Which security software configuration to use for a development laptop?

gmatbarua

Level 1
Thread author
Jun 4, 2017
5
6
24
Kolkata
I use win 7. I use my pc for c, c++, java, python development. I was using Comodo Internet Security, but it is blacklisting all new exe files created while I am building my project. Then it is not allowing to debug. A solution to this is delete the file name from each of the CIS modules. I could not find a single setting to whitelist it from all modules. Next, I make some changes to code and again compile it. As a result the executable file changes and again CIS auto contains it. Again I have to open CIS settings and whitelist the new exe file. It is very frustrating.
Should I use a regular internet security software?
Please advise me. I understand removing CIS or any antivirus software is a pain in the wrong place, hence I have reformatted my laptop. Installed drivers and updates. Installed necessary softwares from NINITE website. Now I am posting this question and I will eagerly wait for an answer and then do accordingly.
Thanks in advance.
 
HIPs is disabled by default. (Factory settings).

Don't we developers do the following while developing:
1) listen to music running in our computer
2) open web browser to google api and stackoverflow
3)The IDE is open with all the compiler chain tools from mingw compiler.
80% time infront of laptop is spent software developing. If I don't use the antivirus protection facilities now, when to use it?
 
I use win 7. I use my pc for c, c++, java, python development. I was using Comodo Internet Security, but it is blacklisting all new exe files created while I am building my project. Then it is not allowing to debug. A solution to this is delete the file name from each of the CIS modules. I could not find a single setting to whitelist it from all modules. Next, I make some changes to code and again compile it. As a result the executable file changes and again CIS auto contains it. Again I have to open CIS settings and whitelist the new exe file. It is very frustrating.
Should I use a regular internet security software?
Please advise me. I understand removing CIS or any antivirus software is a pain in the wrong place, hence I have reformatted my laptop. Installed drivers and updates. Installed necessary softwares from NINITE website. Now I am posting this question and I will eagerly wait for an answer and then do accordingly.
Thanks in advance.
You should add your development folder to the Trusted Files list.

By granting 'Trusted' status to executables (including sub folders containing many components) you can reduce the amount of alerts that HIPS generates whilst maintaining a higher level of HIPS security. This is particularly useful for developers to create new applications that, by their nature, are as yet unknown to the Comodo safe list.

Creating your own list of 'Trusted Files' allows you to define a personal safe list of files to complement the default Comodo safe list.
More info here...
Comodo Internet Security File List, Internet Protection | COMODO
 
Last edited:
I request the learned and experienced members of this forum to advise me whether with the above advised settings along with cruelsister's settings, is Comodo Internet security safe enough? I don't mind paying for security software since unlike before when I was a student, currently I am delving into software development business and it will be an investment.
I started the business with Linux, but most users seems to be using windows. Hence, using windows is more logical. Unfortunately, I am not very confident about the security in windows even after using the security products looking into the prosperous antivirus industry based on windows platform.
 
  • Like
Reactions: ZeroDay
if your system is clean and you are not connected to web at the time of development you can simply disable the security software for the time being.however if you need net connection for your development there is almost nil chance of infection if you are not visiting malicious site or downloading crack software or visiting porn site.
 
  • Like
Reactions: Rengar
I use win 7. I use my pc for c, c++, java, python development. I was using Comodo Internet Security, but it is blacklisting all new exe files created while I am building my project. Then it is not allowing to debug. A solution to this is delete the file name from each of the CIS modules. I could not find a single setting to whitelist it from all modules. Next, I make some changes to code and again compile it. As a result the executable file changes and again CIS auto contains it. Again I have to open CIS settings and whitelist the new exe file. It is very frustrating.
Should I use a regular internet security software?
Please advise me. I understand removing CIS or any antivirus software is a pain in the wrong place, hence I have reformatted my laptop. Installed drivers and updates. Installed necessary softwares from NINITE website. Now I am posting this question and I will eagerly wait for an answer and then do accordingly.
Thanks in advance.

Are you using online Gits and coordination with others (like Visual Studio Team Services or Atlassian JIRA) - or you are doing everything locally ?
 
  • Like
Reactions: lab34 and Rengar
I don't use Comodo, so you'll need to ask an expert. Otherwise,
- Disable security components that may flag your code
- Add exclusions to the development locations (directories)
- Switch to a solution with less proactive and FPs.
 
Hello @gmatbarua ,
my son have exactly the same problem.
So, we put the dev folder in exception.

But @Lockdown is right. If you are using git or collaborative tools, putting the dev folder in exceptions can be a breach. It depends of the confidence you have with your partners (and the size of the team).
 
what is the problem with running the exe in comodo's auto sandbox? somehow screws up your developing/testing/debugging?
 
The issue brought by Comodo and other products are purely 'Normal' since debugging executes critical behavior that can align for malicious activities, that's why you need to setup little bit the program for exclusion/trusted list.

Other alternative is use an AV that are rely on signatures and a BB which will generally not affect your overall programming activities.