GeSWall 2.5 Personal Edition Beta

GeSWall 2.5 Personal Edition Beta is availble for evaluation, you can register at their site if interested:

http://www.gentlesecurity.com/download.html

 

yay!

it has some neat updates like : it passes all the APT tests, all the SPT and keylogger leak tests at the SSM site, martin's keylogger, etc...

 

Just got my copy, will test out.

 

I am using it and is really nice.

 

Does anyone know if Geswall protects against zero day browser flaws? Since something like firefox should be trusted, i dont see how Geswall would protect a trusted app from an exploit.

Right now I am running Dropmyrights and sandboxie for IE and firefox. The only pain with sandboxie is when I want to download a file or add a bookmark, so the idea of Geswall interests me.

 

Firefox is classified as untrusted in GeSWall mode.

The permission of firefox are only:

Resource Type Access
%HKEY_CURRENT_USER%\Software\Mozilla\Mozilla Firefox Registry Allow
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox Registry Allow
%HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\AppData%\Talkback\MozillaOrg\Firefox File Allow
%HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\AppData%\Mozilla\Firefox\Profiles\ File Allow
%HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Local AppData%\Mozilla\Firefox\Profiles\ File Allow

 

And u can modify them to make as secure as u want( with loss of functionality ofcourse).

 

Could someone running Geswall 2.5 check this out? It is a zero day (actually this is an old one) that IE7 fails. I wonder if Geswall protects against this flaw with IE. Heres the link

http://secunia.com/Internet_Explorer_Arbitrary_Content_Disclosure_Vulnerability_Test/

 

GesWall failed.
DropMyRights failed.
Anyone using GreenBorder can check GreenBorder here?

Thanks.

BTW, as I know GW people don,t calim for privacy protection, it is basically for malware(Rootkits, Viruses, Trojans, spyware etc) protection.
My feeling is that if u implement strict privacy with sandboxing, u are going to loose a lot of functionality. Though not sure as I am no expert. Let,s wait for some body who know better.

 

Greenborder sailed right through it. Course, I had to allow java for the test to run in the first place. All that happened is I got a msg box saying I was not vulnerable.
Firefox 1.507 Greenborder 2.9.2.9506

 

Hi, the tset is for IE, not for FF as i think.

 

Ooops, ok, went back in IE7 and the pop up said I was vulnerable. But again, I had to allow java. Hmmm, I wonder if GB actually fails or just appears to in a virtualized sort of way??

 

did you try emailing geswall's support staff aigle? i'd be interested in their answer

 

May be i will mail him later as currently I am waiting for some other discussions with him to end.
As I remember soemone here told that for privacy reasons u should not use browser as untrusted, it is adivised by BZ people as well. Anyway i am not so knowledgable about these matters.

https://www.wilderssecurity.com/showpost.php?p=849831&postcount=38
https://www.wilderssecurity.com/showpost.php?p=848882&postcount=25

 

Does anyone know if they have fixed the Kaspersky compatibility problem in this release?

 

Geswall 2.5 Beta is also not compatible with Sandboxie. I have an email in hoping they will fix the issue.

 

They claimed but i am not able to check it myself so far, so i can,t be sure unless I check it myself.