Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: I got hacked, felt paranoid, made an app – GlassWire

glasswire.com

Post reply on HN
Print view View original

311–320 of 341 posts

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#311

Post by bkurtz13 »

azatris wrote: post #228
slavik81 wrote: post #112

Earlier quoted context omitted.

It's a little over-simplified, I think. In migrating some technical writers to git, I thought it might be a good tool to introduce people to git. I ran into 5 problems: 1. It spit out vague error messages, requiring repeating the action in the CLI to see git's actual, specific problem. 2. There's no option to do the initial clone via ssh, which was a problem because http was failing to download the full repository. 3…

I've found Sourcetree to be powerful, simple and beautiful. It is also clear and good for learning.

I was able to get some people who were apprehensive about git on board after finding SourceTree.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#312

Post by drzaiusapelord »

highercenter wrote: post #257

I got hacked, felt paranoid, made an app... Yeah right! This app is not a one man show! This app, with all it's license stuff, backdoors etc.. all ready to know a lot of all your network traffic going in and out, and you agree upon all this when you install it. Now YOU got hacked! Or do you think the app will also show in detail what data they store and share on their servers and third parties and more? 767 point and…

Not to mention, this kind of app does us no good. Its another little snitch clone. Joe End User isn't making heads or tails of this. Why would he want to?

What I want is a simple no-worry IDS/IPS I can install on easily on Win or OSX machines. Have it use the rules Snort uses. Make it dead simple to install. Now I don't have to spend hours digging through logs or graphs by apps like these. The IDS/IPS just stops hackers from entering. I'm a sysadmin and I run IDS and its a game-changer for us. Yet somehow in the home user space, its non-existant.

No idea on how bad the licensing on those Snort rules is, but a 1-click WinSnort that auto-updated itself would be a game changer. I find it amusing that everyone lives in fear of Cryptolocker when a simple rule can detect Cryptolocker traffic and deny it access to the mothership to generate a key. No key, no encryption.

I could see this evolving into a smart firewall type app on top of these static rules. It could say, "Hey why is guy downloading an unsigned exe from a computer on the botnet list? I'll block that." Or "why is this guy sending out suddenly smtp connections to thousands of servers. I'll just block that."

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#314

Post by raesene4 »

highercenter wrote: post #257

I got hacked, felt paranoid, made an app... Yeah right! This app is not a one man show! This app, with all it's license stuff, backdoors etc.. all ready to know a lot of all your network traffic going in and out, and you agree upon all this when you install it. Now YOU got hacked! Or do you think the app will also show in detail what data they store and share on their servers and third parties and more? 767 point and…

I'm all for caution when it comes to installing software, but it seems in your comment that you're suggesting that this software is actually malicious.

Do you have any evidence of malicious intent/execution from this software, or this just your presumption based on their marketing?

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#315

Post by breadrab »

Really good looking software. Very rare. But...

Isn't the best "trojan" horse that one, that comes as a security programm?

I'm always afraid, that software programs that aren't open-source steal sensitive data from my computer and upload it to the web. I experienced, how easy that is and no user ever knows, especially on MS Windows.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#316

Post by raesene4 »

drzaiusapelord wrote: post #312
highercenter wrote: post #257

I got hacked, felt paranoid, made an app... Yeah right! This app is not a one man show! This app, with all it's license stuff, backdoors etc.. all ready to know a lot of all your network traffic going in and out, and you agree upon all this when you install it. Now YOU got hacked! Or do you think the app will also show in detail what data they store and share on their servers and third parties and more? 767 point and…

Not to mention, this kind of app does us no good. Its another little snitch clone. Joe End User isn't making heads or tails of this. Why would he want to? What I want is a simple no-worry IDS/IPS I can install on easily on Win or OSX machines. Have it use the rules Snort uses. Make it dead simple to install. Now I don't have to spend hours digging through logs or graphs by apps like these. The IDS/IPS just stops hack…

For me, I don't think that applications like this are targeted at "Joe End User" more at technical people who would like more information about what network connections are happening from their machine.

Personally I've been looking for a little snitch equivalent for Windows for a while now and this one seems like a good starting point.

I think that the problem you might have with IDS/IPS for end user machines is similar to the problems that end users would have with this kind of software. Namely when it blocks/alerts it's very hard to translate the reason for the block (a SNORT rule) into something that's meaningful for a non-technical user.

the alternative is just to silently block, but that leaves the user with a problem whenever there is a false positive (which is a fairly large problem with network IDS/IPS in my experience)

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#317

Post by nyrina »

cledet wrote: post #105
ManFromUranus wrote: post #102

Earlier quoted context omitted.

There are windows design guidelines, most developers/ISV's adhere to them. Another point: many companies don't want to spend any time or effort on design, as for most applications, it won't translate into additional revenue. I would argue that many customers don't even care what the app looks like so long as it works and they can figure out how to use it. Also you don't want to have to re-learn how to computer for ev…

Good design will make a product understandable

I think in this case, there is a difference between UX and Design. They do overlap, but not completely.

UX is about the user experience - or rather, the user understanding the program.

Design is about the application looking good.

You can have both, or you can have either one, or neither.

The command prompt is a good example of the former - I'm sure we can all agree that the design isn't great, but functionality wise, it's doing it's job perfect. Giving commands to experienced users.

Perhaps it's my understanding of basic 3D programs, but I would point to 3D programs being the exact opposite, having a great design without a good UX. I always feel like I'm limited, in that I don't understand the millions of options. The programs themselves looks great, but I just don't understand how to use 90% of their functions.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#319

Post by slavik81 »

azatris wrote: post #228
slavik81 wrote: post #112

Earlier quoted context omitted.

It's a little over-simplified, I think. In migrating some technical writers to git, I thought it might be a good tool to introduce people to git. I ran into 5 problems: 1. It spit out vague error messages, requiring repeating the action in the CLI to see git's actual, specific problem. 2. There's no option to do the initial clone via ssh, which was a problem because http was failing to download the full repository. 3…

I've found Sourcetree to be powerful, simple and beautiful. It is also clear and good for learning.

Huh. I didn't realize Sourcetree was available for Windows. That would have been worth a shot.

In the end, I introduced them to the git CLI, simply because I could always answer or find an answer to their questions about it.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#320

Post by drzaiusapelord »

raesene4 wrote: post #316
drzaiusapelord wrote: post #312

Earlier quoted context omitted.

Not to mention, this kind of app does us no good. Its another little snitch clone. Joe End User isn't making heads or tails of this. Why would he want to? What I want is a simple no-worry IDS/IPS I can install on easily on Win or OSX machines. Have it use the rules Snort uses. Make it dead simple to install. Now I don't have to spend hours digging through logs or graphs by apps like these. The IDS/IPS just stops hack…

For me, I don't think that applications like this are targeted at "Joe End User" more at technical people who would like more information about what network connections are happening from their machine. Personally I've been looking for a little snitch equivalent for Windows for a while now and this one seems like a good starting point. I think that the problem you might have with IDS/IPS for end user machines is simi…

You could say the same thing about AV software. Just log events in a tray application. False positives are simply going to happen. They happen with everyday AV. Well written rules won't have this issue often and for end users it'll be edge cases they don't have to worry about. If it is a serious case they can call their tech savvy son for help, just like they do now with all other issues.
Post reply on HN