Geswall ........isolate or not isolate

Discussion in 'other anti-malware software' started by ViVek, Nov 28, 2009.

Thread Status:
Not open for further replies.
  1. ViVek

    ViVek Registered Member

    Joined:
    Aug 7, 2008
    Posts:
    550
    Location:
    Moon
    Hi all,i got a little question about isolating music and video players
    Is there any sense to isolate music and video players when my music and video(downloaded from internet are "untrusted"(isolated)?

    for example if a downloaded mp3 is isolated it cannot do something"bad" to my pc because is isolated(mp3)even if i lisen this mp3 in non isolated music player(aimp)


    i read
    http://gentlesecurity.com/board/viewtopic.php?t=35

    "However, for most cases it would be sufficient to isolate just browser and e-mail client."
     
  2. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Well,

    There is a difference between theoretical and practical risk. How many were not infected by WMP exploits using unpatched systems? So even without protection it i snot a certainty you will get nailed. Most malware is delivered through mail and internet, so when you have got those covered, your are okay.

    Security is a state of mind is a quote of a respected Wilders member to which I agree completely.

    I am driving a car while I know it is much more unsafe than flying, yet after having returned safely of travel by air with some small short distance - city hopper type airplane, with a low budget air operator, I always call my wife to tell I am landed safely. Rational NO, emotional state of mind YES, same applies to security IMO

    Cheers
     
  3. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    i think better to isolate the music/ video player etc.
     
  4. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    5,828
    Location:
    Last Breath Farm
    That's how I do it.

    In GeSWall Console, all multimedia applications have default security levels set to "Isolate on access".
     
  5. ViVek

    ViVek Registered Member

    Joined:
    Aug 7, 2008
    Posts:
    550
    Location:
    Moon
    ok thanksi will choose isolate on acces
     
  6. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    What is the difference between...

    "Isolate on access"
    versus
    "Always start isolated"
    o_O
     
  7. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Digging far back in my memory

    Isolate on acess = isolates a monitored application when the file it is opened which is an untrusted file. At first startup you will be prompted what you want to do (isolate, etc)

    Always start isolated = always isolates the monitored application, even when it is started with a trusted file. GW will not prompt you at startup.

    Consider this a guestimate until you get answers of GW users ;)
     
  8. YODA

    YODA Registered Member

    Joined:
    Jul 15, 2002
    Posts:
    100
    * Isolate on access - application is trusted but once it tries to establish a network connection or access untrusted resources, a pop-up dialog to isolate the application appears, see Getting Started with GeSWall. Prior GeSWall 2.7 the level is known as "Trusted".

    * Always start isolated - application is isolated on start, no pop-up dialogs are displayed. Prior GeSWall 2.7 the level is known as "Trusted, auto isolation".


    http://www.gentlesecurity.com/docs/applications.html
     
  9. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    5,828
    Location:
    Last Breath Farm
    Nothing to add to the two fine responses above. :)
     
  10. acuariano

    acuariano Registered Member

    Joined:
    Nov 4, 2005
    Posts:
    786
    pardonmy ignorance,i always heard good comments about GW..is this something like sandboxie?..does it protect all browsers?.
    -does it advice me to block,delte a file when dangerous?
     
  11. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    5,828
    Location:
    Last Breath Farm

    Attached Files:

  12. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    Good stuff Yoda. Brief. Accurate.

    I posed same question at GW's forum. Henk replied as follows...

     
  13. acuariano

    acuariano Registered Member

    Joined:
    Nov 4, 2005
    Posts:
    786
    guys thanks for the explanation,,,
    can this work with sandboxie together or not?
     
  14. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,010
    Location:
    Christchurch, UK
    General advice is not to run the two together.

    GW+SB=Overkill.
     
  15. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    GW+SB=Overkill+blue screen:D
     
  16. acuariano

    acuariano Registered Member

    Joined:
    Nov 4, 2005
    Posts:
    786
    so...both are the same high quality protection?
     
  17. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,010
    Location:
    Christchurch, UK
    Relevant recent thread here .

    So they both offer high quality protection in different ways.
     
  18. acuariano

    acuariano Registered Member

    Joined:
    Nov 4, 2005
    Posts:
    786
    thanks to all.
     
  19. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    acuariano sandboxie is mucho mejor y menos problemas:)
     
  20. acuariano

    acuariano Registered Member

    Joined:
    Nov 4, 2005
    Posts:
    786
    but is not on your list,,also there is not enough information in what to sandbox and what don't.
     
  21. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    it is not in my list cause there is defensewall which is similar and paid for:)
     
  22. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    most of the applications that uses that internet must be sandbox and also there is alot of info in theier website www.sandboxie.com
     
  23. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    NO blue screen for me. SBIE & GW run together just fine for me. Did you ever consider that there might be a problem with your set-up rather than with the programs themselves? ;)
    ~~~~~~~~~~~~~~~~~~~~~~~~~~

    I agree with Blackcat that {SBIE + GW} is basically overkill. However, if you are highly paranoid about keyloggers, then {SBIE + GW} *can* give a modicum more protection against keyloggers than does {GW alone}.

    But (IMO) {GW + Roboform} or {GW+KeePass2} can protect better against keyloggers than can {SBIE + GW}.
     
  24. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    maybe :) and also i have service pack 2 with xp and not too much ram:D
    and yes it is overkill
     
  25. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    Ewe cannot make lamb without Ram. :cool:
     
Loading...
Thread Status:
Not open for further replies.