New Update Osprey Browser Protection discussion and updates

[Gandalf_The_Grey]

Osprey is a browser extension that protects you from malicious websites.

Made by @Foulest and discovered by @Jan Willy

Links:
GitHub • Google Chrome • Microsoft Edge • Firefox (TBD) • Privacy Policy • Wiki (FAQs) • Discord

MalwareTips discussion on this extension started here:

Hot Take - [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings

Comparison between browser extensions Test 29/12 Q&A - [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings Test 24/11 Q&A - [Updated 24/11/2018] Browser extension comparison: Malwares and Phishings Test 12/11 Q&A - [Updated 12/11/2018] Browser extension comparison...

malwaretips.com

Wilders Security Forums discussion:

Osprey: Browser Protection

Osprey is a browser extension that protects you from malicious websites: https://github.com/Foulest/Osprey currently installable in Chrome/Edge but...

www.wilderssecurity.com

App reviews by @Vitali Ortzi :

App Review - Osprey against 250 pishing links

pishing links source open pish results all blocked except 4 that didnt load (dead)

malwaretips.com

App Review - Osprey against zero day malware

only dns.eu was able to detect it from all the vendors used by Osprey and i found the malware by searching keywords on google

malwaretips.com

App Review - Osprey against 60 fresh links

100% block rate as expected source of samples pishtank and Artists Against 419

malwaretips.com

App review by @Shadowra :

App Review - Osprey Browser Protection Reviews

Osprey is a Web extension created by @Foulest that protects you against malicious sites, phishing and other threats using several engines. These include Bitdefender, Emsisoft, TotalAV, Quad9 and others. During the test, it blocked all malicious links, with the exception of two that were direct...

malwaretips.com

Phishing test by @Foulest :

Release 1.1.2 · Foulest/Osprey

Changes in 1.1.2 Removed TOTAL WebShield due to low scores in testing Removed Mullvad Security DNS due to low scores in testing Removed Control D Security DNS due to low scores in testing Removed ...

github.com

 

[Gandalf_The_Grey]

Osprey Browser Protection 1.1.0

Changes in 1.1.0​

• Added OpenDNS and AdGuard DNS providers
• Added missing Bitdefender detection classification
• Fixed Symantec URL validation for detections
• Fixed Cloudflare DNS detection issues
• Fixed Control D detection issues
• Removed valid TLD checking
• Bug fixes and improvements

This update has been submitted to all extension stores.

Full Changelog: 1.0.9...1.1.0

Releases · Foulest/Osprey

Browser extension that protects you from malicious websites. - Foulest/Osprey

github.com

Thanks for starting to post updates @Foulest

Current Release​

• 1.1.0 on GitHub (preview)
• 1.0.9 on Chrome (stable)
• 1.0.5 on Edge (outdated)
• Pending on Firefox

Do you know when the Edge store will get the latest update?

 

[Foulest]

Osprey Browser Protection 1.1.0

Releases · Foulest/Osprey

Browser extension that protects you from malicious websites. - Foulest/Osprey

github.com

Thanks for starting to post updates @Foulest

Do you know when the Edge store will get the latest update?

I have no idea. It's still pending on Microsoft's Partner Center. I'd expect maybe two more days for 1.0.8, and then another WEEK on top of that. Edge's review process sucks. Chrome always has the latest version.

 

[Shadowra]

Reviews by me

App Review - Osprey Browser Protection Reviews

Osprey is a Web extension created by @Foulest that protects you against malicious sites, phishing and other threats using several engines. These include Bitdefender, Emsisoft, TotalAV, Quad9 and others. During the test, it blocked all malicious links, with the exception of two that were direct...

malwaretips.com

 

[bazang]

Edge's review process sucks. Chrome always has the latest version.

The Edge Store review process is slow because the review process is thorough and proper security processes are followed.

The Chrome Store security review process is non-existent, hence you get your browser plug-in listed within a few days. It is that Chrome Store insecurity that has resulted in hundreds of millions of devices being infected with malicious browser plug-ins and malware.

 

[Foulest]

The Edge Store review process is slow because the review process is thorough and proper security processes are followed.

The Chrome Store security review process is non-existent, hence you get your browser plug-in listed within a few days. It is that Chrome Store insecurity that has resulted in hundreds of millions of devices being infected with malicious browser plug-ins and malware.

It's a double-edged sword. Sure, the Edge process is better, but it results in week-long waiting times for updates. It becomes almost instantly outdated within a few days. It's currently six versions behind. Huge improvements have been made in that time frame.

 

[bazang]

It's a double-edged sword. Sure, the Edge process is better, but it results in week-long waiting times for updates. It becomes almost instantly outdated within a few days. It's currently six versions behind. Huge improvements have been made in that time frame.

Security is a process that must be applied continually with discipline - even if that means things are not up-to-date.

Ask the review and approve team if there is a way to make the process faster. If yes, then do not be surprised if they ask you to obtain EV certificate to sign all your code.

 

[Foulest]

Security is a process that must be applied continually with discipline - even if that means things are not up-to-date.

Ask the review and approve team if there is a way to make the process faster. If yes, then do not be surprised if they ask you to obtain EV certificate to sign all your code.

I don't think you can put a digital signature on a Chrome extension... Also, it's open-source. Please send me a source about a browser extension that requires an EV certificate. No extension that I've ever seen has one. I'm not even sure how that would work. All browser extensions are open-source. You can view the source code for them.

 

[Gandalf_The_Grey]

Osprey Browser Protection 1.1.1

Changes in 1.1.1​

• Added option to ignore frame navigation (on by default)
• Removed unnecessary checks in the URL validation process
• Bug fixes and improvements

This update has been submitted to all extension stores.

Full Changelog: 1.1.0...1.1.1

Release 1.1.1 · Foulest/Osprey

Changes in 1.1.1 Added option to ignore frame navigation (on by default) Removed unnecessary checks in the URL validation process Bug fixes and improvements This update has been submitted to all ...

github.com

 

[Gandalf_The_Grey]

Osprey Browser Protection 1.1.2

Changes in 1.1.2​

• Removed TOTAL WebShield due to low scores in testing
• Removed Mullvad Security DNS due to low scores in testing
• Removed Control D Security DNS due to low scores in testing
• Removed adware and fleeceware threat classifications
• Added CIRA Canadian Shield DNS to the list of providers
• Added CERT-EE Security DNS to the list of providers

This update has been submitted to all extension stores.

Full Changelog: 1.1.1...1.1.2

Bonus: Phishing Test

Out of 100 new phishing links from OpenPhish, each provider scored:

DNS0.eu Security DNS: 97%
CleanBrowsing Security DNS: 97%
Switch.ch Security DNS: 97%
G DATA WebProtection: 95%
Norton SafeWeb: 92%
Emsisoft Web Protection: 84%
Symantec Browser Protection: 80%
Bitdefender TrafficLight: 69%
CERT-EE Security DNS: 67%
Microsoft SmartScreen: 58%
Cloudflare Security DNS: 44%
CIRA Security DNS: 33%
Quad9 Security DNS: 19%
AdGuard Security DNS: 18%

Out of all 500 new phishing links in the list, all of them combined detected all 500 - no misses.

Release 1.1.2 · Foulest/Osprey

Changes in 1.1.2 Removed TOTAL WebShield due to low scores in testing Removed Mullvad Security DNS due to low scores in testing Removed Control D Security DNS due to low scores in testing Removed ...

github.com

 

[mlnevese]

@Foulest Any reason not to use the Chrome Store version on Edge as it is always more up to date?