Genieo

» see genieo.com as it lived, on the wayback machine

~ the obituary ~

The pitch was a good one for 2009. Install a small application, let it watch which sites you actually read, and it would assemble a personal front page out of them, so your browser opened on your own newspaper instead of a search box. Genieo Innovation was founded in Israel in April 2008 by Sol Tzvi and Jacob Tenenboem, shipped its first version in September 2009, and took the beta to the DEMO conference in March 2010 where that kind of idea was still being applauded.

The product was real. What happened around it was that the company found a faster way to acquire users than persuading them, and from then on Genieo mostly arrived on machines attached to something else: a download bundle, an installer for a different program, and in at least one documented case an installer dressed up as an Adobe Flash update, which Intego caught in May 2013. Once installed it changed your home page and your search, and it left pieces of itself behind when you asked it to leave. Testing in June 2013 found it still running after an uninstall.

So the whole second half of its life happened in other people's software. Apple added it to XProtect, the malware blocklist built into macOS. Sophos filed it as Trojan/Adware in January 2014. By November 2014 twenty five of fifty five scanners flagged the installer, and in August 2015 Malwarebytes found a version that went after the macOS keychain. In the middle of that, in July 2014, Somoto bought the company for thirty four million dollars.

~ the case file ~

~ how it paid ~

Genieo belonged to a specific industry that Israeli tech press named Download Valley, a cluster of Tel Aviv companies whose business was the moment between clicking download and clicking finish. Conduit built toolbars that way, and Superfish ended up preloaded on Lenovo laptops out of the same instinct. The money came from search traffic and from bundling fees, both paid per machine, and neither revenue line cares at all whether the user wanted what they got.

Turkish internet cafes ran the Windows edition of this trade, and I sat in them for years. The machine you were given had a browser with a stack of toolbars above the page and a home page nobody at that counter had picked, and cleaning it off was pointless, because the next customer's download put it back. Genieo is what the same trade looked like a decade later, on nicer hardware, run by a funded startup with a product blog.

~ the detection name ~

There is a particular fate available to software: it stops being a product and turns into a word in a scan result. For most of the years after 2014 the string "Genieo" appeared far more often in antivirus databases, removal guides and Apple support threads than in any sentence about reading the news. Search the name today and the first page is still instructions for getting rid of it.

Nothing was ever announced as closed. Somoto absorbed the company, the Genieo-branded installers thinned out over the following years as macOS tightened what an installer could do without consent, and the name kept circulating in signature lists for years after the thing itself had stopped being distributed.

~ ten more years of a web page ~

The domain outlasted all of it. The Wayback Machine holds genieo.com as a small page of three to four kilobytes, captured about once a month, straight through the acquisition and the detections and the end of the business, and still at 4,065 bytes on 9 December 2024. On 8 January 2025 the same address comes back at 451 bytes, and by February it is a redirect. Today genieo.com resolves through Cloudflare and answers with a 200 and an empty body, which is the web's way of saying the lights are wired but the room is gone.

@}-->--

              )
             (_)
            .-'-.
            |   |
            |   |
            |   |
            |   |
          __|   |__   .-.
       .-'  |   |  `-:   :
      :     `---'     :-'
       `-._       _.-'
           '""""""

« previous  ·  random  ·  next »