Pre-installed software on new laptops and desktops, dubbed "crapware" by many, can just as easily be the entre point for malware as any other software. Most crapware is just that, crap software you don't likely use or want, and will need to be removed to get back some of that valuable system performance, clean up your file system, desktop and installed programs. But some of it can actually be useful, like update software or additional utilities, CD burning software, etc.
Useful or not, crapware can have it's own vulnerabilities too. If the distribution is widespread enough, crapware is a target rich environment for malware creators.
HP has now experienced their third software vulnerability in 2007, now in the HP Update software that keeps much of the HP added software to laptops up to date. HP Update keeps drivers (like video and sound cards), recovery software and other HP tools update with new fixes, patches and updates. It is a useful tool to have one your system, though I'm not sure how much additional value it brings than Windows Update already does on Vista systems.
The lesson here is, any software can be an entre point for attacks. The more software installed, the more opportunity for it to be exploited and hacked. Every software creator, including HP, must take the security of their software seriously. And no matter how good the processes, there will be security holes.
Bottom line, if you don't need the added crapware, get it off your system. It's one less piece of software that could get hacked and your computer performance will be the better for it.
Like this? Here are more recent posts.
Who Is An Interesting Person As A Podcast Guest?
An Electronic Christmas
Patch Tuesday In A Virtual Environment
Samba's Nose Allowed Under Microsoft Tent
How Come Google spell checks better than Microsoft Office?
Visit Microsoft Subnet for more news, blogs, opinion from around the Web.
Sign up for the bi-weekly Microsoft newsletter. (Click on News/Microsoft News Alert.)
Also check out Mitchell's personal blog The Converging Network and SSAATY Podcast.
Mitchell Ashley is principal consultant at Converging Network LLC where he provides product, technology and social media consulting to emerging technology companies. A successful CTO and product innovator, Mitchell has created many successful, award winning products in the networking, security, convergence, Internet and IT industries. In addition to blogging for NetworkWorld, Mitchell regularly blogs at TheConvergingNetwork and co-hosts the widely popular StillSecure After All These Years podcast.
Subscribe to Mitchell Ashley's Converging on Microsoft feed
The opinions expressed in this Weblog are those of the writer and may not represent the opinions of Network World.
|
|
Post new comment