TechLuver.com

At Last !!!  Finally StopBadware.org brought the Real Malware, RealPlayer from RealNetworks, to the light of the day.

StopBadware has brought just some of the bad practises out in the open, while you can find about it in much more details in reader comments I’ve found on highly recognized technology sites like CNET’s News.com, tehRegister.co.uk and PCWorld.com, posted by their tech savvy readers.

Just in case, if you are wondering who / what is this StopBadware.org ?
Stopbadware, an industry-academia group designed to raise public awareness about software that violates fair information and privacy practices, is a collaboration between Harvard Law School’s Berkman Center for Internet & Society and Oxford University’s Oxford Internet Institute, with support from companies like Google, Lenovo, and Sun Microsystems.

Cambridge, MA — StopBadware.org, the consumer protection initiative developed to combat badware, on Jan 31, released an alert about RealNetworks Inc.’s RealPlayer software application.

The group found RealPlayer version 10.5 to be badware because of inadequate disclosure of advertising behavior and RealPlayer version 11 to be badware because it bundles an additional application without disclosure.

RealPlayer 11 is the current version of the application, offered on Real (dot) com as an internet video and multimedia player. RealPlayer 10.5 is an older version which is still widely distributed through such sites as BBC Radio and through the Firefox web browser’s “missing plug-in” capability.

The report highlights two areas of concern:
• The Software does not fully, accurately, clearly, and conspicuously disclose the principal and significant features and functionality of the application prior to installation - The advertising software bundled with RealPlayer is misleadingly called a ‘message center’, and is described incompletely and inconspicuously in the EULA as software designed to provide useful software updates. When RealPlayer 10.5 is installed, the advertising features of this ‘message center’ are enabled by default for users who choose not to register their personal information with RealNetworks after the software is installed.
• Software installs deceptively - RealPlayer 11 does not disclose that it installs Rhapsody Player Engine, and does not remove this software when RealPlayer is uninstalled. Users are not informed by the installer or uninstaller of the connection between RealNetworks and Rhapsody Player Engine.

“Software producers have a responsibility to inform users, clearly and unambiguously, about what software will be installed on their computers and what it will do,” said Maxim Weinstein, manager of StopBadware.org at the Berkman Center for Internet & Society at Harvard Law School. “RealNetworks does not allow users to make an informed choice about how their computers will be used. We hope to see a new version of RealPlayer soon that addresses these
concerns.” More at StopBadware.org (in pdf).

According to StopBadware.org’s definition of badware it is “malicious software that tracks your moves online and feeds that information back to shady marketing groups so that they can ambush you with targeted ads.”

Here are some of the reader comments I’ve found on PC world in response to their article on the issue:
User “Yert” writes at January 31, 2008 8:59 PM PT
“About freaking time. Real Player is the worst media software ever. And its competitors have DRM systems in place!

Seriously though, I don’t use Real Player, and uninstall it whenever I am authorized. It is not safe, not sane, and bloated, even compared to iTunes. Real Player should have lost the EU judgement on the fact that their product sucks!”

User “OnlineSolutions” writes at February 03, 2008  6:55 AM PT
“I installed RealPlayer’s suite once as an experiment and signed up to Rhapsody for their 30 day trial. I immediately changed my mind, but was unable to cancel using their website. They required a phone call to cancel, but the 800 number they gave didn’t work. After repeated emails and phone call attempts, I had to change my credit card number to stop the $19 / month in charges that had continued for 6 months. These people are either incompetent or crooks.”

Reader comments on CNET’s News.com:
Reader “GermanVermin” writes:
“realplayer sucks: Yeah. I have always hated realplayer. its chock full of advertisements, a pain to install, and runs background and startup services that slow down your computer. For an official client of a common propreitary video codec, RealPlayer should be more professional.

Use RealAlternative instead, it allows you to play realplayer videos inside of windows media player.”

Reader “MadLyb” writes:
“What a surprise: I stopped using RealPlayer years ago because of their intrusive software and policies. I’m surpised it took this long for someone to ding them.”

Reader “Electric.81″ writes:
“Real Player: Real Player is a piece of ‘crapolla’ and always has been since day one….now they’ve been caught with thier hand in the ‘cookie jar’ ;>) ”

Reader comments I’ve found on theRegister.co.uk:
Reader “Kev K” writes:
“Real Player & Quicktime both suck : QT lite and Real Alternative from free-codecs.com do the job very nicely for me without the bloat or constant nagging.”

Reader “Anonymous” writes:
“It’s been 3 years: since I stopped using this shyteware, just because of this annoying ODRealSched process of theirs that was getting reactivated once in a while despite I deleted it and removed any link to it.

How come you can trust such a company. Good thing they are named and shamed. At last !!!! ”

Reader “Robert Moore” writes:
“Die RealPlayer die!!! : I have come to accept that most media players (In windows) are resource hogs these days, but Real takes it to a whole new level.

I used to work for a retailer, in their service center, and I would regularly get in computers that the complaint was “Choppy DVD playback” or words to that effect. In most cases a quick uninstall of RealPlayer would fix it right up. Only PH would be foolish enought to install RealPlayer.”

Excerpts from the reader janimal’s comment:
“Real Malware: Have you ever read the Real license?? I’m pretty sure satan was involved because, it goes way beyond the usual accepted rights buggery and weasleness of the standard software license.

Happily if you want to view RM files these days (thanks for the access BBC bastards . I complain to them regularly about Real software) you can use Real Alternative avalable here..

http://codecguide.com/about_real.htm

I choose thumbs up because that’s what Real like to put up people’s bottoms.”

Finally, I never get that, when there are choices of free Windows Media Player 11 and Open Sourced VLC Media Player, why in the world any one need to use RealPlayer? Ok how to play the contents that are available only in Real Media ? I just never play those files

BUCHAREST, Romania – On Tuesday, Dec 18, BitDefender announced that BitDefender antivirus analysts have detected a new trojan, which hijacks Google text advertisements, replacing them with ads from a different provider.

The threat, which is identified by BitDefender as Trojan.Qhost.WU, modifies the infected computers’ Hosts file (a local storage for domain name / IP address mappings, which is consulted before domain name servers and is considered authoritative).

The modified file contains a line redirecting the host “page2.googlesyndication.com” which should point to an IP of the form 6x.xxx.xxx.xxx to a different address, of the form 9x.xxx.xxx.xxx, so that the infected machines’ browsers read ads from server at the replacement address rather than from Google.

“This is a serious situation that damages users and webmasters alike,” said Attila-Mihaly Balazs, a BitDefender virus analyst. “Users are affected because the advertisements and/or the linked sites may contain malicious code, which is a very likely situation, given that they are promoted using malware in the first place. Webmasters are affected because the trojan takes away viewers and thus a possible money source from their websites.”

Users are advised to let BitDefender software delete the trojan. More info on the ad-hijacking trojan at BitDefender here and Real-time Virus Reporting here.

Taipei, Taiwan — Nov 11, ‘07 — Taipei Times is reporting on Investigation Bureau officials warning of “Focused Attack” of Trojan horse viruses on Large-capacity hard disks, often used by government agencies. 

The newspaper further writes, “Portable hard discs sold locally and produced by US disk-drive manufacturer Seagate Technology have been found to carry Trojan horse viruses that automatically upload to Beijing Web sites anything the computer user saves on the hard disc, the Investigation Bureau said.

Around 1,800 of the portable Maxtor hard discs, produced in Thailand, carried two Trojan horse viruses: autorun.inf and ghost.pif, the bureau under the Ministry of Justice said. The tainted portable hard disc uploads any information saved on the computer automatically and without the owner’s knowledge to www.nice8.org and www.we168.org, the bureau said.

The bureau said that hard discs with such a large capacity are usually used by government agencies to store databases and other information. Sensitive information may have already been intercepted by Beijing through the two Web sites, the bureau said. The bureau said that the method of attack was unusual, adding that it suspected Chinese authorities were involved.

In recent years, the Chinese government has run an aggressive spying program relying on information technology and the Internet, the bureau said. The bureau said this was the first time it had found that Trojan horse viruses had been placed on hard discs before they even reach the market.”

China and Taiwan regularly trade accusations of spying and last month Germany accused China of being behind Internet espionage attacks on its companies and government. China said it opposed such accusation

The Taiwanese newspaper later reported, “VIRUS: Investigators say the tainted Maxtor portable hard disc, made by Seagate, uploads information saved on the computer automatically to Web sites in Beijing.

Further investigations suggested that “contamination” took place when the products were in the hands of Chinese subcontractors during the manufacturing process.

In September, TheRegister said that Kaspersky Labs had found a pre-installed virus named Virus.Win32.AutoRun.ah on Maxtor 3200 external hard drives sold in the Netherlands.” More at TaipeiTimes here and here.