Author Topic: 2.3.6.81 is failing pcflank leak test with browser tabs  (Read 22517 times)

Offline xTerminus

  • Comodo Member
  • **
  • Posts: 44
2.3.6.81 is failing pcflank leak test with browser tabs
« on: September 28, 2006, 02:38:33 PM »
Hi,

Not sure if this should be a new thread or tacked onto the old thread. That one was getting a bit messy & distracted from the specific issue & turned into whether some were getting the same results or not so heres a new straight to the point report: cpil is now passing with the new update, but pcflank only appears to be passing on the surface, it is still leaking the info if you delve a little deeper. Now this morning I only tested using Maxthon, have not tried with IE as the sole browser & as default yet, so I'm not sure if it is particular to Maxthon or not. I'll check it out a little later with IE if you havn't already found a cure for the issue.

What's happening is:
1) Run the pcflank test directly from the web with Maxthon (obviously it's not really running from their server, it saves to temporary internet files locally first, but select run rather than save first)
2) Either open IE with the pcflank button or manually open an instance of IE
3) Allow or deny pcflank to open IE (the info seems to be leaked either way) - skip this step if you open IE manually
4) Type your info & click the button, also try copying & pasting the test results URL in Maxthon and/or IE to be thorough
5) Deny the popup & close the leak test & browser etc

It appears as though the leak has been blocked initially, but if you go & visit the test results page the info has indeed been leaked. Additionally, & again I'm not sure if this has to do with Maxthon alone or IE too, I'll check later, but every time the browser is re-opened it seems to transmit the same leak over & over. You can see in the screenshot anytime where the time I've typed (last segment in the text) is duplicated, that is not me running the test multiple times during the same minute, that is the leak being re-transmitted, quietly & automatically. I've never run the test more than once during the same minute except on different days, generally there is at least 3 minutes between consecutive tests but the old info is being re-leaked whenever the browser is re-opened. I do have Maxthon set to remember my last viewed tabs, not sure if that is a factor, but it's not only leaking the info once, it continues to leak everytime the browser is opened, & at this point the leaking is happening completely silently behind the scenes with no further popups etc. The popup is only happening the first time when it appears to be blocking internet access, but this sly pcflank keeps transmitting the data silently behind the scenes & evading the popup...

Hope that is enough info to reproduce this & come up with a solution. At least we know now that it's not hardware or software related or limited to any particular users or machines - that was pretty tough there for awhile...

Goodluck with it, I'll check back later or tomorrow.

Edit - typoed the wrong version number in the title originally

Edit - added updated screenshot

Edit - updated title to more clearly & accurately represent this thread regarding browser tabs specifically

-x

[attachment deleted by admin]
« Last Edit: October 16, 2006, 05:20:50 AM by xTerminus »

Offline solo

  • Comodo Loves me
  • ****
  • Posts: 153
Re: 2.3.5.81 is failing pcflank leak test
« Reply #1 on: September 28, 2006, 03:29:47 PM »
I rpeorted this the other day.  It is now fixed.  If you update to the latest version (2.3.6.81) , you will pass the PC Flan leak test.

I just submitted a ticket for this yesterday and it is already fixed...amazing.

Offline alchip80

  • Newbie
  • *
  • Posts: 2
Re: 2.3.5.81 is failing pcflank leak test
« Reply #2 on: September 28, 2006, 04:28:32 PM »
Hi,     xTerminus

I finally was curious and downloaded the latest version 2.3.6.81 and ran the PC Flank leak test.
I normally only run Firefox and have IE disabled completely.
With firefox running I was not able to run from the website. however downloaded and ran it.
Comodo picked it up with the suspicious file warning. of course it was blocked.

then enable IE and reran the test several times. including running the test from the website.
Comodo blocks it and asks to either allow or Deny,  and no record on the PC Flank site.
you may have something on your system that is allowing it thru. ie. firewall settings . browser settings. etc.

al.


Offline solo

  • Comodo Loves me
  • ****
  • Posts: 153
Re: 2.3.5.81 is failing pcflank leak test
« Reply #3 on: September 28, 2006, 04:37:08 PM »
Hi,     xTerminus

I finally was curious and downloaded the latest version 2.3.6.81 and ran the PC Flank leak test.
I normally only run Firefox and have IE disabled completely.
With firefox running I was not able to run from the website. however downloaded and ran it.
Comodo picked it up with the suspicious file warning. of course it was blocked.

then enable IE and reran the test several times. including running the test from the website.
Comodo blocks it and asks to either allow or Deny,  and no record on the PC Flank site.
you may have something on your system that is allowing it thru. ie. firewall settings . browser settings. etc.

al.



On my system, 2.3.5.81 failed the PC Flank Leak test also.  But 2.3.6.81 passes. 

Offline xTerminus

  • Comodo Member
  • **
  • Posts: 44
Re: 2.3.5.81 is failing pcflank leak test
« Reply #4 on: September 28, 2006, 04:48:21 PM »
Hi,

This is still an issue with the firewall itself, even version 2.3.5.81, as the title denotes. It has been partly corrected since the previous version, but not completely. Hopefully the devs will have a look before the thread begins to derail or gain any seemingly contradicting results or confusion on the matter. This time around they know more specifically the troublesome area thanks in part to solo's other post regarding running the test directly vs saving it first. This was entirely the elusive issue before, it passes when saved first but fails when run directly, & for several weeks nobody realized this specifically. It just needs a few more adjustments to completely plug pcflank as it should not be dependant on saving it first in order to pass.

-x

Offline xTerminus

  • Comodo Member
  • **
  • Posts: 44
Re: 2.3.5.81 is failing pcflank leak test
« Reply #5 on: September 28, 2006, 04:54:25 PM »
On my system, 2.3.5.81 failed the PC Flank Leak test also.  But 2.3.6.81 passes. 

Hi,

Was there another update right after the initial update this morning (2.3.5.81>2.3.6.81) or was it 2.3.6.81 to begin? I'm showing 2.3.6.81 now & I thought it was 2.3.5.81 earlier so I will go test again.

-x

Offline solo

  • Comodo Loves me
  • ****
  • Posts: 153
Re: 2.3.5.81 is failing pcflank leak test
« Reply #6 on: September 28, 2006, 04:56:15 PM »
XT...The problem has been solved if you are running the latest version of the Firewall.  I downloaded the newest version today (2.3.6.81)and passed the PC Flank leak test without saving the file to my computer.  

Prior to today, I was running 2.3.5.81 and it did fail the PC Flank leak test.  But the newest version passes with flying colors.  

Offline xTerminus

  • Comodo Member
  • **
  • Posts: 44
Re: 2.3.5.81 is failing pcflank leak test
« Reply #7 on: September 28, 2006, 05:51:24 PM »
XT...The problem has been solved if you are running the latest version of the Firewall.  I downloaded the newest version today (2.3.6.81)and passed the PC Flank leak test without saving the file to my computer.  

Prior to today, I was running 2.3.5.81 and it did fail the PC Flank leak test.  But the newest version passes with flying colors.  

I don't think there was a version 2.3.5.81, the previous version was actually 2.3.5.62. It was just my typo, it is indeed v2.3.6.81 which is still experiencing this issue & is the version I am referring too. As I had stated in the original post the issue has been partly corrected, so you may not experience what I am reporting, but the issue is still there, just slightly less obvious than it was in the previous version. You may have to probe around a little more if you wish to discover the pcflank leak which is still going on behind the scene. Anyhow, if some developers swing by this thread please refer to my original post at the top of this thread which explains it all in detail, the rest of the thread beyond that, including my own replies will only cause much confusion & chaos.

Again, I repeat, please refer to the very top post regarding this matter, anything beyond that is just a series of miscommunication/misunderstanding.

-x

Edit - updated screenshot in top post
« Last Edit: September 28, 2006, 05:54:49 PM by xTerminus »

Offline kail

  • Randomly Appearing
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11361
  • The future is much like the present, only longer.
    • COMODO's free software!
Re: 2.3.6.81 is failing pcflank leak test
« Reply #8 on: September 28, 2006, 06:54:08 PM »
Certainly had me confused.

Anyway, to be clear. What you are saying is that CPF 2.3.6.81 is failing the PC Flank test when it is opened & executed directly from PC Flanks web site. Is that correct?
My System Details: W10Px64 with CIS 10 Beta, Firefox & Becky!
Forum Policy.
____
The problem is not the problems, the problem is people's attitude towards those problems.

Offline xTerminus

  • Comodo Member
  • **
  • Posts: 44
Re: 2.3.6.81 is failing pcflank leak test
« Reply #9 on: September 28, 2006, 07:11:12 PM »
Certainly had me confused.

Anyway, to be clear. What you are saying is that CPF 2.3.6.81 is failing the PC Flank test when it is opened & executed directly from PC Flanks web site. Is that correct?


Well, sort of, but not exactly. That was as simple as it was with v2.3.5.62. Now, with the latest update, v2.3.6.81, it has a properly placed/timed popup etc & appears to be blocking internet access initially during the test, however, the text is still being transmitted somehow, & furthermore, the text is being re-transmitted over & over everytime the browser is re-opened after concluding the test, & during those re-transmissions there are no popups. Apparently the browser & memory are still infected with the leak test afterward (untill reboot), but it does not raise any further popups & just sends the text quietly each time the browser is opened, this is of course after hitting deny on the popup during the actual test. As I mentioned in the original post, I have Maxthon set to remember my last opened tabs, so you may want to check into that aspect. I'm not sure if the same result would be achieved running a basic IE6 with no tabs, but I think you have enough info to pick up the test where I left off & troubleshoot it further.

-x

comicfan2000

  • Guest
Re: 2.3.6.81 is failing pcflank leak test
« Reply #10 on: September 28, 2006, 07:20:25 PM »
Please understand this may be obvious but did you know the text does stay on the site? I can download the test and even if blocked it shows the original text. This may have been mentioned but use a different text (completely) each time. They keep the text on there which to me isn't right, it should be deleted as it has fooled many. Just a thought though.

 Paul

Offline kail

  • Randomly Appearing
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11361
  • The future is much like the present, only longer.
    • COMODO's free software!
Re: 2.3.6.81 is failing pcflank leak test
« Reply #11 on: September 28, 2006, 07:24:39 PM »
Repeating? Correct if I'm wrong.. But, I don't believe PC Flank is meant to do that. Failure or not.. it is just not designed to do that (start every time the browser starts).
My System Details: W10Px64 with CIS 10 Beta, Firefox & Becky!
Forum Policy.
____
The problem is not the problems, the problem is people's attitude towards those problems.

Offline solo

  • Comodo Loves me
  • ****
  • Posts: 153
Re: 2.3.6.81 is failing pcflank leak test
« Reply #12 on: September 28, 2006, 07:45:55 PM »
xTerminus ,

I have run the PC Flank leak test 3 times today and cannot duplicate the results that you are seeing on your machine.  If what you say is really happening, I believe it to bne a local phenomenon on your machine.  My computer passes the PC Flank leak test with the update to 2.3.6.81 as of Sept 29, 2006.  Prior to Sept 29 with earlier versions, my PC failed PC Flank leak test every time.

NOTE 1:  The PC Flank leak test has an error.  Even when you pass it, the little window pops up to say that you failed.  But if Comodo gives you a pop up to deny, rest assured that your text did not get sent.  Again, I took the test 3 times today and each time PC Flank told me I failed, but not once did my text get transmitted.

NOTE 2:  Make certain that each time you take the test, you type something different.  I like to type in the date and time that I took the test.  Remember, the text that you tramsmitted in previous runs of PC Flank Leak test remains on that website and you see that data every time you go to that web page.  So if you use date and time as your text, you will absolutely know if you failed or not. 

In any casem I am sorry that you are still having issues.  The problem is completely resolved on my machine.

Good luck.

EDIT:  After re-reading your initial post more carefully and looking at your screen shots, it is obvious that you are having a different problem thatn I am.  I was failing the PC Flank leak test priot to Sept 29, but not having the text sent over and over.  I am not a computer whiz at all, but I think it may be maxthon related. 
« Last Edit: September 28, 2006, 09:20:16 PM by solo »

comicfan2000

  • Guest
Re: 2.3.6.81 is failing pcflank leak test
« Reply #13 on: September 28, 2006, 07:49:57 PM »
Hi, I deleted my post as I am not sure Kail was talking to me, and would have made no sense then, lol.  I "think" I know what you mean and may be the same issue I have with all denied accesses.

 Correct me if i'm wrong but....

 After denying the test, or other OLE attempts, CPF keeps popping this up every time you try to access the internet\open browser? It won't get rid of the memory of the program unless you do a restart? Is this why you think the test is still in memory? So after running PCflank, it keeps re-popping up?

 Thanks,

 Paul

Offline panic

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11825
  • Linux is free only if your time is worthless.;-)
Re: 2.3.6.81 is failing pcflank leak test
« Reply #14 on: September 28, 2006, 09:54:48 PM »
Well, sort of, but not exactly. That was as simple as it was with v2.3.5.62. Now, with the latest update, v2.3.6.81, it has a properly placed/timed popup etc & appears to be blocking internet access initially during the test, however, the text is still being transmitted somehow, & furthermore, the text is being re-transmitted over & over everytime the browser is re-opened after concluding the test, & during those re-transmissions there are no popups. Apparently the browser & memory are still infected with the leak test afterward (untill reboot), but it does not raise any further popups & just sends the text quietly each time the browser is opened, this is of course after hitting deny on the popup during the actual test. As I mentioned in the original post, I have Maxthon set to remember my last opened tabs, so you may want to check into that aspect. I'm not sure if the same result would be achieved running a basic IE6 with no tabs, but I think you have enough info to pick up the test where I left off & troubleshoot it further.

-x

Just to make sure I understand the nature of the problem;

1. Despite clicking DENY, the text string you type in IS transmitted to the PC Flank website
2. This same string is being sent whenever you open Maxthon, even if you are not running the PCFlank test (??????????)

The only real way to accurately test this is to install a packet sniffer (like ethereal - I know, it's now got another name), run the PCFlank test, check the results on the PCFlank web site, shut the PCFlank leaktest application window, shut the browser, open the browser, go to any website except the PCFlank one (to ensure connectivity), shut the browser, stop ethereal sniffing, examine ethereal logs.

IF the string is being repeatedly sent, you should be able to see multiuple instance of this.

I can't, for the life of me, see how this could be happening. Not saying it can't, but I just don't understand how a text string entered into application X and transmitted from application X to a web site via a browser, can be releatedly sent via the browser if application X is no longer running.

If the text string is being sent repeatedly AND the PCFlank leaktest executable is not running, I'd love to know what other component has 1) remembered the text string and 2) is communicating via the browser in exactly the same manner as the leak test and 3) not being spotted as a different application/component by the firewall.

There's a lot of if's and and's in here. Hopefully there's a definitive problem and a definitive solution, as well.

Try the packet sniffer and see what you can get from that. Please post the results (positive or negative) back here.

Hope this helps,
Ewen :-)
As your mums would say, "If you can't play nice with all the other kiddies, go home".
All users are asked to please read and abide by the  Comodo Forum Policy.
If you can't conform, don't use the forum.

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek