- Apr 13, 2013
- 3,224
interesting take, I used CF@cs settings for several years and CF never borked system on me, fwiw, but yours is a valid point imo. more & more I find I use windows OS solutions.what happens to the average user though when comodo smacks down a system file or legit application they are trying to use...I have seen more systems crippled with this tool than any other in the last decade from false positives, to bugs ect,ect.
I cut my teeth on CIS and CF back in the day, if i had a dollar for every time my system ended up borked from messing with settings to its own actual bugs i would be a rich man. While it is an excellent tool in the right hands with knowledge, and will definitely teach a user alot about the windows system itself, it is by no means really for average users. Windows has enough built in tools if utilized with knowledge to keep users safe. There is a windows machine here, not mine, nothing but built in windows security enabled, and ublock in the browser, been that way for quite some time, no issues.interesting take, I used CF@cs settings for several years and CF never borked system on me, fwiw, but yours is a valid point imo. more & more I find I use windows OS solutions.
Simplicity has always been the best approach to CIS/CF. I've been using it since CFW 2.0 CAV 1.0 off and on but agreed, has messed things up when I've played around with locking down the system. I've found @Andy Ful 's Hard_Configurator/SWH/WHH/FWH/CD a safe and good default deny approach when I'm not using CIS/CF. it makes the best of windows built-in features and hardens the system. Having said that, the sandboxing approach of CIS/CF s a super effective one. Just stick with @cruelsister 's settings and avoid tweaking HIPS or disabling it will keep a lot of issues at bay.I cut my teeth on CIS and CF back in the day, if i had a dollar for every time my system ended up borked from messing with settings to its own actual bugs i would be a rich man. While it is an excellent tool in the right hands with knowledge, and will definitely teach a user alot about the windows system itself, it is by no means really for average users. Windows has enough built in tools if utilized with knowledge to keep users safe. There is a windows machine here, not mine, nothing but built in windows security enabled, and ublock in the browser, been that way for quite some time, no issues.
yeah! until cruelsister posted her suggested settings, I did not (could not?) use CF.I cut my teeth on CIS and CF back in the day, if i had a dollar for every time my system ended up borked from messing with settings to its own actual bugs i would be a rich man. While it is an excellent tool in the right hands with knowledge, and will definitely teach a user alot about the windows system itself, it is by no means really for average users. Windows has enough built in tools if utilized with knowledge to keep users safe. There is a windows machine here, not mine, nothing but built in windows security enabled, and ublock in the browser, been that way for quite some time, no issues.
It's been a few years since I used it, but I tried telling my system every time it crashed from those urban legends that it was all in its mind, didn't seem to stop it . I played with CF before it came CIS so been around it a minute or so. The forum at comodo is full of those urban legends and bug reports. No matter how you slice it though, the tool was designed for above average users.Personally I've never seen system files being blocked by Comodo UNLESS one plays with HIPS settings, which is never a good idea. Actually the use of HIPS in CF is of dubious value as it will in no way enhance protection as long as Containment is enabled (for CF, although counter-intuitive, less is more).
As to some legitimate applications being blocked, yes, this will occur because Comodo must vet an unknown application prior to plopping it into the Unknown category. Personally I fee that the upside will outweigh any downside, as although a SeaMonkey nightly may be contained, also contained would be things like the (formerly) legitimately signed and countersigned EFile and Chrome Update data stealers which initially bypassed all others.
As to the thousands and thousands of supposed bugs, sadly this is more of a trollish urban legend than actual reality.
I agree with @Ultimate Vision. Comodo is best suited for above-average users or those who will learn the basics to use it effectively. It is an excellent security measure for static or managed systems.
If there would be more users more flase positives should get reportedThe quick dance blocked all unwanted moves!
Comodo has never blocked Windows updates or system files here. While Comodo has made significant improvements in usability, a default-deny setup can affect usability.
I agree with @Ultimate Vision. Comodo is best suited for above-average users or those who will learn the basics to use it effectively. It is an excellent security measure for static or managed systems.
Its a perfect protection for grandma all their software office web etc never gets contained for no reason and even then she could still browseActually, if it's set up the way @cruelsister had it for the test, then I think anyone could use it that way, including novice users; no above average skills required. OTOH, if it's setup using HIPS, especially in Paranoid or similar mode, then yes one better posses above average skills.
Her setup only suspends alerts; it doesn't help with program installation or update usability. While it strengthens security, it doesn't improve user friendliness.Actually, if it's set up the way @cruelsister had it for the test, then I think anyone could use it that way, including novice users; no above average skills required. OTOH, if it's setup using HIPS, especially in Paranoid or similar mode, then yes one better posses above average skills.
Might be a reason CIS is never in the "set n forget" crowd line up, i dunno, maybe its just me.Its a perfect protection for grandma all their software office web etc never gets contained for no reason and even then she could still browse
Exactly the point i was trying to make, thank you.Her setup only suspends alerts; it doesn't help with program installation or update usability. While it strengthens security, it doesn't improve user friendliness.
The basics are simple and effective for starting and using it efficiently. It offers powerful protection with minimal customization needed.Personally I find it a really good then other more extreme default deny for basic users as it doesn't break from false positives as often over other consumer level products and it's freeware