 | |
Type of site | Downloads |
|---|---|
| Owner | Ziff Davis |
| Created by | CNET |
| URL | download |
| IPv6 support | No |
| Commercial | Yes |
| Registration | Optional |
| Launched | October 23, 1996; 29 years ago (1996-10-23) |
| Current status | Active |
CNET Download (originallyDownload.com) is anInternetdownload directorywebsite launched in 1996 as a part ofCNET. Initially it resided on the domaindownload.com, and thendownload.com.com for a while, and is nowdownload.cnet.com. The domaindownload.com attracted at least 113 million visitors annually by 2008 according to aCompete.com study.[1]
The offered content is available in four major categories:software (including Windows, Mac and mobile),music,games, andvideos, offered for download viaFTP from Download.com'sservers or third-party servers. Videos are streams (at present) and music was all freeMP3 downloads, or occasionallyrights-managedWMAs or streams until it was replaced withlast.fm.
The Software section includes over 100,000freeware,shareware, and try-first downloads. Downloads are often rated and reviewed by editors and contain a summary of the file from the software publisher. Registered users may also write reviews and rate the product. Software publishers are permitted to distribute their titles via CNET's Upload.com site for free, or for a fee structure that offers enhancements.
Up until 2015 CNet used Spigot Inc to monetize the traffic to download.com. According to Sean Murphy, then a General Manager at CNet, "Spigot continues to be a great partner to Download.com, sharing our desire to balance customer experience with revenue."[2]
In August 2011, Download.com introduced an installation manager called CNET TechTracker for delivering many of the software titles from its catalog.[3] This installer included trojans andbloatware, such astoolbars.[4][5][6] CNET admitted in their download FAQ that "a small number of security publishers have flagged the Installer asadware or apotentially unwanted application".[7]
In December 2011,Gordon Lyon, writing under his pseudonymFyodor wrote of his strong dislike of the installation manager and the bundled software. His post was very popular on social networks, and was reported by a few dozen media. The main problem is the confusion between the content offered on Download.com[8][9] and the software offered by the original authors; the accusations included deception as well as copyright and trademark violation.[9]
In 2014,The Register andUS-CERT warned that via download.com's "foistware", an "attacker may be able to download and execute arbitrary code".[10] In 2015, research byEmsisoft suggested that all free download portals bundled their downloads with potentially unwanted software, and that Download.com was the worst offender.[11]
A study done by How-To Geek in 2015 revealed that Download.com was packaging malware inside their installers. The test was done in avirtual machine where the testers downloaded the Top 10 apps. These all contained crapware/malware; one example was the KMPlayer installer, which installed arogue antivirus named 'Pro PC Cleaner' and attempted to executeWajamPage.exe. Some downloads, specifically YTD, were completely blocked byAvast.[12]
Another study done by How-To Geek in 2015 revealed that Download.com was installing fakeSSL certificates inside their installers, similar to theLenovoSuperfish certificate. These fake certificates can completely compromise SSL encryption and allowman-in-the-middle attacks.[13]
However, in July 2016, How-To Geek discovered that Download.com no longer included adware/malware in its downloads and that its Installer program had been discontinued.[14]
we suggest avoiding CNET Download.com entirely
Sneaky 'foistware' downloads install things you never asked for