Reply to thread

Message

<blockquote data-quote="ForgottenSeer 107474" data-source="post: 1079558">Agree: but there is WHHL to the rescue (with WDAC-ISG and SRP blocking risky file extensions which use LoLBins)&nbsp; [USER=32260]@Andy Ful[/USER] <img class="smilie smilie--emoji" loading="lazy" alt="🏆" title="Trophy&nbsp; &nbsp; :trophy:" src="https://cdn.jsdelivr.net/joypixels/assets/6.6/png/unicode/64/1f3c6.png" data-shortname=":trophy:" /><img class="smilie smilie--emoji" loading="lazy" alt="🏆" title="Trophy&nbsp; &nbsp; :trophy:" src="https://cdn.jsdelivr.net/joypixels/assets/6.6/png/unicode/64/1f3c6.png" data-shortname=":trophy:" /><img class="smilie smilie--emoji" loading="lazy" alt="🏆" title="Trophy&nbsp; &nbsp; :trophy:" src="https://cdn.jsdelivr.net/joypixels/assets/6.6/png/unicode/64/1f3c6.png" data-shortname=":trophy:" />Also I think Comodo with [USER=7463]@cruelsister[/USER] is better when replacing contain with block. IMO it makes no sense to run software of which the security application can&#039;t determine it is safe. Blocking instead of sandboxing also takes away the confusion sandboxing gives for most users (as mentioned by Andy).&nbsp; Using a sandbox for me is a sign of lack of trust in your own program. The only case for using sandboxes is when the program you run has vulnabilties. Then it makes sense to sandbox (but the sandbox has to be persistent over sessions).That said: I tried the latest Comodo beta and it crashed on a fairly vanilla Windows 11 setup (Office + Chrome + 2 user applications installed), which surprised me, because on Windows 7, I was using Comodo Time Machine and Comodo Cloud Antivirus (with block in stead of contain, CCA also had an option to ask the user when I recall right) on a similar setup (only difference was the office version 2010 in stead of 2019).</blockquote>

[QUOTE="ForgottenSeer 107474, post: 1079558"] Agree: but there is WHHL to the rescue (with WDAC-ISG and SRP blocking risky file extensions which use LoLBins) [USER=32260]@Andy Ful[/USER] 🏆🏆🏆 Also I think Comodo with [USER=7463]@cruelsister[/USER] is better when replacing contain with block. IMO it makes no sense to run software of which the security application can't determine it is safe. Blocking instead of sandboxing also takes away the confusion sandboxing gives for most users (as mentioned by Andy). Using a sandbox for me is a sign of lack of trust in your own program. The only case for using sandboxes is when the program you run has vulnabilties. Then it makes sense to sandbox (but the sandbox has to be persistent over sessions). That said: I tried the latest Comodo beta and it crashed on a fairly vanilla Windows 11 setup (Office + Chrome + 2 user applications installed), which surprised me, because on Windows 7, I was using Comodo Time Machine and Comodo Cloud Antivirus (with block in stead of contain, CCA also had an option to ask the user when I recall right) on a similar setup (only difference was the office version 2010 in stead of 2019). [/QUOTE]

Verification