Aureate / Radiate

» see radiate.com as it lived, on the wayback machine

~ the obit ~

The business was reasonable on paper. Shareware authors in 1998 had a bad time getting paid: you wrote a download manager or an FTP client, thousands of people used it, a tiny fraction of them ever registered. Aureate Media sold those authors a way out. Drop our library into your installer, let it pull down banner ads and show them inside your program, and we pay you per impression. The user gets the software for free. Nobody has to trust anybody with a credit card number.

It worked well enough that the library ended up everywhere. By March 2000 the company said it had more than eighteen million registered users across four hundred applications and was adding a hundred thousand people a day. Steve Gibson, counting carrier programs rather than users, put it at more than five hundred titles and thirty million machines. Some of the carriers were genuinely popular software of the era, the sort of utility you installed once and forgot about.

Then came the part that killed it. The ad library did not leave when the host program did. Uninstall the shareware and advert.dll stayed on disk, still loading, still talking to Aureate's servers. It also had the ability to fetch and run code the user had never asked for. Gibson went through two hundred thousand lines of disassembly in early 2000 and was honest about what he did not find, which was any evidence of the registry sweeping and file inventorying the rumors claimed. What he did find was enough. He published, he shipped a removal tool called OptOut, and he used the word spyware for the thing he was removing.

On a 33.6k line a download manager that could resume was not optional, so this was my part of the software landscape even if the network never had a name I would have recognized at the time. I could not tell you which of the free utilities on that machine were carrying it. That was the design. The whole point of the model was that the ad engine belonged to a company you had no relationship with and no reason to think about.

~ the rap sheet ~

~ how it worked ~

The mechanism was a set of DLLs that installed alongside the host application and registered to load at startup. Advertising came down over the network, got cached locally, and displayed in a panel the host program reserved. Aureate's defense was that this was all it did, and that the license agreement covered it. The license agreement did not mention that the library kept running independently of its host, which is the difference between an ad-supported program and a resident agent.

Uninstalling by hand meant knowing filenames. Deleting the wrong one broke every program on the machine that had ever shipped with the library, since they shared it. This is why the removal tool mattered more than the article did: the knowledge was useless to most people without something that could act on it.

~ the cracks ~

Aureate's response to being named was to change the name. In March 2000, backed by CMGI@Ventures, the company relaunched as Radiate. The press release framed it as raising the company profile and said nothing about spyware. Nobody was fooled for long, since every scanner that shipped after that point listed the old name and the new one on the same line.

The deeper problem was that the model could not survive the definition. Once "software that phones home without telling you" had a word, it had scanners, and once it had scanners it had a detection listing, and once you are on a detection listing no shareware author will bundle you, because their users will start seeing warnings with their program's name attached. The revenue depended entirely on developers being willing to carry it.

~ what it became ~

The company was gone by 2002. The category it accidentally created was not. Gator and the rest of the adware economy ran the same trade for another five years, at larger scale and with less pretense, and the anti-spyware industry grew up chasing them. Lavasoft's Ad-Aware and Patrick Kolla's Spybot both arrived in the window Aureate opened.

What is easy to lose now is that the founding case was not obviously villainous. It was a payment problem solved sideways, by a company that thought a EULA nobody reads was consent. The lesson everyone took from it, and the reason app stores and permission prompts look the way they do, is that a thing which outlives the program that installed it needs to be described to the person whose machine it is on.

@}-->--

              )
             (_)
            .-'-.
            |   |
            |   |
            |   |
            |   |
          __|   |__   .-.
       .-'  |   |  `-:   :
      :     `---'     :-'
       `-._       _.-'
           '""""""

« previous  ·  random  ·  next »