Search Mac Software Downloads
|
  Main   Members
User "Borlox" Profile
user image
About Borlox
Last Login:10 Jun 2009 14:47
Posts:20
Reviews:7
Recent Downloads:
  1. SimpleImage
  2. Firefox
  3. MacSword
  4. NetLogo
  5. Hardware Monitor
User Reviews


icon
DxO Optics Pro
Jun 10 2009

BORLOX  It's a problem because my computer belongs to me, not to a software developer. The Interlok rootkit modifies the whole operating system in ways completely unknown and unknowable to the user. The rootkit developer, PACE, isn't answerable to the end user and doesn't care about his interests.

From the PACE website:

Are there any known issues where machines spontaneously reboot or freeze when using PACE protected software?

... It should be noted that InterLok does have mechinisms whereby it can reboot the machine if it detects aberrant behavior that could be trying to compromise the security of the wrapped application.

http://paceantipiracy.com/ilqanda.html

So if Interlok thinks you might be trying to do something the application developer wouldn't approve of, it can shut down your whole system, destroying whatever you may be working on in the process. If it's acceptable to you to give that kind of control over your computer to someone you don't know or trust, fine. To me it isn't and never will be.  
(Version 5.3.4)

praisebury
0
[ Reply ]


icon
DxO Optics Pro
May 30 2009

BORLOX  WARNING: Installs the Interlok DRM rootkit.  
(Version 5.3.3)

praisebury
+1
[ 4 Replies - Reply ]
Replies:


icon
DxO Optics Pro
Jun 10 2009

MIKAELF  Why is this a problem? I've been using DxO for years...never any issues related to this. Please elaborate on why the whining? Are you even a user of DxO?

/Mikael  
(Version 5.3.4)

praisebury
-1


icon
DxO Optics Pro
Jun 10 2009

BORLOX  It's a problem because my computer belongs to me, not to a software developer. The Interlok rootkit modifies the whole operating system in ways completely unknown and unknowable to the user. The rootkit developer, PACE, isn't answerable to the end user and doesn't care about his interests.

From the PACE website:

Are there any known issues where machines spontaneously reboot or freeze when using PACE protected software?

... It should be noted that InterLok does have mechinisms whereby it can reboot the machine if it detects aberrant behavior that could be trying to compromise the security of the wrapped application.

http://paceantipiracy.com/ilqanda.html

So if Interlok thinks you might be trying to do something the application developer wouldn't approve of, it can shut down your whole system, destroying whatever you may be working on in the process. If it's acceptable to you to give that kind of control over your computer to someone you don't know or trust, fine. To me it isn't and never will be.  
(Version 5.3.4)

praisebury
0


icon
DxO Optics Pro
Jun 10 2009

MIKAELF  http://help.dxo.com/faq/index.php?action=artikel&cat=1410&id=14100035&artlang=en

I checked my machine...no rootkits.

I think you're just being paranoid for no reason.

/Mikael  
(Version 5.3.4)

praisebury
-1


icon
DxO Optics Pro
Jun 10 2009

MIKAELF  More info from a thread in dpreview...

I have more confidence in a vendor that actually tells you what they do and why. How many pieces of software on your machine can you say that about? Ever installed a freeware with no guaranties on your machine?

/Mikael

"Here's what DxO says about Interlok in their FAQ:

http://help.dxo.com/... ...cat=1490&id=14900028&artlang=en&highlight=interlok

Here's a reply DxO in their forums (copied without permission). I would link to the forum post directly, but it requires registration even to just view the posts:

-------------------------------------------------------

Hi,

I would like to take the opportunity of your message to provide some information addressing a number of Interlok related concerns :

- We've used Interlok to manage and protect the license of DxO products for several years now. Certainly the use of Interlok is not something new nor is it something “hidden” with version 5 of the product. In fact we have made no changes in the use of Interlok between versions 4.5 and version 5.

- some of the posts and comments that are critical of the Interlok technology are based on information and Interlok product reviews (usually copy/pasted from the web) that concern:

-a version of the Interlok technology which is nearly six years old (2002) and which we do not use.

-a feature of Interlok (known as the “kernel mode”) which DxO Labs does not use for either DxO Optics Pro or DxO FilmPack.

- After more than three and a half years of selling DxO products to a vast worldwide audience, we are yet to have confirmation of a single case where a user lost any data due to Interlok/DxO software. Were we to have such a confirmation, we would extend the guaranties as documented in the user license agreement.

- The only data that is collected and used by Interlok on the host computer is the name of the drive, memory, processor speed. This data is only used to ensure proper operation of Interlok.

- Over time we have built a lot of functionality around our license management such as:

-ability to download the software on one computer platform and install on another platform.

-ability to activate on a computer not connected to the internet.

-ability to transfer a license from one computer to another.

-The Interlok driver can be easily removed by using the install/uninstall feature in the Windows control panel. The driver is not uninstalled by the DxO Optics Pro uninstaller because that would cause problems if the user wanted to keep using other applications that require Interlok (DxO FilmPack or others third party apps…). After uninstalling the Interlok driver only a few, very small and completely inactive data files remain on the computer (ie there are no Interlok executables left). This is similar to storing a few text files of a few kilobytes and is harmless. This is the principle on which many demo versions work (ie DxO and non DxO products; Interlok and non Interlok).

- One thing we would not be able to do without Interlok or a similar solution is to provide a time-limited fully functional demo version.

In terms of the future: we're always reviewing possible scenarios/changes to our licensing technologies. A change, if selected, would have to make sense and bring increased benefits. In that respect - the opinion of our user base / potential user base and opinion leaders is something that we listen to very carefully.

I hope this helps. Thanks for your question.

Best regards.- Luc M.

__________________

Luc Marin

EN: Vice-President Sales & Marketing - Photography

FR : Directeur Marketing et Commercial - Photographie

DxO Labs

-------------------------------------------------------

I believe Nikon's Capture NX uses Interlock as well. In any case, I'm not really trying to defend DxO....just providing their explanation.

-Tim"  
(Version 5.3.4)

praisebury
+1



icon
SMART Utility
Jan 27 2009

BORLOX  Anyone who uses this app should be aware that it tries to hide a timestamp in a preference file named "com.apple.services.plist", which is apparently supposed to look like a file created by the OS. It isn't.  
(Version 2.0)

praisebury
-1
[ Reply ]


icon
Manpower
Nov 16 2008

BORLOX  To convert the man page with title 'fubar' to publication-quality PDF:

Open a Terminal window.

Enter "man -t fubar | open -a -f Preview" (without the quotes.)

Yes, it involves some text entry, but if you're reading man pages you need to do that anyway.

Besides ManOpen, another free alternative to be aware of is Bwana.  
(Version 2.0)

praisebury
+2
[ 1 Reply - Reply ]
Replies:


icon
Manpower
Nov 30 2008

DVDRTRGN  man -t fubar | open -f -a Preview

(transposed the f/a switches)  
(Version 2.0)

praisebury
0



icon
Aerocut
Nov 14 2008

BORLOX  Just in case anyone is confused about what this does: it uploads your images to a remote server, apparently in Italy, where the processing takes place, and then downloads the results back to you.

I just checked the Terms of Use and Privacy Policy pages on the developer's site. Both are blank. Maybe you have to open an account to see that information. I have no idea what rights the developer considers himself to have to his customers' data.

I wouldn't use this product for anything serious without consult a lawyer first. An Italian lawyer.  
(Version 2.1.3)

praisebury
+1
[ 2 Replies - Reply ]
Replies:


icon
Aerocut
Nov 15 2008

DIGIPEEKS S.R.L.  First of all I want to apologize to you for "Term of use" and "Privacy Policy". We are translating it with our lawyer and we will publish them in next week.

The description of the service is right; we observed that the clipping path creation is the most boring work for graphic artists and professionals.That's why we spent several years in research to obtain the highest precision in clipping path creation. The result is Aerocut,a full Photoshop-compatible service that cut drastically the human time for clipping paths creations.

Thanks to our RealEdge technology,our server detect EVERY clipping path in the image with the a precision never seen before. Aerocut get server's result and show EVERY clipping path to you so you only have to CHOOSE the right one for your work. The boring work is done by our server,you only have to "navigate" in clipping paths.

Once you finished you can export the result in several formats. In this way you can merge our precision with a lot of standard programs,like Photoshop, and continue to work in usual way,but faster.

Thank you,  
(Version 2.1.3)

praisebury
-1


icon
Aerocut
Dec 14 2008

DIGIPEEKS S.R.L.  We got ready some videos showing how Aerocut works, please take a look:

Three tutorials subtitled in English. High resolution and subtitles available in youtube:

how to cut out fast:

http://it.youtube.com/watch?v=I1townNCDnk

how to register in the web site:

http://it.youtube.com/watch?v=tfH1WzB1i0Y

how Aerocut service works:

http://it.youtube.com/watch?v=ShGL47UbiuU

A tipical cut session in Aerocut:

http://www.vimeo.com/2495649  
(Version 2.1.4)

praisebury
0



icon
AppleJack
Aug 31 2008

BORLOX  I don't like to criticize a free application that many people apparently find useful, but deleting swap files? What's supposed to be the point of that? They're deleted automatically anyway at startup.  
(Version 1.5)

praisebury
0
[ Reply ]


icon
Mathusalem
Aug 12 2008

BORLOX  Promising, but doesn't yet deliver.

I tried to use this to back up my home directory to S3. I chose an encrypted compressed disk image as the archive type. It made a complete local copy of the source directory, including all the files I had excluded from backup, then stalled with the progress dialog showing "idle". No data was uploaded.

Also, I noticed that it can't create a new bucket if one already exists.

If the developer keeps working on it, this might be a useful app someday.  
(Version 1.0b11)

praisebury
0
[ Reply ]


icon
Sparkle
Jul 25 2008
*....

BORLOX  Am I the only one who thinks this is a bad idea?

Applications that don't need to access the network, shouldn't. The Mac OS is moving toward a sandbox security model in which applications can be selectively allowed access to kernel facilities such as I/O and networking. This framework conflicts with that model.

A security-conscious user should have an admin account that is used only for administrative tasks such as software installation. Only the apps that are required for those tasks should run in that account. All other work should be done in another account, without admin privileges. Sparkle conflicts with that model, too.

The one time I tried it, Sparkle installed an app bundle with wrong, wide open, permissions.

Unfortunately, more and more developers are included this waste of disk space in their products, and you can't remove it, because then the apps won't launch.  
(Version 1.5b4)

praisebury
-7
[ Reply ]


icon
DivX
Jul 19 2008

BORLOX  The installer package phones home without asking permission from the user. It also tries to cover its tracks.

When you run the installer, it installs, among a lot of other stuff you probably don't want, an application called "Pingie." Pingie is launched automatically by the postflight installer script, then deleted, so you never know it was there.

By runnings strings(1) on the executable in the Pingie.app bundle, you can see that it contacts a server at http://hints.netflame.cc/, which redirects to a Digital River marketing site. It sends, at least, the product version and your IP address.

The only reference to all this in the installation documents is in the middle of the legal boilerplate of the EULA:

"During the installation process and through use of the software covered hereunder, we may collect non-personally identifiable information, as well as personally-identifiable information, all as set forth in our Privacy Policy, available at http://www.divx.com/legal/privacy.php; please read it."

Read it indeed. And better yet, don't run the installer at all. Use Pacifist or some other tool to extract only the files you want from the package. In my case, that was only the QuickTime decoder component. I had no use for the player or any of the other questionable stuff in the package.  
(Version 6.7.2)

praisebury
+4
[ 1 Reply - Reply ]
Replies:


icon
DivX
Jul 24 2008

UMAROMC  Wow! Thanks for the heads up!!! I HATE things like this!  
(Version 6.7.2)

praisebury
0



icon
DenyHosts
Jul 10 2008
*****

BORLOX  Excellent stuff. I've been using it for years. If you're running a public SSH server, you MUST install this. It's for advanced users -- a Python script, not a GUI application -- but it well repays the effort to learn how to set it up.

What it does is to watch a log file for unsuccessful attempts to connect to your SSH server. If there are too many attempts from a particular IP address, DenyHosts blocks all further SSH connections from that address. Optionally, it also connects to a central server and downloads the IP addresses of hosts that have attacked other users. Those hosts are then blocked too, usually before they ever attack you. Your attackers' addresses are also uploaded to the server. This creates a group-immunity effect.

It can also notify you by email when a host is blocked.  
(Version 2.6)

praisebury
0
[ Reply ]


icon
RealPlayer
Jun 5 2008
*....

BORLOX  This piece of garbage prompts to start a root daemon every time it runs, even after you've told it not to, and after you cancel, it asks for an admin password anyway because it wants to write to a file in the application bundle.

Somehow, Real always manages to outdo itself by making each new version worse than the last one.  
(Version 11.0 build 876)

praisebury
0
[ Reply ]


icon
Microsoft Expression Media
May 31 2008

BORLOX  Appropriately, the screenshot is a threat of criminal prosecution.  
(Version 2.0.1447)

praisebury
+5
[ 2 Replies - Reply ]
Replies:


icon
Microsoft Expression Media
Jun 1 2008

BIGDAVE56  Good catch. How embarrassing is that- posting a screen shot (that is nothing but a splash screen anyway) containing a legal threat. That is laughable even by M$ $tandard$.

I was eligible for the free upgrade to Expre$$ion, but am already scanning the landscape for potential substitutes, because I have little hope that M$ won't **** it up, or even drop Mac support entirely, sooner or later.  
(Version 2.0.1447)

praisebury
+1


icon
Microsoft Expression Media
Jun 2 2008

TIM27  is that showing an actual serial number?  
(Version 2.0.1447)

praisebury
0



icon
Domain Name Grabber
May 21 2008

BORLOX  Another scam widget. This one passes domain-name queries through to the developer so he can register the names first and sell them back to the user.  
(Version 1.0.4)

praisebury
+1
[ 3 Replies - Reply ]
Replies:


icon
Domain Name Grabber
May 21 2008

MACUPDATE ADMIN  How do you know that is what is happening? Any evidence, facts?  
(Version 1.0.4)

praisebury
+1


icon
Domain Name Grabber
May 21 2008

KIDDAILEY  There have been numerous reported instances of people performing searches for odd, one-of-a-kind domain names only to discover the next day that someone else had registered them after they performed the search.

If you are planning to purchase a domain name, you definitely should consider NOT doing a search for it until you are absolutely ready to buy.

In the case of this program, it *is* sending all whois requests through a domain registrar: www.securepaynet.net (which appears to be a GoDaddy reseller). You can verify this by looking at the source code for the widget.

That doesn't mean that they are hijacking the domains you search for, but a widget for something like this reeks of suspicion, and I'd would NEVER trust it myself.  
(Version 1.0.4)

praisebury
0


icon
Domain Name Grabber
May 23 2008

NAMECAT.COM  Contrary to Borlox' libelous statement, Domain Name Grabber is absolutely *not* "another scam widget". For 3 years, many searches per day have been done via this widget and not one NameCat.com customer has complained about their domain searches being "hijacked".

All Domain Name Grabber queries are safe and sent via SSL to protect them.

Anyone is welcome to take it out for a test drive and see for themselves. That being said, there is certainly no need for speculation, suspicion, and *especially* not baseless accusation.

Feedback and suggestions on how to improve Domain Name Grabber are always welcome!   
(Version 1.0.4)

praisebury
0



icon
Refurb Store Widget
May 18 2008

BORLOX  A good example of the sort of widget to avoid. It provides no information you couldn't get just as easily from apple.com. All it does is direct queries to the developer's site so he can collect personal data for his own use.  
(Version 1.0.1)

praisebury
0
[ Reply ]


icon
ExpanDrive
Apr 11 2008

BORLOX  Being based on MacFUSE, it only supports password authentication, which SSH servers exposed to the Internet shouldn't use.  
(Version 1.1)

praisebury
-2
[ 2 Replies - Reply ]
Replies:


icon
ExpanDrive
Apr 11 2008

PJM  Did you even *look* at the product before your fingers typed this nonsense? Hint for the clueless: read first.

ssh keys work fine with ExpanDrive.  
(Version 1.1)

praisebury
+2


icon
ExpanDrive
Jul 22 2008

HEMANCUSO  Indeed - SSH keys do work with ExpanDrive  
(Version 1.2.9)

praisebury
0



icon
Home Weather Center
Nov 12 2007
*....

BORLOX  It will only run if it has write access to the application bundle, which means you either have to run it in an admin account (if it's installed in the Applications folder), or you have to install it in your home directory, where it's only available to one user. Either option violates the UNIX security model.  
(Version 1.8)

praisebury
0
[ Reply ]


icon
Exces
Oct 14 2007
*....

BORLOX  I don't know what this guy is up to, but there is absolutely no reason for anybody to use this app or pay for it. It's just a disguised, defective wrapper for the DiskImages framework. The mysterious super-secret vaults it creates are merely obfuscated sparseimages, the same kind you can create for free using Disk Utility, or with cheaper, better third-party apps such as DropDMG. The only differences I can see are, first, that this app somehow manages to impose a spurious 10-GB limitation on the size of the image, and second, that the files can't be shared with anyone who doesn't also have this app installed. Well, actually they can, if the recipient goes to the trouble of extracting the sparseimage file from the bundle it's hidden in, but what's the point?  
(Version 1.1.4)

praisebury
+1
[ Reply ]


icon
Security_Key
Aug 9 2007

BORLOX  Firmware password protection can be bypassed by changing the RAM configuration. Its only use is to prevent rebooting something like a kiosk machine in single-user mode, where the box is physically locked up and only the keyboard and mouse are accessible. Otherwise it's worthless.

Physical security of data comes from encryption, not from being unable to boot the machine. If the developer wants to do something useful, he should try devising a two-factor authentication system like the SmartCard support already built into the Mac, but without the need for specialized hardware and media.  
(Version 1.2)

praisebury
0
[ Reply ]


icon
Security_Key
Aug 3 2007

BORLOX  I don't like to criticize someone who contributes a free (as in beer) project, but it seems the developer is considering charging money for it. I've known 9-year-old children who could bypass this by booting in single-user mode. No one should install it with the idea that it provides any security against tampering by an attacker with physical access to the computer. There are ways to provide that kind of security, but this isn't one of them. I really can't see any point in this software at all.  
(Version 1.0)

praisebury
0
[ Reply ]


icon
GlowWorm FW Lite
Mar 4 2007
****.

BORLOX  This is the only usable product of its kind for the Mac. The only competition is the embarrassingly-named Little Snitch, which has such a broken security model that nobody should use it.

The important difference between GW and LS is that unprivileged users can use GW without being given control over other users' processes. The firewall rules are set by the system administrator, but they apply to all users. With LS, the foreground user can allow or deny access to the network for any process running as any user. Even if you're the only user of your machine, that's a huge security hole, because it means that any application you run could potentially open the firewall without your knowledge. LS supposedly takes some precautions against this, but the model is fundamentally bad.

The GW interface isn't beautiful, but it's adequate. The menu bar item has crashed on me once. Otherwise no problems with stability.

The Mac platform needs the functionality that this application provides. Users who are conscious of privacy and security should support the developer.  
(Version 1.5.3b2)

praisebury
0
[ 3 Replies - Reply ]
Replies:


icon
GlowWorm FW Lite
Mar 7 2007

SJK  Thanks for the brief comparison of GW vs. LS security models.  
(Version 1.5.3b3)

praisebury
0


icon
GlowWorm FW Lite
Mar 9 2007

SENOJSITRUC  Yeah, support the developer! :-)

Thanks for the review. I'm constantly working to increase stability. If you find any consistency to the crashes, please send along the details (cjones@glowworm.us). Thanks!  
(Version 1.5.3b3)

praisebury
0


icon
GlowWorm FW Lite
Aug 13 2008

NONYA  STAY AWAY! STAY AWAY! STAY AWAY!

Installed this product in several variations with Leopard 10.5, ie beta, 'stable', etc.

All destroyed my OS + required reinstallation.

BIGGEST PIECE OF CRAP EVER, AND THIS FROM A FORMER PC USER!  
(Version 1.5.3b4)

praisebury
0


The opinions expressed in the reviews are not necessarily those of MacUpdate.
MacUpdate waives any legal binding related to the comments and opinions expressed in the reviews.
Please contact MacUpdate politely if you wish for a comment to be reviewed by MacUpdate for removal.