BitDefender TrafficLight (BETA): Social Web Security, Re-invented

Have used it before with sandboxie (web version and browser extension)

 

I can confirm that.
Here is TL v0.2.1 flagging a site in a Chrome browser running in Sandboxie.

 

I notice that the tracker feature is no longer able to be turned off in this new version... it's on and a small orange numeral appears in the toolbar next to the TL icon to indicate how many trackers were found on the page.

 

Thanks Page and NSG001. Seems like a good plug in to have. Little over kill with sandboxie, Comodo firewall and K9. Doesn't hurt though.

 

Page thanks for the unintended new website referral. I had never heard of that site before. I started reading it and it has some good articles on there.

 

Glad to be of service in any way I can.

 

Has there been a confirmation on HTTPS?

 

No. But stay tuned to this channel for future developments.

 

OK. I installed it, and at first it was not working; but, moments ago it started working.

Anyway, I can confirm that TL now sends domain queries over HTTPS, but it still sends your search engine query to BitDefender's servers. I wonder why they haven't fixed this part? At least now, only BitDefender gets to know about it. They really shouldn't have to know it, though. I hope they fix it too, sooner than later.

Unfortunately, even if one still disables the setting not to analyze search engine results, the engine domain itself, including the search query will be still sent to BitDefender's servers.

As you can see from the screenshot attached, I searched for test, and this search query is sent to BitDefender's server. But, if you're not worried about this "smaller" issue, and you only care about queries being sent to BitDefender over HTTPS, then this extension version is good to go. Otherwise, if you're like me, let's wait for a newer version.

-edit-

And, as I previously mentioned in one of my posts, the issue with the search engine query is valid for any website, where private info, such as session tokens, are attached to. So, you may want to disable TL when accessing such websites.

 

My only concern is that I tried to test it by going to that malwareteks.com. Most of the webpage loaded before BDTL alerted me. Is that a problem or not?

 

While continuing to test TL's effectiveness, I have found that in addition to flagging certain sites on its own, when I visit other "red light" sites, different blockers on my system occasionally beat TL to it... for instance MBAM Website Blocking or Chrome's own phishing and malware protection. I sometimes see WOT jump up with a warning that then gets kicked aside by TL. I'm happy to see it in action this way.

Good point. I see the behavior you are alluding to. I prefer the action of Chrome's own protection or MBAM's blocking, neither of which let you get to the site in question.
But TL, in issuing a warning, at least allows you to decide whether or not you want to navigate anywhere else on the suspected site, i.e. click on more links.
PS- I don't think that TL lets the page fully load before it makes it disappear and replaces it with the warning dialog.

 

So if I understood well the private info is sent only when you are using a search engine? there is no info sent while browsing normal sites?

 

With the search result it knocked down 10% of my download speed while the ping speed was normal (not noticeable increase of 9 to 10 milisecs)

Without the search result analyser (I am using startpage) it did not have any impact on ping times and download speed: I have 60 Mbit download and 6 Mbit upload). All the neighbours moved to fibre optic (serviced by a daughter ISP of a Dutch telecom company), so my cable company now delivers the theoretical speed (normally only viewed in advertisements) for real (used to be between 40-45).

Speed improvements of the Chrome plug-in are impressive

 

Sorry for the late answer. From what I could see, and only with few websites, it seems that it only sends the search queries with IxQuick/Startpage. It won't send when using Google search engine, nor when accessing other websites that include some other stuff in the URL; it seems it's only sending the domain name and nothing else. Not exactly sure why it sends when searching on IxQuick/Startpage. But, I'll see if I can find some time to verify it properly.

 

Have you tried using the plain text URL version?

 

I believe you mean to first enter -https://eu.ixquick.com and then search? I don't have TL installed at the moment, but if we first enter the URL, and then search when the Ixquick/Startpage loads, then the search queries won't be added to the URL. I don't recall, but I don't think this would make it possible for TL to catch the queries. So, this is would be a workaround for those using these search engines.

But, it's more practical to type in the address bar.

 

Yep, I use startpage with a generated URL. It defaults to the obfuscated version, how ever you can alsogenerate a search page URL with plain text.

I have disabled the search option in BDTF, since it makes a little difference in download speed.

Thx for checkin anyway

 

Just installed the extension into comodo dragon and did a small test myself at MDL and it seems quite effective to me.I dont see any reason not to use it.
Ive disabled the search analyzer as i have WOT installed too.
It was also nice to see comodo DNS come into action.

 

That is my site and I can confirm that there is absolutely no malware anywhere on my site.

So, it would appear, that TrafficLight has some problems. At least the version you tested.

 

A version 0.2.4 of TrafficLight Beta is now available from Firefox's Add-ons web page.

 

Any changelog? It was ages since I tried it last time.

 

v 0.2.4 is also available for chrome, released on oct 30
i couldnt find a changelog

 

Anyone have news on a more recent 'web installer' version.
Heard this was going to be updated

 

Wonder how much relevance this plugin has with Bitdefender free installed. I like only having a slim setup.

 

Not sure what's going to happen, but I made a question at the BitDefender Free thread (https://www.wilderssecurity.com/showpost.php?p=2163976&postcount=335) and the answer is in #336

Not sure what's the surprise, though.