PDA

View Full Version : With PG enabled may I disable DEP ?


paperinik3
April 29th, 2006, 04:13 PM
Hello, I've changed my notebook and thus had to change my OS from Win2k to WinXP Pro. I am still battling with WinXP, its preposterous firewall and other ridiculous "security" measures, especially unwelcome by somebody who uses browsers not supporting ActiveX. For instance, I consider DEP a pain the neck and here comes my question. As far as I have been able to understand, DEP should defend the system in a way similar to Process Guard's measures of defense. But then, as I do trust much more in PG (I am using 3,3 beta4) than in microsoft, couldn't I simply disable DEP and trust it in the junk bin?
I would be grateful to hear expert opinion on the matter.

WSFuser
April 29th, 2006, 04:52 PM
i think DEP differs from PG in its protection. DEP is more like a buffer overflow protection. see here for Microsoft's explanation of DEP (http://support.microsoft.com/kb/875352)

ive never tried disabling DEP and ive never needed to, but i see nothing wrong with doing so.

Paranoid2000
April 30th, 2006, 06:50 AM
DEP does provide a different type of protection than PG and may be worth retaining, but there are enough ways of getting round it (http://www.wilderssecurity.com/showpost.php?p=597153&postcount=4) that it realistically can only act as a speed bump to knowledgeable malware writers, not a road block.

Mele20
April 30th, 2006, 10:16 AM
-{ Quote: "DEP does provide a different type of protection than PG and may be worth retaining, but there are enough ways of getting round it (http://www.wilderssecurity.com/showpost.php?p=597153&postcount=4) that it realistically can only act as a speed bump to knowledgeable malware writers, not a road block." }-

Hardware DEP??? or are you refering to the lesser software DEP?

Paranoid2000
April 30th, 2006, 10:36 AM
-{ Quote: "Hardware DEP??? or are you refering to the lesser software DEP?" }-Both, as the linked post mentions. ;)

paperinik3
April 30th, 2006, 10:44 AM
Thank you WSFuser and Paranoid. Mele22, I was speaking of software DEP and so (I think) is Paranoid. Paranoid, if I read you correctly, it's up to me to keep or to disable (sofware) DEP - because finally it won't make a great difference ?

Paranoid2000
April 30th, 2006, 10:57 AM
PG and similar utilities in my view provide far more security than DEP, but DEP (hardware or software) does address a different area. If you find it a problem then it is unlikely to be worth keeping but otherwise it may serve a purpose - just don't consider it as a strong defense.

paperinik3
April 30th, 2006, 11:45 AM
Thank you Paranoid , it's quite clear.