5 ms·

I've been trying to use a software firewall and here's what I've blocked so far... https://up1.ca/#JQqL3y0xqLZnxaOlYQ0s6A https://up1.ca/#JQqL3y0xqLZnxaOlYQ0s6

I've been trying to use a software firewall and here's what I've blocked so far... https://up1.ca/#JQqL3y0xqLZnxaOlYQ0s6A https://up1.ca/#JQqL3y0xqLZnxaOlYQ0s6A And this is on a machine running Enterprise with privacy settings cranked, and most stuff disabled via group policy. I'm trying to avoid blocking updates, but svchost is still out there talking to random microsoft servers. The worst part is that I can't differentiate between the servers used for tracking and the ones used for updates. I might have already blocked necessary stuff for updates. At this point I'm really tempted to just wipe the machine and go back to 7, I've never felt so little trust in a machine I own. Even when I've run malware, at least I knew or could easily find out what was happening. This is just a big unknown to me. I'm seeing claims that it sends idle mic data even with Cortana disabled too, which is making me very paranoid even though the claims look sketchy at best.

cmdrfred 11y ago
Glasswire huh? Good stuff.
- ultramancool 11y ago
  Yeah, I'm not the biggest fan actually. Decided to try it out this run, but I used to run Outpost, which I liked a lot more as it could do per-host blocking and stuff. This feels more like a pretty network monitor than a real firewall.
  - arm 11y ago
    Agreed. It is useful for monitoring things like system changes, but I wouldn’t depend on just GlassWire alone for a software firewall. In my case, I use a combination of GlassWire and NetLimiter (as mentioned here): https://news.ycombinator.com/item?id=10039125 https://news.ycombinator.com/item?id=10039125
kuschku 11y ago
Here’s an image link to your image that actually fucking works: http://i.imgur.com/i4ydV1a.png http://i.imgur.com/i4ydV1a.png
- antsar 11y ago
  Thank you. Javascript is required to view and upload files. No, it is definitely not.
  - ultramancool 11y ago
    Up1 uses client-side crypto, so in this instance it is. No real point here though, but I use ShareX with it, and it's nice to be able to deliver screenshots and stuff like this privately.
    - antsar 11y ago
      What's the point of client-side crypto in a browser? Can't you be served backdoored JavaScript that no longer does proper encryption, and you'd be none the wiser?
      - ultramancool 11y ago
        Yeah, you have to trust the site and their providers of course. But how do you know your OS provider doesn't serve you backdoored updates? Until it was abused by malware, Windows Update used to accept stuff signed by a 512-bit RSA key. Do you personally reverse engineer every binary you accept? This will change soon though, they're working on browser extensions which will keep all content client side too. EDIT: Clarified some points, added a little more detail.
        kuschku 11y ago
        Which is all nice, but doesn’t make it better that the site is almost unusable. A better solution would be decrypting the image and then loading the image into an image tag with a data: uri in base64 encoding. I could zoom normally with the browsers own zoom tools, I could right-click save normally, etc.
deleted 11y ago
[deleted]

cmdrfred 11y ago

Glasswire huh? Good stuff.

ultramancool 11y ago
Yeah, I'm not the biggest fan actually. Decided to try it out this run, but I used to run Outpost, which I liked a lot more as it could do per-host blocking and stuff. This feels more like a pretty network monitor than a real firewall.
- arm 11y ago
  Agreed. It is useful for monitoring things like system changes, but I wouldn’t depend on just GlassWire alone for a software firewall. In my case, I use a combination of GlassWire and NetLimiter (as mentioned here): https://news.ycombinator.com/item?id=10039125 https://news.ycombinator.com/item?id=10039125

kuschku 11y ago

Here’s an image link to your image that actually fucking works: http://i.imgur.com/i4ydV1a.png http://i.imgur.com/i4ydV1a.png

antsar 11y ago
Thank you. Javascript is required to view and upload files. No, it is definitely not.
- ultramancool 11y ago
  Up1 uses client-side crypto, so in this instance it is. No real point here though, but I use ShareX with it, and it's nice to be able to deliver screenshots and stuff like this privately.
  - antsar 11y ago
    What's the point of client-side crypto in a browser? Can't you be served backdoored JavaScript that no longer does proper encryption, and you'd be none the wiser?
    - ultramancool 11y ago
      Yeah, you have to trust the site and their providers of course. But how do you know your OS provider doesn't serve you backdoored updates? Until it was abused by malware, Windows Update used to accept stuff signed by a 512-bit RSA key. Do you personally reverse engineer every binary you accept? This will change soon though, they're working on browser extensions which will keep all content client side too. EDIT: Clarified some points, added a little more detail.
      - kuschku 11y ago
        Which is all nice, but doesn’t make it better that the site is almost unusable. A better solution would be decrypting the image and then loading the image into an image tag with a data: uri in base64 encoding. I could zoom normally with the browsers own zoom tools, I could right-click save normally, etc.

deleted 11y ago

[deleted]