Comodo web shield in CIS

[Guest]

[Portage]

I know how most of you say if you catch a virus on the web then CAV will detect it in real time. But like avast has web shield and even if you go on a web site it will tell you. That way we can stop the problem before it comes on the computer. I just hope it has a webshield

[Portage]

Also add a script blocker 

[TheRyan95]

Well, you do have a name point there. Comodo INTERNET SECURITY, should secure you from the web in all ways.

[fazio93]

http://forums.comodo.com/anti_virus_faq/does_cis_have_email_p2p_web_scanners-t29268.0.html

A web shield is unnecessary. Does it protect your PC MORE? No, because the malware must still access the  harddrive and memory to do damage which is scanned by CIS. Web shields also use more resources.

[Co-Mo-Do]

I know how most of you say if you catch a virus on the web then CAV will detect it in real time. But like avast has web shield and even if you go on a web site it will tell you. That way we can stop the problem before it comes on the computer. I just hope it has a webshield

I think you meant the Network Shield in Avast!

Also add a script blocker 

I don't think this will be necessary, plus with IE8's SmartScreen.
Anyways just use NoScript addon with Firefox.

http://forums.comodo.com/anti_virus_faq/does_cis_have_email_p2p_web_scanners-t29268.0.html

A web shield is unnecessary. Does it protect your PC MORE? No, because the malware must still access the  harddrive and memory to do damage which is scanned by CIS. Web shields also use more resources.

Network Shield (not Web Shield) will block access to that malicious website - Prevention.

+1 for Network Shield if that is what portage meant. 

[HeffeD]

Anyways just use NoScript addon with Firefox.

The problem with NoScript is the assumption that all Javascript is bad. Its approach is to kill Javascript completely on every web page by default. This breaks the functionality of countless web sites right out of the box. Then if you find a web site that you go to doesn't function without Javascript, you need to add it to your whitelist. Not a great plan. (Not to mention inconvenient)

The fact of the matter is that the majority of the problems stem from scripts that aren't hosted locally. Meaning, basic web site functionality is almost never the security issue. Who would be stupid enough to make it so easy for people to determine where they picked up the bad code?

No, the big problem is scripts hosted elsewhere. Scripts that the page author can then use the defense, "But I had no control over that script! It was an externally hosted ad banner, go after those guys!"...

A better alternative to to NoScript is using AdBlock Plus and using a simple filter.

Code:

*$script,third-party

This blocks all third party code, yet doesn't break normal web site functionality. Then if you encounter a site that has third party scripts that you wish to run, you can whitelist the external code by altering the filter.

Code:

*$script,third-party,domain=~whatever.com

(Note that I've never found the need to whitelist any third party scripts in the year or so that I've been running this filter)

This allows third party scripts to run on that domain only. (Add more domains by using the | separator)  

Not to mention that the author of NoScript did some rather shady tampering with another popular extension through a "patch" that he applied to NoScript. This subsequently made the Mozilla folks change their extension policy to help ensure this doesn't happen again. Up until that point they had been allowing NoScript to update the extension without Mozilla previewing the code first due to its "trusted" status. Pretty cool for someone writing a so called "security" extension, no?  

[SS26]

Thanks for this:

A better alternative to to NoScript is using AdBlock Plus and using a simple filter.

Code:

*$script,third-party

This blocks all third party code, yet doesn't break normal web site functionality.

(yet strange this filter has exclamation mark and i have 1000 hits in couple of days )


NoScript is not usable for me too. I understood this after i struggled with it for months 

[HeffeD]

Thanks for this

You're welcome. I started using this method after reading that this is what the author of AdBlock Plus recommends.

(yet strange this filter has exclamation mark and i have 1000 hits in couple of days )

It has an exclamation mark because it's a very general filter. Too many broad filters such as this could affect browsing performance. And yes, it's amazing how many sites are actually using external Javascript. It's easily the most active filter on my machine.

[Co-Mo-Do]

Thanks for that too.  

[Co-Mo-Do]

I had to change it to

Code:

*$script,third-party,domain=~youtube.com

otherwise flash player didn't work.

[RejZoR]

http://forums.comodo.com/anti_virus_faq/does_cis_have_email_p2p_web_scanners-t29268.0.html

A web shield is unnecessary. Does it protect your PC MORE? No, because the malware must still access the  harddrive and memory to do damage which is scanned by CIS. Web shields also use more resources.

Not necessary? Sorry, but thats not true. Some scripts NEVER touch your hard drive. And some exploits run directly in memory. Still unnecessary? I think not.

[Guillermo391]

Not necessary? Sorry, but thats not true. Some scripts NEVER touch your hard drive. And some exploits run directly in memory. Still unnecessary? I think not.

I was just thinking exactly that. We need a way to protect us from exploits and scripts.

[Co-Mo-Do]

I take back what I said about "no" for Script Blocker.
Now that I have removed NoScript addon, I see your point.

[BeatenRabbit]

Not necessary? Sorry, but thats not true. Some scripts NEVER touch your hard drive. And some exploits run directly in memory. Still unnecessary? I think not.

That's the point CIS currently scans both the hard drive and memory. Having a web shield will be redundant.

[Agent24]

The problem with NoScript is the assumption that all Javascript is bad. Its approach is to kill Javascript completely on every web page by default. This breaks the functionality of countless web sites right out of the box. Then if you find a web site that you go to doesn't function without Javascript, you need to add it to your whitelist.

But this is the exactly same method as CIS - Default Deny.

It's the only way to ensure protection in a place like the internet.

[Tags:]