Memory Firewall developement

[Guest]

[RejZoR]

Even though Memory Firewall is now a part of CIS, i'd like to see that developement of stand alone version continues.
Unlike BOClean which did not serve any real purpose as stand alone, this doesn't apply to Memory Firewall.
For now, it's still useful as additional protection layer.

[Rednose]

I agree with RejZoR about the Memory Firewall part

Greetz, Red.

[Graham1]

For now, it's still useful as additional protection layer.

+1. Rather than squeeze everything into CIS, standalone version would be usefull (complement) with "other" security products not just Comodo.

[weaker]

I think CMF standalone is as dead as BOClean soon will be 

[eXPerience]

Well, I think we'll have another topic like the BoClean one. CMF development is set 'on hold'. Only the development of the inclusion in CIS goes on 'AFAIK (!)'

Xan

[RejZoR]

Running BOClean alone makes no sense since it doesn't really provide much extra protection to those already using lets say AVIRA Free. But Memory Firewall still does. Thats why it should continue its separate path along with the one in CIS.
I don't care about BOClean though as it should be implemented in CIS (and it will be).

[Matty_R]

I think a good question here(i would like an answer) is are there any buffer overflow vulnerabilities that cmf doesn`t handle,or are there likely to be new ones discovered(maybe there has)

Totally agree on the concept that cmf should still be available and worked on(if needed) as it covers an area which most don`t.
What alternatives are out there?

[Japo]

Since CMF isn't based on signatures, even if it's "discontinued", you can stash it and continue using it as long as you want, I guess?

[MrBrian]

I think a good question here(i would like an answer) is are there any buffer overflow vulnerabilities that cmf doesn`t handle,or are there likely to be new ones discovered(maybe there has)

Please see http://forums.comodo.com/feedbackcommentsannouncementsnews/explanation_of_why_cmf_fails_some_buffer_overflow_tests-t22330.0.html

[Rednose]

Running BOClean alone makes no sense since it doesn't really provide much extra protection to those already using lets say AVIRA Free.

Well, I can tell you from the reports I have from users, you are wrong about that

Greetz, Red.

[Melih]

Memory firewall development is not being stopped.. the only thing is being changed is the way its delivered to users (eg: as part of CIS).

As to Memory scanner and its usefulness: If you believe that thru obfuscation you can bypass AVs then you have to believe in Memory scanner! If you don't believe AV's can't be fooled thru obfuscation (eg: packing etc) then you don't have to believe in Memory Scanner.

Melih

[RejZoR]

We're talking about MEMORY FIREWALL here and as stand alone application, it has been discontinued (no updates since beginning of last year).

BOClean belongs along the CIS scanner and for me doesn't give any extra value as stand alone application (while it does to CIS).

However, MEMORY FIREWALL is completely generic tool that can compliment ANY other antivirus or antimalware tool. So, moving it strictly to CIS and not having stand alone version anymore doesn't make much sense imo. I'd be running Memory Firewall along Antivir on my netbook if it was updated a bit but since it hasn't been updated for ages i'll just stay away from it. I never trust old programs.

[Melih]

We're talking about MEMORY FIREWALL here and as stand alone application, it has been discontinued (no updates since beginning of last year).

BOClean belongs along the CIS scanner and for me doesn't give any extra value as stand alone application (while it does to CIS).

However, MEMORY FIREWALL is completely generic tool that can compliment ANY other antivirus or antimalware tool. So, moving it strictly to CIS and not having stand alone version anymore doesn't make much sense imo. I'd be running Memory Firewall along Antivir on my netbook if it was updated a bit but since it hasn't been updated for ages i'll just stay away from it. I never trust old programs.

So what you are saying: You don't believe malware can obfuscate itself using packers that AV's can't catch? You believe that AVs can unpack everything 100%?

Is that the case?

Melih

[RejZoR]

Oh boy, am i writting in chinese? I'm not even talking about BOClean here. It's Memory Firewall section after all.
I'm talking that it's more logical to keep Memory Firewall as stand alone app than anything else.

[Melih]

Oh boy, am i writting in chinese? I'm not even talking about BOClean here. It's Memory Firewall section after all.
I'm talking that it's more logical to keep Memory Firewall as stand alone app than anything else.

dunno... when i read this it was in english:

RejZoR ="BOClean belongs along the CIS scanner and for me doesn't give any extra value as stand alone application (while it does to CIS)."
Hence my question to you....

Melih = "So what you are saying: You don't believe malware can obfuscate itself using packers that AV's can't catch? You believe that AVs can unpack everything 100%?

Is that the case?"


Perhaps you can answer the question I asked? (I wrote it in English, but if you need the Chinese version, more than happy to translate it for you )

Melih

[Tags:]