Slashdot Mirror
Avast SafeZone Browser Lets Attackers Access Your Filesystem (softpedia.com)
An anonymous reader writes: Just two days after Comodo's Chromodo browser was publicly shamed by Google Project Zero security researcher Tavis Ormandy, it's now Avast's turn to be publicly scorned for failing to provide a "secure" browser for its users. Called SafeZone, and also known as Avastium, Avast's custom browser is offered as a bundled download for all who purchase or upgrade to a paid version of Avast Antivirus 2016. This poor excuse of a browser was allowing attackers to access files on the user's filesystem just by clicking on malicious links. The browser wouldn't even have to be opened, and the malicious link could be clicked in "any" browser.
still has more market share than Firefox!
Only the State obtains its revenue by coercion. - Murray Rothbard
I had been thinking about ditching Avast for the last few months (not for this reason) as it seemed to be changing into something I don't like the feel of but was reluctant(lazy).
Finally changed to Avira 2 weeks ago and have been glad I did. Very glad now!
Remember kids: What's right isn't as important as what's profitable.
a "secure" browser?
well fuck me, I never heard of such a thing.
There is the "lynx" web browser. That doesn't allow images to be viewed, so it's very basic.
Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
Ditto. I just stopped trying a few years ago. One computer on the internet with no antivirus or anything for downloading files and internet/games/etc., one completely disconnected with shit I actually care about (CAD files, tax information, personal shit, etc.).
In the off chance I catch something, it's just another quick format and reinstall in the bucket. And that hasn't happened in years (Last one was due to a friend having an infected flashdrive).
I used to use AVG but dropped it like a lead balloon because they changed their terms and conditions to spy on the web browsing habits to sell to advertisers http://www.wired.co.uk/news/ar... http://www.techeye.net/news/av...
Doesn't this mean any app you have installed on your computer would let you do this?
it would be nice to point out in the summary, that the problem has already been fixed (in December, 10 days after being reported)
I basically resolved myself to accept that anything to do with computer security is like going to a fortune teller for advice. They may actually hit on a few tidbits of your past. But they won't tell you what you need to know. I stick with the basic security, keeping my PC up to date, using a modern up to date browser and paying attention to what attacks are currently taking place. Spending ridiculous amounts of money and time installing and dealing with security solutions is never going to keep you much safer. It just adds yet another way for a attack to take place.
All browsers allow timothy to infect slashdot.
Confucius say, "Find worm in apple - bad. Find half a worm - worse."
In the off chance I catch something [...] hasn't happened in years
How do you even know? Do you do a periodical malware scan? Aren't you worried if you get something it might be too late?
I don't use Windows anywhere, but using it without an anti-malware tool, even if it's a disconnected device, is silly. Cowboy silly.
I've been using the paid version of Avast for a couple of years now and it's great. I disable most of the features and have never used the SafeZone thing because I just assumed it was crap.
Every single anti-virus (you're not even supposed to call it that anymore) product nowadays is bloated with either useless or very insecure features (or both, like in this case). It's gotten to the point that even gross incompetence such as this shouldn't keep you from using the product, because the alternatives are either inferior or also suffer from the same stupid mistakes (or both).
Avast is a huge bloated piece of shit that eats network data like candy.
Slashdot should have an actual useful poll, like asking people what they use for Anti-Virus software. With all the geeks out there and their collective experience, it would be alot better than some Top 10 list posted by a company acting as a shill for a specific vendor.
APK Hosts File Engine 9.0++ SR-4 32/64-bit http://start64.com/index.php?o...
-
FREE, not 'souled-out' to advertisers, adds speed, security & reliability.
Does far more w/ far less more efficiently vs. addons (clarityray blockable, redundant + RAM/CPU wasteful & 'souled-out' crippled by default) & local DNS servers @ home.
Fixes DNS' security issues & stops tracking @ webpage + DNS levels via 1 file you NATIVELY have!
(Firewalls do rest on FAR less used IP address trackers/threats vs. host-domain names).
-
Obtains data vs. online threats & ads via 10 reputable security community sites - easily edited by you using my program.
-
SPEEDS YOU UP 2 ways:
Adblocking ALL ads + local RAM cached favorite sites @ TOP of hosts for faster resolution vs. remote DNS (for reliability + speed) vs. other "so-called security 'solutions'" SLOWING YOU!
-
All via what you already have vs. illogically "bolting on browser addons 'MOAR'" (clarityray detected/blockable + usermode slow & increased messagepassing, cpu + ram overheads)
-
MalwareBytes' hpHosts Admin (MalwareBytes employee verified it's source as safe http://forum.hosts-file.net/vi... ) hosts & recommends it -> http://hosts-file.net/?s=Downl...
&
MalwareBytes = BEST antivirus per a VERY recent testing of them all http://www.av-test.org/en/news...
&
It's safe proven by 57 antivirus programs in BOTH its 64-bit model https://www.virustotal.com/en/...
+
32-bit model https://www.virustotal.com/en/...
&
Installer-> http://f.virscan.org/APKHostsF...
-
* "The premise is quite simple: Take something designed by nature & reprogram it to make it work for the body rather than against it..." - Dr. Alice Krippen: "I am legend".
APK
P.S.=> By "yours truly" - "The Lord of Hosts" so-to-speak:
"The image this title brings to mind is a mighty military commander who can at a mere word summon rank upon rank of protective power" -> https://answers.yahoo.com/ques... & THE WORD = hosts!
(Accept NO substitutes)
...apk
See subject - Custom hosts get you more speed, security, reliability, & anonymity online using what you already natively have:
APK Hosts File Engine 9.0++ SR-4 32/64-bit:
http://www.start64.com/index.p...
* It's superior to antivirus tech (which even Symantec/Norton ADMITS isn't effective anymore vs. modern threat vectors) as it's NOT AS REACTIVE & far more PROACTIVE since antivirus waits till you're "sick" for detection largely, but hosts?
HOSTS BLOCK SOURCES OF MALWARE & BOTNETS BEFORE YOU CAN TOUCH THEM!
(& you can't be hurt by what can't get to you in the 1st place)
Hosts files also speed you up 2 ways (hardcoded favorite sites where you spend MOST time online cached in RAM @ TOP of hosts for fastest possible resolution speed, faster than remote DNS, + of course, adblocking too). AntiVirus SLOWS YOU DOWN by way of comparison!
Hosts also knock the chocolate outta browser addons by FAR in terms of their abilities and for LESS resource use in CPU/RAM by far too - even with UBlock Origin lately using hosts data (imitation is the sincerest form of flattery, but it falls short - it's not a resolver, hosts is, & so it blocks DNS redirect poisoning of which 99.999% of ISP DNS are NOT patched against, & makes your connection faster + more reliable resolving locally from RAM vs. them, not just blocking ads for speed & hosts work 1st (1st resolver used + far more - read the link, be enlightened!)
Enjoy - it's free, it works on MANY fronts doing more w/ less (good engineering) using what you already have natively!
Hosts != clarityray detectable & blockable like browser addons - it's not a browser addon w/ their weaknesses in less abilities & yet using more operating in a SLOWER mode of operations (usermode) vs. hosts (kernelmode).
APK
P.S.=> Custom hosts files = superior (even vs. firewalls using layered filtering drivers & MORE EFFECTIVE since hosts combat what malware uses - host/domain names MOST, not IP addresses)... apk
Avast and AVG are 2 completely different companies
Avast and AVG are 2 completely different companies
Sure, but I think the poster was pointing out that they have also followed the same path as avast.