Originally posted by CrowleyThe sandboxing I am thinking about would be a complete virtual system and not use heuristics to see if something is malicious but to simply monitor its behavior. That would take a very fast core, one of many inside the computer where the suspect code is allowed to do its thing in a sandboxed environment, making it think it is connecting to the internet, doing keylogging, whatever but never allowed to actually reach a real computer. I imagine it would take teraflop home computers before that would be practical.
This sandboxing you describe does already happen, as most AV programs will 'hijack' files being accessed by the system and scan using heuristic methods to check if malicious code may exist in files you are accessing - hence the false-positives.
Sandboxing overall is an idea with merit, but it's best to just not download any software you are not sure abou ...[text shortened]... do use sandboxing myself sometimes, but try to stay away from situations that may require it.
Originally posted by Crowleyhow do you only download stuff you are sure about? give us a few pointers.
This sandboxing you describe does already happen, as most AV programs will 'hijack' files being accessed by the system and scan using heuristic methods to check if malicious code may exist in files you are accessing - hence the false-positives.
Sandboxing overall is an idea with merit, but it's best to just not download any software you are not sure abou ...[text shortened]... do use sandboxing myself sometimes, but try to stay away from situations that may require it.
Originally posted by ZahlanziSome simple tips:
how do you only download stuff you are sure about? give us a few pointers.
Trusted, big, corporate companies probably won't be packaging malware.
Places like sourceforge.net are safe bets.
NEVER trust any site in the .ru, .cm, .cn top level domain! Don't even bother to go there.
If there are pron ads, close the tab.
Always make sure the site you are visiting is actually where you want to be. Scan that address in the address bar!
If a site is using SSL you are probably safe.
Google the software you're thinking of installing and see if reputable organisations have reviewed it etc.
Social sites like Digg.com can also be an indication if the software is legit and safe.
Check out sites like Web Of Trust
http://www.mywot.com to check the site's reputation you're thinking of downloading from.
Originally posted by Crowleythese are safety pointers. if you do this, you should be fine. emphasis on should. not will.
Some simple tips:
Trusted, big, corporate companies probably won't be packaging malware.
Places like sourceforge.net are safe bets.
NEVER trust any site in the .ru, .cm, .cn top level domain! Don't even bother to go there.
If there are pron ads, close the tab.
Always make sure the site you are visiting is actually where you want to be. Scan tha ...[text shortened]...
http://www.mywot.com to check the site's reputation you're thinking of downloading from.
also you are assuming that at some point, someone DOES have a sort of antivirus/firewall/antispyware program which they use to check their stuff. so antiviruses are usefull after all. you simply forgo their use and trust others to do their checking for you.
antiviruses are useful. you simply refuse to check them out because you like your odds that these safety tips will keep you safe enough.
Originally posted by Zahlanzi
you simply forgo their use and trust others to do their checking for you.
antiviruses are useful. you simply refuse to check them out because you like your odds that these safety tips will keep you safe enough.
Originally posted by Crowley (on page 1)
While I will always have some form of anti-virus running, too many people feel SAFE just because AVG is using up too much RAM and CPU cycles.
GREAT COMPREHENSION SKILLS YOU HAVE THERE BUDDY.
Originally posted by ZahlanziBut we all do that at some point, right? There's a trade-off between resources used and how safe you can be. So you also stop when you like your odds.
antiviruses are useful. you simply refuse to check them out because you like your odds that these safety tips will keep you safe enough.
Originally posted by Zahlanzithere's no av product to remedy stupidity. the only way to be 100% safe is to never turn your computer on.
these are safety pointers. if you do this, you should be fine. emphasis on should. not will.
also you are assuming that at some point, someone DOES have a sort of antivirus/firewall/antispyware program which they use to check their stuff. so antiviruses are usefull after all. you simply forgo their use and trust others to do their checking for you.
a ...[text shortened]... e to check them out because you like your odds that these safety tips will keep you safe enough.
stupidity related causes aside, FORCING your way inside even a half-assedly secured computer takes an expert. also time, a reason for deliberately targetting your specific machine, and a great deal of effort. a script kiddie is not an expert, they couldn't find a specific user's ip if their life depended on it. let alone break into his computer. computer security is nothing like the movies portray it to be.
someone with a degree in computer security is the kind of expert who might be able to do it. but why would they target the average porn-hoarding pimply-faced youth? no reason. absolutely nothing to gain but hard time. you'd need to be a moron to do something like that, and fortunately the required skills are not within the reach of such morons.
summary: don't do stupid things, and you're perfectly okay. and if you trip, learn from it, instead of blaming the software you misused.
Originally posted by PalynkaYou can be infected without surfing for porn. On the documentation I have given from Mozilla for example, where does it state that people surfing for porn constantly with firefox are the one's infected?
More like doctors telling you that wearing a condom at all times is unnecessary. Not all people browse for porn constantly.
Originally posted by PalynkaWhere would you find a guy who claims to be an MD telling you to engage in risky behaviour because he is "learned" in medical science? It is only here on this forum where idiots claim you need to be using IE to be infected or you need to be surfing constantly for p0rn.
You can also get AIDS by sharing needles.
Originally posted by enrico20I think you need to learn how to read. People just said that some awareness can go a longer way that banking on your AV programs to save you from your own irresponsibility.
Where would you find a guy who claims to be an MD telling you to engage in risky behaviour because he is "learned" in medical science? It is only here on this forum where idiots claim you need to be using IE to be infected or you need to be surfing constantly for p0rn.
Originally posted by enrico20Please quote 1 person in either of the 2 threads who has issued this advice ( or the computer equivalent, ie: quote 1 user who has advised others not to use anti-virus programs"😉.
Where would you find a guy who claims to be an MD telling you to engage in risky behaviour because he is "learned" in medical science?
Thanks in advance,
D
Originally posted by PalynkaThis is what you "gurus" fail to understand :-
I think you need to learn how to read. People just said that some awareness can go a longer way that banking on your AV programs to save you from your own irresponsibility.
- surfing the web (normal sites, forums, for work, for research etc)
- using email
- using instant messengers
- bringing files on a USB stick from work or school or another computer.
- using Word or Excel files which may have macros.
- opening PDF files for work/school
^^^^ nobody is irresponsible doing that. A "normal user" with all their mental faculties intact would recognise the need for an antivirus system as a minimum layer of protection.