BitDefender TrafficLight (BETA): Social Web Security, Re-invented

I was wondering because of Google's asynchronous API or whatever. Since it can't guarantee that something like ScriptNo will be able to load before scripts are run, would that let malware on the site run before BTL could block it?

 

Can anyone confirm this actually blocks bad sites, and isn't just for show?

 

I know most users on this forum hate Youtube tests, but check this out:

http://www.youtube.com/watch?v=vP_Mzax9ZuQ&feature=g-user-u

 

Thank you. I don't like YouTube tests either but I just wanted to know if it was complete garbage or not. I figured it would be good considering it is BitDefender. I will definitely add it when they update it with HTTPS.

 

So I'm getting tired of waiting for them to release the new version. It's at least a week overdue.

What exactly is the privacy issue of the links being transmitted in HTTP instead of HTTPS? What exactly could happen?

 

The privacy issues depends on how much you like to have your privacy.

I like not to let my ISP know what I search for, for example.

If you search for whatever term in your search engine, then the full URL, including your search query will be sent to BitDefender servers. This shouldn't happen, at all. First reason being that BitDefender has reason to know what you're searching for, and then to make it worse, so will your ISP know what you're searching for.

So, at the end of the day, it happens not really matter whether or not your favourite search engine offers an HTTPS version, as your search queries will be accessed by BitDefender, ISP...

Then, if you visit whatever-web-site, not only will BitDefender know about it, which they have to know, otherwise TL won't be able to report its safety, but so will your ISP know about it, for example.

If you're OK with these two scenarios, by all means don't wait for a new version (if it ever comes out), and install it. I'll pass it, though. Not only they have to send the queries over HTTPS, but also to strip our search queries from the search engine domain, when TL sends the search engine domain to the servers to report its safety. But, really, it applies to any other domain (especially HTTPS) where private info may be appended to.

 

how is traffic light different from using Norton SecureConnect + IE anti-phishing filter

 

If you ask me, you're better off with Norton SecureConnect/ Norton DNS and IE's SmartScreen. The only version of Traffic Light that works with Internet Explorer, is the full installer (which also works with every other web browser), and it slows browsing like hell. They never fixed that issue either.

On the other hand, TL's ratings are pretty decent, so if they ever release a new version, including the full version, that won't slow down browsing (full version), then it would be a nice addition, IMHO.

 

New version is out! I can't tell if it uses HTTPS now though. I can't find a changelog. Can anyone tell if it does now?

 

I see same version, 0.1.28, updated September 3, 2012.

 

So it's the same version, but it has a different date?

 

Correct.
Here is a screenie I took two weeks ago that shows the same version number.
V0.1.28 has been around for about 6-7 months.
Maybe the update changed something, I don't know.

 

I downloaded the extension and took a look at the extracted contents (I didn't install it, only extracted it), and giving a quick look at the extension's manifest file manifest.json, queries are still happening over HTTP.

Code:

"permissions": [ "tabs", "http://66.223.50.126/*","https://safego.bitdefender.com/*","http://nimbus.bitdefender.net/*","http://track.trafficlight.bitdefender.com/browsersec/*"]

There's no change in it. If queries were being done over HTTPS, then the extension would have to declare the HTTPS URLs in the manifest file. I suppose this should clarify a bit whether or not HTTPS is in place.

I'll see if engine search queries are still sent as well. Hopefully, if the extension is actually new (I don't have the older installer to compare hash values. Does anyone?), at least it strips search queries. Otherwise, it was just a big mess by BitDefender?

 

Hehe, well done BitDefender!

 

Version 0.2.1 is here!

(Along with a new green icon in the browser toolbar... the green "bump" is gone)

 

Can anybody check if it already works in https and which level of encription it has (128, 256...)

 

A different look in the toolbar, with the old "bump" now missing.

 

m00nbl00d should be able to let us know if anything has really changed...

 

It is not yet listed on Firefox's Addons web page.

How many days does it usually take from a new addon's release date until it is added to Firefox Addon's web page? I seem to remember reading somewhere that it can takes several days to show up on the Firefox Addon's web page.

 

Sweet! Now there is actually a new version number! And I love the new icon instead of the little tab thing.

 

Did they fix the slow browsing problem?

 

The web installer appears to be the original one released over a year ago
I was hoping this would maybe get an update too.

 

I never have experienced any sort of browsing slowdown with TL.

 

Does this download site work for you, TheKid7?

 

Any sandboxie folks know if TL works sandboxed?