The July issue of Connect, the CIO's newsletter, contains an article by Kent Strickland, BGSU information security officer, regarding security measures to be considered when installing freeware software.

Installing Freeware?
Proceed with caution
by Kent Strickland, BGSU information security officer
Connect July 2003

Freeware is software provided without charge and is usually written by computer enthusiasts. Literally thousands of freeware programs are available via the Internet.
Installing these so-called "free programs" can cause many problems such as revealing private information to others, increasing spam email and violating the ITS Network and Computer Policies. The following are reasons to avoid installing freeware on BGSU-owned systems:

• File sharing programs such as Kaaza and Morpheus not only can lead to copyright infringement issues, but can be "bundled" with spyware programs that share personal user information with others. Misconfiguration can lead to sharing the entire computer hard drive. Installing these types of programs on BGSU owned equipment violates ITS Network and Computer Policies A-28.
• File sharing, games, and unsupported streaming software can also greatly degrade the network performance because less bandwidth is available for legitimate BGSU educational purposes.
• Some software downloaded via the Internet requests a valid email address for registration purposes. Sometimes this email is shared with other vendors and can significantly increase unsolicited email (aka spam) a user receives.
• Downloaded freeware can enable additional "services" on a computer that are advertised to others on the Internet. Hackers can use this as an entryway into a computer system and eventually compromise the personal, financial or sensitive information it contains.
  
• Downloading files from an untrusted source can contain viruses and/or trojans. These can also intentionally or unintentionally share information found on the user's hard drive with strangers and even infect and cause information threats to other BGSU users.
  

As Internet2 brings significant opportunities to BGSU in the areas of research, it is very important to keep research data under control. The hazards of installing freeware can greatly hinder the integrity of BGSU's Internet2 based research projects.

For further information about freeware, contact Kent Strickland, Information Security Officer @ kstrick@bgnet.bgsu.edu

Further information may also be found at:

Adware, Spware and how to remove them (CEXX.ORG)
Lavasoft - Spyware removal and software information (LAVASOFT)

---

Back to Project Home Page