Reply to thread

Message

<blockquote data-quote="artek" data-source="post: 770495" data-attributes="member: 22897">I&#039;m not really certain a default deny setup adds anything to the security of my systems.&nbsp; I am not running scripts, files, word documents, etc., that I don&#039;t either expect to be recieving or hav enot been downloaded from legitimate websites.&nbsp; I could of course be wrong, but there&#039;s two primary ways I can see myself getting infected -&nbsp;&nbsp; the first being a flaw in the browser combined with a flaw in the OS.&nbsp; The second being something that I believe to be safe that I&#039;m going to run anyway. CCleaner for example, or some other kind of file that wouldn&#039;t typically be used to deliver malware that has a flaw in it which leads to system compromise.&nbsp; Would a default deny setup stop the first kind of issue?&nbsp; Possibly.&nbsp; One of the most recent times I&#039;ve been compromised was using a default deny setup.&nbsp; The second issue a default deny setup would do nothing because I believe the file to be safe, so I&#039;m going to allow it anyway.&nbsp; Default deny works wonders for less knowledgeable users, one only needs to look at iOS to see an example of that, but I belive it needs to be combined with some sort of authoritative mechanism to verify the non-malicious nature of applications users install.&nbsp; Apple does this a bit better than Google, but there have still been cases where someone has managed to sneak a malicious application onto the iOS appstore.&nbsp; If you were to put a default deny/containment setup on a windows machine it needs to be combined with some sort of a whitelist or the novice user is going to be annoyed to the point of allowing everything thus defeating the strengths of a default deny system.</blockquote>

[QUOTE="artek, post: 770495, member: 22897"] I'm not really certain a default deny setup adds anything to the security of my systems. I am not running scripts, files, word documents, etc., that I don't either expect to be recieving or hav enot been downloaded from legitimate websites. I could of course be wrong, but there's two primary ways I can see myself getting infected - the first being a flaw in the browser combined with a flaw in the OS. The second being something that I believe to be safe that I'm going to run anyway. CCleaner for example, or some other kind of file that wouldn't typically be used to deliver malware that has a flaw in it which leads to system compromise. Would a default deny setup stop the first kind of issue? Possibly. One of the most recent times I've been compromised was using a default deny setup. The second issue a default deny setup would do nothing because I believe the file to be safe, so I'm going to allow it anyway. Default deny works wonders for less knowledgeable users, one only needs to look at iOS to see an example of that, but I belive it needs to be combined with some sort of authoritative mechanism to verify the non-malicious nature of applications users install. Apple does this a bit better than Google, but there have still been cases where someone has managed to sneak a malicious application onto the iOS appstore. If you were to put a default deny/containment setup on a windows machine it needs to be combined with some sort of a whitelist or the novice user is going to be annoyed to the point of allowing everything thus defeating the strengths of a default deny system. [/QUOTE]

Verification