Author Topic: avast seems to block websockets !!!  (Read 27293 times)

0 Members and 1 Guest are viewing this topic.

Offline ClementN

  • Newbie
  • *
  • Posts: 13
avast seems to block websockets !!!
« on: December 27, 2010, 12:48:04 AM »
Hi everyone,

I'm having problems to get websockets (new technology coming with HTML5) working.
In Google Chrome I tried to use : http://websocket.org/echo.html but I'm unable to connect. But as soon as I disable the web agent from avast there is no problem anymore !
No warnings are emitted and no events are logged...

Maybe avast thinks it's not a "normal" HTTP communication (websocket is using the port 80 but not the HTTP protocol)

EDIT1 : more information, my avast is up to date (27 december 2010)
avast free edition, language FR, version 5.0.677
engine and VPS : version 101226-2

EDIT2 : I've found only 1 link about this topic, in japanese : http://bl.oov.ch/2010/12/avast-web-websocket.html
« Last Edit: December 27, 2010, 12:52:57 AM by ClementN »

Offline BJ_GeOrgE

  • Avast Evangelist
  • Sr. Member
  • ***
  • Posts: 350
  • prevention is better than cure
Re: avast seems to block websockets !!!
« Reply #1 on: December 27, 2010, 12:54:19 AM »
does it show any warning when you try to visit it?if it does not then maybe try to contact with alwil via email and explain the problem because it seems like a false programming..i think that if your installation had a ptoblem,avast would block every site..i'm not an expert though so keep an eye on here for more replies ;)

you can contact alwil by submitting a ticket here: http://support.avast.com/
« Last Edit: December 27, 2010, 12:56:09 AM by BJ_GeOrgE »
OS:Windows 7 Professional 64-bit SP1
Antivirus: Avast Free v8.0.1497/Firewall: Windows Firewall/On Demand: Malwarebytes Free Edition/Other tools: CCleaner

Offline ClementN

  • Newbie
  • *
  • Posts: 13
Re: avast seems to block websockets !!!
« Reply #2 on: December 27, 2010, 01:24:07 AM »
I will submit a ticket, it seems to be a real bug !

Offline scythe944

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2913
    • My Tech Blog
Re: avast seems to block websockets !!!
« Reply #3 on: December 27, 2010, 05:11:32 AM »
Just FYI.

Using Win XP SP3, Google Chrome 8.0.552.224 and Avast 5.1.849 (Yes, the Beta) and there are no problems with my "Web Sockets".
For generic computer (not avast) problems, you can also visit my forum for help: http://www.jacobytech.net/forum

Offline BJ_GeOrgE

  • Avast Evangelist
  • Sr. Member
  • ***
  • Posts: 350
  • prevention is better than cure
Re: avast seems to block websockets !!!
« Reply #4 on: December 27, 2010, 11:18:45 AM »
I will submit a ticket, it seems to be a real bug !

have you changed any settings in avast or everything is by default?just curious so i can make a little research..

thanks in advance
OS:Windows 7 Professional 64-bit SP1
Antivirus: Avast Free v8.0.1497/Firewall: Windows Firewall/On Demand: Malwarebytes Free Edition/Other tools: CCleaner

Offline ClementN

  • Newbie
  • *
  • Posts: 13
Re: avast seems to block websockets !!!
« Reply #5 on: December 27, 2010, 01:29:12 PM »
have you changed any settings in avast or everything is by default?just curious so i can make a little research..

I haven't done a lot of modifications in the settings and the advanced settings for the web agent are the default ones (I tried to change them, one by one, to spot the problem but I didn't found anything relevant).

Offline BJ_GeOrgE

  • Avast Evangelist
  • Sr. Member
  • ***
  • Posts: 350
  • prevention is better than cure
Re: avast seems to block websockets !!!
« Reply #6 on: December 27, 2010, 03:19:37 PM »
if you add the url in the exclusion list of web shield,does it make any diference?you can add a url in the exclusion list by going to avast control panel>web shield>expret settings>exclusions>URLs to exclude, and add the url with the html5 and tell me what happens..if the problem persists then i would try a repair of avast by going to start>control panel>programs>unistall a program>change/remove avast and at the setup menu scroll down and select repair..

EDIT 1:before trying the things i suggested,open the web shield and and the bottom right side there is a button saying "show report file" and copy paste what it says..
« Last Edit: December 27, 2010, 03:22:48 PM by BJ_GeOrgE »
OS:Windows 7 Professional 64-bit SP1
Antivirus: Avast Free v8.0.1497/Firewall: Windows Firewall/On Demand: Malwarebytes Free Edition/Other tools: CCleaner

Offline Nesivos

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1352
  • Artists Rendering of New Pauley Pavilion @ UCLA
Re: avast seems to block websockets !!!
« Reply #7 on: December 27, 2010, 04:47:19 PM »
Quote
by Venkat on December 14, 2010

Due to security issues in WebSockets protocol Firefox and Opera turned off support for WebSockets for their next major releases Firefox 4 and Opera 11.  We’ve covered how to enable WebSockets in Opera 11. Firefox 4 Beta 8 will be released with WebSockets support disabled by default,

More on link


http://techdows.com/2010/12/turn-on-websockets-in-firefox-4.html


Quote
December 10, 2010 3:54 AM PST
Web Sockets and the risks of unfinished standards

Enthusiasm for a promising new standard called Web Sockets has quickly cooled in some quarters as a potential security problem led some browser makers to hastily postpone support.

The Web Sockets technology, which opens up a live communication link between a browser and a server, remains an important part of plans to make the Web a home for more dynamic, interactive sites. It could, for example, speed up Google Instant searching and multiplayer games. But Mozilla and Opera put their Web Socket plans on hold this week until the wrinkles are ironed out.


Quote
"We've decided to disable support for WebSockets in Firefox 4, starting with beta 8 due to a protocol-level security issue," Christopher Blizzard, a Mozilla leader of new-technology work, said in a blog post. "Once we have a version of the protocol that we feel is secure and stable, we will include it in a release of Firefox, even a minor update release...To be clear, we're still excited about what WebSockets offers and we're working hard with the IETF [Internet Engineering Task Force] on a new WebSockets protocol." (Although the World Wide Web Consortium (W3C) is standardizing Web Sockets as part of HTML5, the IETF is in charge of the actual communication protocol it uses.)


More on link


http://news.cnet.com/8301-30685_3-20025272-264.html
« Last Edit: December 27, 2010, 05:01:36 PM by Nesivos »
OS: W7-SP1, Security: AIS 7, SAS Pro, WinPatrol Plus Network:2 Dell 570MT x64 1 Dell 660 Desktop with 8GB RAM Default Browser & Email: Firefox & Thunderbird latest Betas

Offline ClementN

  • Newbie
  • *
  • Posts: 13
Re: avast seems to block websockets !!!
« Reply #8 on: December 27, 2010, 06:45:46 PM »
I tried to exclude some URL's (the webpage URL, the WS server's URL with ws:// prefix and the same one with http prefix) and the problem persists.
The report file is empty, there are only start/stop logs.
Repair done, same problem.

@Nesivos thx for the links but I'm already aware about this situation. I enabled WS in firefox and chrome by disabling the default security setting etc, the problem is not there. Moreover when I disable avast web shield it works, so it's not a browser's configuration problem.

Offline Nesivos

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1352
  • Artists Rendering of New Pauley Pavilion @ UCLA
Re: avast seems to block websockets !!!
« Reply #9 on: December 27, 2010, 06:58:11 PM »
I tried to exclude some URL's (the webpage URL, the WS server's URL with ws:// prefix and the same one with http prefix) and the problem persists.
The report file is empty, there are only start/stop logs.
Repair done, same problem.

@Nesivos thx for the links but I'm already aware about this situation. I enabled WS in firefox and chrome by disabling the default security setting etc, the problem is not there. Moreover when I disable avast web shield it works, so it's not a browser's configuration problem.

Got ya :)

However, WS might be detecting some malicious code so it blocks the connection to the site.

Quote
Web Sockets problem
Now, though, plans are shifting with publication of a security problem by Adam Barth, a programmer with extensive browser security expertise. In a November 26 paper (PDF), Barth pointed out a problem with the "handshake" used to set up Web Sockets connections. By exploiting it, an attacker could get a browser to run malicious code through a mechanism called cache poisoning, Barth and the paper's co-authors said
.

http://news.cnet.com/8301-30685_3-20025272-264.html#ixzz19KuPGDoF

see report here

http://www.adambarth.com/experimental/websocket.pdf
« Last Edit: December 27, 2010, 07:05:25 PM by Nesivos »
OS: W7-SP1, Security: AIS 7, SAS Pro, WinPatrol Plus Network:2 Dell 570MT x64 1 Dell 660 Desktop with 8GB RAM Default Browser & Email: Firefox & Thunderbird latest Betas

Offline ClementN

  • Newbie
  • *
  • Posts: 13
Re: avast seems to block websockets !!!
« Reply #10 on: December 27, 2010, 07:26:53 PM »
I'm already over-documented about this.

The point is that it works perfectly without the web shield. There's not malicious code, it is just an echo response...
The problem is the same with other examples of WS.

Offline Nesivos

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1352
  • Artists Rendering of New Pauley Pavilion @ UCLA
Re: avast seems to block websockets !!!
« Reply #11 on: December 27, 2010, 07:47:29 PM »
I'm already over-documented about this.

The point is that it works perfectly without the web shield. There's not malicious code, it is just an echo response...
The problem is the same with other examples of WS.

The point is that Websockets at this point are a security risk.

Disable WS at your own risk.

Good luck :)


OS: W7-SP1, Security: AIS 7, SAS Pro, WinPatrol Plus Network:2 Dell 570MT x64 1 Dell 660 Desktop with 8GB RAM Default Browser & Email: Firefox & Thunderbird latest Betas

Offline ClementN

  • Newbie
  • *
  • Posts: 13
Re: avast seems to block websockets !!!
« Reply #12 on: December 27, 2010, 08:24:04 PM »
(WS = WebSockets/WebShield ? Confusing lol)

I'm programming something based on websockets so... I have no other choice ;)

Offline nadal16

  • Newbie
  • *
  • Posts: 2
Re: avast seems to block websockets !!!
« Reply #13 on: December 27, 2010, 10:58:19 PM »
hello i have seriouslu problems with my avast . its bloking my internet explorer ad i cant see the avast firewall , im very tired of find this but i cant find that. please helpme.

Offline Gargamel360

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2347
  • Memento Mori
Re: avast seems to block websockets !!!
« Reply #14 on: December 27, 2010, 11:03:59 PM »
Ok, now you have the right section, but you still need to start your own topic.  ;)
Signature?  But I gots no pen....