Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1111406" data-attributes="member: 32260">Your conclusion is invalid because your video has nothing to do with &quot;some containment issue&quot; solved by Comodo. To see that &quot;some containment&quot; issue was solved, you should run the [USER=115951]@Loyisa[/USER] exploit from the first video.The Comodo staff did not announce that they solved all of Comodo&#039;s issues. The &quot;some containment issue&quot; was related to escape from inside the sandbox. In the current video, nothing escaped from inside the sandbox because nothing was sandboxed. The attack vector presented in the current video is another kind and should not be messed with sandbox escape.Except for the above, it is a nice video. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" />You are also right that Comodo could improve protection by auto-containing Unrecognized DLLs loaded by Trusted EXE files (like in Windows Smart App Control). However, this would require many additional resources. The bigger vendors like Microsoft, Avast, etc. did not do it too.</blockquote>

[QUOTE="Andy Ful, post: 1111406, member: 32260"] Your conclusion is invalid because your video has nothing to do with "some containment issue" solved by Comodo. To see that "some containment" issue was solved, you should run the [USER=115951]@Loyisa[/USER] exploit from the first video. The Comodo staff did not announce that they solved all of Comodo's issues. The "some containment issue" was related to escape from inside the sandbox. In the current video, nothing escaped from inside the sandbox because nothing was sandboxed. The attack vector presented in the current video is another kind and should not be messed with sandbox escape. Except for the above, it is a nice video. :) You are also right that Comodo could improve protection by auto-containing Unrecognized DLLs loaded by Trusted EXE files (like in Windows Smart App Control). However, this would require many additional resources. The bigger vendors like Microsoft, Avast, etc. did not do it too. [/QUOTE]

Verification