SMB - Building trust in downloads no simple feat

Trust's program aims to certify consumer software programs in the name of preventing adware and malware

The Truste group's goal of creating an online ecosystem through which software makers are held accountable for the functions of their programs and end users are given the power to keep unwanted applications off their devices won't be achieved easily, according to security researchers and participants in the nonprofit's Trusted Downloads project.

Launched by Truste in mid-February 2007, the Trusted Download Program aims to certify downloadable consumer software programs in the name of diminishing the ability of schemers to rain adware and malware onto the machines of unwitting end users.

By forcing members of its applications' white list to disclose the entire functional impact of their programs on end users' machines, and requiring that software distributors obtain explicit permission from consumers before downloading any products onto their computers, Truste is hoping to become a virtual clearinghouse for trustworthy software distribution.

However, perhaps even more important than holding the software makers accountable for the content and delivery of their programs, Truste is also trying to force companies participating in the program to ensure that their distribution affiliates are held to the same rigorous disclosure and download standards.

That part of the process may be the hardest element of the program for the group to enforce, said at least one security researcher following the progress of the initiative, which is still in its beta phase.

Ben Edelman, an assistant professor at Harvard Business School and a longtime expert in the field of adware and spyware distribution, claims that of the 11 programs currently listed on the Trusted Download directory, at least one may still be finding its way onto end users' computers without their permission while another has serious questions looming about its intentions.

One of the programs he cites with the problem -- which he blames largely on affiliate sites that often use any means possible to generate downloads to drive up their revenues -- is Web marketing vendor ComScore's Relevant Knowledge 1.3 program.

Although ComScore, long criticized by some security researchers for its installation policies, has worked to improve its products to meet the types of standards set for by Trusted Download, the program is still being secretly installed in some cases, according to the researcher.

Recently, Edelman observed a pornographic executable file on the Web that downloaded a package of "junk software" without user permission that also included Relevant Knowledge.

In another instance, Edelman discovered what he labeled as a "spyware bundler" program that installed Relevant Knowledge without telling the user it was coming, showing or referencing an end user licensing agreement, or giving the user any opportunity to decline the program.

The other application approved by Trusted Download with which the researcher takes issue is the Vomba 1.2.0.1 client, which offers end users access to online multimedia programs and interactive screen savers in exchange for the "occasional display of targeted advertisements," or pop-ups.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Matt Hines

InfoWorld
Show Comments

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?