Reply to thread

Message

<blockquote data-quote="Windows_Security" data-source="post: 786077" data-attributes="member: 50782">[USER=24327]@Fabian Wosar[/USER]First thanks for providing a cloud based URL-block web extension. Nice touch to use hashes for privacy, but from a marketing perspective I have some doubts on the&nbsp; idea (and success) of this new extension . . .When so many people don&#039;t seem to care about their privacy, why target a new product sor such a small (possibly minor) user group? Taking into consideration that the timing is at best late for providing a free extension (read diffusion of innovation of E. M. Rogers)I don&#039;t have user segment data to proof it, but my guess is that most privacy aware people are also security aware. So you are providing a benefit (privacy) and a disappointment (no payload download protection) simultaneously when comparing this extension with extensions from other security companies.I know you explained Evjl&#039;s Rain that it us supposed to not block payloadsm but testing agencies like AV-lab test extensions on this feature also!&nbsp; IMO you don&#039;t need to be a marketing guru (like me <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" />&nbsp; ) to predict that this extension will NOT be installed on many PC&#039;s. So here is a free tip.Why not provide two modes. The &#039;full URL&#039; mode works like the current functionality en is intended to be used by people who are already using EMSISOFT security products. The easy explanation(rational) is that EMSISOFT ANTIMALWARE will deal with the downloaded payload anyway.For all other users (non EMSISOFT customers) the extension works in &#039;partial URL&#039;&nbsp; mode. The URL is only hashed until the first /. So payloads listed in VX-VAULT URL are blocked because all downloads from the hosting websites are blocked: e.g.HTTP(S)://www.malware_hosting_website.com/payload_page/malware.exeThis has the disadvantage that the webpage of hacked websites which are clean are also blocked. When downloads of malware hosting or infected websites are blocked, you could also show a small info bar at the bottom of the warning prompt (or call to action: want to access this website safely? install etc).Regards Kees</blockquote>

[QUOTE="Windows_Security, post: 786077, member: 50782"] [USER=24327]@Fabian Wosar[/USER] First thanks for providing a cloud based URL-block web extension. Nice touch to use hashes for privacy, but from a marketing perspective I have some doubts on the idea (and success) of this new extension . . . When so many people don't seem to care about their privacy, why target a new product sor such a small (possibly minor) user group? Taking into consideration that the timing is at best late for providing a free extension (read diffusion of innovation of E. M. Rogers) I don't have user segment data to proof it, but my guess is that most privacy aware people are also security aware. So you are providing a benefit (privacy) and a disappointment (no payload download protection) simultaneously when comparing this extension with extensions from other security companies. I know you explained Evjl's Rain that it us supposed to not block payloadsm but testing agencies like AV-lab test extensions on this feature also! IMO you don't need to be a marketing guru (like me :) ) to predict that this extension will NOT be installed on many PC's. So here is a free tip. Why not provide two modes. The 'full URL' mode works like the current functionality en is intended to be used by people who are already using EMSISOFT security products. The easy explanation(rational) is that EMSISOFT ANTIMALWARE will deal with the downloaded payload anyway. For all other users (non EMSISOFT customers) the extension works in 'partial URL' mode. The URL is only hashed until the first /. So payloads listed in VX-VAULT URL are blocked because all downloads from the hosting websites are blocked: e.g. HTTP(S)://www.[B][U][COLOR=rgb(184, 49, 47)]malware_hosting_website.com[/COLOR][/U][/B]/payload_page/malware.exe This has the disadvantage that the webpage of hacked websites which are clean are also blocked. When downloads of malware hosting or infected websites are blocked, you could also show a small info bar at the bottom of the warning prompt (or call to action: want to access this website safely? install etc). Regards Kees [/QUOTE]

Verification