HitmanPro.ALERT Support and Discussion Thread

That's fine. To each his own! But I don't generally find that to be an issue with commercial streaming services. If they do remove content, it's generally just to rotate in some newer content as their older contracts expire.

But to move back on topic, it seems that WMP 12 is having issues with certain types of media files. The ROP thingy, in particular ...

 

It is more a codec thing. Some codecs use ROP for baffling reasons.

 

Just for clarification then, is it best practice to just disable Control Flow Integrity for Code Mitigations whenever this is encountered in a media player?

 

For now, yes. In the near future you can whitelist certain alerts.

 

Very cool!

 

Any chance of being able to change update checks' settings?

 

You can disable the check-for-update. Currently you cannot change the frequency. I will put it on the feature request list

 

Any news on server support? I'd really like my Terminal Server covered.

 

@erikloman
@markloman

As I reported last Saturday,
on my Windows 7 x64 installation with HMP.A 3.1.9.369, the new 3.1.10.373 is still not offered by automatic update.
By now, seven days have passed since automatic update was activated for build 373.
Shouldn't HMP.A 3.1.9.369 be automatically updated, by know?
Is something out of order, or is it intentional that 3.1.10.373 is still not offered on installations with HMP.A 3.1.9.369?
Of course one can manually update, but when automatic update is activated, I suppose it is meant to work.

 

Could be that specifically 369 users are not yet updated. I will have a look tonight after I walked the "4-daagse".

 

Thanks very much, Erik.
And good luck with walking the "4-daagse".

 

Thanks for that Erik! Btw. where I can find the setting to disable check-for-update?

 

There is no setting for this in the program itself.
You have to modify the registry, or you can block HMP.A with a firewall.
#7686

 

my STB which is linux based, can stream to devices, it needs a player with the right codecs of which I use VLC for, likewise VLC plays my videos recorded on my phone as well as videos I downloaded from youtube.

WMP is ok, but both VLC and MPC-HC are better.

 

Agreed that VLC is better! Especially for streaming applications on your home network. But my comment was really from the perspective of the built-in player in Windows, dealing with generic media clips that you may encounter on your main PC. My typical media usage from my main PC is streaming YouTube or Netflix, with the occasional media clip viewed in WMP. I think for now that disabling ROP detection for WMP will work OK.

In regard to specialized setups for media, like you, I also have a set top box that can stream. It just happens to be a dedicated Windows PC running NextPVR and KODI. It is connected to my LAN and my HDTV. Normally I just use the built-in NextPVR player to watch HDTV programs on my HDTV that I have recorded directly off-the-air as .ts streams. But if I wish, I can open up the NextPVR webadmin server from another PC in another room and watch a recorded .ts file using VLC. There are probably a zillion codecs on this TV PC, but I rarely encounter conflicts because the need for security here is a minimum. Any unnecessary services and scheduled tasks are disabled. Just a light, free AV, Windows firewall. and with the Chrome browser for when I need to update something.

 

Thanks for the info. Maybe this could be another feature request?

ps. Ransomware has started to have fun with EMET http://arstechnica.com/security/201...ransomware-now-able-to-bypass-microsoft-emet/

https://www.fireeye.com/blog/threat-research/2016/06/angler_exploit_kite.html

 

While we cannot be sure whether Alert blocks this attack until we get the actual exploit, I'll point out that Alert has both IAT Filtering and ransomware protection. Stay tuned ...

 

@erikloman
I hope you enjoyed your 4-daagse walk.
Did you find the time to check why build 369 users still do not get 373 offered by automatic update?

@ build 368, 369, 370, 371, or 372 users,
Did you get build 373 offered by automatic update?
If not, would you please report.
I got the automatic update from build 371 to 373, and I still don't get it offered at 369, but I don't know if there are automatic update issues with other builds than 369.

 

any comments about the cyberfox termination I posted erik?

I will update to build 373 as still on 368.

 

@chrcol
Thanks for reporting!
@erikloman
So, not only 369, but also build 368 is not automatically updated to 373.

 

@erikloman
Finally, today, also on my Windows 7 x64 installation with HMP.A 3.1.9.369, build 373 was offered by automatic update, and installed with reboot. Thanks very much.
I hope the same applies to all other previous builds. However, I cannot check that for other builds than 369 and 371.

@ build 368, 369, 370, 371, or 372 users,
If any of you still did not get build 373 offered by automatic update, would you please report.

 

Problem is was caused that 369 were prerelease builds. We forgot to enable to auto update for these

 

stupendous man, I didnt have it as I added the registry key to disable auto updates, so this was my preference to need manual updating. I still need to update HMPA on my laptop. Although that has had no issues at all, working perfect.

 

Ah, thanks very much, chrcol, I understand.
Thanks for clearing that up.

@erikloman
371 also was a prerelease build, nevertheless the 371 installation got 373 offered by automatic update.
So I'm not sure I understand ...