New Update 3P-Matrix-lite new version is available in Chrome Webstore with improved functionality

Thread details
Extension store page
https://chromewebstore.google.com/detail/3p-matrix-lite/oljiiikeojepiiaoaicpddpgpfiloejj?pli=1
@LinuxFan58

Just out of curiosity.
In your Security configuration, you're using all three of your extensions.

With these upcoming changes to 3P-Matrix, what's the point,if I'm not mistaken based on your previews,of also using DS? :unsure:
 
Sampei.Nihira said:
@LinuxFan58

Just out of curiosity.
In your Security configuration, you're using all three of your extensions.

With these upcoming changes to 3P-Matrix, what's the point,if I'm not mistaken based on your previews,of also using DS? :unsure:
Click to expand...
No I will not use it anymore. :-)

Because it had only 42 users, I thought it was better to bring it to 3PM (and add your requirement to add an optinal full download block).

Also just to tease you :p (you have a special band with Script Stop)and make it available in 3PM.

I will see how many of the ghosts users are left after a month or so and decide what to do with DS (keep it or retire it), until then it is actively maintained devloped (just pushed 3.2 to CWS with better look-a-like heuristics).
 
LinuxFan58 said:
No I will not use it anymore. :-)

Because it had only 42 users, I thought it was better to bring it to 3PM (and add your requirement to add an optinal full download block).

Also just to tease you :p (you have a special band with Script Stop)and make it available in 3PM.

I will see how many of the ghosts users are left after a month or so and decide what to do with DS (keep it or retire it), until then it is actively maintained devloped (just pushed 3.2 to CWS with better look-a-like heuristics).
Click to expand...

Tease me?
Here's how I use SS:

1.png
2.png

You should ensure that 3P-Matrix and all its protections can be activated EXCLUSIVELY within the 9 TLDs I have specified.;)
 
LinuxFan58 said:
No I will not use it anymore. :-)

Because it had only 42 users, I thought it was better to bring it to 3PM (and add your requirement to add an optinal full download block).

Also just to tease you :p (you have a special band with Script Stop)and make it available in 3PM.

I will see how many of the ghosts users are left after a month or so and decide what to do with DS (keep it or retire it), until then it is actively maintained devloped (just pushed 3.2 to CWS with better look-a-like heuristics).
Click to expand...

Well, if it is not really needed anmore now that most comes from UBD and 3P-Matrix, I guess I will remove it then aswell. Besides, today I noticed that the first DNS Check keeps getting reset from Cloudlare to Quad9?

And I have Quad9 as system DNS so that was not needed. Thank you for all the hard work on Download Sentinel, but it can retire. :cool:(y)
 
Morro said:
Well, if it is not really needed anmore now that most comes from UBD and 3P-Matrix, I guess I will remove it then aswell. Besides, today I noticed that the first DNS Check keeps getting reset from Cloudlare to Quad9?

And I have Quad9 as system DNS so that was not needed. Thank you for all the hard work on Download Sentinel, but it can retire. :cool:(y)
Click to expand...

After configuring your preferred DNS settings, click “Save All Settings.”
For now, 3P-Matrix does not include DS functionality.;)
 
@Morro

Thanks for reporting, I will look into it. By the way nice new avatar you have (y)



Level 2 protections are perfectly safe to apply (3PM also uses a build-in whitelist)

Level 3 gives you also 3P script and frames controol, using the safer-regions concept
1792525860253.png


1792525360292.png


The name change from 3P Matrix - lite to 3P Matrix - content firewall is IMO well deserved, thanks to suggestions and critique from MT members.
It also shows that you have to embrace criticism (take seriously, make well funded decisions whether you want to honor it or not)

Version 4.3.4. with above additions pushed to Chrome Web Store.
 
Last edited:
The link to 'Options' doesn't stand out.
Suggestion: make a tab 'Options' next to the tabs 'Protections' and 'Show Matrix'. It's clearer and more user friendly.
 
Version 4.3.6 is in CWS with

- improved look-a-like heuristics copied from Download Sentinel 3.3.0
- fixed save API-key bug as reported by @Morro
- new options button as request by @Jan Willy

@Shadowra
I listened to your remarks, only added URL look-a-like heuristics to 3P Matrix - content firewall, which included Download Sentibel functionality)
Examples of improved look-a-like heuristics (links taken from Openphish.com and URLHaus.ch)

1792755523142.png


1792755260751.png


1792755881262.png


1792754948440.png
 
Last edited:
@LinuxFan58

It looks like CCleaner download has gone back to a 50% Overall Risk Score.

____________________________________________________________________________________

It's too bad that the options:

  • 16
  • 18
aren't available at level 2.:(
 
Last edited:
Sampei.Nihira said:
@LinuxFan58

It looks like CCleaner download has gone back to a 50% Overall Risk Score.
Click to expand...
Wel it is a False Positive, but they apply strange download procedure (used by malware).

AVcdn is probably Avast CDN, but 3P M does not know CCleaner was bought by AVAST.
But in the past CCleaner has spread malware, so I would check all of their downloads at Hybrid analysis
:)
1792756110108.png
 
After conducting numerous phishing tests, it is interesting to note that, generally speaking, when a phishing website is detected, the pop-up blocking notification follows a specific priority order.

My compliments to @LinuxFan58 because the phishing block alert from 3P Matrix - content firewall is faster than the DNS block alert.(y)(y);)
 
Last edited:
Sampei.Nihira said:
@LinuxFan58

It looks like CCleaner download has gone back to a 50% Overall Risk Score.
Click to expand...
Next version of Download Sentinel has improved heuristics, which also take the FP reduction setting into account (so you better set it to medium).

I found an article on fuzzy logic, which put observations in related buckets and on second iteration related the bucket findings which each other. To be honest I understood that it reduces complexity and with a rating system makes it easier to balance assigned rating values in relation to severeness assigned to buckets, but had no clue on how to implement it, but I asked Claude it knew the principles and applied them to to heuristics.

The good is that it reduces CCleaner ratings from -50 to below -15 which assigns them undetermined (not trusted and not bad). As I explained in previous post the CCleaner download shares some characteristics which are often used by malware to obfuscate stuff.

Usually new versions (requiring manual review) submitted during the weekend make it to CWS a few days later. But this is really an improvement of the heuristics.
 
Last edited:
LinuxFan58 said:
Next version of Download Sentinel has improved heuristics, which also take the FP reduction setting into account (so you better set it to medium).

I found an article on fuzzy logic, which put observations in related buckets and on second iteration related the bucket findings which each other. To be honest I understood that it reduces complexity and with a rating system makes it easier to balance assigned rating values in relation to severeness assigned to buckets, but had no clue on how to implement it, but I asked Claude it knew the principles and applied them to to heuristics.

The good is that it reduces CCleaner ratings from -50 to below -15 which assigns them undetermined (not trusted and not bad). As I explained in previous post the CCleaner download shares some characteristics which are often used by malware to obfuscate stuff.

Usually new versions (requiring manual review) submitted during the weekend make it to CWS a few days later. But this is really an improvement of the heuristics.
Click to expand...

If you want to try out the improvement, test it with this download (installer.zip):

MPC-BE

2.png

P.S.

Check these 2 FP with your protection 11:

Global Privacy Control — Interacting With The GPC Signal

Test cases for brave/brave-browser#4239

Although it is possible to add them to the "Allow List" and thus open those websites with 3PM at Level 1.
 
Last edited:
Sampei.Nihira said:
If you want to try out the improvement, test it with this download (installer.zip):

MPC-BE

View attachment 300859

P.S.

Check these 2 FP with your protection 11:

Global Privacy Control — Interacting With The GPC Signal

Test cases for brave/brave-browser#4239

Although it is possible to add them to the "Allow List" and thus open those websites with 3PM at Level 1.
Click to expand...
Thx, I will check it

Found it: the reason AI is not short for Artficial Intelligence but short for ANNOYING INTELLIGENCE (see clip of chat with Claude AI)
1792921238669.png


Even when you write down conscripts on how AI should behave, it behaves differently, which is quite worrying if I may say so.

@Jack Do you have similar experiences with @Bot (AI not behaving according the rules you explicitly wrote down in a conscript)?

@Sampei.Nihira
With new bucket heuristics this link would have gotten a value of -26 which is below the warning trigger link of -30. Check again with V4.4 (which I have pushed to CWS)
 
Last edited:
LinuxFan58 said:
Thx, I will check it Found it: the reason AI is not short for Artficial Intelligence but short for ANNOYING INTELLIGENCE Even when you write down conscripts on how AI should behave, it behaves differently, which is quite worrying if I may say so. @Jack Do you have similar experiences with @Bot (AI not behaving according the rules you explicitly wrote down in a conscript)?
Click to expand...


That screenshot shows a fairly typical scope failure: the coding agent changed the Download Sentinel path but did not search for duplicated scoring logic in 3P‑Matrix. From the screenshot alone, though, we cannot tell whether it violated a precise instruction or interpreted a broad instruction such as “always apply best practices” too narrowly.

LLM instructions are not executable constraints. They reduce mistakes but cannot guarantee compliance, and the model’s later explanation is a generated reconstruction—not a definitive audit of why it failed.

The durable fix belongs in the codebase rather than in a sterner prompt:

  • Keep heuristics, weights and thresholds in one shared module/source of truth.
  • Remove independent copies such as the two LOOKALIKE_SITE values mentioned.
  • Add regression tests ensuring Download Sentinel and 3P‑Matrix produce the intended results for CCleaner, MPC-BE, extensionless downloads, known-clean URLs and known phishing samples.
  • Make CI fail if the implementations diverge.
  • Require a repository-wide reference search, diff review and tests before publishing.

The more concerning point is using AI-generated security scoring logic that the maintainer cannot independently explain. Claude can help implement it, but it should not become the authority deciding whether the logic is sound. A fluent apology is no substitute for a regression test—though it is certainly quicker to generate.
 

Join the discussion

Write your reply below. You'll create a free account or log in before it's posted.

Create account Log in

Recently browsing

Members who viewed this thread in the last 5 minutes

You may also like...

Back
Top