PDA

View Full Version : is comodo memory firewall effective?


maymoons
February 27th, 2008, 04:10 PM
http://www.filelime.com/upload/files/2008-02-27_230319.png

computer geek
February 27th, 2008, 04:13 PM
One test? Or any others? Nothing is perfect.

SystemJunkie
February 27th, 2008, 04:19 PM
It is a real drama with firewalls today, Comodo is vulnerable definitely.
But actually Comodo and OA are the best firewalls available.

arran
February 27th, 2008, 04:23 PM
thats why I uninstalled it. its useless Im now using eqsecure hips which passes that test.

jfd15
February 27th, 2008, 04:25 PM
I've tried CMF twice and both times there seemed compatability problems or
something, my computer bogs down, so i end up uninstalling...

maymoons
February 27th, 2008, 04:33 PM
-{ Quote: "Im now using eqsecure hips which passes that test." }-

eqsecure can pass this test?

maymoons
February 27th, 2008, 06:07 PM
http://www.filelime.com/upload/files/2008-02-28_010650.png

interesting...

which is protected me?

ggf31416
February 27th, 2008, 06:47 PM
Regarding the sys-manage test I found this post in the Comodo forum

https://forums.comodo.com/comodo_memory_firewall_beta_corner/comodo_memory_guardian_beta_v1016_bug_reports_closed-t12960.0.html;msg102201#msg102201

-{ Quote: "
Their test just execute few instructions from stack, this is not a real shellcode, you can't do anything without callin APIs, but CMG detects only API calls in shellcodes, not instructions.
" }-

Coolio10
February 27th, 2008, 10:04 PM
So basically the test is fake instead of using real buffer overflow techniques

MrBrian
February 28th, 2008, 12:54 AM
For a proof of concept buffer overflow test that doesn't involve Comodo's own test, see http://forums.comodo.com/feedbackcommentsannouncementsnews/result_of_real_world_exploit_test_comodo_memory_firewall_worked-t18683.0.html.

SystemJunkie
February 28th, 2008, 04:37 AM
-{ Quote: "http://www.filelime.com/upload/files...-28_010650.png

interesting..." }-Hey Maymoon cool tools.

ggf31416
February 28th, 2008, 07:41 AM
-{ Quote: "So basically the test is fake instead of using real buffer overflow techniques" }-

If I understand correctly the test creates Buffer Overflows but, unlike real exploits, the code in the BO doesn't call any API, so it can't affect the system.

maymoons
February 28th, 2008, 08:07 AM
interesting too.
is BufferShield the best?
http://www.sys-manage.com/PRODUCTS/BufferShield/PreventedExploits/tabid/63/Default.aspx


see attachment or

http://img521.imageshack.us/my.php?image=12nu8.png

Perman
February 28th, 2008, 09:22 AM
-{ Quote: "interesting too.
is BufferShield the best?]" }-

Hi, nice info, but

are they most recent ?

most or all data are dated back to 2005 or 2006. ???

Clweb
February 28th, 2008, 03:13 PM
BufferShield is very bad. I installed it and after a reboot my PC was very slow. 100% CPU use.
I was thinking i had a virus or something. Uninstalled it, rebott and all OK again.

maymoons
February 28th, 2008, 04:35 PM
-{ Quote: "I installed it and after a reboot my PC was very slow. 100% CPU use." }-

i have no problem with buffershield. i use without any problem, it using less memory then comodo.

but i cant decision which does has the better protection