1

At work or at home, I often find some useful piece of software. Sometimes I may find it on a forum, mentioned on a video, or by talking to a colleague.

But how do I know if the editor of the software I install can be trusted ?

To clarify, I am not asking if I can be sure that there are no security issues within the software provided. I am asking how I may check the reputation of the editor in order to prevent the case where the software I install may just be a free tool they provide as an excuse to get a backdoor into my computer, to install a keylogger or basically anything malicious on purpose.

6
  • I just noticed two other questions closely related, so this one might be a duplicate. They are How do I know a software does what the author claims ? and How to decide “I'll trust this software” for closed-source or precompiled software?, however, neither provides specific resources that can be checked to ensure editor's legitimacy.
    – Norgannon
    Commented Jan 12, 2019 at 23:25
  • Trust needs to be defined. Trusted not to be malicious? Trusted not to make a mistake that results in a backdoor? One simply cannot determine this.
    – schroeder
    Commented Sep 2, 2019 at 12:36
  • The question refer to anything "malicious on purpose". Not talking about mistakes creating a backdoor or anything like this.
    – Norgannon
    Commented Sep 4, 2019 at 14:51
  • Any malicious developer would "rebrand" if they got a bad reputation or manipulate a positive one.
    – schroeder
    Commented Sep 4, 2019 at 14:54
  • To give you an example, I looked up macro recording software. They are basically keyloggers that have a replay button. They were all from brands I never heard from and had no idea where to turn to see if the product was safe or not. I couldn't know if it were widely used or not or what the brand behind the product's reputation was. It's possible with money to get to or close to the top of search engines even with a brand new product. How would I know if it is going to send everything I press on my keyboard to the developers ?
    – Norgannon
    Commented Sep 4, 2019 at 15:04

1 Answer 1

0

It's really interesting because in this situation we are dealing with 'trust'.

How can you trust a software editor ?

Because it's famous would be a good answer but still it's not enough.

Look at Sony rootkit scandal

At the moment, I haven't find any website recording editors 'trust factor'. So the best way is to gather information about the different software he has developed. Rummage on different forums to see people's opinion about him or his software. Maybe the editor talks with the community about the software and how to improve it (Being open makes him 'more trustworthy').

In the end, you have to get an idea on him but you'll never be sure about it (like in real life).

10
  • 2
    This looks like the same account as the asker.
    – schroeder
    Commented Sep 2, 2019 at 12:35
  • Can I prove I'm not ?
    – Deunis
    Commented Sep 2, 2019 at 12:39
  • @schroeder What makes you say this ? What would even be the benefit of answering my own question 8 months later on a seperate account ?
    – Norgannon
    Commented Sep 4, 2019 at 14:14
  • @Norgannon the most obvious reason would be votes, or simply that you forgot that you already had an account
    – schroeder
    Commented Sep 4, 2019 at 14:18
  • The wording and sentence structure and cadence are the same, the formatting choices are the same. Both accounts are from France, and your activity on the network coincide. Your questions on other stacks suggest that Norgannon is a student, and Deunis' account states that the user is a student.
    – schroeder
    Commented Sep 4, 2019 at 14:23

Not the answer you're looking for? Browse other questions tagged .