You're really mixing apples and oranges here, I think:
1) the vulnerability was in Itunes versions before 4.7.1.
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=180
This thread was started because of feature found in Itunes 6.0.2, right?
I do agree that vendors need to do a better job of describing to the users
what interactions the software has with other machines across the Internet
or other networks, however.
2)--the issue of resources and load on the users machine: What software
vendor gives any clear indication about these issues? I'm not aware of any
guidance you can find about this kind of issue other than looking at minimum
system requirements and the like--or perhaps other users experience in
groups such as these. Sure--extra "features" Apple adds do use resources on
your machine. It'd be nice to be able to turn every one of them on or off
easily, quickly, and without repercussions for any other functionality on
the system or within the application. I've yet to find an app of any
complexity that really allows for all that though.....
In the last analysis--uninstalling the app, not buying the product--is the
recourse a consumer has--and that's a lot more likely to have a clear effect
than critiquing the product in a third party forum, such as this one.
I realize that you had a specific request in starting the thread--and it was
a reasonable idea--I don't know whether Microsoft is likely to take cues
from these groups about such a matter--but it certainly doesn't hurt to
bring the matter up--but it needs to be clearly described in terms of
Microsofts published criteria--exactly how Itunes 6.0.2 is in violation of
those criteria.
As I understand it Apple has modified the app slightly to give clearer
notice to the user about this interaction.
I've got to say that this sure reminds me of the Alexa feature in Internet
Explorer that raised such a fuss--you bring up a URL, and then there's a
"like sites" button or something like that that you can hit. Well--hitting
that button passed the URL up to Alexa so they could pass back "like
sites."--not too hard to understand, you'd think--but raised enough ruckus
that the feature is gone.
We're demanding (or maybe the vendors are providing) functionality that
resembles magic in apps these days--then when we figure out the hocus pocus
behind that magic we're offended--what--you mean it isn't Extra Sensory
Perception that enables Apple to show me music that is similar to the music
that I am listening to?
I'm sounding off too much here--I guess--I agree with you that the feature
needed to be better described and laid out in the eula and other descriptive
material--and they've improved on that--so I'm willing to let it rest at
this point.
--