No alert of DownLoads, sort of.

Discussion in 'other firewalls' started by Searching_ _ _, Jan 10, 2009.

Thread Status:
Not open for further replies.
  1. Searching_ _ _

    Searching_ _ _ Registered Member

    Joined:
    Jan 2, 2008
    Posts:
    1,988
    Location:
    iAnywhere
    I DL a 17MB program. Watching my connections through the firewall it completely DLed with no alert from HIPS or FW.

    Using FF3
    The process:

    Choose a file to DL
    Do not click "Save"
    The file will completely DL with no alerts
    Clicking "Save" now, HIPs and FW alert on activity

    Does this mean that DL items can get in with no alerts?

    Can this process be used to add malware while surfing?

    Is it exploitable?
     
  2. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,695
    The file will be cached ... that's all. Because you've already sent the http get. Try this. Click save as, wait 30 seconds and then click ok. You'll see that the file downloads much faster, because it was cached the first 30 seconds.

    Why should there be any alert to you downloading a file through your browser, after establishing a connection to a website and deliberately clicking on a file?

    Mrk
     
Thread Status:
Not open for further replies.