Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 975723" data-attributes="member: 32260">That is true - Simple Software Restriction Policy (SSRP) can be very customizable and effective - both in securing and hurting people. Most of the time I spent when creating H_C, was for thinking about which SRP capabilities should be disabled to prevent users from hurting themselves and making overcomplicated setups. Next, I prepared several predefined setting profiles to help users avoid overcomplicated and unsafe setups (yes even with H_C one can still spoil the setup). A similar (and more professional) approach can be seen in AppGuard.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" />Furthermore, the restrictions used by AppGuard and H_C are different compared to the typical SRP setup because they use additional security layers.Almost all of this (except non-important details) can be safely done in the AppGuard and H_C.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" />AppGuard is not only for replicating the SRP restrictions. The main difference is a kind of restriction Sandbox, so the processes can run restricted (not blocked like in SRP). That is why sometimes the attacker can perform limited spying, but cannot hurt the system.Anyway, bypassing AppGuard in the wild is hardly possible, except for highly targeted attacks, when the attacker strictly wants to compromise AppGuard.</blockquote>

[QUOTE="Andy Ful, post: 975723, member: 32260"] That is true - Simple Software Restriction Policy ([B]SSRP)[/B] can be very customizable and effective - both in securing and hurting people. Most of the time I spent when creating H_C, was for thinking about which SRP capabilities should be disabled to prevent users from hurting themselves and making overcomplicated setups. Next, I prepared several predefined setting profiles to help users avoid overcomplicated and unsafe setups (yes even with H_C one can still spoil the setup). A similar (and more professional) approach can be seen in AppGuard.:) Furthermore, the restrictions used by AppGuard and H_C are different compared to the typical SRP setup because they use additional security layers. Almost all of this (except non-important details) can be safely done in the AppGuard and H_C.(y) AppGuard is not only for replicating the SRP restrictions. The main difference is a kind of restriction Sandbox, so the processes can run restricted (not blocked like in SRP). That is why sometimes the attacker can perform limited spying, but cannot hurt the system. Anyway, bypassing AppGuard in the wild is hardly possible, except for highly targeted attacks, when the attacker strictly wants to compromise AppGuard. [/QUOTE]

Verification