WebApp Sec mailing list archives

Re: browsers and trojan-like behaviour


From: jbp <me () ifihada com>
Date: Sun, 06 Apr 2003 19:22:10 +0100

On [Sun, 06 Apr 2003 16:47:43 +0300], Bogdan Hamciuc wrote:

  I have always been aware that certain applications might develop
'initiatives' such as sending information about the host machine/system
to their home sites. Until now, I thought of that as of an abstract
thing, but today I accidentally dumped such a 'conversation', started by
my 'Opera' browser. Here's an excerpt of what it sent:

[...]

  I honestly consider this a trojan-like behaviour, since I have not
been asked about it, and I do not expect a web browser to initiate TCP
connections on its own.

The free version of Opera is adware.

http://www.opera.com/docs/ads/

The paid-for version is not adware:

  After entering a licensing code (paid registration) into Opera, the ad
  manager will not be run again. The ACPO files are deleted and the banners 
  in the cache are deleted. The advertising component is completely disabled
  and non-functional. Banners are no longer shown, and the advertising
  preferences dialog disappears. No further communication attempts can or 
  will be made between Opera and the various ad-related servers.

Opera is totally open about this, if you would bother to read the freely
available documentation...

Joseph Birr-Pixton


Current thread: