I came across this somewhere recently and it seems interesting.
Does anyone have any experience with it?
Any thoughts about it as a concept?
Printable View
I came across this somewhere recently and it seems interesting.
Does anyone have any experience with it?
Any thoughts about it as a concept?
Concerns me...Quote:
Permissions are enforced by custom device drivers running at kernel level.
It seems they've attempted to replace the Windows policy rather than compliment and expand on it. The inclusion of network controls indicates to me that this third party application has way too much system access under normal operation.
Quote:
The user can change this level at any time, according to the task he/she is performing.
This seems to pretty much defeat the point of the security... the ability to toggle it so makes me think people are better off with the basic Windows policy.Quote:
If none of the standard security levels meets the needs of the user, he/she can change them by enabling and disabling individual policies.
Or users that do dumb things or get tricked?Quote:
CORE FORCE does not protect the workstation from malicious users with legitimate access to the system.
So if this gives an admin the same settings as a normal user...?Quote:
Also it cannot be configured on a per-user basis.
cheers,
catch
Catch: Yeah, I had some concerns about the drivers rather than using WinX's built in stuff to get the same effect and was worried about them conflicting in a pre-secured box.....
Well... I had read the forum to get a feel for it and figured WTH.... I'll play with it.... It recognizes AD per the responses in the forums..... So I installed it....
Funny old thing.... I can't log in to the domain.... The firewall seems to have been blocking it. So I jump into safe mode to disable it come back to normal mode as an administrator and it won't run.... Now, I have some restrictions on this box but they aren't draconian but I do have a lot of...errrr... shall we say "non-standard" stuff going on day and night.... The decision wasn't too hard - I can't be bothered with all the tweaking I would have to do to allow what I need to happen on this box to happen..... It is already uninstalled.....
Just from reading your posts, it sounds like someone is trying to sell a halfbaked security concept that the ill-advised or un-learned will think to be a solid and robust system, but will actually provide only marginal security while driving up the support related revenue of the program developers.
Remember all those "Anti-BO" applications that became so popular in the late 90's when dildog and the CODC released the first version(s) of Back Orifice? Sounds similar...but I have no facts to base this comment on, just the discussion above.
I never trust sites that want you to "QUOTE"Join the Community"QUOTE" on their frontpage..
What a bunch of crap !
Just look at the screenshots :rofl: especially the first one :D
/lurking
What happened to the cult of the dead cow anyway?
Dopey old man..... Long time, no type.... How you been?
Jinx: I've seen some great software in terms of what it does that looks like utter crap, (in fact a lot of the Db interfaces I have ever written were rubbish - but I'm not an artiste), so screenshots are no longer a major factor in my decision making process.... ;)
Hey Hey,
I haven't tried the software yet... Friday afternoons I usually name, so I'll set up a VM and give it a go...
I just wanted to comment now that I'm surprised with the bad reviews that it's getting... Core Security is a fairly well known name and their other products are quite impressive..
Those of you that have played with it so far... have you looked at it from a personal point of view or an enterprise point of view...
Tiger Shark: The fact that it's designed for personal use might be why it stopped your communication with the domain... It's not an enterprise product so why support "Enterprise Functionality".... Everest (a name most of us probably know) actually won't install it's Personal version on a machine joined to a domain.. Perhaps a security profile will be released as it matures to allow it functionality on a Domain. When you say it won't run, what exactly do you mean... the software won't run after you've disabled it? Perhaps that's not such a bad feature... not allowing people to jump in safe mode to disable the security it's providing?... Just guessing, since I haven't used it and i'm unsure of what you mean.
the_JinX:
www.suse.com -- Cool Communities Link
fedora.redhat.com -- Participate Link
www.antionline.com -- "Get an Account on AntiOnline -- It's Free"
www.gnome.org -- Here, you can learn more about GNOME as a whole, get involved in GNOME software development, or participate in email discussion lists and news forums.
A lot of websites have join our site, join the community links... why is this one any different?
Peace,
HT
HT:
It failed to connect to it's own database even if I logged in as a domain admin whether it was enabled or disabled..... So I quit at that point... I was looking at it from certain boxes on my network. If I have to wrestle with something to get it's most basic functionality I quickly lose interest because, in general, if it has to be wrestled with at the lower levels it is almost impossible to work with at the higher levels.
As far as the Personal Use/Commercial Use issue:
[RANT]
I'm beginning to get a little peeved with this recently. The line between the architecture of a commercial network and a personal network has blurred significantly in the last couple of years. My home network runs a pair of Win2k servers and three workstations. I have an AD domain running but it is still my _personal_ network. But, because I have a domain and servers, (depending upon the situation), I am precluded from personal editions of such things as AV and other products. That sucks. My home network is entirely non-commercial. I run no business on it or from it but because of the nature of the operating systems I run, (AD domain or file servers), I cannot utilize something that is free for personal use...... They simply won't install. In some cases even the trial versions won't install so I end up with an inferior product or no product. How does that help them sell me anything??? It's dumb!!!! What's even dumber is that the license states "free for non-commercial use". Now, I work for a non-profit of which there are thousands in the USA - but because I want to install something on an AD domain I am precluded because it assumes that because I have a domain I must be commercial so it refuses to install...... It just pisses me off no end!!!!!!
[/RANT]
HTRegz (et al)
I don't know what it is about that site..
But something deffinately gives me the creaps..
Same with SuSE Novell's Cool Solutions Sjeezus people we're not selling toys here !!
But we are :) Big Toys for Big Boys.... my computers my favourite toy... my laster printer might even be second... epecially since it's an HP LaserJet 4mV and it was free :).Quote:
TS: I'm sure it's not without problem... it's still in development.... I'll play with it later so I can have an educated opinion.... I must say.. I do agree with your rant.
Peace,
HT