Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Firefox 3 Ready for General Use | Main | Supermarket Breach, PCI and Responsibility »

Apple Tries Their Own Version of Bloatware

I was surprised the other day when I started updating iTunes on my Vista laptop and saw a dialog telling me new version of Safari is available. I immediately thought this was some kind of social engineering/malware attack because I don't have (and don't want) Safari. Updates don't install new software, or at least they didn't until Apple turned their update service into an unwanted, unsolicited software pusher. This wasn't an attack at all, it was Apple changing the rules of patch management for the worse by installing, not just updating, software through updates.

John Lilly, CEO of Mozilla, had this reaction:

What Apple is doing now with their Apple Software Update on Windows is wrong. It undermines the trust relationship great companies have with their customers, and that's bad -- not just for Apple, but for the security of the whole Web. What they did yesterday was to use their updater for iTunes to also install their Safari Web browser.

I get it that software vendors want to get their products on as many devices as possible. When we buy new computers they are often loaded with trial versions of products that we probably don't want and have to spend our time removing the bloatware. I also get that bloatware subsidizes the cost of PCs so at least I get something out of this deal. Apple's tactics though are a one way street for the benefits traveling to Cupertino and not to users.

Apple's gain in browser market share would be a short term and short sighted gain if they loss the trust of users. I know they've lost mine.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/678

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net