Reply to thread

Message

<blockquote data-quote="ebocious" data-source="post: 811173" data-attributes="member: 75834">This is the first statement of yours that I agree with.&nbsp; Still, some security is better than none at all.&nbsp; If RoboMan is correct, and you are using H_C, that&#039;s a whole lot more than nothing.I didn&#039;t say they do.&nbsp; But being cocksure is unhealthy as well.&nbsp; And if you are in fact using security software, and telling others not to, that&#039;s doing them a severe disservice.This is false.&nbsp; Ask anyone who visited Dolphin Stadium&#039;s sites before the super bowl.&nbsp; That was a legitimate site; they did absolutely nothing wrong by visiting.&nbsp; They&#039;ll agree with me, not with you.&nbsp; By the way, who said anything about AV?The last time I got infected was in 2006, when our ISP got hit with SQL Slammer and Stack Bot.&nbsp; After reimaging Windows, I got rid of our McAfee suite and installed ISS BlackICE.&nbsp; Then I started using ACL deny entries to foil privilege escalation exploits, and got rid of BlackICE.&nbsp; Then came fileless malware, and the need arose to prevent process injection while still allowing the programs themselves to launch.&nbsp; So I stepped up to CleanBrowsing DNS, and a browser extension or two (most recently MBBE); with default-deny as a backup.Agreed.&nbsp; I have no issues with you personally.&nbsp; My issue is with misinformation.&nbsp; With all due respect, there are holes in the information you&#039;ve given during our exchange, which leads me to suspect that you have more enthusiasm than professional experience.&nbsp; I applaud you for stepping into the arena now, to learn as you go.&nbsp; But I&#039;ve actually spent time in the trenches, and am here to tell you that what you read about mitigative technologies on paper are not watertight.&nbsp; They are being circumvented, and not just in direct attacks on servers.&nbsp; Home users who believe what you&#039;ve been saying are getting infected every day by the thousands, including 80-year-old women who do little more than check their email, and occasionally look up a quilt pattern on JOANN or recipe on Betty Crocker.I&#039;m not saying you need to install a three-pronged security suite.&nbsp; In all likelihood, anyone who uses either CleanBrowsing or Quad9 is unlikely to ever encounter anything that can actually circumvent their browser&#039;s sandbox.&nbsp; And anyone who adds MBBE is less likely still.&nbsp; If you add Cruel Comodo to these two, you will be ready for anything out there.&nbsp; And unless you&#039;re running a Pentium 4 with 256 MB of RAM, you won&#039;t see a performance hit.&nbsp; I can&#039;t tell you that my systems have stayed clean because my security apparatus has been zapping huge, black clouds of bugs that swarm around me nonstop.&nbsp; But I will tell you this:&nbsp; the odds that you&#039;ve been on an infected website and your sandbox protected you, are far greater than the odds that you&#039;ve encountered nothing in the last decade.All it takes is one little browser hijacker, and your 10+ years of squeaky-clean browsing are all the way back to zero.&nbsp; An ounce of prevention is worth a pound of cure.&nbsp; I hope you are in fact using H_C.&nbsp; Because one less bot makes the Web just the tiniest bit safer for me.That&#039;s totally understandable.&nbsp; I don&#039;t use AV either.&nbsp; My security software is much lighter, and much more effective.Yah, I don&#039;t think I said anything about AV, but you&#039;re the third person who seems to think I did.&nbsp; I&#039;ll have to look back, and see if I did.&nbsp; Because I know it&#039;s not in the three configurations I listed earlier, as I don&#039;t use AV either.</blockquote>

[QUOTE="ebocious, post: 811173, member: 75834"] This is the first statement of yours that I agree with. Still, some security is better than none at all. If RoboMan is correct, and you are using H_C, that's a whole lot more than nothing. I didn't say they do. But being cocksure is unhealthy as well. And if you are in fact using security software, and telling others not to, that's doing them a severe disservice. This is false. Ask anyone who visited Dolphin Stadium's sites before the super bowl. That was a legitimate site; they did absolutely nothing wrong by visiting. They'll agree with me, not with you. By the way, who said anything about AV? The last time I got infected was in 2006, when our ISP got hit with SQL Slammer and Stack Bot. After reimaging Windows, I got rid of our McAfee suite and installed ISS BlackICE. Then I started using ACL deny entries to foil privilege escalation exploits, and got rid of BlackICE. Then came fileless malware, and the need arose to prevent process injection while still allowing the programs themselves to launch. So I stepped up to CleanBrowsing DNS, and a browser extension or two (most recently MBBE); with default-deny as a backup. Agreed. I have no issues with you personally. My issue is with misinformation. With all due respect, there are holes in the information you've given during our exchange, which leads me to suspect that you have more enthusiasm than professional experience. I applaud you for stepping into the arena now, to learn as you go. But I've actually spent time in the trenches, and am here to tell you that what you read about mitigative technologies on paper are not watertight. They are being circumvented, and not just in direct attacks on servers. Home users who believe what you've been saying are getting infected every day by the thousands, including 80-year-old women who do little more than check their email, and occasionally look up a quilt pattern on JOANN or recipe on Betty Crocker. I'm not saying you need to install a three-pronged security suite. In all likelihood, anyone who uses either CleanBrowsing or Quad9 is unlikely to ever encounter anything that can actually circumvent their browser's sandbox. And anyone who adds MBBE is less likely still. If you add Cruel Comodo to these two, you will be ready for anything out there. And unless you're running a Pentium 4 with 256 MB of RAM, you won't see a performance hit. I can't tell you that my systems have stayed clean because my security apparatus has been zapping huge, black clouds of bugs that swarm around me nonstop. But I will tell you this: the odds that you've been on an infected website and your sandbox protected you, are far greater than the odds that you've encountered nothing in the last decade. All it takes is one little browser hijacker, and your 10+ years of squeaky-clean browsing are all the way back to zero. An ounce of prevention is worth a pound of cure. I hope you are in fact using H_C. Because one less bot makes the Web just the tiniest bit safer for me. That's totally understandable. I don't use AV either. My security software is much lighter, and much more effective. Yah, I don't think I said anything about AV, but you're the third person who seems to think I did. I'll have to look back, and see if I did. Because I know it's not in the three configurations I listed earlier, as I don't use AV either. [/QUOTE]

Verification