Newsletters

Select newsletters below and click the button to sign up!

Boston News NY News
DC News Internet Daily
SiliconValley News
InternetNews Business Report




Become a Marketplace Partner



Partner With Us















Internetnews Bloggers

Recent Entries

Archives

April 2009
Sun Mon Tue Wed Thu Fri Sat
      1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 30    

Monthly Archives

Search The Blog

Netstat -vat by Sean Michael Kerner (bio)

A command line view of IT



Google Update goes open source for privacy

google.logo.jpg
From the 'open source means better privacy?' files:

If you run any number of different Google apps (desktop, Chrome etc) on Windows than you've got GoogleUpdate.exe running in the background as a system process.  What GoogleUpdate.exe is supposed to do is continuosly check with Google for updates and then download them when available. It's a little thing, but it is something that has raised privacy concerns -- what exactly is Google sending back and forth?

In order to deal with those privacy issues, Google announced late last week that it was open sourcing the updated as project Omaha.
"We're releasing the source code for Omaha in addition to recent enhancements to Omaha functionality, to provide both transparency and control around the update process," Google's engineers wrote in a blog post."Since Google Update is always running on your system, there's no simple way to stop it, and since it's a fundamental part of the Google software that needs it, it's not explicitly installed. Some users can be surprised to find this program running, and at Google, we don't like disappointing our users. We've been working hard to address these concerns, and releasing the source code for Omaha is our attempt to make the purpose of Google Update totally transparent."
The source code is already up on Google Code , and is being made available under an Apache 2.0 open source license. Google has also gone a step further and is providing a developers guide  to actually get Omaha up and running.

While I applaud Google's efforts in openning up Omaha from a privacy point of view, there are still some issues in my opinion. For one, it's yet another updater on Windows. If every single vendor has their own updater (and many do) that adds a tremendous amount of resource overhead to a PC. I've advocated in the past that Windows should adopt a Linux type package repository system for a unified update process.

From a broader update point of view, it will be interesting to see if other Windows software vendors adopt Omaha as their own updating tool. If they do, perhaps in time it could become the basis for the unified updater that Windows so clearly (and desperately) needs.

| Comments (1) | TrackBacks (0) | Share

0 TrackBacks

Listed below are links to blogs that reference this entry: Google Update goes open source for privacy.

TrackBack URL for this entry: https://swarm.jupitermedia.com/mt-tb.cgi/7839

1 Comments

When I tested Chrome last September, my Google updater issued a GET to cr-tools.clients.google.com and offered up a globally unique ID:
GET /service/check2?appid=%7B430FD4D0-B729-4F61-AA34-91526481799D%7D

And of course, it picked up that other globally-unique ID from the standard Google cookie at the same time.

Then I had to use a restore point on my XP to get rid of the Google updater. Even uninstalling Chrome didn't get rid of it, and I couldn't even find the updater on my XP.

It seems that bragging about how the updater is now open source is a bit disingenuous. The more important question is how long does Google keep this data about you? Is Google still doing what they did last September? Do you really want Google handling the updater for all Windows programs?

Leave a comment