Geswall ........isolate or not isolate

Discussion in 'other anti-malware software' started by ViVek, Nov 28, 2009.

Thread Status:
Not open for further replies.
  1. ViVek

    ViVek Registered Member

    Joined:
    Aug 7, 2008
    Posts:
    584
    Location:
    Moon
    Hi all,i got a little question about isolating music and video players
    Is there any sense to isolate music and video players when my music and video(downloaded from internet are "untrusted"(isolated)?

    for example if a downloaded mp3 is isolated it cannot do something"bad" to my pc because is isolated(mp3)even if i lisen this mp3 in non isolated music player(aimp)


    i read
    http://gentlesecurity.com/board/viewtopic.php?t=35

    "However, for most cases it would be sufficient to isolate just browser and e-mail client."
     
  2. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Well,

    There is a difference between theoretical and practical risk. How many were not infected by WMP exploits using unpatched systems? So even without protection it i snot a certainty you will get nailed. Most malware is delivered through mail and internet, so when you have got those covered, your are okay.

    Security is a state of mind is a quote of a respected Wilders member to which I agree completely.

    I am driving a car while I know it is much more unsafe than flying, yet after having returned safely of travel by air with some small short distance - city hopper type airplane, with a low budget air operator, I always call my wife to tell I am landed safely. Rational NO, emotional state of mind YES, same applies to security IMO

    Cheers
     
  3. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,164
    Location:
    UK / Pakistan
    i think better to isolate the music/ video player etc.
     
  4. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    6,941
    Location:
    USA
    That's how I do it.

    In GeSWall Console, all multimedia applications have default security levels set to "Isolate on access".
     
  5. ViVek

    ViVek Registered Member

    Joined:
    Aug 7, 2008
    Posts:
    584
    Location:
    Moon
    ok thanksi will choose isolate on acces
     
  6. bellgamin

    bellgamin Registered Member

    Joined:
    Aug 1, 2002
    Posts:
    8,102
    Location:
    Hawaii
    What is the difference between...

    "Isolate on access"
    versus
    "Always start isolated"
    o_O
     
  7. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Digging far back in my memory

    Isolate on acess = isolates a monitored application when the file it is opened which is an untrusted file. At first startup you will be prompted what you want to do (isolate, etc)

    Always start isolated = always isolates the monitored application, even when it is started with a trusted file. GW will not prompt you at startup.

    Consider this a guestimate until you get answers of GW users ;)
     
  8. YODA

    YODA Registered Member

    Joined:
    Jul 15, 2002
    Posts:
    100
    * Isolate on access - application is trusted but once it tries to establish a network connection or access untrusted resources, a pop-up dialog to isolate the application appears, see Getting Started with GeSWall. Prior GeSWall 2.7 the level is known as "Trusted".

    * Always start isolated - application is isolated on start, no pop-up dialogs are displayed. Prior GeSWall 2.7 the level is known as "Trusted, auto isolation".


    http://www.gentlesecurity.com/docs/applications.html
     
  9. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    6,941
    Location:
    USA
    Nothing to add to the two fine responses above. :)
     
  10. acuariano

    acuariano Registered Member

    Joined:
    Nov 4, 2005
    Posts:
    786
    pardonmy ignorance,i always heard good comments about GW..is this something like sandboxie?..does it protect all browsers?.
    -does it advice me to block,delte a file when dangerous?
     
  11. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    6,941
    Location:
    USA

    Attached Files:

  12. bellgamin

    bellgamin Registered Member

    Joined:
    Aug 1, 2002
    Posts:
    8,102
    Location:
    Hawaii
    Good stuff Yoda. Brief. Accurate.

    I posed same question at GW's forum. Henk replied as follows...

     
  13. acuariano

    acuariano Registered Member

    Joined:
    Nov 4, 2005
    Posts:
    786
    guys thanks for the explanation,,,
    can this work with sandboxie together or not?
     
  14. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,024
    Location:
    Christchurch, UK
    General advice is not to run the two together.

    GW+SB=Overkill.
     
  15. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    GW+SB=Overkill+blue screen:D
     
  16. acuariano

    acuariano Registered Member

    Joined:
    Nov 4, 2005
    Posts:
    786
    so...both are the same high quality protection?
     
  17. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,024
    Location:
    Christchurch, UK
    Relevant recent thread here .

    So they both offer high quality protection in different ways.
     
  18. acuariano

    acuariano Registered Member

    Joined:
    Nov 4, 2005
    Posts:
    786
    thanks to all.
     
  19. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    acuariano sandboxie is mucho mejor y menos problemas:)
     
  20. acuariano

    acuariano Registered Member

    Joined:
    Nov 4, 2005
    Posts:
    786
    but is not on your list,,also there is not enough information in what to sandbox and what don't.
     
  21. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    it is not in my list cause there is defensewall which is similar and paid for:)
     
  22. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    most of the applications that uses that internet must be sandbox and also there is alot of info in theier website www.sandboxie.com
     
  23. bellgamin

    bellgamin Registered Member

    Joined:
    Aug 1, 2002
    Posts:
    8,102
    Location:
    Hawaii
    NO blue screen for me. SBIE & GW run together just fine for me. Did you ever consider that there might be a problem with your set-up rather than with the programs themselves? ;)
    ~~~~~~~~~~~~~~~~~~~~~~~~~~

    I agree with Blackcat that {SBIE + GW} is basically overkill. However, if you are highly paranoid about keyloggers, then {SBIE + GW} *can* give a modicum more protection against keyloggers than does {GW alone}.

    But (IMO) {GW + Roboform} or {GW+KeePass2} can protect better against keyloggers than can {SBIE + GW}.
     
  24. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    maybe :) and also i have service pack 2 with xp and not too much ram:D
    and yes it is overkill
     
  25. bellgamin

    bellgamin Registered Member

    Joined:
    Aug 1, 2002
    Posts:
    8,102
    Location:
    Hawaii
    Ewe cannot make lamb without Ram. :cool:
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.