Osprey: Browser Protection

These are my active protections in Edge currently:

1. Bitdefender TrafficLight
2. G DATA WebProtection
3. Emsisoft Web Protection

This is also to limit the 300000 NextDNS queries.
I decided to reduce the protections to 3.

Norton and Symantec too many false positives.

 

i dont know how much time the validation needs.
but it is working in firefox (conversion from chrome)
for you other question - depends on your surf behavior. see below.

@stapp - ofc, trialing is one side of the medal. helping out also.
if then, more a set and forget i would say, for now.
and for now i am not sure if it only blocks direct calls, or also in background, frames, content, whatever.

 

Osprey only checks the URLs you navigate to by default. There's an option to check navigation frames on web pages.

 

thats fair, thank you.

 

Update 1.1.3 is out with new default settings and should be released on Chrome within 2-4 hours.

The GitHub page has a brand new, in-depth protection test for all 14 providers in Osprey. Check it out.

 

Very interesting test.
I have decided to replace Quad9 with Norton Safe Web.

P.S.

I don't use DNS0.eu because I use NextDNS.
Symantec already know why.
The other 2 missing by default don't make much change.

I did a Fake Sites test sooner or later they are blocked but with links inserted a few hours ago it is always difficult even with all protections on.

Fake Site Test (with all protections enabled):

https://limewire.com/d/ZCHou#fVet0CtDby

Malware Test:

https://limewire.com/d/hFuxy#mtLHoMDQyl

Phishing Test:

https://limewire.com/d/uHSR5#PaRQ8INoyh

 

any foreview to the firefox extension? uploaded? review?

what about privacy? i saw some kind of string "telemetry" which generates a unique id.
each session? or on each request?

for firefox it need some popup adjustments:



PopupPage.css

Code:

/* General Styles */
body,
html {
    min-height: 457px;
    /*max-height: 457px; <--*/
    font-family: 'Segoe UI', sans-serif;
    font-weight: 400;
    position: relative;
    min-width: 320px;
    margin: 0;
}

 

Thanks. Going to install it from the ChromeWebStore. I am still on 1.05 from the MS Store on Edge.

 

A small Malware Test with Firefox and Edge without Osprey.
Firefox's HTTPS-only-mode functionality and better virus/malware download blocking compared to Edge provides insight into why Osprey is more indispensable in Edge:

https://limewire.com/d/PYuCo#S5GBvVJm1s

In Edge only http downloads are marked as unsafe.

Excellent coexistence with AdGuard Browser extension v.5.x.
No slowdown at Speedometer 3.1 test.

 

I just fixed the Firefox pop-up height bug and removed the Telemetry calls. That was believed to be necessary for Microsoft SmartScreen, but it wasn't. Changes will be pushed if and when the next update comes out. Also, the Firefox extension is still in review. It's taking forever.

 

Any recommendation for optimal active "shields"?

 

This link shows testresults. So it's easy to make a choice.
https://github.com/Foulest/Osprey/blob/main/tests/protection-test-04-19-25.csv

 

or scroll down here https://github.com/Foulest/Osprey
to the charts. there is also an explanation why some are disabled by default.

 

It's now on FF ad-ons.

 

version 1.14 for chrome/firefox.
nice. documented css, some other decent changes.
thank you.

suggestions:
- custom time for reset cache. current: 24h.

- protection against altering settings
- protection against continuing -> new option: hide continue button
example: childs.

support for firefox policies.json:

Code:

{
"policies": {
   "ExtensionSettings": {
     "osprey@foulest.net": {
       "install_url": "https://addons.mozilla.org/firefox/downloads/file/4479593/latest.xpi",
       "installation_mode": "force_installed"
     }
   }
}
}

"osprey@foulest.net" is the ID for osprey
"4479593" is path number for osprey
"latest.xpi" is valid for always the latest build
(another current will be "osprey_browser_protection-1.1.4.xpi")

this will force osprey to be installed, and non-installable.
https://support.mozilla.org/en-US/kb/customizing-firefox-using-policiesjson

wow, this is strange
at some point i was able to open this page by hammering it permanently into the address bar. the windows notifications are popping up several minutes after last entering.

 

Thanks .

 

Protection against altering settings and continuing should be able to be implemented via Group Policy or Firefox policies; I just don't have that set up yet. Good idea. I'll look into it.

 

afaik firefox has no policy to protect a single extension, only deny access to about:addons
https://github.com/mozilla/policy-templates

it need also needed to deny to create a new profile, but thats a matter of OS. even adguard extension has no password protection, so take your time as it should have no priority.

 

I've already done good work on getting Group Policy working. Just using that or Regedit, you can now completely lock down the control panel, including setting default settings, removing it entirely, etc. as well as protection options.

 

Strange that there is no user who has verified that some active protections,even those chosen by default,cause FP.
And especially the management over time of these FPs.

I personally don't care to send a report that some websites are safe because I have given up using these protections.

 

Very nice. Looking forward to future development.

 

i have not checked the latest features.
but a question: any plans to localize osprey?

maybe this extension can show you how to accomplish
https://addons.mozilla.org/firefox/addon/mouse-gestures/
-> options.js

 

v1.16 - wth?
you have removed the context menu from right mouse button from button?
(firefox, in edge available)