Author Topic: WinPatrol with Windows Defender  (Read 14523 times)

0 Members and 1 Guest are viewing this topic.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: WinPatrol with Windows Defender
« Reply #15 on: October 17, 2008, 12:56:59 AM »
The "Don't ask me again" is building the whitelist, at least in your own computer.
The best things in life are free.

Hard_ROCKER

  • Guest
Re: WinPatrol with Windows Defender
« Reply #16 on: October 17, 2008, 01:03:44 AM »
But what if some users select(for the same program) the don't ask me again option and some users prefer to receive a uac prompt(i don't know say they don't want anybody else using the program on their account) ? So those that want the uac prompt won't get prompted because the program is in the whitelist(because of those first users)? And what does Symantec mean by unnecessary UAC prompts ? I don't know i think just the don't ask me again option is enough. Just my opinion. I've posted on their forum btw, hope somebody replies soon.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: WinPatrol with Windows Defender
« Reply #17 on: October 17, 2008, 01:23:05 AM »
darth_mikey, keep us informed. Thank you ;)
The best things in life are free.

Hard_ROCKER

  • Guest
Re: WinPatrol with Windows Defender
« Reply #18 on: October 17, 2008, 08:09:03 AM »
You know i will ... ;)

Hard_ROCKER

  • Guest
Re: WinPatrol with Windows Defender
« Reply #19 on: October 21, 2008, 08:26:21 AM »
Hey guys, i got some more info on the whitelists on their forum.

Quote
Hello,

 

In terms of security, "Unnecessary UAC prompts" are those caused by an privilege elevation which considered "safe".  The reason we have UAC prompts the first place is privilege elevation raises security concerns, which the prompt is asking the users "you are about to  elevate process privilege,  are you sure? Do you know what you are doing?"  "Is this elevation intended?"  As you can see this can be annoying when the user knows what he is doing. For example, when the user just wants to launch regedit.

 

This White list will be "actions" which requires privilege considered safe, and we think it can be allowed without user's intervention.  This whitest is not implemented in this beta release yet, but it is one of our goals.  The data we collect during the public beta will be exams and used to design such whitest, if applicable.  You are also right about...

 

  "After all what one person considers an unnecessary UAC prompt might not be what another person considers an unnecessary UAC prompt(i.e.. he wants to see the uac prompt). So the second person wouldn't see a UAC prompt because it was whitefishes since many people opted for the don't ask me again option ? Will there be an option to disable the default whitest ?"

 

Some user might not want to use the community (Symantec) whitest, they want to see the prompt at least once, we will definitely have this option to not use the whitest, user can still use the "don't ask me again" feature to suppress previously approved actions.  They are essentially building the whitest locally.

 

The idea is we can make many of these security decision for the user (to allow) with  a whitest (actions that are known to be safe) for those who wants this security improvements in the Vista kernel but annoyed by the endless prompts.  Of cause the option will be there to not use the whitest, or just tell the user if this action is on the whitest in the prompt.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: WinPatrol with Windows Defender
« Reply #20 on: October 21, 2008, 02:45:34 PM »
I'm reviewing my position... NUAC can give you some easy going to common elevated actions...
What I'm not sure is that what will happen if a malware start the same action to infect the system and the user (or the Symantec whitelist) said "don't show me again this warning"... ?
« Last Edit: October 21, 2008, 02:47:25 PM by Tech »
The best things in life are free.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: WinPatrol with Windows Defender
« Reply #21 on: October 21, 2008, 02:53:16 PM »
Tech,
It is the user that makes the final determination what to bypass (White list) or what to be reminded about.
This program only gives you that ability. It doesn't make any decisions on it's own.

Once checked as safe and don't remind me again, it's the same as giving that function unlimited access.



 
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: WinPatrol with Windows Defender
« Reply #22 on: October 21, 2008, 02:58:34 PM »
It doesn't make any decisions on it's own.
"Don't show again" is a decision... how will the program separate the legit ones (started by user) from the bad ones (started by malware)?

it's the same as giving that function unlimited access.
That's the point...
How would it react to saving files into system folders, for instance?
Or moving them?
The best things in life are free.