10 Cambridge 1 edit | This is a stunning development against the Anti-Spyware movement.
Aluria has joined with WhenU supposedly to market a spyware scanner....
»www.whenu.com/whenu_solution.html
"WhenU is committed to protecting consumers' privacy and consumer PCs against dangerous spyware. This is why WhenU has teamed up with Aluria Software, a leading provider of anti-spyware tools, to provide WhenU consumers with UControl.
UControl is the first product in the online advertising industry that provides a comprehensive scan of your computer and removes unwanted spyware programs, while continuing to provide the deals, offers and value consumers have come to expect from WhenU contextual products.
Using Aluria's technology, WhenU's UControl Spyware Scanner:
Rids your computer of dangerous spyware Protects privacy and personal information Prevents credit card theft Increases system performance Ends browser hijacking Enables consumers to continue to receive relevant contextual advertising, special deals and offers Innovation is the key to the survival of any industry, and WhenU looks forward to playing a pivotal role in this evolving field of consumer protection.
This product will be ready for download on November 1, 2004."
Due to this development, Aluria is no longer a part of ASAP
Posted at TC -- The next best thing to being smart is being able to quote someone who is. | |
|  4 edits | Hi All:
I want to offer some observations about certain aspects of this newly announced relationship between Aluria and WhenU -- observations that I think it important to bear in mind when considering the many issues at stake.
First, it's important to recognize that Aluria made not one but two decisions regarding WhenU. The first decision was to stop targeting WhenU in its definitions for Aluria Spyware Eliminator. This decision alone is controversial, but I think we can all recognize that it is appropriate for anti-spyware vendors to review the practices of the applications they target and, when appropriate, de-list applications that no longer merit targeting and removal. We can disagree about what applications ought to be de-targeted and the criteria to be used, and indeed similar decisions by other anti-spyware vendors like Lavasoft have caused controversy. Had Aluria decided only to de-target WhenU, we would no doubt be having a raucous discussion, but that discussion would concern the narrow issue of whether WhenU should be targeted by anti-spyware applications. But Aluria did something more than perform a routine review of an adware application and decide to de-target it.
The second decision that Aluria made takes us far beyond the narrow question of whether to de-target an adware application. It actually decided to partner with that same adware company and start distributing versions of its software through that adware vendor's advertising channels. And the minute Aluria did this, it immediately and irrevocably compromised the integrity of its first decision, for no longer can we regard the first decision as simply the kind of tough call that anti-spyware vendors have to make every day. Now we have to consider whether that first decision was made in the light of the potential financial benefits to Aluria. The second decision taints the first. And that brings me to my next observation.
Second, in making these decisions Aluria has done its customers, and indeed the entire anti-spyware industry, a grave disservice, because it has put itself into a completely untenable position. At bottom the conflicts of interest here are so serious that Aluria's trustworthiness as an anti-spyware vendor is completely and utterly compromised. And that has implications for Aluria's customers as well as the other anti-spyware vendors who continue to target Aluria's new business partner, WhenU.
There are several angles to look at when considering conflict of interest.
1) Aluria does regard adware applications as legitimate targets, as we've already seen in its detection of FlashGet on my own PC. This, by the way, puts Aluria into some kind of tension with its new business partner, WhenU, which told us at the FTC's Spyware Workshop this past April that there is a vast difference between adware, which is presumptively consumer friendly and legitimate, and spyware, which is not consumer friendly and therefore illegitimate (see WhenU's own summary of that position here: »www.whenu.com/pc_role_hearings.html ). WhenU appears to back away from that absolute distinction on another of its new pages, when it grudgingly admits that there are in fact illegitimate, non-consumer friendly adware applications (see »www.whenu.com/pc_adware_spyware.html ).
2) Given Aluria's willingness to partner with WhenU and use the adware model to distribute its anti-spyware application, we must now regard every adware application on the Net as a *potential* (note the emphasis here) partner of Aluria. And once adware applications become potential partners for Aluria, its definitions simply cannot be trusted.
At the very least, every decision by Aluria to de-target an application, as it did with WhenU, becomes immediately suspect, because we have to wonder about Aluria's financial interest in de-targeting that application.
By turns, every decision to continue to target an adware application is also suspect, because we have to wonder whether Aluria isn't simply protecting the market position of its business partner, WhenU, which competes for advertising and desktop space with the adware applications that Aluria targets.
Still worse, even if we do decide that Aluria is trustworthy enough to keep its financial interests out of the decision-making process about what to target and what to certify, Aluria has exposed itself to charges of unfair competition from other adware vendors. If Aluria, for example, were to suddenly announce that it was de-targeting Claria/Gator or Look2Me, could you really trust that such a decision had been made on the merits alone and not in response to threatened legal action by Claria based on Aluria's relationship with Claria's competitor WhenU? I think not.
No customer of an anti-spyware application should be put in the position of having to wonder about the integrity of the definitions used by that application, yet this is just where Aluria has put its customers.
Third, but the harm extends beyond Aluria's own customers. Aluria has effectively ripped the rug out from under the entire anti-spyware industry. Now every other anti-spyware vendor will have to worry that it will be exposed to charges of unfair competition based on those vendors' continued detection of WhenU, the business partner of a competing anti-spyware product. Aluria has effectively handed WhenU a powerful weapon to use against other anti-spyware vendors.
Other anti-spyware vendors could also be harmed indirectly, though. So tainted could anti-spyware vendors become in the eyes of consumers as a result of Aluria's actions that similar decisions made by other anti-spyware vendors to de-target adware applications might well be regarded by customers as equally suspect. In compromising itself, Aluria risks compromising the reputations of everyone else in the industry.
Indeed, Aluria's decision to cross over and partner with the very kind of company that anti-spyware vendors usually target has the potential to create a hornet's nest of suspicion, charges, and counter-charges within the industry. The primary victims of that kind of poisoned environment would, of course, be consumers -- the very victims of adware and spyware who are perpetually in need of trustworthy anti-spyware applications. (And I'd prefer not to even think about the possibility that this action might ignite an "arms race" of sorts among unscrupulous anti-spyware vendors to push their products through competing advertising channels.)
My apologies for the long-ish post, but the potential ramifications of Aluria's decisions need to be spelled out very clearly.
Best,
Eric L. Howes | |
|  |  SpyPremium join:2001-09-22 NE | Re: WhenU Enters the Anti-Spyware Market said by eburger68:Indeed, Aluria's decision to cross-over and partner with the very kind of company that anti-spyware vendors usually target has the potential to create a hornet's nest of suspicion, charges, and counter-charges within the industry. The primary victims of that kind of poisoned environment would, of course, be consumers -- the very victims of adware and spyware who are perpetually in need of trustworthy anti-spyware applications. It's disgusting. It seems like something that Ashley from Privacy Tools would be doing. Here's a quote from that anti-spyware vendor to bring back memories.
Ashley said:
"And to be honest i'm even thinking of having some programmers write me some spyware. Yep, actual spyware to infect ppls machines. Why? Cus you all suck. I'm trying to work with you but you couldnt give a sh1t. So why try and work with the anti-spyware community when there only against you? You guys are against me so much that i'm going to start distributing spyware myself, its not hard. UNDETECTABLE stuff too To be honest theres probably more money in this then the actual spyware removal" | |
|  |  | | In the last year or so I'll admit I've been slightly miffed that WinPatrol wasn't included in many of the Anti-Spyware program comparisons including Eric's. WinPatrol works a little differently and so it's hard to compare apples to oranges with traditional Anti-Spyware scanners.
I just kept telling myself it was because WinPatrol was a utility that provides so much more then just protection from Spyware. 
Now, between all the trash that shows up on Eric's Rogue/Suspect Anti-Spyware list and situations like this I'm thinking I am glad we're not classified as Anti-Spyware.
Bill Pytlovany BillP Studios | |
|
 keith2468Premium,MVM join:2001-02-03 Winnipeg, MB | Aluria probably feels regular consumers want to differentiate between safe adware and unsafe adware.
At one end of the spectrum are adware products like Yahoo Messenger, Opera Free, RealPlayer, QuickTime, and Acrobat Reader. Probably even these products are too spyware-ish for some purists, but I run them all except Opera. Other people may not even think of these products as Ad-ware, but the free versions do deliver paid advertising so they are adware.
And I run some other free software too. Ad-awareSE and Spybot S&D. They aren't adware, but I did download Ad-aware from an advertising sponsored website (which is what CNet and MajorGeeks are).
At the other end of the privacy spectrum is spyware that facilitates identity theft, where when you get it you need to change your credit card numbers, put a watch on your credit rating, file a police report, and re-format your hard drive.
I think consumers want this information -- to be able to tell one hazard from the other without doing a 90 minute search on google. To know what is safe to install, but also to know for sure what they have to do after an infection.
I can see where Aluria thinks it has a market if it can accurately differentiate between adware products that maintain and fail to maintain privacy.
Could someone else do a better job than Aluria? Sure. But it would take funding to get off the ground. Probably the anti-virus vendors will get in on the act.
I am pretty sure this is a service regular consumers want.
Setting the categories and accurately fitting the adware into them will be the real challenge.
They'll need ratings that keep privacy fanatics happy, that keep parents happy, and that keep regular regular folks with hobby computers happy. So they'll definitely need a rating system more complex than "safe" or "unsafe". -- (Virus&Hijacking FAQ + Submit suspected malware + Backups FAQ + Security FAQ TOC) | |
|  |  keith2468Premium,MVM join:2001-02-03 Winnipeg, MB 1 edit | Re: WhenU Enters the Anti-Spyware Market If Aluria goes to far off-base in its conflicts of interest, they'll loose their AOL contract.
Aluria could probably get away with a bit, but if AOL were to start getting numerous on-going credible complaints from customers, and articles start appearing on how product X is spyware and Aluria says it isn't ... it probably won't be good for Aluria's marketing rep at AOL contract renewal time. (Assuming AOL doesn't own them.) | |
|  |  |  mers2Premium,MVM join:2004-03-20 USA kudos:8 | Re: WhenU Enters the Anti-Spyware Market said by keith2468:If Aluria goes to far off-base in its conflicts of interest, they'll loose their AOL contract. Aluria could probably get away with a bit, but if AOL were to start getting numerous on-going credible complaints from customers, and articles start appearing on how product X is spyware and Aluria says it isn't ... it probably won't be good for Aluria's marketing rep at AOL contract renewal time. (Assuming AOL doesn't own them.) Aluria already has gone too far with it's partnership with WhenU, as Eric's post clearly demonstrated. -- Please vote on Nov 2 | |
|  |  |  | | said by keith2468:If Aluria goes to far off-base in its conflicts of interest, they'll loose their AOL contract. Aluria could probably get away with a bit, but if AOL were to start getting numerous on-going credible complaints from customers, and articles start appearing on how product X is spyware and Aluria says it isn't ... it probably won't be good for Aluria's marketing rep at AOL contract renewal time. (Assuming AOL doesn't own them.) Why would AOL care if Aluria got in bed with an "adware" company, other than the fact that they might compete for "eyeballs"? AOL is *THE ORIGINAL* internet/network-based "adware" company. I guess you sort of forgot that, Keith. If anything, maybe AOL will just buy them both up. | |
|
 |  BPremium,MVM join:2000-10-28 | What are you talking about re: Acrobat Reader? The only "advertising" it shows is a brief upgrade solicitation on the startup screen. It's not even a "nag" screen.
That's really stretching the definition of Adware far too wide, in my view.
-- B -- In a realm outside causality and function | |
|  |  |  keith2468Premium,MVM join:2001-02-03 Winnipeg, MB | Re: WhenU Enters the Anti-Spyware Market B,
If your point is that Acrobat Reader has ads that are straightfoward and unobtrusive, and that the value of the product to you outweighs the minor inconvenience of the tiny ads, I totally agree. It is good adware. It is a good deal for most users. Probably most people don't even notice the ad.
It is at one end of the adware spectrum.
Then comes things like QuickTime, WindowsMediaPlayer, and RealPlayer. The ads are more intrusive, but not hard to mostly suppress (so you only see them at update time). And all these adware products only install with permission, don't install rogue applications without consent, no longer steal file extension associations (not with the expert install anyway), are obvious when they are running, are easy to uninstall, and give you a way to turn off your tracking number (QT maybe doesn't even have a tracking number).
So they are also at the good end of the adware spectrum.
Then there is a continum of progressively more intrusive and then dangerous adware and spyware, at the end of which you have things that facilitate identity theft. -- (Virus&Hijacking FAQ + Submit suspected malware + Backups FAQ + Security FAQ TOC) | |
|  |  |  |  BPremium,MVM join:2000-10-28 | Re: WhenU Enters the Anti-Spyware Market I just think Acrobat Reader's not adware at all. It can be classified as nagware, but that's it. All I see is the screenshot above, for 1/2 second on startup -- if my machine were faster than 500 Mhz I wouldn't see it at all.
As you say, terms and definitions are important, and I happen to think Acrobat Reader (at least, my version) doesn't fall under "adware" at all.
Otherwise, products like ZoneAlarm Free (which has far more annoying nags) would be "adware" too!
-- B -- In a realm outside causality and function | |
|  |  |  |  suziPremium join:2004-05-01 | Since we are discussing definitions and example, perhaps it would be helpful to look at COAST's own definitions of spyware and adware, keeping in mind that Aluria is one of the founding members of COAST.
»www.coast-info.org/glossary.htm
Partial definition of spyware:
quote: While some spyware is installed with the users knowledge (although the user may not understand exactly what s/he has done), much of the time it is installed surreptitiously as part of another program installation. Even if the bundling of software and information tracking practices are disclosed to the consumer through the End User License Agreement, such disclosures are rarely noticed by users or give them any real understanding of what information will be collected by the spyware and how the collecting party will use it.
Emphasis mine.
Partial definition of adware:
quote: Often used as a term for spyware, it is preferred and used by makers of software that include ad-serving mechanisms. Adware is advertising-supported software that displays pop-up advertisements whenever the program is running.
The "more info"link says this (partial quote):
quote: The majority of programs that use ad-serving software disclose its existence during the installation process. In many cases, the software will not function without the adware component. Some adware can install itself on your computer even if you decline the installation.
Excuse me, but that says "The *majority* of programs.... disclose its existence during the installation process."
So then if some programs "DO NOT disclose their existence", wouldn't that make them very close to spyware by COAST's own definition?
And this:
quote: Although seemingly harmless (aside from the intrusiveness and annoyance of pop-up ads), adware can install components onto your computer that track personal information (including your age, gender, location, buying preferences, surfing habits, etc.).
(emphasis mine)
I don't see much difference in spyware and adware based on those definitions.
-- aka Suzi, Spyware Warrior | |
|  |  |  |  |  | | What Comes To Mind... Several things come to mind here....
1) Trust No One. (remember a few years back when that quote was popular?)
2) Money is the root of all evil.
3) AND, it reminds me of the movie, Underworld, where a few dark characters are attempting to crossbreed the vampires and Lycans, and the whole thing is a thick and complex plot. And it's hard to know who the "good guys" are.
I USED to think of Ad-Aware and Spybot S&D as "the good guys". Now I don't trust any spyware vendor at all, and never will again. Instead, I place my unwavering trust in Deep Freeze. | |
|
 |  | | said by keith2468:At one end of the spectrum are adware products like Yahoo Messenger, Opera Free, RealPlayer, QuickTime, and Acrobat Reader. Acrobat reader has ads? I've never, ever, seen one. As I understood it, Adobe's business model was to give away the reader for free, in order to seed and encourage the growth of the market for that content format, and then sell the creator/encoder half. Much like Real, Microsoft, Apple, and many others. Opera is pretty non-intrusive and up-front about containing an ad banner, save for initially attempting to register some 3rd-party advertising cookies when you first start it up. Current versions of Yahoo and QT I can't comment on, because I don't use them.
One thing to note - technically, because it installs a tracking cookie - Opera is indeed "spyware", in the technical sense, if not in primary intent. So is WMP by default, and at least older versions of Real and QT were too (unique user-id based tracking). In fact, ZoneAlarm Free is (or was, I stopped using it at some 3.x version) as well.
said by keith2468:I think consumers want this information -- to be able to tell one hazard from the other without doing a 90 minute search on google. To know what is safe to install, but also to know for sure what they have to do after an infection. I can see where Aluria thinks it has a market if it can accurately differentiate between adware products that maintain and fail to maintain privacy. That of course assumes that you can trust the definitions that it is using, and what it reports to the user. Given this new information, that ability seems highly suspect.
said by keith2468:Could someone else do a better job than Aluria? Sure. But it would take funding to get off the ground. Probably the anti-virus vendors will get in on the act. Too late, both Symantec and Microsoft want in on the act too. They smell revenue. Of course, given MS's status as a convicted monopolist, that makes their entry into the market very tricky indeed.
(As an aside - I wish that MS would create a very simple facility, to create a permanent association between all of the many varied components that current Windows' applications rely upon, and allow treating them as a set, to add, move, or delete, as a singular unit - almost just like how IE and Explorer.exe handle "Save Web Page - Complete", and store both the .html file, and a _files directory, and keep them associated when the user interacts with them. Removing malware would be so much easier, if this was enforced by the OS. Speaking from a technical programming perspective, it's not all that hard to do, either, at least in theory, if you were allowed to slightly re-architect some small parts of Windows')
said by keith2468:I am pretty sure this is a service regular consumers want. Setting the categories and accurately fitting the adware into them will be the real challenge. Well, if the collection of files and registry entries that make up an application, could be treated as component parts of a singular set, and given a GUID, or some sort of collective hash value that uniquely identified the components of the set, then you could easily do several things with it: 1) Create a distributed database, and allow users to comment on, or otherwise 'tag' a set with additional information. Malware could be collectively identified this way. 2) A current "Registered set" of installed applications could be enforced by the OS, and any attempt to install some sort of unknown "application set" could be prompted for like firewalls do for connections, and the user could choose to deny installation of this stuff in the first place.
Interestingly, MS already has some minor pieces of this sort of thing already in place - MSI install technology, and "manifest" files, to start with.
The problem is that everyone loves to blame the user (including MS), but MS doesn't give the user the tools really necessary to empower them to enforce their desired security policy easily and effectively.
said by keith2468:They'll need ratings that keep privacy fanatics happy, that keep parents happy, and that keep regular regular folks with hobby computers happy. So they'll definitely need a rating system more complex than "safe" or "unsafe". Or just let users create their own lists of ratings, and then other users can subscribe to whoever's list that they choose (or possibly several, for more than one opinion). | |
|  |  | | Thanks, and I whole hartedly agree with that. | |
|
 TeMerc join:2004-01-22 Phoenix, AZ | This is truely amazing. What are they thinking over at Aluria? Surely they must know this is financial suicide. Its only been barely half a day, and its posted everywhere in most security forums. I did my part, added links to this thread on my own MSN site, and the 2 other MSN sites I am part of. Then, I sent an email to Fred Langa, of The Langa List Newsletter. Hopefully they will print it, along with the links I provided. People need this info to make thier own minds up about Aluria, we just provide information. -- Remember............You can NEVER be OVERPROTECTED!! | |
|  |  |  | | Re: WhenU Enters the Anti-Spyware Market My favorite statement on Aluria's page certifying WhenU was "Government records confirm WhenU as a valid business" What the heck does that mean? Anyone who files a DBA could be considered a valid business.
For those not familiar with WhenU's tactic's and purpose, I'll just say it not in the same universe with companies who include advertising on their products. Forget the terms Spyware or Adware. Were talking about Malware,Mysteryware or just plain Badware.
btw... Congrats TeMerc for the plug in Fred's newsletter of your page »groups.msn.com/TeMercInternetSec···res.msnw
Bill Pytlovany BillP Studios | |
|  |  |  TeMerc join:2004-01-22 Phoenix, AZ | Re: WhenU Enters the Anti-Spyware Market To Bill P: Thanks Bill, thats the second time I have been mentioned there. It has upped my membership by nearly 50%. And, speaking of the Langa List, I sent them an email regarding this thread. Lets hope it gets added to the next newsletter. It is certainly worthy of the attention. -- Remember............You can NEVER be OVERPROTECTED!! | |
|
 2 edits | Hi All:
I want to reiterate a point I made earlier in my long post from last night, because I can already see that we risk becoming distracted from the main point that we need to hammer home with folks.
As I stressed earlier, Aluria made two decisions: the decision to certify and de-target WhenU, and the decision to partner with WhenU. Aluria is undoubtedly going to want to collapse these two decisions and turn the controversy over its actions into a debate over the legitimacy of WhenU, which they'll then defend based on their targeting criteria.
Don't fall for it. Don't get suckered into having a discussion about the legitimacy of WhenU, because when we do that we lose sight of the real story here, which is the indefensible decision on Aluria's part to partner with an adware distributor. The decision to partner with WhenU changes the entire equation here and takes us well beyond a simple discussion over targeting criteria for anti-spyware apps. It's the partnership with WhenU that utterly compromises the trustworthiness of Aluria's spyware definitions, for all the reasons I outlined earlier.
Put another way, even if we were to grant that it was legitimate for Aluria to de-target WhenU, we would STILL reject its partnership with WhenU, because no anti-spyware company should ever exploit the same advertising model as used by the applications it targets, no matter the legitimacy of the particular adware company it partners with. Period.
This is a conflict-of-interest problem, not a legitimacy-of-WhenU problem. Indeed, given Aluria's financial ties with WhenU, it is impossible even to have a productive discussion with Aluria about its decision to de-target WhenU. That's the real story here.
Best,
Eric L. Howes | |
|  |  BPremium,MVM join:2000-10-28 | Re: WhenU Enters the Anti-Spyware Market Thanks for the reminder Eric. We hear you. It's just so laughable a situation that I can't even comment on the larger scope you've discussed -- Aluria is so clearly being evil here. I was giggling as soon as I saw the thread topic.
This pull from the "dark side" is inevitable in some cases. If there were money in other malware (like viruses) we'd have seen other deals like this in the past. Kinda surprised some lesser AV products aren't ignoring the spambot trojans, come to think of it... I guess the difference is that spyware is unique in that real companies stand behind it and admit to it.
-- B -- In a realm outside causality and function | |
|  |  | | said by eburger68:Put another way, even if we were to grant that it was legitimate for Aluria to de-target WhenU, we would STILL reject its partnership with WhenU, because no anti-spyware company should ever exploit the same advertising model as used by the applications it targets, no matter the legitimacy of the particular adware company it partners with. Period. Exactly! It would be like Symantec entering a marketing partnership with an e-mail-based virus/worm-writer, to advertise and promote Norton AV 20XX using viral spam e-mail, along with payment to the author of the worm and a modification to the virus defs to not classify that particular strain containing the Symantec advertising message as a virus, and therefore not removed during a scan. (Note to lawyers, the preceeding was a hypothetical example for the purposes of illustration and discussion. Any similarities between that statement and reality, would have to be purely coincedental.)
Interestingly, that's basically what these things (advertising malware) are - "ad viruses". They "infect" your machine, for the sole purpose of spreading ads, even though the ads are not capable of spreading infection on their own, so not technically a virus.
(Perhaps that phraseology would help non-technical people understand? Something to consider.) | |
|
 muf9Captain of the axePremium join:2003-01-04 uk | IMO i don't think we can consider Aluria as a legitimate anti-spyware application any more. I believe it has just turned itself into a rogue anti-spyware application now that it has affiliated itself with WhenU.
I feel sorry for the many people who own and have used Aluria's Spyware Eliminator. They are the one's who have been betrayed. But hey, there's lots of other legitimate anti-spyware application's out there for people to transfer to. Lets just hope they too don't get 'persuaded' into partnering with WhenU.
muf -- We want... a shrubbery! | |
|  |  dadkinsCan you do Blu?Premium,MVM join:2003-09-26 Hercules, CA kudos:18 | Re: WhenU Enters the Anti-Spyware Market Muf, I agree that there are others available to help in the fight but, more and more of them are dropping detections af crapware. A person has to go through the KGB to get rid of WildTagent(and others) because of dropped detections. This is getting very disturbing. Even SpyBot S&D has New.Net ignored by default... What's next for the detections of our AS apps? Gator(Claria) is ignored? -- Nuke 'em all, let God sort 'em out. | |
|
 peartree join:2002-06-08 New Philadelphia, OH | Think that's bad? How about a free IE browser shell that comes complete with links to adware just as nasty as the crap from WhenU?
That's what you have in the form of the UCMore search bar. It's adware, pure and simple. Yet the group who form the core of Maxthon (formerly MyIE2) don't see anything wrong with that.
The kernel engine of the UCMore software is the old Alexa adware engine. Of course Alexa is now "legitimate", since it's owned by Amazon.com. Yes, Amazon.com owns an adware company.
Where Maxthon comes in is that the software includes a link to the UCMore adware, which it labels a 'plugin' without any warning that it's adware. When I posted a complaint about this practice, I was harassed by the Maxthon group. They tried to argue that they didn't FORCE anyone to install the adware. My point of view is that they do NOTHING to let people know that this is adware before it gets installed AND they refuse to remove the links to the product from Maxthon. That makes them just as guilty as the bunch at UCMore. | |
|  | | Eesh. This is very disappointing. I had been in contact with Aluria over affiliate spamming for ASE, and seen progress and commitment to abandon dodgy promotion.
I had hoped to be able to recommend Aluria, as goodness knows there are few enough good commercial anti-spyware apps compared to the sheer mass of bad actors.
Not now, obviously.
> the UCMore search bar. It's adware, pure and simple.
Yes. But it hasn't been stealth-installed for a long time, or at least I haven't seen that for a long time and UCmore promise me they won't be doing so. So I'm happy to de-list them.
This is not the case with WhenU - SaveNow is still being silently installed without notice by software including downloader trojans chained from IE security hole exploits. (eg. ISTbar->WildMedia->SaveNow.)
Looking at Aluria's 'certification scheme' it seems like they're really endorsing the site www.whenu.com, rather than the SaveNow software as such. And indeed the site is fine; their drive-by downloads aren't triggering on their own site!
So, sure, they've done a lovely job making themselves look all responsible and nice on their web site, but they're paying their affiliates (or affiliates' affiliates) to piggyback on an illegal exploit. De-listing is not at all appropriate here.
The FlashGet detection has *got* to be a mistake (in the PestPatrol mould of detect-submitted-files-first-ask-questions-later). In-application adware like this and Opera's (etc. - even the internal adware in Kazaa and the like) is completely innocuous in my view.
(Acrobat Reader does have one other feature that could be considered borderline adware, the image in the top-right of the toolbar that bigs up Acrobat. This doesn't worry me too much; in any case I usually turn the toolbar off completely...) | |
|  antiseriousThe Future ain't what it used to bePremium join:2001-12-12 Scranton, PA | ... thanks Eric, for bringing this topic up and for such thorough analysis of the implications ... this kinda de-values COAST's credibility as well ... and re-inforces, for me, the value of multiple tools to detect and fight adware/spyware/junkware ...
... and to think, I was mildly annoyed when Spybot de-selected new.net from detections ... if I ran Spyware Eliminator I'd be pretty upset - assuming, of course, I became aware of this in the 'proper' light as opposed to a whitewash sales pitch ...
... spread the word ...
-- ... "everybody's somebody to somebody, and nobody to everybody else" ... y.t. ... | |
|  daveai join:2004-10-30 Anderson Island, WA | From "The Devil's Dictionary" by Ambrose Bierce:
ALLIANCE, n. ... the union of two thieves who have their hands so deeply inserted in each other's pockets that they cannot separately plunder a third.
 daveai | |
|  | | said by eburger68:Hi All: But I just discovered that the situation is much worse than I originally thought. What we have here is more than a case of a little mutual back scratching with cross-promotion and links. See: » www.whenu.com/whenu_solution.htmlFrom that page: said by WhenU: WhenU is committed to protecting consumers' privacy and consumer PCs against dangerous spyware. This is why WhenU has teamed up with Aluria Software, a leading provider of anti-spyware tools, to provide WhenU consumers with UControl.
UControl is the first product in the online advertising industry that provides a comprehensive scan of your computer and removes unwanted spyware programs, while continuing to provide the deals, offers and value consumers have come to expect from WhenU contextual products.
That's bad. That's very bad. I sense a grave disturbance in the 'force'.
said by eburger68:In other words, WhenU is now in the anti-spyware business now with Aluria. And a major anti-spyware vendor has now agreed to de-list an adware vendor and start working the same vendor to market its anti-spyware product. I am stunned and amazed. Obviously a not-so-well-cloaked semi-political attempt to distance their own "legitimate adware" company from "those evil spyware producers, yeah, the ones over there..." "Look, we're anti-spyware too... we're on your side now".
*disgust*
PS. Then again, it could just be a thinly-veiled attempt to be allowed to "legitimately" remove a competitor's advertising software/malware from the PC in question. Likening it to a biological analogy - by eliminating competitors for the nutrient-supply, other malicious organisms can flourish unhindered.
This all started with commercialization of the web, and then "portals", "push" technology, "site aggregation", "eyeballs", and then "adware"/"spyware" (or more correctly malware)... when is this madness going to end? When the internet itself is destroyed? | |
|
 | |
|