Hello,
Installed portable version of SlimBoat (main exe SlimBoat.exe) & SlimBrowser (main exe sbframe.exe)
I run SlimBoat.exe or sbframe.exe → open, surf net without any popups (as a Trusted Application).
Checked Trusted Files - None of the executables are there.
Create HIPS rule for each - ask all → - open, surf net without any popups (as a Trusted Application).
Delete previous
Create FW App Rule for each - Blocked Application → open, surf net without any popups (as a Trusted Application).
Delete previous
Create HIPS rule for each - Isolated Application → SlimBoat.exe open but can’t surf. sbframe.exe doesn’t open (guess is because needs open extra exe (SBRender.exe))
I tried other applications and the behavior was as expected.
tia
l
::edit::
while i was writing this the 3 exe’s magically show up in the trusted files! - in the last 3 lines (ie after the other applications tested)
I removed from the Trusted Applications
Create HIPS rule for each - ask all → - open, surf net without any popups (as a Trusted Application).
this is creepy…
::edit2::
After reading this post i try it:
disable all (4) options in File Rating Settings.
open otherapp.exe → popup otherapp.exe sandboxed; popup allow\deny explorer.exe to execute otherapp.exe
open SlimBoat.exe → open, surf net without any popups (as a Trusted Application).
note: otherapp.exe is a known safe app used for behavior comparison.
::edit3::
Change Subject: SlimBoat/SlimBrowser circunvents CIS
After testing yet another browser, this time Sleipnir, i get a simillar result; HIPS rules are ignored - open, surf net without any popups (as a Trusted Application) - with the difference that this time it Add the several executables used by Fenrir to the Trusted Application list.
This makes absolute no sense to me. Shouldn’t the custom rules created by the user, overpower any other setting (being Sandbox the only exception) ?!