RealPlayer: spying on its users
Feb 5th, 2008 | By Leslie Poston | Category: Technology news
RealPlayer is one of the most used music players. It’s been out for years, growing its user base even as its parent company, RealNetworks, added services like Rhapsody to its repertoire. Because its been around for so long, its users automatically think of it as trusted software, installing upgrades without fear. If one company’s warning is heeded, that will change.
StopBadware, an antispyware organization, reported this week that two versions of RealPlayer contain spyware. They now consider these versions of RealPlayer to be “badware”. The versions in question are RealPlayer 10.5 and RealPlayer 11.
StopBadware had this to say:
RealPlayer 10.5, it claims, “fails to accurately and completely disclose the fact that it installs advertising software on the user’s computer”. And RealPlayer 11, it claims, “does not disclose the fact that it installs Rhapsody Player Engine software, and fails to remove this software when RealPlayer is uninstalled”.
Representative of RealNetworks claim that the RealPlayer 10.5 issue is being misconstrued. They are saying the spyware is “ok” to install, because it is listed during installation, and that it operates on an “opt out” format. This means if users notice the name during installation and understand what it is (both highly unlikely), they can t hen find the radio button, set automatically to opt in, and click it off to opt out. That’s hardly customer friendly!
RealNetworks also claims that the malware Active X component of their RealPlayer 11 software is “necessary” to make is full service. Apparently, they have taken a page from Microsoft’s book and chosen to make the Rhapsody engine a hackable Active X add on that makes your computer vulnerable rather than choosing a more secure technology.
From StopBadware’s website regarding the issue:
We currently recommend that users do not install the versions of RealPlayer software that we tested, unless the user is comfortable with the software behaviors we identify or until the application is updated to be consistent with the recommendations contained in this report.
Related:
I received the following in an email from RealNetworks, copied verbatim. I’m not sure who Lauren is, but I’ll post it here anyway:
“Hi Lauren,
I wanted to follow up on behalf of RealNetworks regarding your recent article on the badware report. RealNetworks recently updated RealPlayers 10.5, and specifically addressed the Message Center issues by making the service opt-in for RealPlayer 11. Unfortunately, RealPlayer 11 does have an install issue with Rhapsody that was an oversight, and it is something that we are looking into correcting.
Lastly, we wanted clarify your characterization of RealPlayer as “spyware.” While we did have opt-out issues with RealPlayer 10.5, we want to be clear that we don’t gather or record customer information, and never had any intent to spy on our customers. To that end, StopBadware.org does not characterize RealPlayer as “spyware.” We acknowledge we have some things to fix with our product, and we’ll be sure to update you as we address the concerns about RealPlayer 11. Should you have any questions in the meantime, please do not hesitate to contact me.
Best,
Amy”