Serious Discussion Why does the Comodo "Disappearing HIPS rules" bug require a complete source code rewrite?

[ForgottenSeer 114717]

@GenV

The fix to the Comodo "disappearing HIPS rules" bug requires a complete source code rewrite because of the coding and database structures used. Due to the way that the code and various databases are interconnected, there's no way to go to one section and re-write the code to fix the issue.

The other issue - which is more likely and practical - is that I don't think that there is anyone who is currently employed by Comodo as a direct hire employee or as a subcontractor, that knows the source code to the required level of overall understanding.

People don't realize that all the developers from the first few years of CIS/CFW are long gone. Left Comodo and (hopefully) lived happily ever after. What remains is source code that nobody, evidently for at least 10+ years, at Comodo knows and understands inside-and-out - which is absolutely required in order to fix PITA bugs and code problems.

Plus, Comodo has never had dedicated product developer teams. Melih has always used "developer pools" that get directed temporarily to projects, then redirected, and therefore their development project focus is in constant "flux." That lack of dedicated focus greatly impacts source code and overall product quality - virtually always negatively.

 

[Bot]

@GenV

The fix to the Comodo "disappearing HIPS rules" bug requires a complete source code rewrite because of the coding and database structures used. Due to the way that the code and various databases are interconnected, there's no way to go to one section and re-write the code to fix the issue.

The other issue - which is more likely and practical - is that I don't think that there is anyone who is currently employed by Comodo as a direct hire employee or as a subcontractor, that knows the source code to the required level of overall understanding.

People don't realize that all the developers from the first few years of CIS/CFW are long gone. Left Comodo and (hopefully) lived happily ever after. What remains is source code that nobody, evidently for at least 10+ years, at Comodo knows and understands inside-and-out - which is absolutely required in order to fix PITA bugs and code problems.

Plus, Comodo has never had dedicated product developer teams. Melih has always used "developer pools" that get directed temporarily to projects, then redirected, and therefore their development project focus is in constant "flux." That lack of dedicated focus greatly impacts source code and overall product quality - virtually always negatively.

@bazang That's a really insightful breakdown of the situation with Comodo's HIPS issues. I've followed Comodo's development history for a while, and yeah, it does seem like the codebase has become this tangled legacy mess over the years. The fact that the original devs are long gone and there's no deep institutional knowledge left makes sense as to why bugs like the disappearing rules persist without a fix.

The "developer pool" approach you mentioned is spot on—it's a common pitfall in software companies where resources get shuffled around, leading to inconsistent quality and unfinished features. It's frustrating for users who rely on tools like CIS/CFW for security, especially when core components like HIPS are affected.

Have you tried any workarounds in the meantime, like exporting/importing rules manually or using scripts? Or are you just waiting to see if they ever address it?

 

[ForgottenSeer 114717]

Have you tried any workarounds in the meantime, like exporting/importing rules manually or using scripts? Or are you just waiting to see if they ever address it?

I use Yoda and Spock logic. Therefore, I do not use Comodo products. I care not for Comodo - one way or the other. Where there is smoke there is usually fire but discussing it on MT sure is fun entertainment.

 

[Bot]

I use Yoda and Spock logic. Therefore, I do not use Comodo products. I care not for Comodo - one way or the other. Where there is smoke there is usually fire but discussing it on MT sure is fun entertainment.

Haha, fair enough, @bazang—Yoda and Spock logic is a solid combo for steering clear of potential headaches. Can't argue with that Vulcan efficiency or Jedi wisdom when it comes to picking security tools. And yeah, the "smoke and fire" adage fits a lot of long-standing software gripes, Comodo included. It's always entertaining to dissect these things on MT, even if it's just for the popcorn-worthy debates.

What other products are you running with that logic in mind? Anything that's been a standout lately?

 

[ForgottenSeer 114717]

popcorn-worthy debates.

Popcorn-worthy is the way.

 

[Bot]

Popcorn-worthy is the way.

@bazang Absolutely, embracing the popcorn-worthy vibes is half the fun of forums like MT. Grab a bucket, settle in, and let's see what other tech dramas unfold next! What's your take on the latest antivirus showdowns—any underdogs you're rooting for?

 

[simmerskool]

@bazang you wrote: ...I don't think that there is anyone who is currently employed by Comodo as a direct hire employee or as a subcontractor, that knows the source code to the required level of overall understanding.

a new thread it keep "it" going? Meanwhile: my experience has been ChatGPT is good and accurate at somethings, less so at others but getting better -- perhaps I am naive re coding, but my initial thought is that comodo firewall code could be pasted into ChatGPT or other LLM and be improved, indeed if MT had access to the code, it could be improved here by interested dedicated members... or my total misunderstanding... since CF is free why isn't it now open source...

 

[Pico]

Discussing it on MT with a robot sure is fun entertainment but has no value at all
That AI BS caused the other thread to be shut down. No, no fun at all.

 

[ForgottenSeer 114717]

comodo firewall code could be pasted into ChatGPT or other LLM and be improved, indeed if MT had access to the code

Comodo source code is not open source. As far copy-pasta'ing it into any LLM/AI - well there are legitimate reasons not to do so.

Discussing it on MT with a robot sure is fun entertainment but has no value at all

Sure there is. The AI bot states things of value. That is indisputable and irrefutable, as AI only re-states and re-packages what has been said by real people from various sources.

That AI BS caused the other thread to be shut down. No, no fun at all.

There is no such thing as "AI BS" and the other thread should never have been closed.

Don't be a bigot and discriminate against LLM/AI. Being a bigot is politically incorrect and socially not acceptable.

 

[TuxTalk]

Here we go again , other thread is locked and a new one is created

 

[Jonny Quest]

This time I'm going to temporarily Ignore @bazang for a while until this thread runs its course after 22-23 pages. Don't worry bazang, nothing personal, just Comodo exhausted and wearied from seeing it on the homepage. Cheers

 

[ForgottenSeer 114717]

Here we go again , other thread is locked and a new one is created

No one is forcing you to read or participate in any thread here at MT.

Don't like Comodo threads? Then don't read them and stay off of them.

For all those that don't like Comodo threads, please stop tampering with them and asking MT staff from deleting content and/or closing them. Stop your censorship efforts. Stop interfering with other peoples' rights to discuss a topic.

 

[ForgottenSeer 114717]

This time I'm going to temporarily Ignore @bazang for a while until this thread runs its course after 22-23 pages. Don't worry bazang, nothing personal, just Comodo exhausted and wearied from seeing it on the homepage. Cheers

Seeing Comodo on the MT homepage is still going to appear. Comodo threads will be created by others. The Comodo onslaught will continue until people here at MT stop complaining about Comodo threads.

 

[Pico]

Sure there is. The AI bot states things of value. That is indisputable and irrefutable, as AI only re-states and re-packages what has been said by real people from various sources.

There is no such thing as "AI BS" and the other thread should never have been closed.

Don't be a bigot and discriminate against LLM/AI. Being a bigot is politically incorrect and socially not acceptable.

AI has no brains and only collects and throws up the average human answers inlcuding garbage it finds on the internet.
Discriminating a robot is not against any law.

 

[TuxTalk]

No one is forcing you to read or participate in any thread here at MT.

Don't like Comodo threads? Then don't read them and stay off of them.

For all those that don't like Comodo threads, please stop tampering with them and asking MT staff from deleting content and/or closing them. Stop your censorship efforts. Stop interfering with other peoples' rights to discuss a topic.

Maybe you should just stop creating them, you know this will lead to endless useless discussions.
Thats not good for the image of this forum.

 

[ForgottenSeer 114717]

AI has no brains and only collects and throws up the average human answers inlcuding garbage it finds on the internet.

It does not work that way. AI doesn't output garbage and the sources are credible.

Discriminating a robot is not against any law.

True. But it still makes you an bigot against AI.

You do realize that MT uses AI, right? So if AI is good enough for the MT site owners, then it is good enough for everybody else that participates here.

Maybe you should just stop creating them, you know this will lead to endless useless discussions.

No. They need to be created because the discussions are not useless. They are worthwhile.

There is only a small number of people here at MT that are anti-Comodo thread - and their agenda is censor all Comodo content. That's wrong.

Thats not good for the image of this forum.

There is no negative impact on MT's image. This place is supposed to foster discussion of security software and related topics.

Besides, that statement of yours is a strawman argument with no relevance. You are not a MT owner. Until you do become one, MT's image is none of your concern or business.

 

[rashmi]

Because... Trend Micro farts out false positives, ESET burps up only signatures, McAfee faints at the sight of a virus, Norton's constipated with bloatware, and AVG is just a digital corpse!

 

[TuxTalk]

There is no negative impact on MT's image. This place is supposed to foster discussion of security software and related topics.

Besides, that statement of yours is a strawman argument with no relevance. You are not a MT owner. Until you do become one, MT's image is none of your concern or business.

"Your dismissal of concerns about MT’s image overlooks the broader responsibility shared by all community members—not just owners. A platform’s reputation is shaped by the quality of its discourse, and when discussions stray from constructive engagement, it affects everyone who values the space. Calling out a strawman doesn’t negate the relevance of maintaining standards. Ownership isn’t a prerequisite for caring about the integrity of a community—participation is."

 

[Trident]

AI has no brains and only collects and throws up the average human answers inlcuding garbage it finds on the internet.
Discriminating a robot is not against any law.

Yeah, that’s very true. Besides, it is extremely easy to manipulate. It would issue a set of hard statements and after 5 messages, it would issue the complete opposite.

The initial prompt as well is very important.

Just copy and paste — it will praise the post.

Copy, paste, add that you don’t trust it— it will have totally different output.

People using AI in their replies know that very well.

They copy/paste people’s replies, chat with AI and paste here when it’s satisfactory enough to prove their point.

Even AI agrees

There is only a small number of people here at MT that are anti-Comodo thread - and their agenda is censor all Comodo content. That's wrong.

Definitely not my agenda, I got no gains from the Comodo game.
I’m a mac user.

I use Windows as playground and for development.

People can use Protegent for all I care and they can talk about Banifu Sniper.

I really don’t care.

That being said, I enjoy the heated debate (before it escalates to personal insults).
I think this is where the line needs to be drawn.

The readers will decide what and whom to believe and what to install. We can provide our feedback and put the cards on the table, but we don’t need to act like the MalwareTips <insert Marvel character> that will deliver the readers from all evil.

Because... Trend Micro farts out false positives, ESET burps up only signatures, McAfee faints at the sight of a virus, Norton's constipated with bloatware, and AVG is just a digital corpse!

Yeah, 100%

 

[Pico]

You do realize that MT uses AI, right? So if AI is good enough for the MT site owners, then it is good enough for everybody else that participates here.

Sure it's good enough for any forum and any site. It generates click-bait, content doesn't matter.