Author Topic: What the hell is OpenCandy? (Read 388232 times)

wraith808 · « **Reply #250 on:** March 29, 2011, 07:26 PM »

For what it's worth, Nod32 blocked 2 internet connections to OpenCandy when installing the latest Photo Resizer with OC.
Stopping the install of OCSetupHlp.dll and any other programs being offered.

Photo Resizer did install even with nod blocking the connection to OC.

Just for your info...

-cmpm (March 29, 2011, 07:21 PM)

Not sure, but I'd think that's probably for metrics and payment...

cmpm · « **Reply #251 on:** March 29, 2011, 07:40 PM »

Well, no offers of other software came up and Photo Resizer installed and works.
Searching for opencandy or OCSetupHlp.dll came up with no results.

wraith808 · « **Reply #252 on:** March 30, 2011, 08:53 AM »

Well, no offers of other software came up and Photo Resizer installed and works.
Searching for opencandy or OCSetupHlp.dll came up with no results.
-cmpm (March 29, 2011, 07:40 PM)

Not for offers of other software. From looking at the agreement, they have the same concept as other advertisers, i.e. impressions and click through. I wasn't saying that it was to get more offers, but to track impressions. Did it say what the request was? That (other than asking) would seem to be the way to figure out what it was trying to do...

cmpm · « **Reply #253 on:** March 30, 2011, 10:12 AM »

on break from work-

I've tried to find logs of blocked web address' before, but it's not in Nod's log.
The quarantine action or any other action is in the logs, but not blocked sites.

It just pops up a message telling me it blocked something, then disappears.
Maybe I'll install it again and get a snapshot of it, time permitting.

Renegade · « **Reply #254 on:** March 30, 2011, 11:09 AM »

For what it's worth, Nod32 blocked 2 internet connections to OpenCandy when installing the latest Photo Resizer with OC.
Stopping the install of OCSetupHlp.dll and any other programs being offered.

Photo Resizer did install even with nod blocking the connection to OC.

Just for your info...
-cmpm (March 29, 2011, 07:21 PM)

Thanks for that.

This is really a problem. AV vendors should be focusing on developing technologies that prevent the real bad guys and not this kind of silliness.

You'd think that it would be easy to make a dime... Literally.

Renegade · « **Reply #255 on:** March 30, 2011, 11:11 AM »

Well, no offers of other software came up and Photo Resizer installed and works.
Searching for opencandy or OCSetupHlp.dll came up with no results.
-cmpm (March 29, 2011, 07:40 PM)

Not for offers of other software. From looking at the agreement, they have the same concept as other advertisers, i.e. impressions and click through. I wasn't saying that it was to get more offers, but to track impressions. Did it say what the request was? That (other than asking) would seem to be the way to figure out what it was trying to do...
-wraith808 (March 30, 2011, 08:53 AM)

The offers are from Microsoft, Uniblue and a bunch of other big names. The software isn't just junk. There are some shopping things offered, but I looked at them, and they're actually pretty good. I was pleasantly surprised.

Renegade · « **Reply #256 on:** March 30, 2011, 11:28 AM »

In any event, it's "off to a start":

http://cynic.me/2011...3/31/off-to-a-start/

Not much, but it will pick up. It's only been 1 day since I released the publicly, so we'll see.

wraith808 · « **Reply #257 on:** March 30, 2011, 01:17 PM »

For what it's worth, Nod32 blocked 2 internet connections to OpenCandy when installing the latest Photo Resizer with OC.
Stopping the install of OCSetupHlp.dll and any other programs being offered.

Photo Resizer did install even with nod blocking the connection to OC.

Just for your info...
-cmpm (March 29, 2011, 07:21 PM)

Thanks for that.

This is really a problem. AV vendors should be focusing on developing technologies that prevent the real bad guys and not this kind of silliness.

You'd think that it would be easy to make a dime... Literally.
-Renegade (March 30, 2011, 11:09 AM)

(Playing both sides of the fence

)

The problem arises in determining who the bad guys are. It doesn't seem as if OC is bad, but a lot of the bad guys didn't seem so in the beginning either. Communication is communication, and some people are paranoid about *anything* communicating that they don't know about.

But then again, if this is to meter impressions and click through, then does that act of metering have to be explicitly OK'd? And if so, does that break the system? Maybe on the OC disclaimer, they should state that it connects to the internet to track views- but then again, are we to the point where that is necessary?

cmpm · « **Reply #258 on:** March 30, 2011, 02:00 PM »

here's the shots

wraith808 · « **Reply #259 on:** March 30, 2011, 02:49 PM »

Looking at the signatures and comparing it to renegade's shot, I'd surmise (though might be wrong) that it seems like the first one is to get offers, and the second one is to track # of installs of the product. It gives some interesting heuristics on the client page, and those would require this sort of non-identifying information.

Thinking about it more, IMO the problem arises when identifying or intrusive information is culled and sent. However, there seems to be a problem on the other (AV) side also- I truly doubt that they are investigating the content of these transmissions. So they give a negative message based on less than full facts- security by FUD?

drapps · « **Reply #260 on:** March 30, 2011, 03:19 PM »

Comprehensive details on what information is collected, for what purpose and at which point during the installation and recommendation process is available here: http://www.opencandy.com/what-information-does-opencandy-collect/.

Hope everyone is having a good day!

cmpm · « **Reply #261 on:** March 30, 2011, 04:31 PM »

Having a good day, yes I am.

Perhaps you should contact Eset, and work it out with them.
Or not, I'm not taking sides, but I will stay with Nod32.

Renegade · « **Reply #262 on:** March 30, 2011, 09:11 PM »

Having a good day, yes I am.

Perhaps you should contact Eset, and work it out with them.
Or not, I'm not taking sides, but I will stay with Nod32.
-cmpm (March 30, 2011, 04:31 PM)

I'm sure they have contacted Eset. I have.

But perhaps Eset is a bit miffed about this screenshot from my OpenCandy control panel:

Screenshot - 2011-03-31 , 1_08_16 PM.png

If AVG is distributing their anti-virus software through OpenCandy, I'm kind of thinking just a little bit about a few tiny things and perhaps just maybe...

Renegade · « **Reply #263 on:** March 30, 2011, 09:33 PM »

On topic, I just went to download an update for Fruity Studio, and...

http://flstudio.imag...uments/download.html

Screenshot - 2011-03-31 , 1_32_03 PM.png

Renegade · « **Reply #264 on:** March 30, 2011, 09:56 PM »

And a very interesting thread about OC here:

http://getsatisfacti...ion/topics/opencandy

Again, both sides of the fence there.

PhilB66 · « **Reply #265 on:** March 30, 2011, 11:07 PM »

@Renegade

Is there a list of participating 'Advertisers' somewhere? I could not find one at http://www.opencandy.com/.

Renegade · « **Reply #266 on:** March 30, 2011, 11:38 PM »

@Renegade

Is there a list of participating 'Advertisers' somewhere? I could not find one at http://www.opencandy.com/.
-PhilB66 (March 30, 2011, 11:07 PM)

Not that I've seen except for the actual control panel. I've been kind of leery of posting much from the control panel as it just seems like control panels are private for a reason. But, all this is available publicly from different installers, so this here just cuts through the needless work of compiling a list. Now, I don't know if this is complete or not as I can only report what I know. Other people may have more or less in their control panels, but I kind of doubt it. (List is alphabetical.)

Advanced Registry Optimizer 2011
ALLConverter Pro
AOL Toolbar
ASPCA Reminder by We-Care.com
AVG Anti-Virus 2011
Battery Optimizer
Buyobab
Crawler Toolbar with Web Security Guard
DriverHive
eBay Sidebar for Firefox
Evernote
Groupon
Gutscheinrausch
Jing by TechSmith
kikin
MashLogic Better Links
Microsoft Bing Bar
Microsoft Internet Explorer 8
Microsoft Internet Explorer 9
My Shopping Genie
FaceSmooch
Yandex Toolbar
Nitro PDF Reader
OfferBox
ooVoo
PC Power Speed from Crawler
PC Speed Up
PretonSaver Home
PriceGong
Real Player
Registry Booster by Uniblue
Registry Reviver
RegRevive
Snagit by TechSmith
StumbleUpon
SweetIM
TuneUp Media
Wakoopa
World of Warcraft by Blizzard
Yontoo Layers

That looks like this in the control panel:

Screenshot - 2011-03-31 , 3_24_32 PM.png

But if you take a close look at the advertisers in OpenCandy, they're all big/popular names. Blizzard. Microsoft. AOL. ASPCA. etc. etc.

Most people here probably have some of that software on their computer already. Someone has a Wakoopa graphic in their signature, but I forget who at the moment.

The more I find out about things, the more I'm sold on the idea.

40hz · « **Reply #267 on:** March 31, 2011, 02:31 AM »

On topic, I just went to download an update for Fruity Studio, and...

http://flstudio.imag...uments/download.html
(see attachment in previous post)

-Renegade (March 30, 2011, 09:33 PM)

Ok, so now OC is also being bundled in with apps you already paid for?

Hmm...

Actually, it shouldn't surprise me at all (for a number of reasons) that FruityLoops is doing that. $:-\$

What is commendable, however, is that they clearly call attention to the fact they are using it right on the download page. Which is more than most publishers are doing. And which is all that 90% of the people who are objecting to OC are asking for: Being told - up front - that it is going to be installed.

Of course, providing the user with notification and an easily selectable option to not have it load at all when you run the installer would be nice...but the makers of OC seem to be quietly adamant that that is not going to happen.

PhilB66 · « **Reply #268 on:** March 31, 2011, 03:20 AM »

Do you get paid the same for recommending any of these softwares or does it depend on the advertiser's bid?

f0dder · « **Reply #269 on:** March 31, 2011, 04:07 AM »

On topic, I just went to download an update for Fruity Studio, and...
-Renegade (March 30, 2011, 09:33 PM)
Ok, so now OC is also being bundled in with apps you already paid for?
-40hz (March 31, 2011, 02:31 AM)

That made me raise my brows as well.

As did the name "Fruity Studio" - didn't it use to be FruityLoops? Another of those "Oh, but the lifetime license isn't for <newname>, it was for <oldname>" tactics?

Renegade · « **Reply #270 on:** March 31, 2011, 05:03 AM »

Ok, so now OC is also being bundled in with apps you already paid for?
-40hz (March 31, 2011, 02:31 AM)

In all fairness, it's the demo/trial installer. Buy they are one and the same. You just run your .reg key to license it.

Do you get paid the same for recommending any of these softwares or does it depend on the advertiser's bid?
-PhilB66 (March 31, 2011, 03:20 AM)

Pay varies by title, but I couldn't tell you much about that. I really need to get more first hand experience under my belt before I can talk about payment stuff.

But, now that I released it publicly (about a day ago), I am getting some stats rolling in. (Put up one graphic already at Cynic.me.)

Incidentally, the press release is here:

http://www.prweb.com...1/3/prweb8252577.htm

40hz · « **Reply #271 on:** March 31, 2011, 07:23 AM »

On topic, I just went to download an update for Fruity Studio, and...
-Renegade (March 30, 2011, 09:33 PM)
Ok, so now OC is also being bundled in with apps you already paid for?
-40hz (March 31, 2011, 02:31 AM)
That made me raise my brows as well.

As did the name "Fruity Studio" - didn't it use to be FruityLoops? Another of those "Oh, but the lifetime license isn't for <newname>, it was for <oldname>" tactics?
-f0dder (March 31, 2011, 04:07 AM)

Yes indeed. That's exactly what FL did.

Very similar to the mindset which insists that being paid to recommend a product is not the same thing as advertising it...

Orwell talked about that form of self-hypnosis in his novel 1984. He called it doublethink:

To know and not to know, to be conscious of complete truthfulness while telling carefully constructed lies, to hold simultaneously two opinions which cancelled out, knowing them to be contradictory and believing in both of them, to use logic against logic, to repudiate morality while laying claim to it, to believe that democracy was impossible and that the Party was the guardian of democracy, to forget, whatever it was necessary to forget, then to draw it back into memory again at the moment when it was needed, and then promptly to forget it again, and above all, to apply the same process to the process itself -- that was the ultimate subtlety; consciously to induce unconsciousness, and then, once again, to become unconscious of the act of hypnosis you had just performed. Even to understand the word 'doublethink' involved the use of doublethink.

Eóin · « **Reply #272 on:** March 31, 2011, 10:35 AM »

"Oh, but the lifetime license isn't for <newname>, it was for <oldname>" tactics?
-f0dder (March 31, 2011, 04:07 AM)

Actually a friend bought FL cheap on a special promotion years ago. The lifetime license included the upgrade to Studio. They really do look after their customers

wraith808 · « **Reply #273 on:** March 31, 2011, 10:44 AM »

What is commendable, however, is that they clearly call attention to the fact they are using it right on the download page. Which is more than most publishers are doing. And which is all that 90% of the people who are objecting to OC are asking for: Being told - up front - that it is going to be installed.

Of course, providing the user with notification and an easily selectable option to not have it load at all when you run the installer would be nice...but the makers of OC seem to be quietly adamant that that is not going to happen.
-40hz (March 31, 2011, 02:31 AM)

Nothing is being installed though, unless you install the application in question, right? And why should that be different than everything else? It seems to me that they're being held to a different/higher standard based on what people assume that OC is/does...

cmpm · « **Reply #274 on:** March 31, 2011, 11:26 AM »

I don't see where any one is wanting a different/higher standard for OC.
Just more up front about it, that it will connect to the net to get it's .dll and whatever else it gets, during the install of the primary program that you picked.

I'm certainly for Renegade and more to make money.
He has put the work into the program, and giving it free.

By teaming up with OC, there is some possible income, without too much trouble.

Most of the stuff I've installed has had options for other software.
Check boxes for Google Chrome or Bing's Toolbar, or with Flash and others there is McAfee or something to opt-out of.

The difference is that there is no opt out of OC when installing.
And I think the more upfront OC is, the more it will be accepted.
But that is not the route they are taking yet.
Leaving it to Renegade or other developers to post the fact of OC included.

Like I said before, I don't know enough to judge OC's possible security problems.
But anything that connects to the net, is cause for looking in to what it's doing.
And continuing to monitor any and all changes to what it loads when connected.
This info should be in an easy to understand form, and not have to study OC's entire site.

Yes, this is what it does-as drapps posted

http://www.opencandy...s-opencandy-collect/

What else is it capable of and info on changes need to be upfront as well.
It is advertisement, so what, we get that all the time. I block all I can while others don't mind.

OC tries to park in my computer, that is different then other advertisement.
So it should be monitored imho. It's not just a cookie Ccleaner can kill.