Windows Live Mail - An accident waiting to happen?

Email clients and choice of programs is a very personal choice based on preference.

Whether you choose to use Outlook Express, Windows Mail, Thunderbird, Outlook, Eudora or any other email applications available, depends primarily on what you like and how you use an email program.

All users should make their own choices as to what applications they use. Each of us has different likes and dislikes and certain features we need and don't need.

But, choices should be based on more than just likes and dislikes. We need to make informed decisions. We need to choose wisely.

Windows Live Mail is not a choice we chose to make for a lot of reasons. Its clumsy interface, its bloated feel, its lack of features, ads inserted when using an MSN or Hotmail address, are a few of them. But more than this, we just don't see the need for Windows Live Mail. Further, we do like so much personal information stored anywhere else but on our own hard drives, under our own control.

It is clear to us that Windows Live Mail is an accident waiting to happen. Microsoft continues to push its Web agenda. We cannot know what Microsoft's motivations are, but it is easy to see that they are pushing very hard to move applications off our desktops and on to the Web. Recently, there has been a subtle effort underway to wean users off desktop applications.

Just a brief explanation in needed here before we proceed. Web applications are applications which run from Web sites. Web apps use databases and scripts to perform the same functions as the desktop applications we have used on our desktops and laptops for years. A Web application differs from the applications most of us are familiar with only in the way they are accessed. You access Windows Mail (the "Outlook Express" of Windows Vista) from your own hard drive; you send mail from your own hard drive; you store your address book on your own hard drive; your passwords and user account information remains on your hard drive. Not so with Windows Live Mail. Everything is done on the Web via Windows Live Mail desktop interface.

When you use a Web application, all of the above are stored on the server on which the Web application runs. Hotmail, Gmail, Yahoo Mail, MySpace, Facebook, etc. are all Web applications. And so is Windows Live Mail.

Hotmail, Gmail, Yahoo Mail, MySpace, Facebook and others do not replace an application on your computer. Windows Live Mail does. And therein lies the crux of the problem.

Windows Live Mail is designed to replace your desktop email program with a Web application. This means that potentially all of your mail accounts, passwords for those accounts, mail messages and address book are stored on a server. This is different than having a Gmail account or a Yahoo account and using it as an additional mail account. Windows Live Mail becomes your primary mail program and that's exactly what it is designed to be. In fact, in the next version of Widnows (currently going by the name of Windows 7), if Microsoft has its way, there will be no Outlook Express / Windows Mail - you'll use Windows Live Mail or you'll have to buy MS Outlook or Microsoft Office to get Outlook. Most of us don't want or won't do that. That means the majority of people who upgrade to Windows 7 (or whatever it will be called when it's released tentatively in 2009) will be stuck with Windows Live Mail and all our personal data, passwords, mail messages, contacts, etc. will be stored on the Web.

It seems to us that if the wave of the future is Web applications then desktop applications are a dying breed. This seems to fly in the face of the current outcry from numerous organizations and computer users for more privacy. Moving from desktop applications to Web applications certainly isn't a move to more privacy - it's a move to less privacy and more vulnerability.

At least with desktop applications, the individual has control over their own computer - they can install anti-virus, anti-spyware, anti-phishing, anti-trojan and other security software to keep their own computer safe from hackers, password-stealing trojans, worms, spyware and the like. If the world were to move in the direction that Microsoft seems to want to take it, we'd have to trust Microsoft that their servers would never be hacked and our information would never be stolen.

But history teaches us lessons. Microsoft servers have been hacked in the past.

You have all read where millions of people have had their private information fall into the hands of criminals because some company or other's server security was breached. Why on earth would Microsoft want to move us away from trusted desktop applications to Web applications?

It seems to us that there can be only one motivation. It's the same motivation that drives every economy's engine: Money. We just don't know how how Microsoft plans to make money from Windows Live Mail yet, but you can bet it has something to do with advertising.

Microsoft's recent bid of $44.6 billion for Yahoo would create a monstrous marketing machine which could lure billions of advertising dollars very easily. How does Windows Live and Windows Live Mail fit in? We don't know, but you can bet it is a piece of the big puzzle.

As we were writing this, a news article appeared that reported that Windows Live Mail's CAPTCHA (that's the little image of squiggly lines, numbers and letters you have to type in to verify you're a real human before you can proceed with account setup) had been defeated and thousands of automated spambot Windows Live Mail accounts were being created. These spambots then use their automatically created Windows Live Mail accounts to send out millions of spam emails. (You can read the entire article about how spammers defeated - rather easily - Microsoft's Windows Live Mail "CAPTCHA" here.)

While this does not constitute a "hack" of Windows Live servers, it does show you the potential for abuse that exists when applications that have been used for years as desktop applications move to the Web. These spambot accounts would have never existed if Windows Live Mail didn't exist. Spammers cannot create spam accounts in your Outlook Express or Windows Mail program. They would have never even tried. But now, thanks to Microsoft and the users who welcomed Windows Live Mail, we're dealing with yet another problem and even more spam.

How long will it take before we all read about Windows Live Mail servers being hacked and hundreds of thousands, maybe even millions of account passwords stolen and worse, millions of people's address books and contact lists were breached, addresses gleaned and sold to hackers?

Whenever a web application is designed to replace a common desktop application, particularly important desktop applications we rely upon and use everyday - for instance email applications - it is an accident waiting to happen.

So, besides the rather clumsy, slow interface of Windows Live Mail and its limited features, Windows Live Mail is itself an accident waiting to happen. And, it appears the first just did.

We think Web apps are great as long as they don't attempt to replace the desktops apps we rely on and use every day. We believe that security and privacy will suffer if Microsoft continues its paradigm of replacing desktop applications with Web applications.

©2008 Cloudeight Internet

Selling With Tacky Scare Tactics

We recently received a newsletter from a popular software developer. The gist of this article was to scare readers into thinking that Windows XP firewall was inadequate for preventing outbound traffic. Well, here you read it:

"Why is the Windows Firewall not cutting it? It only filters INCOMING traffic. That means if malware has compromised your PC, it is able to SEND OUT out your credit card data, and all other personal info. That's right, the WinXP "firewall" does not stop that! But for a limited time, instead of the normal $19.95, the ------------------- is 50% off, and it DOES filter both in- AND outgoing traffic. The ------- two-way firewall keeps hackers out and your private info inside. And of course it works great with -----------. Now you can have the ------------- for just $10.00, but only for a limited time, so hurry and buy it now..."

(name of product and developer removed by us)

This is a tacky and dishonest way to promote a product. Scaring people into believing that without this product their credit card data is going to be flying off to servers unknown is reprehensible. It is bunch of fictional hyperbole being passed off as fact.

One part of this pap is true -Windows XP does provide only inbound detection. But if you're using a good, updated anti-virus, a good updated anti-spyware program (or two) and you keep your Windows updated, how are these nefarious programs supposed to furtively infiltrate your computer, be installed, and then start sending your credit card data all over the Web?

If what this company claims it true, then the damage has already been done and your credit card data has already been sent to places unknown.

It's a shame that any well-known software developer stoops to such callow methods to hawk its software. The fact that they have reduced the price by 50% tells us how well it is not selling.

Scare tactics sell, no doubt. But any company who uses this kind of exaggeration, fear-mongering, and snake oil sales technique does not deserve your business.


Copyright ©2008 Cloudeight Internet

RealPlayer named badware

See? We told you so!

We've been telling our readers for years that RealPlayer (which goes by other names such as "RealOne") is just north of being spyware. It is a bloated, system-clogging bundle of applications that make changes to personal computers that cannot easily be undone. It's nearly impossible to install and takes over file associations which are seldom convenient and not always in the best interest of the user.

Now, finally someone else has finally seen the light. On February 4, 2008, StopBadware.org published the following information and warning about RealPlayer:

"...We find that RealPlayer 10.5 is badware because it fails to accurately and completely disclose the fact that it installs advertising software on the user's computer. We additionally find that RealPlayer 11 is badware because it does not disclose the fact that it installs Rhapsody Player Engine software, and fails to remove this software when RealPlayer is uninstalled.

We currently recommend that users do not install the versions of RealPlayer software that we tested, unless the user is comfortable with the software behaviors we identify or until the application is updated to be consistent with the recommendations contained in this report.

RealPlayer 11 is currently promoted by RealNetworks at www.real.com. RealPlayer 10.5 is distributed through channels such as Mozilla Firefox's 'Missing Plug-in' feature and the BBC Radio website. ..."

We commend StopBadware.org for publishing this warning. We wonder what took them so long.

We've been advising our readers for over three years to get rid of RealPlayer (RealOne) and replace it with RealAlternative - a lightweight, non-intrusive, free program that allows users to Real media formats.

If you're using RealPlayer you should remove it from your computer and replace it with RealAlternative as soon as possible.

We wonder when StopBadware.org will get around to discovering what a piece of work FunWebProducts is. We hope we don't have to wait three more years for StopBadware.org to catch up with us again.

Copyright ©2008 by Cloudeight Internet

Google makes bid to buy Apple

Microsoft bids $44.6 billion for Yahoo.

Now, Google is in a frenzy, the bloggers are running amok, and the financial world is beguiled.

There is one thing Google could do to exact the ultimate revenge. Google should make a bid to buy Apple, Inc.. Google should forget about filing legal documents, angry public yammerings or making its own bid to buy Yahoo.

If Google wants to stop Microsoft from buying Yahoo - it should go right for the jugular.

For decades, Microsoft has ruled the world of personal computers with an iron fist. The recent renaissance by Apple aside, Microsoft's Windows operating system dominates the computer world like few other products have ever done.

Windows competitors have never been able to crack Windows' stronghold on consumer desktops. And, it's not because they haven't tried. Linux, even though it comes in many versions and some of them are free, has never lived up to its promise. Until the last few years, Apple appeared to be complacent - satisfied with its tiny market share and its small, but fiercely loyal cadre of fanatical Appleheads. Apple's share of the computer market has always remained small enough for Microsoft to ignore and large enough to keep monopoly-busters at bay.

But now Microsoft seems to want to do to the Internet what it has done to the personal computer market. It wants to dominate and it wants to do it right now. It wants to bludgeon its way to the top and control Internet advertising and gain more than its share of the lucrative search market. In short, Microsoft wants to buy control of the Internet. Yahoo is just the first step.

I don't want to see Microsoft doing to the Internet what it has done to the personal computer market. And predictably, neither does Google - I don't blame them.

If Google should play Microsoft's game. If they want to pull off the biggest coup ever they need to make a bid to buy Apple.

Buying Apple, Inc. makes a lot of sense for Google.

With Google's name recognition, favorable reputation, refreshing approach, innovative products and its gaggle of Wall Street worshipers, acquisition of Apple makes a whole lot of sense. It would instantly make Google a major in the home computer market - plus Google would acquire Apple's other successful products such as the iPod, iPhone and iTunes.

Will we see gMacs, gBooks, gPods, gPhones, and gTunes?

Apple's innovative products and its superb leadership are already beginning to erode Microsoft's long, precipitous dominance of the personal computing market. It has become increasingly clear in recent years that Apple is a market leader. Its products and corporate style would make it the perfect target for a Google coup - a coup that would rock the world more than Microsoft's hostile takeover bid for Yahoo.

It makes perfect sense too. What goes around, comes around. If Google wants to rankle Microsoft to its core, making a bid to buy Apple would certainly do it. And, consumers would benefit because a Google-Apple partnership would certainly yield new and exciting products - perhaps even a new PC operating system that would present a serious threat to Microsoft Windows' market dominance. That can only be good news for PC consumers. Finally, a choice.

Yes, it's all about money and it's all about power. Quite often consumers are collateral casualties when big corporations merge - but sometimes they are collateral beneficiaries. If Microsoft is successful and acquires Yahoo, it will a very bad thing for the Internet. Most of us are painfully aware how Microsoft operates when it dominates a market. It uses power and money to throttle competition - always a bad thing for consumers.

If Google bought Apple I think it would be would be fantastic news for consumers. And, it would be the ultimate, sweet revenge.

"Google makes bid to buy Apple."

That's a headline that I would love to see.

Copyright ©2008 by Cloudeight Internet.

The Prodigal Incredimail Returns To Google Ads

Incredimail, like the proverbial prodigal son, has seen the errors of its ways and promised to be a good son. Google has killed the fatted calf. Incredimail's now back into the fold.

Incredimail users are breathing a sigh of relief. Investors seem be breathing a sigh of relief - but they should be wary of this foreign-based company whose revenue comes mostly from advertising - not from the sale of its products.

Adsense ads are once again showing up in the Incredimail (free version) interface and on Incredimail's web sites. The ads are generating income again and all is well again. Or is it?

Investors have a right to be edgy. Reliable financial reports say that Google Adsense revenue accounts for 85% of Incredimail's revenue. Companies who have great products can sell those products in the free and open market - and that's how they make money. Good products sell and bad products don't. If you can't your products you either go out of business, create better products ---- or rely on Google ads? Incredimail, the adware company that claims it isn't, relies on Google ads for most its income. Something is missing here. Something isn't right.

Investors have lots of reasons to be nervous. Want another? Why did it take Incredimail two days to inform investors that Google had yanked its ads? Incredimail has been silent about the reasons behind this brouhaha. Silence breeds suspicion. Since its the investors' money and Google ads that we now know keep Incredimail afloat, you'd think they would at least be more honest with their investors than they are with their users, but so far, not a word from Incredimail.

Incredimail went public with a prospectus full of pretty promises but they've yet to release a single product that they've been able to sell successfully. A vast majority of Incredimail users opt for the "free" adware - excuse me - the ad-supported version of it - and live with the ads. Incredimail sales can't be very good. According to several reports, up to 85% of their revenue comes from Google ads. That's Incredible, Incredimail. It makes me glad they don't have any of my money.

Incredimail has always been slippery enough enough to avoid being classified as "adware" or "tracking software". But, actually that's a matter of semantics. The free version is supported by ads and that makes it adware. Its privacy policy clearly states that by using it you give Incredimail the key to any data on your computer it decides to glean and that makes it tracking software. You can argue about semantics until hell freezes over but Incredimail's so-called "free" version is adware and tracking software.

Advertising is very important to Incredimail. Recent reports claim that as much as 85% of Incredimail's revenue is derived from Google ads. If that is true, only 15% of its revenue comes from sales of their products. Sales must not be very good. If their products were as good as they claim why do they have give it away as adware? They're certainly not giving away Incredimail because they are philanthropic. They are giving it away because they are making a lot of money by being adware. I wonder what they do with the information they collect from users' computers? Sell it?

What was Incredimail doing that was so nefarious that Google decided to take such drastic action. Don't you wonder? You have to be a little curious.

If you're an Incredimail-lover don't be illogical; don't give me the old David and Goliath (ho-hum) comparison: Big, powerful Google picking on poor, little, innocent Incredimail. Google had no reason to pick on Incredimail. Incredimail is just one of millions of companies and web sites who use Adsense.

Here's our take and it's based on fact:

Fact #1: The free version of Incredimail is adware - Incredimail says it's not. Yet, it displays advertising in its user Interface and inserts an advertisement at the bottom of every email users send with it. Indeed the person sending the email cannot see the ad, but the recipient can.

Fact #2: Every person who installs Incredimail is bound by their privacy policy - including this clause:

"...CONSENT TO PROCESSING
Users, including without limitation, Users in the European Union, fully understand and unambiguously consent to the collection and processing of their personally identifiable and non-personally identifiable information, in the United States. ..."

What exactly is "Personally identifiable" information? What type of processing is done with this personally identifiable information? If you're an Incredimail user, you should be asking these kinds of questions.

What really happened between Google and Incredimail? Incredimail isn't saying. Why doesn't Incredimail tell us? If they had nothing to hide don't you think they'd have made a statement of some kind by now?

Incredimail investors and users should be demanding an honest explanation. Given Incredimail's reputation and history, we don't think you'll ever get one .

Incredimail Ditched By Google

Maureen asks how the recent news concerning Google's banning of Incredimail will affect her
"I have been using IncrediMail and am a bit worried with the news that Google disabled all their ads with them for "spyware bombing" and violation of Google's terms of service. What is a spyware bomb? Thanks, Maureen.

Our Answer
Many of you have read that Google has banned Incredimail from its Adsense program. The multi-million dollar, publicly-traded company Incredimail and maker of adware "Incredimail" - relies on Google ads for 85% of their income many sources say. While the full story has not yet been revealed, speculation about Incredimail's alleged scurrilous activities include charges of spyware bombing. While this remains speculation, it comes from many reliable sources.

Spyware Bombing is spyware that is downloaded and installed to a computer remotely without notification to the user. As we've warned users many times, when you allow a program to access your computer remotely all the time (like Incredimail) your computer becomes vulnerable to furtive activities - such as installing new, potentially unwanted programs under the guise of "updates". Incredimail has always required an open connection between your computer and Incredimail's servers - this open connection is essentially a conduit - a pipe through which anything can be pumped from a server to your computer. Whether it's an update or a new program - it can be installed without your knowledge and while you're not even using your computer.

We pointed out, long ago that Incredimail's privacy policy was one of the very worst we've ever seen and nothing has changed in its privacy policy since we wrote about it in this article.

Is it legal for Incredimail to install software (as updates or anything else they decide you should have) on your computer without your knowledge? It sure is. Why? Because by installing Incredimail you LEGALLY agree to their privacy policy, End User License Agreement, and Terms of Use. To us the most incredible thing about Incredimail is that they can get people to install it and thereby agree to their shocking Privacy Policy which states (this is verbatim):

"...CONSENT TO PROCESSING
Users, including without limitation, Users in the European Union, fully understand and unambiguously consent to the collection and processing of their personally identifiable and non-personally identifiable information, in the United States. ..."

That anyone would agree to the "unambiguous" collection of their personally identifiable information astonishes us. Yet, apparently, tens of thousands have traded their "personally identifiable information" for an E-mail program that sends stationery. Whether Incredimail users know it or not, they are legally bound by to this (and Incredimail's EULA and Terms of Use). They can collect from you what you will; they can install software on your computer without your knowledge as they wish; you gave them permission (legally) to do it - and you have no remedy under the law no matter what.

Perhaps Google has become the first big company to actually see through Incredimail's smoke screen - and if so, we feel pretty darn good, we were the very first to see through it. Are they spyware bombing? We don't know, but we know if Google bans you, you are doing something very bad.

If Incredimail ever recovers from the loss of 85% of its revenue, let's hope they come back as a company that cares about its users as much as it does its bottom line. Their ludicrous privacy policy remains one of the worse we've ever seen and shows not one bit of concern their users' privacy.

Note: There are literally hundreds of news stories about Google banning Incredimail from its Adsense program. You can start with this article - there are many, many more. It's big news because Incredimail is a publicly-traded company and and stockholders have a right to know what the company is up to. An 85% drop in gross revenue would put most small caps out of business. We'll see what happens in the coming months.

Stay tuned. Maybe it won't be too long before we can tell you - "See? We told you so!"