A consumer advocacy group is blasting RealNetworks for installing adware and other software without properly notifying its users.
In a report published Thursday, StopBadware.org faults the latest version of RealPlayer for secretly installing its Rhapsody Player Engine during the RealPlayer installation.
"RealPlayer 11 does not disclose that it installs Rhapsody Player Engine, and does not remove the software when RealPlayer is uninstalled," Stopbadware says in the report.
Rhapsody Player Engine is required to access RealNetwork's online music service. But because users are not told that they have installed the product it could become a liability, using up the computer's hard-drive space or processing power, or even creating a security risk for consumers if bugs are discovered in Rhapsody, said Maxim Weinstein, StopBadware's manager.
Both RealPlayer 11 and the older RealPlayer 10.5 software are both considered "badware," the report states.
Real Player 10.5 suffers from a different issue, however. Users who download the software without filling out the RealNetworks product registration page end up with a piece of software called Message Center, which then proceeds to deliver ads to the user's computer. "It's installing, essentially, a piece of adware without giving users information about that up front," Weinstein said.
RealNetworks spokesman Ryan Luckin said a check-box on the registration page is used to notify users that Message Center would be installed. Users who clicked through the registration page without filling out any information would have the software installed.
Although the issue was fixed in version 11 of the player, RealPlayer 10.5 is automatically downloaded via the Firefox browser's "Missing Plug-in" feature and is still widely used, Weinstein said.
Until RealNetworks is up-front with users about what software they're actually downloading, StopBadware recommends that consumers avoid its media player.
Luckin called the Rhapsody issue an oversight. "The fact that when you uninstall RealPlayer we don't go back and uninstall Rhapsody is an oversight and is something we should address in the future," he said.
A widely used alternative to Apple's QuickTime and Microsoft's Windows Media Player, RealPlayer has a history of making invasive changes to users' computers. The Message Center software has come under fire in the past, and in 1999 computer security consultant Richard Smith discovered that the software was quietly sending information to RealNetworks servers.
StopBadware's findings apply only to the Windows versions of RealPlayer's software, Weinstein said. RealPlayer also runs on other operating systems, including Mac OS X and Linux.
Supported with funding from Google, Lenovo and Sun Microsystems, StopBadware evaluates software and warns consumers of products that engage in deceptive behavior, such as tracking user behavior or installing programs without telling consumers.
Although RealPlayer 10.5's Message Center feature may be more noticeable and annoying, Weinstein said Real Networks should fix both problems as soon as possible. "It's hard to say that one is worse," he said. "They're really two sides of the same concept of just not telling users what's going on."
Read up on the latest ideas and technologies from companies that sell hardware, software and services. Data grids and service-oriented architecture
Security Inside Out
Delivering the Power of Choice with Microsoft Dynamics CRM
Business Intelligence and Enterprise Performance Management: Trends for Emerging Businesses
Know thy self: Reduce costs, secure data and ensure compliance with identity management
Discover the advantages of an open architecture multi-vendor network solution
Mimosa™ NearPoint™ for Microsoft® Exchange Server: Email Archiving 101
Refresh your AUP: Top tips to ensure your acceptable use policy is fit for purpose
Zones provide focussed content from Computerworld and leading technology partners.Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
Vignette Announces 2008 Excellence Awards 2008-11-21 10:50:00+11
PGP and Ponemon Institute Unveil Inaugural Australian Data Breach Study 2008 2008-11-20 17:34:00+11
Symantec Cloud Services Transform Data Centre Operations Through Proactive Management 2008-11-20 12:06:00+11
Verizon Business Offers Tips to Building a Successful Unified Communications and Collaboration Plan 2008-11-20 12:04:00+11
AARNet Brings 4K Digital Cinema to Australia: First 4K HD Video Signal delivered into Australia by AARNet 2008-11-20 12:02:00+11
Taking On Demand CRM Integration to the Next Level
Discover the current integration challenges facing businesses attempting to deploy on demand CRM systems. Learn how to create comprehensive integration of your data, user interface and business process levels and transform a portfolio of disparate applications into a unified, virtual application suite.









