Security apps for Mozilla 1.5

  • Thread starter Thread starter Anony Mouse
  • Start date Start date
A

Anony Mouse

Experienced users: in addition to an anti-virus program, what
external security apps are necessary or desirable with Mozilla 1.5?
 
(e-mail address removed) (Anony Mouse) wrote in
Experienced users: in addition to an anti-virus program, what
external security apps are necessary or desirable with Mozilla 1.5?

I would say almost the same security apps, as any other browser.
So that means the usual firewall, antivirus etc,



Aaron (my email is not munged!)
 
(e-mail address removed) (Anony Mouse) wrote in
What type of security? Personal info? I use nothing special.

I find that the use of a Proxy is nice in spite of the fact that Moz
has pop up blocking. I use Privoxy:

http://www.privoxy.org/

But that's not really a security thing or what you had in mind?

Take a look at my web site concerning virus security suggestions.


Art
http://www.epix.net/~artnpeg
 
What type of security? Personal info? I use nothing special.

I find that the use of a Proxy is nice in spite of the fact that Moz
has pop up blocking. I use Privoxy:

http://www.privoxy.org/

But that's not really a security thing or what you had in mind?

Take a look at my web site concerning virus security suggestions.


Art
http://www.epix.net/~artnpeg

My question is, to what extent is Mozilla immune from the annoyances
that make it necessary to use apps like Spyware Blaster, Spyware
Guard, AdAware, Spybot S&D, WinPatrol with Internet Explorer?
 
Anony Mouse said:
My question is, to what extent is Mozilla immune from the annoyances
that make it necessary to use apps like Spyware Blaster, Spyware
Guard, AdAware, Spybot S&D, WinPatrol with Internet Explorer?

Depends what you're downloading and installing, e.g. if you install Kazaa
(not lite) then you'll have lots of Spyware on you Computer, regardless
what browser you're using.
 
My question is, to what extent is Mozilla immune from the annoyances
that make it necessary to use apps like Spyware Blaster, Spyware
Guard, AdAware, Spybot S&D, WinPatrol with Internet Explorer?

My experience has been that AdAware and Spybot never find nothing at
all on my PC. Nor do I find any traces of spyware using outbound
detection methods. I leave both Java and Java Script enabled (and have
a recent version of Java installed of course). I do quite a bit of
browsing, some of it to "dark places" (what are called vx sites) to
see what can be dumped on my PC but I've never encountered any
problems at all.

That's not to say there aren't unknown vulnerabilities that might be
exploited in the future. Of course, I wouldn't touch a Moz activex
plugin with a ten foot pole :)

I know there's a cult of folks who use all kinds of preventative
measures ....special hosts files, and Sponge's Kerio firewall
outbound IP address blocking stuff, etc. I find no need for any of
that any more than I have a need for a firewall and realtime av
scanning.


Art
http://www.epix.net/~artnpeg
 
(e-mail address removed) (Anony Mouse) wrote in

My question is, to what extent is Mozilla immune from the annoyances
that make it necessary to use apps like Spyware Blaster, Spyware
Guard, AdAware, Spybot S&D, WinPatrol with Internet Explorer?

You should really ask the real experts in alt.privacy.spyware...

But here goes..

The vulnerability of IE to spy and adware compared to other browsers is
IMHO due to the following factors

1) Activex - Most "driveby downloads" get installed on IE computers because
of low Activex permissions or some careless user pressing "yes" when given
a choice. I would guess most newbies get infected this way just by surfing
to a website. Using a non-IE browser reduces this chance greatly since they
don't support Activex at all.

2) Security exploits - Some malware exploit known IE holes to run malware
regardless of your security settings. Again you can be infected just by
visiting a website. Naturally it doesn't work on a different browser.

3) A lot of ad/spyware can be installed on any computer, but mainly target
IE browsers (for example they change your IE homepage with a very specific
registry hack), so if you don't have IE, they have less if any effect.
Still it doesn't mean that there are no spyware/adware that affect mozilla
(to take an example). For example Lop is one of the few well known adware
that can actually infect a Mozilla browser.

Also some of the effects of such malware is generic, eg hijacking your
search engine by changing your host files.

A different browser other then IE will protect you from getting
automatically infected because it doesn't support Activex or have the same
security expoits but it won't protect you when you manually install
spy/adware from other sources. E.g You read about a cool app here, download
it and install it.. Guess what you are infected, because it was bundled
with spyware.

About specific products


AdAware, Spybot S&D - Since you can still be infected by other sources, you
need these to check for malware. Many of the secondary functions in spybot
will be not needed though. E.g the resident helper is implemented as a BHO
which works only in IE, the immunization (see spywareblaster) etc.

Spyware Guard - This one actually scans all files with the extension exe
and cab (normally installation files ) as they are run. You might want this
since it's a real time scan for spyware before they are installed.

Spywareblaster - The main purpose is to handle and block known "evil"
activex controls, so I believe this is of less utility if you never use IE,
since no other browser runs activex. I've read though that some MS stuff
like Windows Media Player actually run activex too though.

Winpatrol - Not too familar with this one, but I doubt the cookie
management would work. But other functions like controlling startups would
still be very useful to detect viruses, trojans etc.



Aaron (my email is not munged!)
 
On 28 Oct 2003 06:00:16 -0800, (e-mail address removed) (Anony Mouse)
wrote:
My experience has been that AdAware and Spybot never find nothing at
all on my PC. Nor do I find any traces of spyware using outbound
detection methods. I leave both Java and Java Script enabled (and have
a recent version of Java installed of course). I do quite a bit of
browsing, some of it to "dark places" (what are called vx sites) to
see what can be dumped on my PC but I've never encountered any
problems at all.

I think for most of the people here, a greater concern is spyware bundled
with other software. You read about this cool thing here, download and
install it, and you are infected. Your browser isn't the problem here :)
That's not to say there aren't unknown vulnerabilities that might be
exploited in the future. Of course, I wouldn't touch a Moz activex
plugin with a ten foot pole :)

I read on the mozillazine forums it was abandoned because of security
concerns. Seriously, I could have told them that...

I know there's a cult of folks who use all kinds of preventative
measures ....special hosts files, and Sponge's Kerio firewall
outbound IP address blocking stuff, etc. I find no need for any of
that any more than I have a need for a firewall and realtime av
scanning.


Art
http://www.epix.net/~artnpeg



I still have some of it on when I'm paranoid but normally it's off.



Aaron (my email is not munged!)
 
I think for most of the people here, a greater concern is spyware bundled
with other software. You read about this cool thing here, download and
install it, and you are infected. Your browser isn't the problem here :)

Obviously, but the question concerned browser vulnerabilities.
Actually, I've downloaded and tested quite a number of freeware utils
mentioned in this n.g. and I don't recall ever finding either spyware
or any other malware (viruses, Trojans, etc.) in them. Maybe I've just
been lucky. I do recommend that people keep AdAware and Spybot handy
and up to date ... just as I recommend keeping a couple of good (DOS)
av scanners handy and up to date for checking downloaded software. But
I have to say it's really boring as hell never finding anything :) I
have to go out and purposely look for samples for my collection since
I opted for my ISP's combo spam and virus blocking. Never see anything
anymore. The only way I know spyware and viruses aren't a myth is my
involvement on the virus groups :)


Art
http://www.epix.net/~artnpeg
 
Aaron said:
I still have some of it on when I'm paranoid but normally it's off.

It's probably a random kind of thing, but Kerio often warns me that
somebody is trying to access my computer through the WebWasher port. I
always click "Deny". What I've heard often is that if you're running a
cable connection, it's a good idea to have a firewall running in the
background because you're "always on the internet".
 
It's probably a random kind of thing, but Kerio often warns me that
somebody is trying to access my computer through the WebWasher port. I
always click "Deny". What I've heard often is that if you're running a
cable connection, it's a good idea to have a firewall running in the
background because you're "always on the internet".

It really makes no difference whether you use dialup or broadband
since it may be just seconds or a few minutes after going on line when
a modern internet worm might nail you. I think the broadband myth
that's so widespread is based on notions of the long time it might
take for a dedicated hacker to nail you, once he's got your IP addy in
his sights. That's why much is made about having a dynamic instead of
static IP addy. I have DSL service with dynamic IP but in a way it
might as well be static since I leave it continuously connected for
maybe 14 hours a day.

Yet, I haven't had any problems running without any kind of firewall
for years. Users of single PC Win 9x/ME in particular can harden their
box without much difficulty and be free of the dependency. We hear of
users disabling their firewall for just a minute or two and taking a
hit. It makes far more sense to fix your box in the first place than
be dependent on a firewall. Then if you're paranoid go ahead and use a
firewall, but don't use one _instead of_ fixing your box.


Art
http://www.epix.net/~artnpeg
 
Back
Top