How healthy is your internet security?

[brod56]

nope, the difference is from the filters we added
I added several filters and when I checked the log of uBO, I saw a lot of blocked entries (uBO said these were blocked by my custom filters)

I have custom filters too and still the same result as with default settings.
Can you specify which filters blocked those entries for me to check if they are added here?

 

[Sunshine-boy]

that means u block can block botnet attack? or this link provide smth for this security test to run botnet test?

 

[Evjl's Rain]

I have custom filters too and still the same result as with default settings.
Can you specify which filters blocked those entries for me to check if they are added here?

I passed a lot of test because I had the filter: uBO-Personal-Filters (can be downloaded from filterlists.com)
the trick is, this filter blocked ||cloudfront.net^, this website uses cloudfront to store their testing tools

if I disabled uBO-Personal-Filters, immediately, I got C instead of A
therefore, the test is quite irrelevant for me at least because it's like I was cheating

 

[Sunshine-boy]

Lol tricky Evjl's Rain
like I said before we should disable the adblocker and run the test.

 

[Evjl's Rain]

Lol tricky Evjl's Rain

but not intentional, I figured it out after I got A
also, cloudfront (from amazon) is a completely safe website. MT is also linked to cloudfront

the real botnet doesn't come from cloudfront but I think they copied the botnet and stored it on cloudfront

 

[Sunshine-boy]

but not intentional, I figured it out after I got A

i see

 

[brod56]

I passed a lot of test because I had the filter: uBO-Personal-Filters (can be downloaded from filterlists.com)
the trick is, this filter blocked ||cloudfront.net^, this website uses cloudfront to store their testing tools

if I disabled uBO-Personal-Filters, immediately, I got C instead of A
therefore, the test is quite irrelevant for me at least because it's like I was cheating
View attachment 158989

Thats interesting, that filter helped me going from F to C
Its still somehow awful for me, how could I have an F with WD, VS, updated OS and browser? Do I need to use openDNS, a VPN or something else?

 

[AtlBo]

Its still somehow awful for me, how could I have an F with WD, VS, updated OS and browser? Do I need to use openDNS, a VPN or something else?

I first tested with a C, but using openDNS improved that for adult content. You might improve with openDNS.

Incidently, also got a C testing with Windscribe. Same results as testing with my original DNS Level 3. I am using uBlock and PrivacyBadger and then https everywhere.

 

[Evjl's Rain]

Thats interesting, that filter helped me going from F to C
Its still somehow awful for me, how could I have an F with WD, VS, updated OS and browser? Do I need to use openDNS, a VPN or something else?

I found 2 filters that made my score high: Fanboy’s Enhanced Tracking List & EasyPrivacy

the problem with this test is it doesn't really download or open anything
for example, if I disabled uBO, I got F because the browser failed to protect against some downloaded files(but there was no indication of files being downloaded). I looked at uBO log and manually opened the links to the tests I failed, they were blocked by avira browser safety, all of them, except botnet and 1 more
I allowed them to run through avira, they could be downloaded (it means google safe browsing didn't block them)
this means avira browser safety can block a lot of downloaded malwares but because the test doesn't download anything so avira can't block

 

[ForgottenSeer 55474]

AV:Bitdefender Total Security 2017.Malware:Malwarebytes Anti Malware 3 Premium,Zemana Anti Malware Premium,SUPERantispyware Professional,HitmanPro.
Lastpass password manager premium.
VPN:Ekspressvpn,Surfeasy Ultra Vpn,Private internet Access Pro,Windscribe Pro.
Voodooshield Pro.

 

[Sunshine-boy]

this test is logic when we don't use any extension...and we shouldn't if we want to see the real score

 

[Andytay70]

I passed a lot of test because I had the filter: uBO-Personal-Filters (can be downloaded from filterlists.com)
the trick is, this filter blocked ||cloudfront.net^, this website uses cloudfront to store their testing tools

if I disabled uBO-Personal-Filters, immediately, I got C instead of A
therefore, the test is quite irrelevant for me at least because it's like I was cheating
View attachment 158989

The mushroom has cheated!

 

[brod56]

I found 2 filters that made my score high: Fanboy’s Enhanced Tracking List & EasyPrivacy

the problem with this test is it doesn't really download or open anything
for example, if I disabled uBO, I got F because the browser failed to protect against some downloaded files(but there was no indication of files being downloaded). I looked at uBO log and manually opened the links to the tests I failed, they were blocked by avira browser safety, all of them, except botnet and 1 more
I allowed them to run through avira, they could be downloaded (it means google safe browsing didn't block them)
this means avira browser safety can block a lot of downloaded malwares but because the test doesn't download anything so avira can't block

Nice, added Fanboy's filter and got A
Still, very abstract test, doesn't really download anything as you point out.

 

[ForgottenSeer 19494]

This test is stupid.

Spoiler: Executable file downloads

Fail. Your security solution allows executable file downloads from a CDN website, which may make you vulnerable to malware - yeah, of course it will not block downloads, no matter if they are from CDN or not. It's job is not to block downloads.

Spoiler: Browser cookies

Fail. Criminals can steal your browser cookies, which means they can impersonate you, hijack your web sessions and possibly infiltrate your online accounts. - This is browser's job, to conform to the same-origin policy. Security products have nothing to do with this.

Spoiler: Malicious code injection

Fail. A compromised website can inject malicious code into your web browser, potentially leading to the theft of sensitive information such as passwords or session keys. - This should be rephrased to "can inject potentially malicious code". Because JavaScript is enabled. JavaScript being enabled is job of the browser setting, not the security solution.

Spoiler: Zbot

Fail. You're vulnerable to the Zbot virus, an older and well-documented threat that can be downloaded throughout your network environment. If your system missed Zbot, it's likely you are vulnerable to a wide range of viruses. Yeah, sure. Vulnerable to brand new malware maybe, vulnerable to Zbot... i doubt any reputable provider does not have a specific signature for the well reverse-engineered Zbot.

Spoiler: Access control

Access control is something which is a right, there is no need for products to block this.

Spoiler: Outbound data transmission

Fail. Your current system allows the outbound transmission of sensitive data such as credit card numbers. It should both detect and block this type of data loss. Many security and compliance systems are deployed in Tap mode and detect, but do not block, the leakage of sensitive information outside of your organization. - I can post my debit card data in a browser, yes. Everyone can. The problem would be if you have a keylogger, which is something different.

Spoiler: Source code

Fail. Your current system allows the outbound transmission of sensitive data such as software code. It should both detect and block this type of data loss. Many security and compliance systems are deployed in Tap mode and detect, but do not block, the leakage of sensitive information outside of your organization. - yeah, git push Zscaler out of here.

 

[aragornnnn]

R.i.p 10 minutes of my life, could have spend you on some more useful things. #FeelsBadMan

 

[ozone]

uBO 3rd party block + My Filters: ||securitypreview.zscaler.com/dlp.php$xmlhttprequest,domain=securitypreview.zscaler.com
= triple zeroes

still I have to disable and configure few extensions and Adguard desktop and mainly enable javascript to make that test even work

 

[uninfected1]

I found 2 filters that made my score high: Fanboy’s Enhanced Tracking List & EasyPrivacy

the problem with this test is it doesn't really download or open anything
for example, if I disabled uBO, I got F because the browser failed to protect against some downloaded files(but there was no indication of files being downloaded). I looked at uBO log and manually opened the links to the tests I failed, they were blocked by avira browser safety, all of them, except botnet and 1 more
I allowed them to run through avira, they could be downloaded (it means google safe browsing didn't block them)
this means avira browser safety can block a lot of downloaded malwares but because the test doesn't download anything so avira can't block

Thanks for the useful info. I have Avira browser safety (plus VS pro, Zemana antilogger pro, Norton Connectsafe, Panda av) so that means anyone who is using ABS is actually protected, but because of the way this test operates you would have no idea this was the case, unless people like yourself look a bit deeper into what is actually going on.

As others have said, as far as I'm concerned this test is a complete waste of time.

 

[Deleted member 178]

figure it out. because my uBO blocked this website, if you allow it, you will fail against botnet but if you block it, you will pass

Spoiler: botnet

http://d36vlfy0df5iql.cloudfront.net/dlp.php?_sm_au_c=iaV161SpvWV2Nq5s0c&PHPSESSID=n45eqdvc0430ej0kipkb5oah75&cook=AWSELB=F93BE3F70A389AC4FB0356D0B711E7CFFBB62547362602D7ED9FA643B7245262559673DD3F329AF471FB3C05CE31F274512D4EC96E658DFD80F935B35E1E3A06D5FCFBC33C;%20PHPSESSID=0gk50hl5cjqgsjcrp02nre4jo6&_=1499451124495

so totally stupid test

Botnet isn't just about the C&C but that your system was compromised by a RAT.

 

[HarborFront]

I got an A

Did not turn off any adblocker or add any additional filters

Using

uBlock Origin (turn on all filters except language filters) + uBlock Origin Extra
Avira Browser Safety
BitDefender TrafficLight
ScriptSafe
Privacy Badger
EAM
ZAM Pro
VS free
HMPA
AppGuard
Windscribe double-hop
Simple DNSCrypt
Ungoogled Chromium

Access Control fails 1 vulnerability
- How do you perform on a test that checks whether you can visit websites in countries embargoed by the United States and/or European Union?

Data Protection fails 3 vulnerabilities
- How do you perform on a test that checks if you can leak sensitive information such as credit card numbers?
- How do you perform on a test that checks if you can leak sensitive information such as US Social Security numbers?
- How do you perform on a test that checks if you can leak sensitive intellectual property (such as source code)?

It says Data Protection is high risk!





So how to make the tests a perfect score?

 

[Devilish]

Award of the dumbest test goes to
.
.
.
.
.
.
Wait for it
.
Zscaler