PDA

View Full Version : Mamuto community exchange


Kees1958
January 16th, 2008, 02:32 PM
Hi,

I thought I had a buggy internet connection, because the PC sometimes frooze for an instance (1 sec at the most).

Next I discovered Mamuto applies a community check after finding an intrusion. I have now an automatic rule "when more than 90% of the community members allowed an intrusion, set it to allow on only this behaviour".

Seems guys from Mamuto have implemented the ideas of Windows Defender and ThreatFire very fast. Credits are to PrevX for being the first to actively use community protection. Mamuto is a good runner up.

Perman
January 16th, 2008, 03:14 PM
Hi,

This community exchange program seems to be innovative and controversial at the beginning. Now it gets more popular, then tends to be abused in the wrong way. The more apps adapt it, the more bad apples emerge from it. Then,

which one do you trust ?

Kees1958
January 16th, 2008, 03:43 PM
Perman,

I think this affects the B]community allow[/B] side more than on the deny. I hope the guys from Emsi also copy the good habit of the PrevX guys to test the samples on five AV's and their own heuristics.

Gut feeling: PrevX is further with this development and have implemented a calibration procedure as a sanity check to the comuunity decisions.

The point you are bringing forward makes sense though