PUA – Potentially Unwanted Advice

No ratings

Presented at CopenhagenCybercrimeConfrence 2015 by

For a long time now, security experts have advised users to use ad-blockers, pop-up blockers, and other browser plugins/add-ons such as “NoScript” to create a safer environment while browsing the internet. Recently we have observed a trend among websites to alert visitors that in using these added layers of protection (these blockers and/or browser plugins/add-ons) they are running a risk. Given that some add-ons and plugins are unequivocally malicious, this may be correct in the strictest sense, but the motivation of these websites often seems financial or even malicious rather than altruistic, and the suggestion is ill-advised. Another problem is the use of the installation framework that software download sites are likely to use. These sites wrap the original software into an installer package that, on execution, advises the user to also install other – often sponsored – software or, even worse, install these without the user’s consent. This can result in unwanted and sometimes amusing situations, but can be very confusing for the end user. The presentation will examine the relationship between the blockers and plugin/add-ons, the advice commonly given and the possible implications of following that advice from a user, website and security vendor’s point of view, and also discusses the confusing situations that can arise when using installers for software obtained from websites other than the vendor’s own site. A real life case scenario with all the ins and outs will be presented to show that end-users should be forensic experts to see the traps being built for them. Points to cover Pros and cons of using blockers and plugins/add-ons Overview of all kinds of blockers and plugins/add-ons The problems with the advice often given Data Leakage consequences of following the advice The problems around installing applications from download sites