AMUST eCondom for Internet Explorer
An anonymous reader writes "Irish Dev is reporting that AMUST Software recently announced the release of their 'eCondom for Microsoft Internet Explorer.' From the article: 'eCondom reduces and eliminates the risks by allowing users to run Internet Explorer in SafeBrowse mode. It works similar to Run As command in Windows XP, and forces a user to use Internet Explorer under User account, even if he/she is logged in under Administrator account. Unlike Run As command eCondom normally does not reduce Windows XP usability and
flexibility, and does not downgrade users Internet experience while making Internet browsing much more secure and safe.'"
Now... If they could only change the "run" to "wear", and "stop/exit/quit" to "throw away" my day is made! :D
Also, make the package so that everyone feel totally embarrassed when buying it. Yeah, I know it's free, but they could at least make you hear a moaning sound when you click the download or something...
All puns aside though. Does this really help. You can do a lot nasty stuff with a regular account as well, right? I think it is great though, that people try to make IE more secure, not only do the "use Firefox" solution (for the record I'm a Firefox user!). It's in everyones interest that as many browsers as possible is as secure as possible.
Scully: Should we arrest David Copperfield?
Mulder: Yes we should, but not for this.
...and does not downgrade users Internet experience...
So nothing at all like a real condom then?
With some 80-odd million IE end-users getting pounded daily and relentlessly by the wild red-light district (Internet), I doubt that such AMUST 'eCondom' would help prevent 'pregnancy' (worm/trojans) or 'infection' (spyware/malware/adware) in a timely manner.
Using a non-Administrator account doesn't stop these vector attacks.
Just use something that is highly-resistance to these inane cross-site scripting silliness.
Firefox 1.5 with the following addins:
NoScript
FlashBlock
AdBlock
And, you will have better control over these phishing sites...
...that IE was a pile of cock.
Yeah, but I wonder where it's been, cuz it smells like ass...
eCondom or not, if you use IE, you're still fscked.
How does this compare to Mike Howard's DropMyRights program?
The way DropMyRights works is you run it with the path to the target program as a command-line argument. It then spawns the target program automatically with lower privileges. (Maybe too simple; Mike Howard's implementation doesn't allow for passing command-line arguments to the target program itself, although the code is basic enough that others have made their own implementations.)
The only problem is that although it lets you easily modify the shortcut that starts Internet Explorer, there are plenty of ways to start IE without going through that shortcut. Without doing some registry hacking to change your file and protocol associations, it won't help you if you run, say, Outlook with administrator privileges and click a link in an email.
Does eCondom somehow address this? And if it does, then how does it allow exceptions (like going to Windows Update)?