PDA

View Full Version : alert color issue


Bensec
November 23rd, 2008, 10:40 AM
Hi, there

according to the change log, alerts in v4 on Unwanted stuff is supposed to be shown in yellow .

like this
http://www.nod32club.com/attachments/month_0811/20081123_04cb997e4a44952f6e1eH2ADHsNF6nMn.png

but web alert seems to quite disagree and took it more serious .

like this
http://www.nod32club.com/attachments/month_0811/20081123_fd2f7a46f1f4da6ba0fbs2w1FlbVhARW.jpg

should the "dissident" be taken care of ?:doubt:

Marcos
November 23rd, 2008, 11:25 AM
Did you set the web access protection to block threats automatically? It appears you have your browser set to active mode in the web protection setup.

MasterTB
November 23rd, 2008, 03:33 PM
{QUOTE-> Did you set the web access protection to block threats automatically? It appears you have your browser set to active mode in the web protection setup. <-QUOTE}

I don't understand, even if he has set his browser to active protection shouln't be an unified alert for the "same" program??
I mean If you attempt to download it the alert is yellow but if you are blocked from accesing the web page the alert is red?? That does not make sense, if - potentially unwanted/unsafe applications are now reported in a yellow alert window which requires a user interaction (as you say in this post http://www.wilderssecurity.com/showthread.php?t=225559) why the different treatment of the alert by the webalert module?? Shouldn't it be a yellow alert giving the user the option to visit the page or not?

viruscraft
November 23rd, 2008, 11:09 PM
{QUOTE-> Did you set the web access protection to block threats automatically? It appears you have your browser set to active mode in the web protection setup. <-QUOTE}


IMO,the color has nothing to do with the active mode.
It should be yellow if a potentially unwanted/unsafe applications are found.

NOD32 user
November 23rd, 2008, 11:38 PM
{QUOTE-> I don't understand, even if he has set his browser to active protection shouln't be an unified alert for the "same" program??
I mean If you attempt to download it the alert is yellow but if you are blocked from accesing the web page the alert is red?? That does not make sense, if - potentially unwanted/unsafe applications are now reported in a yellow alert window which requires a user interaction (as you say in this post http://www.wilderssecurity.com/showthread.php?t=225559) why the different treatment of the alert by the webalert module?? Shouldn't it be a yellow alert giving the user the option to visit the page or not? <-QUOTE}You do realize that the second image shows the alert notification delivered into the browser window in place of the requested file, and shows that the download was automatically blocked at the request of the users settings?

All http detections are dealt with automatically by that user configuration.

Cheers :)

Bensec
November 24th, 2008, 03:45 AM
{QUOTE-> Did you set the web access protection to block threats automatically? It appears you have your browser set to active mode in the web protection setup. <-QUOTE}

i guess yes.
but it would be better if issues of the same threat level are of the same color.

@nod32 user
in the advanced setup tree, description of "active mode" only mentioned it as a faster approach. and didnt say that that it blocks more objects.

MasterTB
November 24th, 2008, 05:38 AM
{QUOTE-> You do realize that the second image shows the alert notification delivered into the browser window in place of the requested file, and shows that the download was automatically blocked at the request of the users settings?

All http detections are dealt with automatically by that user configuration.

Cheers :) <-QUOTE}

When in that second image do you see "at user request" ?

Both Alerts Say "Potentialy Unwanted Application", the difference is that One asks the user what he/she wants to do and the other just blocks the alert.
No matter how the user sets the system (ESS) it should manage threats accordingly and what is "Potentialy Unwanted" and subjet to user aproval in one case, shold also be in all others, otherwise what's the point Yellow an Red alerts, lets just make them all red as they were and that's it.
Enabling detection for Potentialy Unwanted Applications should be that "ENABLING DETECTION" not dealing with them in one case and leaving the user with the option in another, I believe that was the point of the first post on this thread.

NOD32 user
November 24th, 2008, 06:39 AM
{QUOTE-> i guess yes.
but it would be better if issues of the same threat level are of the same color.

@nod32 user
in the advanced setup tree, description of "active mode" only mentioned it as a faster approach. and didnt say that that it blocks more objects. <-QUOTE}Mine says 'more effective filtering'
In v3 this has always resulted in the object being dealt with automatically.
I agree that it would seem logical to me if the same color was used for both notifications.

{QUOTE-> When in that second image do you see "at user request" ? <-QUOTE}I could probably have better worded what I said and say instead that because of the image I can tell that it's because of the users choice of settings that the 'threat' was automatically blocked - the user chose their settings and in doing so chose their outcome.

Cheers :)