Reply to thread

Message

<blockquote data-quote="ebocious" data-source="post: 1040123" data-attributes="member: 75834">Auto Containment doesn&#039;t work as an anti-executable. It allows unknown programs to run from any location (unless you specify otherwise), but restricts them if they are unknown, so any payload should be prevented. Did you set Auto Containment to ignore your download manager? Because, if so, then any file opened by the download manager will be treated as a child process, and therefore allowed to run unrestricted outside the container as well.I believe you mentioned earlier that Cruel CF prevents apps from running &quot;well.&quot; Can you explain what you mean by that? If you&#039;re talking about utility apps that make changes to your system, you&#039;ll want to figure out how to accommodate them. If they&#039;re portable, you could designate an ignored folder to store them in. Otherwise, you might briefly disable Auto Containment from the tray icon, launch the app, and then turn Auto Containment back on; and that one app and any child processes will continue to run unrestricted until you close and attempt to run it again.When you mention that you have a download manager, I assume you download new software frequently. If you&#039;re tinkering with your computer, then I would suggest not using it as your daily driver, and keeping all your data and accounts on a separate, productive machine. If you don&#039;t have another computer, then perhaps create a VM, and play around in there. If you have to constantly disable security, that tends to defeat the purpose.</blockquote>

[QUOTE="ebocious, post: 1040123, member: 75834"] Auto Containment doesn't work as an anti-executable. It allows unknown programs to run from any location (unless you specify otherwise), but restricts them if they are unknown, so any payload should be prevented. Did you set Auto Containment to ignore your download manager? Because, if so, then any file opened by the download manager will be treated as a child process, and therefore allowed to run unrestricted outside the container as well. I believe you mentioned earlier that Cruel CF prevents apps from running "well." Can you explain what you mean by that? If you're talking about utility apps that make changes to your system, you'll want to figure out how to accommodate them. If they're portable, you could designate an ignored folder to store them in. Otherwise, you might briefly disable Auto Containment from the tray icon, launch the app, and then turn Auto Containment back on; and that one app and any child processes will continue to run unrestricted until you close and attempt to run it again. When you mention that you have a download manager, I assume you download new software frequently. If you're tinkering with your computer, then I would suggest not using it as your daily driver, and keeping all your data and accounts on a separate, productive machine. If you don't have another computer, then perhaps create a VM, and play around in there. If you have to constantly disable security, that tends to defeat the purpose. [/QUOTE]

Verification