5 ms·

Spammy post of questionable value from a company slinging 'anti malware software' with a 'powerful AI', whatever that means, for osx. The Comscore software dis

Spammy post of questionable value from a company slinging 'anti malware software' with a 'powerful AI', whatever that means, for osx. The Comscore software discloses what it does and the user is given opportunity to decline the installation.

Xylakant 7y ago
> The Comscore software discloses what it does and the user is given opportunity to decline the installation. So basically you’re saying that consent given from mostly nontechnical users that have no idea what they’re consenting to makes it ok to install a mitm proxy on their machine, especially one with extremely lacking security properties? Consent makes it ok to expose them to such a risk?
- close04 7y ago
  > Airo Security (AiroAV) has recently discovered that a Comscore product for macOS, called PremierOpinion > PremierOpinion is a decade old [0] spyware developed by VoiceFive, a ComScore company (NASDAQ: SCOR) The "news" does seem a bit overblown. It looks like it always had HTTP MITM functionality, presumably now also for HTTPS. [0] https://www.intego.com/mac-security-blog/intego-security-alert-osxopinionspy-spyware-installed-by-freely-distributed-mac-applications/?sr=1&sr=1 https://www.intego.com/mac-security-blog/intego-security-ale...
  - Xylakant 7y ago
    Maybe, but I’m not talking about the product promotion. It’s the “consent makes everything ok” that’s the problem.
    - close04 7y ago
      Dark patterns to trick people into installing something should be prohibited by law. Opt-out is a classic one. And this should apply to malware-like software like this one as much as to respectable software like antivirus solution (can mention BitDefender Free from personal experience) many of which at install time make no mention of installing a certificate and breaking SSL, let alone explaining what it means.
      - Xylakant 7y ago
        Absolutely, this is why I take issue with the original comment. Consent is worthless in such a setting and I consider saying “but they consented” as some kind of an excuse why installing spyware of such kind malicious.
- nickphx 7y ago
  Are you saying that you would consent to something you don't fully understand? The software's poor design and security issues are separate from consent.
  - Xylakant 7y ago
    The reality is that most people do not read SLAs in their full length, and most people cannot fully grasp the implications of a lot of things they sign. And yes, that includes me. And I’d wager that it also includes you.
    - nickphx 7y ago
      I make it a habit to read the terms and conditions of any agreement. To do otherwise is foolish.
      - Xylakant 7y ago
        And you’ve never slipped up and you’ve always researched what all the legalese means. You studied law applicable in the jurisdiction that the vendor chose to reside in or ask your lawyer before signing up for something like Facebook. You understand all the implications of what data gets collected and shared where, combined with other data collected by other parties and other places. I’ll believe that, yes. And even if you did, other people don’t or can’t which is why this still would not be ok.

Xylakant 7y ago

> The Comscore software discloses what it does and the user is given opportunity to decline the installation. So basically you’re saying that consent given from mostly nontechnical users that have no idea what they’re consenting to makes it ok to install a mitm proxy on their machine, especially one with extremely lacking security properties? Consent makes it ok to expose them to such a risk?

close04 7y ago
> Airo Security (AiroAV) has recently discovered that a Comscore product for macOS, called PremierOpinion > PremierOpinion is a decade old [0] spyware developed by VoiceFive, a ComScore company (NASDAQ: SCOR) The "news" does seem a bit overblown. It looks like it always had HTTP MITM functionality, presumably now also for HTTPS. [0] https://www.intego.com/mac-security-blog/intego-security-alert-osxopinionspy-spyware-installed-by-freely-distributed-mac-applications/?sr=1&sr=1 https://www.intego.com/mac-security-blog/intego-security-ale...
- Xylakant 7y ago
  Maybe, but I’m not talking about the product promotion. It’s the “consent makes everything ok” that’s the problem.
  - close04 7y ago
    Dark patterns to trick people into installing something should be prohibited by law. Opt-out is a classic one. And this should apply to malware-like software like this one as much as to respectable software like antivirus solution (can mention BitDefender Free from personal experience) many of which at install time make no mention of installing a certificate and breaking SSL, let alone explaining what it means.
    - Xylakant 7y ago
      Absolutely, this is why I take issue with the original comment. Consent is worthless in such a setting and I consider saying “but they consented” as some kind of an excuse why installing spyware of such kind malicious.
nickphx 7y ago
Are you saying that you would consent to something you don't fully understand? The software's poor design and security issues are separate from consent.
- Xylakant 7y ago
  The reality is that most people do not read SLAs in their full length, and most people cannot fully grasp the implications of a lot of things they sign. And yes, that includes me. And I’d wager that it also includes you.
  - nickphx 7y ago
    I make it a habit to read the terms and conditions of any agreement. To do otherwise is foolish.
    - Xylakant 7y ago
      And you’ve never slipped up and you’ve always researched what all the legalese means. You studied law applicable in the jurisdiction that the vendor chose to reside in or ask your lawyer before signing up for something like Facebook. You understand all the implications of what data gets collected and shared where, combined with other data collected by other parties and other places. I’ll believe that, yes. And even if you did, other people don’t or can’t which is why this still would not be ok.