EULAlyzer javacoolsoftware 12-9-05

Why are so many unsuspecting users infected when downloading software? They do not read the EULA (End User License Agreement). As members of the security community, we are well aware of the dangers of not reading the EULA, yet how many of us see all the red flags in the fine print?

If you have read any of Webhelper's (Patrick Jordan) articles, you are well aware of the hidden dangers in a EULA. For example, Webhelper wrote here:

"Throughout the Direct-Revenue Transponder Gangs history, they have made constant changes to their MANY EULAs (End User License Agreement). What this means is that a user had better read very carefully any EULA that comes from this adware marketing group as there are some important items that may change your mind about installing their adware."

Another example is presented by Ben Edleman in his article Gator's EULA Gone Bad.

Now there is a tool to help this process. Javacool Software has released EULAlyzer 1.0. Using the EULAlyzer does not release users from the need to read the EULA. Rather, it flags questionable wording, providing a "Goto" link examine the wording in context more closely.

I ran the Registration Agreement for LandzDown Forum through the EULAlyzer. The EULAlyzer picked up "e copyrighted material. Spam, flooding, advertisements, chain letters, pyramid schemes," as advertisement. However, when following the "Goto" link, I discovered that in context there was no problem with that wording:

"You also agree not to post any copyrighted material unless you own the copyright or you have written consent from the owner of the copyrighted material. Spam, flooding, advertisements, chain letters, pyramid schemes, and solicitations are also forbidden on this forum."

In another test, I used the EULAlyzer on the ABI Ceres software EULA linked in Webhelper's review above. An example of one of the many instances of Flagged Text in the ABI EULA, was "repair or reinstall the Software if any third party application attempts to delete". Clicking on the "Goto" link showed that text in context:

"ABI may store a cookie, computer file or other unique identifier on your computer to identify you and may automatically repair or reinstall the Software if any third party application attempts to delete, disable or modify the Software."

Although EULAlyzer does not release the end user from the obligation of reading the EULA, it certainly simplifies the process. If we, as members of the security community, encourage the use of the EULAlyzer, perhaps users will be not only become better educated, but will think twice before they X the "I agree" box.

From http://www.javacoolsoftware.com/eulalyzer.html
EULAlyzer 1.0

License agreements - a pain?

End user license agreements (EULAs) are the bane of most computer users.
No one wants to read through pages and pages of boring text before installing a program. And many programs put their license agreements in small windows that require lots of scrolling. So many people either skim them or skip reading them altogether.

But it can be dangerous not to read license agreements.
License agreements can provide information about the intentions of software, and other bundled components. Have you ever installed a program, only to have your desktop taken over by advertising? It may have been noted in the license agreement that you simply clicked past. If you aren't reading the license agreements, you have no idea what you could be agreeing to.

You should always read license agreements before agreeing to them.
But now there's a way of making that much easier.

EULAlyzer - Making it all easy

EULAlyzer can analyze license agreements in seconds, and provide a detailed listing of potentially interesting words and phrases. Discover if the software you're about to install displays pop-up ads, transmits personally identifiable information, uses unique identifiers to track you, or much much more.

The Benefits

• Discover potentially hidden behavior about the software you're going to install
  
• Pick up on things you missed when reading license agreements
  
• Keep a saved database of the license agreements you view
  
• Instant results - super-fast analysis in just a second

And with additional features like the EULA Research Center, which optionally allows users to anonymously submit license agreements they scan to help us to further improve the program, everyone can be a part of the effort to make something that used to be so tedious, so easy.

When installing software, never just click past the license agreement. Pop it into EULAlyzer, and EULAlyze it!


*Note: This program does not provide legal advice. It can only highlight information that you may want to consider before making your own decision whether to agree to a license agreement or not. You should always consult a lawyer (or other authorized individual) for advice on legal issues.


Disclaimer: This is an unsolicited, independent review of Javacool Software's EULAlyzer. I have no connection whatsoever with Javacool Software.

EULAlyzer 1.2 released! (January 9th, 2007)

http://www.javacoolsoftware.com/downloads.html

Grand Dad

EULAlyzer 2.0 Released!

Many pieces of software like to bury the (often questionable) things they plan on doing in their license agreements. And, truth be told, most people simply don't take the time to fully read the license agreements for programs they install. So the bad guys get away with it, and most people have no idea what they might be agreeing to.

EULAlyzer helps you instantly analyze license agreements (EULAs), to determine the risks that software might pose. Advertising? Data collection? Hidden installation of third-party software? EULAlyzer breaks down long license agreements into easy-to-parse points of interest, instantly, to help you quickly zero in on potentially riskier behavior. Discover if the software you're about to install displays pop-up ads, transmits personally identifiable information, uses unique identifiers to track you, or much much more.

And it's not just limited to license agreements either - use EULAlyzer to analyze web site terms and privacy policies too, or any other text you come across.

The Benefits:
-Discover potentially hidden behavior about the software you're going to install
-Pick up on things you missed when reading license agreements
-Keep a saved database of the license agreements you view
-Instant results - super-fast analysis in just a second

EULAlyzer Personal is free for personal and educational use.
Compatible with: Windows 2000, XP, 2003, Vista.

Version 2.0 includes faster performance, an improved "Capture Text" method, enhanced automatic EULA detection in EULA-Watch (supports more installers), tweaks and additions suggested by users, full Vista compatibility, and numerous other improvements & bug fixes.

Enjoy!

-Javacool

Download