3 ms·
Definitions vary, but I once wrote these notes for the definition in a security policy. It is probably more broad than what some people would write. Malwar
by mortenlarsen 10y ago
Definitions vary, but I once wrote these notes for the definition in a security policy. It is probably more broad than what some people would write.
Malware
-------
- Any software that actively attempts to do any of the following:
- Do harm to the system, applications or data
- Deliberately weakens system security
- By changing system or user security settings
- Contains or installs backdoors
- Downloads updates as executables
- Use executables to wrap otherwise readable data
- Expects higher or more privileges than is needed by it's function.
- Circumvent the wishes or intention of the user
- Makes it self the default application for file-types that already have an application assigned to them
- Inserts itself into other applications against the users expectation (eg. as a plugin)
- Uses the privileges of other applications to circumvent system policy
- Hide its activity from inspection
- Anti-debugging, and other rootkit like behaviour
- Use "dark patterns" to trick the user into performing or agreeing to some action
- Installs toolbars, etc.
- Compromise the privacy of the user
- Phones home, access data irrelevant to it's function
- Resists removal
- TheLogothete 10y agoI don't see how GA can be classified as malware according to this.
- mortenlarsen 10y agoPhones home...
- TheLogothete 10y agoIt does not compromise the user's privacy in any way. GA prohibits PII. Also, the webmaster has to opt-in to share the data with Google in the first place.
- mortenlarsen 10y agoSome people disagree. If they didn't, why is this on HN with a lot of comments from people who a unhappy with this change? If software compromises my privacy, I feel that I have been betrayed and lost something that I can not take back. If you don't get to automatically participate in a "anonymous" usage survey, have you lost something you can not undo? That in my opinion, is why software should always err on the side of privacy.
- TheLogothete 10y agoPeople just LOOVE to be outraged. For example in this thread people rage about google getting hands on their data. When I point out that the webmaster has to explicitly chose to share the data with google, I get downvoted. When I say that GA prohibits the use of PII, I get downvoted. It doesn't matter that I'm right. People WANT to be outraged. Reason, no reason, doesn't matter.
- ThisIs_MyName 10y agoChill, dude. Most of us dislike GA and its monopoly on web/mobile tracking. Why trust GA to respect webmaster options when you don't have to? ...anyway, complaining about getting downvoted is a surefire way to keep getting downvoted :P
- falcolas 10y agoAutomatically opting a user into data collection, without explicitly asking the user, is a dark pattern. Requiring the user to set an environment variable to opt out is smarmy.