Is it OK to install this software that an online streaming service says I need?

In this excerpt from
Answercast #56, I look at the possibility of getting malware from a TV
streaming service.

Worried about plugins

Well, you’re certainly right to be cautious. You should always be cautious
whenever software is asking you to install a plug-in, or whatever.

My guess is that what they’re asking to install here is not really what we
would call a plug-in, but rather a codec. A codec (which is short for
coder/decoder) is the software that is used to interpret any of the hundreds of
the different file formats that are used to encode video and audio.

Video coder/decoder

So, in the case of watching the video, that’s the software that receives the
stream from wherever you’re getting it and understands how to unencrypt it
(decode it, whatever) and turn it into an image that you can see on your
screen.

The problem is that there are many, many, many different codecs around and
in fact, many, many different file formats. As a result, not all video streams
use exactly the same format. The net result of that is that some require codecs
that you may not have. As a result, it may ask you install a codec.

Bit torrent malware

Now, here’s the problem. Unfortunately, codecs have been used as a vector to
download malicious software on to people’s machines.

Now, the difference here (one of the reasons that this may not be as bad as
we might be concerned about) is that most often, when videos are being
downloaded illegally (using things like BitTorrent), it’s those that
often have this additional character of having malicious codecs, fooling you
into installing codecs that turn out to be malicious.

Professional services

With this particular service, SatelliteDirect… To be honest, I’m not
familiar with them at all. I’ve no idea if they’re legitimate or what kind of
scenario they’re providing here.

The chances are probably, probably fairly low that they’re going to
throw a malicious codec at you, simply because that would be bad for their
business model. I mean, word would get around and people would stop using their
service, the service that you’re paying for. So my suspicion is that there’s
probably not a problem here.

However, that doesn’t mean that we should not be cautious.

Accept the risk

Here’s what I recommend you do. If the channels that you’re interested in
require a codec and it’s important enough for you to take this risk, then
backup first.

I mean literally:

• Back up right then and there to make sure you’ve got a snapshot of
  your machine immediately prior to installing that codec.

• Save that.

• Install the codec.

• See what happens.

If it works, great. You get on with your life and all is good. If that
codec causes a problem of any sort, restore that backup. In other words, it
will be as if that codec had never been installed.

My guess is you’re not gonna have too much of a problem.

Video services

In all honesty, my biggest concern with your question really has nothing to
do with the codecs that might get installed… I mean, that’s something to be
cautious of for sure.

My experience with these types of services (that claim to give people lots
and lots and lots of video streams from around the planet) is that the
video streams that you end up getting are actually not the ones people
want.

I mean, here in the United States, people want the network stations, and the
cable stations, and the premium stations, and those are the kinds of things
that are not available in these kinds of services. You end up with public
television from around the world or public access channels from around the
world. It tends to be pretty boring TV.

So, I’m really happy for you if you’ve actually found somewhere in those
3500 channels, something worth watching! My experience (and what I’ve heard
from other people) is that literally – it’s a case of 3500 channels and there
is nothing worth watching.

So, good luck to you. Do be cautious, but you’re probably OK. Just whenever
you get into a position where you’re about to make what might be a dangerous
choice, backup first.