74 replies to this topic

[Ilya Rabinovich]

There is an option to include all the folder into untrusted. Why more?

[coen]

Ok, let's say I share my computer/user (sometimes unwillingly ;-) and others like installing things they got from friends etc.
Also some P2P stuff.
Of course you can set CDROM's untrusted (mostly they copy everything to my harddrive first)
and also set all folders on my harddrive untrusted but another easier way, in my opinion, is to say *.exe and *.msi are untrusted.
It's just an suggestion, there are lot ways leading to Rome but this was mine.

[IDH]

A simple request this which could be implemented before V3....on the Alarm Notifications it would be useful to provide a recommended action, particularly for keylogger behaviour that is detected. e.g. "......reads keystrokes via RegisterRawInputDevices. This behaviour is highly suspicious and may be due to malware. Terminate is recommended." Whilst the existing alarm text would enable many DW users to assess the threat (or otherwise), more novice users are likely to click "OK" and allow the potentially dangerous activity to continue.

This is something that would help the "less knowledgeable" user. [like me ]. I would also like to see the pop-up notifications colour coded to indicate the possible severity of the detection, ie: as in Threatfire.

Ian

[LoneWolf]

Any type of application/outbound control planned for the future?

[Ilya Rabinovich]

Yes, for the 2.50 version. But right now I keep my hands on fixing current problems and issues- don't like the idea to have it behind unfixed.

[LoneWolf]

Yes, for the 2.50 version.

Looking forward to the new feature.

But right now I keep my hands on fixing current problems and issues- don't like the idea to have it behind unfixed.

And that's what I like, fix what needs to be fixed before adding new features.

Just another question Ilya...........
Is there any plans or thoughts about in the future of adding something to help protect aginst scripts? XSS in particular ?
I know I can use Firefox w/no script but I prefer Opera browser.

[Ilya Rabinovich]

Script-based attacks protection is the browsers job. No HIPS can solve it as requires deep HTML and script engines integration.

[jjmonge]

Script-based attacks protection is the browsers job. No HIPS can solve it as requires deep HTML and script engines integration.

internet explorer beta 8 solve this problem,cause they built a xss filter

[LoneWolf]

Script-based attacks protection is the browsers job. No HIPS can solve it as requires deep HTML and script engines integration.

Thank you.

[LoneWolf]

internet explorer beta 8 solve this problem,cause they built a xss filter

Be nice if Opera had this sort of protection.
Maybe in the future.

[jjmonge]

internet explorer beta 8 solve this problem,cause they built a xss filter

Be nice if Opera had this sort of protection.
Maybe in the future.

yes lonewolf.

[jjmonge]

noscript has it,firefox browser.

Edited by jjmonge, 15 July 2008 - 05:47 PM.

[acaetano]

Hi Ilya,

From time to time I find myself wondering when some file listed in the untrusted applications list was added to that list.
So, I have this wish to have that information also. By the way, you already have dates (and exact times - this is important) in other lists, so it is just one more.
One possible use is when I started some installation as untrusted by mistake and I am able to cancel it. Then I would like to remove from the unstrusted list what had just been added there for this installation trial. Or maybe some of my children has unsuccessfully tried to install something and I might want to clean the untrusted list. But then I need to know exactly which files were created by the installation process, so the information about date and time can be quite useful here.

Coming to think about it, a warning message saying that some installation is about to be done in untrusted mode (asking if one really wants to proceed this way) would also be welcome.

Best regards,
acaetano.

Edited by acaetano, 04 August 2008 - 12:25 AM.

[w88nuke]

A NEW "REPAIR" OPTION
-SELF DEFENSE (SRRY I ALREADY SAID IT)
-MORE STABILITY (SRRY I ALREADY SAID IT)->(in crappy vista. i got 2 comps using vista and 1 comp xp =( )

-MORE DETAILED HELP ARTICLE WILL BE NICE


thanks.



keep up the good work!

[LoneWolf]

Application execute permission control.