Commentary

David DeJean
 

Bad Behavior, Adobe

I try to practice what I preach and do a good deed, and what do I get for it? Abuse. I just sent out my weekly e-mail newsletter. In the Editor's Note I urge readers to follow Adobe's request and patch their Adobe Reader because of a potential security problem. Things are getting pretty bad when the bad guys pervert familiar, trusted applications like the Reader to be delivery systems for malware. Poor Adobe, I thought, at least it's made a good effort, done the right thing by putting out the warning and making the patch available quickly.

I try to practice what I preach and do a good deed, and what do I get for it? Abuse.

I just sent out my weekly e-mail newsletter. In the Editor's Note I urge readers to follow Adobe's request and patch their Adobe Reader because of a potential security problem. Things are getting pretty bad when the bad guys pervert familiar, trusted applications like the Reader to be delivery systems for malware. Poor Adobe, I thought, at least it's made a good effort, done the right thing by putting out the warning and making the patch available quickly.So then I tried to practice what I had preached. I went to the Adobe Web site and perused the options for fixing the problem. One was to upgrade to Version 7 of the Reader. Good, I thought, kill two birds with one stone. Get a version of the Reader that's both safer and more up-to-date.


More Hardware Insights

White Papers

More >>

Reports

More >>

Webcasts

More >>

I clicked on Install and almost immediately wished I hadn't as the dialog box announced it was preparing install some Photo Album Starter application on my PC. I don't want Photo Album Starter, thank you very much. I did not ask for Photo Album Starter. After a moment of hesitation -- would clicking Cancel mean I'd have to go through the whole 28-megabyte download again? -- I clicked. Fortunately, it merely killed the installation of the app I didn't want. After a brief pause while I closed all the open windows so the installation could update my browser, Adobe Reader was installed.

But when I reopened my browser, I found out why Adobe had wanted me to close it, and the reason wasn't good. The installation had added the Yahoo Toolbar to my browser, with the Adobe logo in a position of prominence at the extreme left.

Now, the Yahoo! toolbar is not evil malware. It doesn't hijack my identity or spew spam e-mail, at least as far as I know. It is merely adware, visual pollution, a little bit of useless ugliness, some virtual doggie doo on the virtual sidewalk of my computer screen.

Fortunately, Yahoo! plays by the rules. A short visit to Settings/Control Panel/Add-Remove Programs and the toolbar was history, scraped from my screen.

But the odor lingers on. Bad Adobe. Bad. What's the difference between an evil hacker who uses a weakness in your Reader application to install programs I don't want on my PC, and you using your Reader setup program to install programs I don't want on my PC?

Far less than you'd apparently like to think. You used your own misfortune, the vulnerability in the Reader, as an opportunity to abuse me, to sneak adware onto my PC. You didn't ask me if I wanted your Photo Album Starter whatever-it's-called. You didn't ask me if I wanted your branded version of the Yahoo! Toolbar. You should have. I've always thought very highly of Adobe. I think less highly of you today.


Related Reading




Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

InformationWeek encourages readers to engage in spirited, healthy debate, including taking us to task. However, InformationWeek moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. InformationWeek further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
T-Shirt Giveaway T-Shirt Giveaway: Each week we're selecting one great comment from our readers. The author of the comment will receive an InformaitonWeek Community t-shirt. So get posting!
Subscribe to RSS

Resource Links