Spyware-Free certification emerges

Rob Updegrove 16 Nov, 2005 at 8:47am ET Article published in Tech

A plan put forward by Yahoo! and AOL sets the groundwork for a “Consumer Friendly” label to be given to software downloads by an independent third-party company.

TRUSTe, an organization that already certifies and monitors Web site privacy and e-mail practices for businesses, will rely on testing by two outside labs for the vetting. It would not name the labs.

Developers earning TRUSTe’s certification will not be permitted to promote that fact, said its executive director, Fran Maier. Rather, TRUSTe will issue a “white list” of trusted programs that partners Yahoo Inc. (Nasdaq:YHOO – news), America Online Inc., CNET Networks Inc. and other Web publishers may use in determining whose software they wish to ally with or distribute.

The Trusted Download Program is to begin early next year.

Source: Yahoo! News

Comments

16 Nov 2005 ~ 10:05am QCH That's a novel approach. It is similar to Microsoft's Signed Drivers.
16 Nov 2005 ~ 1:52pm profdlp Sounds like a good idea.
16 Nov 2005 ~ 1:53pm Enverex I wonder how much this "third part company" charges and how much it will affect those that don't wish to be "branded"?
16 Nov 2005 ~ 1:59pm Leonardo

Sounds like a good idea.

Sounds like a GREAT idea. Big difference though between software and drivers. There would probably be many software companies who produce completely clean software, but due to fears of a third party reverse engineering their programs, would not allow certification. Check me if I'm wrong.
16 Nov 2005 ~ 2:15pm profdlp

Leonardo wrote:

...There would probably be many software companies who produce completely clean software, but due to fears of a third party reverse engineering their programs, would not allow certification. Check me if I'm wrong.

Testing a program could be as simple as installing it on a "clean" computer, then running a registry scan to track all the changes made. Reverse-engineering would probably be somewhat safer, but is probably not necessary. Where reverse-engineering comes in handy is when you know (or at least strongly suspect) that there is a problem with a program. Going through a lot of code searching for a needle in a haystack which is probably not even there would be an enormous task. Taking into consideration that companies who submit software for certification are not likely to be up to any mischief and extraordinary measures would probably be overkill.
16 Nov 2005 ~ 9:48pm Missileman How's this little tidbit ?

As we've discussed, Truste isn't particularly trusted, quick to give approval to outfits like Direct Revenue (makers of Aurora). AOL in turn has been hammered for using Truste's rating criteria for its Netscape browser. Shouldn't such coalitions be manned by experts, not portals solely interested in selling ads?

Basically this system is crap before it starts.

Good idea, but kinda like putting the wolf in the hen house and then wondering why the chickens are gone
17 Nov 2005 ~ 1:03am Leonardo Prof, thanks for the explanation.