Reply to thread

Message

<blockquote data-quote="Marko :)" data-source="post: 1124039" data-attributes="member: 39702">That&#039;s great, but this doesn&#039;t necessary mean the extension is perfect. Visiting a website is completely different from loading one particular resource. Just look at the number of requests your web browser makes when you&#039;re opening MalwareTips, and when you visit a direct link to download one particular file.If you&#039;re willing, we can continue testing it...1. Create an .html file using Notepad and replace URL_TO_MALICIOUS_FILE with real link leading to it.[CODE=html]&lt;html&gt;&nbsp; &nbsp; &lt;head&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;title&gt;Osprey test&lt;/title&gt;&nbsp; &nbsp; &lt;/head&gt;&lt;body&gt;&nbsp; &nbsp; &lt;h1&gt;Osprey test&lt;/h1&gt;&lt;br&gt;&nbsp; &nbsp; &lt;a target=&quot;_self&quot; href=&quot;URL_TO_MALICIOUS_FILE&quot;&gt;link to malicious file&lt;/a&gt;&nbsp; &nbsp; &lt;a target=&quot;_blank&quot; href=&quot;URL_TO_MALICIOUS_FILE&quot; &gt;link to malicious file (new tab)&lt;/a&gt;&lt;/body&gt;&lt;/html&gt;[/CODE]2. Open your web browser, disable built-in phishing and malware protection (we want Osprey to detect it) and then open that .html file in it.3. Click those two &quot;link to malicious file&quot; and see if Osprey will react in all cases.What will this test do? It will show us if Osprey detects only when the main website is malicious or it will detect the malicious hyperlinks too. We need to test the extension throroughly and to make test as much as close to reality as we can. Just collecting bunch of links from malware dumps and opening one by one link in the web browser isn&#039;t really a real use-case scenario.Absolutely. I never encountered an exploit at the first place, which is why I have relaxed stance on security and don&#039;t burden my PC with security software. On this forum I encountered many very paranoid people so this is purely because of them.I think it only blocks whole page as to block particular scripts, Osprey would need to send all URLs for check.</blockquote>

[QUOTE="Marko :), post: 1124039, member: 39702"] That's great, but this doesn't necessary mean the extension is perfect. Visiting a website is completely different from loading one particular resource. Just look at the number of requests your web browser makes when you're opening MalwareTips, and when you visit a direct link to download one particular file. If you're willing, we can continue testing it... 1. Create an .html file using Notepad and replace URL_TO_MALICIOUS_FILE with real link leading to it. [CODE=html]<html> <head> <title>Osprey test</title> </head> <body> <h1>Osprey test</h1> <a target="_self" href="URL_TO_MALICIOUS_FILE">link to malicious file</a> <a target="_blank" href="URL_TO_MALICIOUS_FILE" >link to malicious file (new tab)</a> </body> </html>[/CODE] 2. Open your web browser, disable built-in phishing and malware protection (we want Osprey to detect it) and then open that .html file in it. 3. Click those two "link to malicious file" and see if Osprey will react in all cases. What will this test do? It will show us if Osprey detects only when the main website is malicious or it will detect the malicious hyperlinks too. We need to test the extension throroughly and to make test as much as close to reality as we can. Just collecting bunch of links from malware dumps and opening one by one link in the web browser isn't really a real use-case scenario. Absolutely. I never encountered an exploit at the first place, which is why I have relaxed stance on security and don't burden my PC with security software. On this forum I encountered many very paranoid people so this is purely because of them. I think it only blocks whole page as to block particular scripts, Osprey would need to send all URLs for check. [/QUOTE]

Verification