New Update Norton, Avira, Avast browser extensions

[ForgottenSeer 92963]

A kind request to @Evjl's Rain to put Avast Online Security & Privacy, Avira Browser Safety and Norton DNS to a test. A few years ago Norton announced that its Browser Extension would be discontinued, but the Norton DNS service on which this extension was based exists until today. With the Norton-Avast-Avira merger I am curious on how the synergy of combining URL Blacklist services, since Norton used to have a decent one, Avira cloud and Avast are decent .

The easiest synergy would be to forward all bad URL's (of Avira and Avast) to Norton's DNS service, and feed all new catches of teh DNS service back in the cloud systems of Norton, Avast and Avira AntiVirus.

I hope Evjl can find some time to put these URL services to the test, to see whether they are indeed leveraging the combined intelligence of Avast, Avira and Norton.

Regards Kees

 

[ForgottenSeer 93786]

3 times the list of URLs = 3 times the false positives, resource usage and performance impact, hence why I dont think Norton will incorporate any signature/technology into their products.

 

[ForgottenSeer 92963]

3 times the list of URLs = 3 times the false positives, resource usage and performance impact, hence why I dont think Norton will incorporate any signature/technology into their products.

View this binary search explanation (link to video) to understand that 3x volume increase is not an issue for the performance impact. Because an URL contains so little data and data can be organized in separate indexed baskets (e.g. on domain name and on file name) the storage/memory resource impact of a cloud based URL blacklist is minimal. Since all AV-s have some sort of FP filtering build-in, I assume they would only share clean data which still will be checked by the receiving AV on FP's (like any other malware input source). Using three (slightly) different FP detection methods, probably reduces the total amount of FP's in stead of increasing them.

 

[Moonhorse]

Would make sense that they would send all urls to their triple engines and have much better results catching fraud sites

Even norton bought them , they probably continue as before

We just need new browser extension/dns tests if @Evjl's Rain has time for it... or just someone that will post url pack and hub guys/ anyone bit experienced person can test them for us

Only thing i have noticed is just that avast web extension is blocking sites before avast mobile antivirus

 

[silversurfer]

What are the addresses of Norton DNS, wikipedia shows correct or it's something different?

Norton ConnectSafe - Wikipedia

en.wikipedia.org

I have bookmarked a list of known DNS providers by Adguard, but looks like Norton DNS isn't included there:

Known DNS Providers | AdGuard DNS Knowledge Base

Here we suggest a list of trusted DNS providers. To use them, first install AdGuard Ad Blocker or AdGuard VPN on your device. Then, on the same device, click the link to a provider in this article

kb.adguard.com

 

[Gandalf_The_Grey]

According to Norton the DNS service was retired in 2018:

Remove Norton ConnectSafe settings:
On November 15, 2018, Norton ConnectSafe service was retired meaning that the free service will no longer be available. Because the service is discontinued, current users could experience disruption(s) in their browsing experience.
If you are a current Norton ConnectSafe user, we recommend that you complete the following actions before the ConnectSafe service termination. You can configure the network adapter settings and remove the Norton ConnectSafe DNS server addresses.

Remove Norton ConnectSafe settings

Remove the Norton ConnectSafe settings from your computer

support.norton.com

 

[SeriousHoax]

What are the addresses of Norton DNS

Here:

Norton was among the first free public DNS providers to give some level of security. They had three policies:

A — Security (virus, phishing sites, and scam sites): 199.85.126.10

B — Security + Pornography: 199.85.126.20

C — Security + Pornography + Other: 199.85.126.30

Source:

Norton DNS - Norton ConnectSafe for Safe DNS

Learn more about Norton DNS, its working and how it resolves a domain name into IP address. Also, get to know about 4 types of Norton Servers

nortondns.com

I checked one malicious host only and it worked. The host is blocked by Norton Safe Web extension as well as Norton DNS. The blocked page showed Neustar logo. So currently Norton DNS = Neustar DNS?

 

[ForgottenSeer 92963]

According to Norton the DNS service was retired in 2018:

Remove Norton ConnectSafe settings

Remove the Norton ConnectSafe settings from your computer

support.norton.com

So it was the other way around? DNS service discontinued, but extension was kept alive? Like @SeriousHoax I checked the DNS service (probably the reason why I mixed it up)

 

[Gandalf_The_Grey]

So it was the other way around? DNS service discontinued, but extension was kept alive? Like @SeriousHoax I checked the DNS service (probably the reason why I mixed it up)

Yes, all three Norton, Avira, and Avast/AVG use an extension now.
Like @SeriousHoax noticed the Norton DNS addresses are now used/owned by Neustar.

UltraDNS Public | Neustar

Provided free of charge, UltraDNS Public enables users, families, and small businesses to experience a much more reliable, faster and safer online experience. Simply change your DNS settings and experience the Internet like never before.

www.publicdns.neustar

 

[SeriousHoax]

IMO, NextDNS with OISD blocklist list and other features in the Security section like Threat Intelligence Feeds, AI-Driven Threat Detection, Google Safe Browsing, Cryptojacking Protection, IDN Homograph Attacks Protection, Typosquatting Protection, Domain Generation Algorithms (DGAs) Protection, Block Newly Registered Domains (NRDs), Block Parked Domains do a brilliant job at blocking malicious and phishing sites at DNS level.
If I talk about the extensions then in my experience, Avast/AVG Online Security & Privacy is not as effective as Avast/AVG AV, Avira Browser Safety extension is resource hungry, Norton Safe Web is extremely buggy. It' stops working after a while/a couple of browsing sessions in any Chromium browser (Works fine in Firefox).

 

[Evjl's Rain]

IMO, NextDNS with OISD blocklist list and other features in the Security section like Threat Intelligence Feeds, AI-Driven Threat Detection, Google Safe Browsing, Cryptojacking Protection, IDN Homograph Attacks Protection, Typosquatting Protection, Domain Generation Algorithms (DGAs) Protection, Block Newly Registered Domains (NRDs), Block Parked Domains do a brilliant job at blocking malicious and phishing sites at DNS level.
If I talk about the extensions then in my experience, Avast/AVG Online Security & Privacy is not as effective as Avast/AVG AV, Avira Browser Safety extension is resource hungry, Norton Safe Web is extremely buggy. It' stops working after a while/a couple of browsing sessions in any Chromium browser (Works fine in Firefox).

I second that
Norton safe web: too weak
Avast online security: only blocks phishing, 0% on malware by design
Avira: too heavy, consumes CPU on every click
Neustar DNS/Norton DNS: aggressive, great but no whitelisting option when useful websites are falsely blocked
NextDNS: too slow for me with default DNS server. A client is required to connect to the closest server -> fast. There is a quota. Google safe browsing is redundant by my browser