One would assume that software with the name “Update” in the title would be for notifying a user and/or auto installing updates to applications which are already installed on a machine. The Apple Software Update program is an option during the install of iTunes, QuickTime, and other Apple software. The installation program option checkbox is entitled “Automatically update QuickTime and other Apple software.” From this description you might think that you need to have software from Apple installed on the machine for it to prompt you for installing the updated version. With Apple that is no longer the case.
Apple is now using the ‘Apple Software Update’ to offer NEW applications to end users. On the consumer side, this would not seem to be a big deal. A user can decide to install the Safari Web Browser even if they never had it installed on the machine before, when prompted through Apple Software Update. However, how does this “feature” affect corporate security policies and standard PC configurations? Obviously if a corporation has standardized on a single Web browser other than Safari, and users are receiving these ‘prompts’ to install unauthorized software on the PC this could be a problem. Users who do opt to install this additional software may be breaking company policy and be exposing the platform to additional security vulnerabilities. In a pure security definition of the term, Apple has turned their update software into a Trojan, prompting users to install new applications onto their PC.
There are reasons why company IT departments use technology such as WSUS (Windows Server Update Services), Configuration Manager, or other desktop management applications for controlling the testing, deployment, and reporting of software updates. Apple’s approach to pushing out updates directly to the end users PC and offering additional applications, even if they are free, bypasses this IT control. While fine for consumers, this approach for corporate PC’s is a bad idea. Now IT departments will have to develop policies to deal with this type of new software distribution while still allowing “updates” to applications which are approved and already installed on the PC.