Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: I got hacked, felt paranoid, made an app – GlassWire

glasswire.com

Post reply on HN
Print view View original

131–140 of 341 posts

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#131

Post by huhtenberg »

ddevault wrote: post #113

All software related to security should be open source. This particular piece of software doesn't sit at a crucial point in a secure system, but a greater deal of transparency would be appreciated. I personally avoid using closed-source tools for security purposes, and especially closed-source tools that are hoping to monetize. I use Linux, though, so I guess it doesn't really matter to me in this case :) I would als…

> All software related to security should be open source.

That's a very common and dangerous misbelief.

Security products should come from a trustworthy source. Open source doesn't imply trustworthiness. If I were to screw you, I can very well do it with an open source product and pre-compiled binaries. Some people will rebuild from source, but a vast majority will use binaries provided assuming that since I'm all "open source" then I must be trustworthy. Hell of an assumption to make if I am not.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#132

Post by mback2k »

codexon wrote: post #128
maouida wrote: post #115

Bug report: After few hours of installing the app. I got a blue screen KERNEL_SECURITY_CHECK_FAILUR which repeated 3 times. I removed the app from the start up list and disabled the windows service. now everything is back to normal. System: Win 8.1

I am surprised he managed to get the driver signed by microsoft, epecially when it is free and causes bluescreens.

The driver wasn't signed by Microsoft, but VeriSign Class 3 Code Signing 2010 CA.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#133

Post by ddevault »

huhtenberg wrote: post #131
ddevault wrote: post #113

All software related to security should be open source. This particular piece of software doesn't sit at a crucial point in a secure system, but a greater deal of transparency would be appreciated. I personally avoid using closed-source tools for security purposes, and especially closed-source tools that are hoping to monetize. I use Linux, though, so I guess it doesn't really matter to me in this case :) I would als…

> All software related to security should be open source. That's a very common and dangerous misbelief. Security products should come from a trustworthy source . Open source doesn't imply trustworthiness. If I were to screw you, I can very well do it with an open source product and pre-compiled binaries. Some people will rebuild from source, but a vast majority will use binaries provided assuming that since I'm all "…

I'd argue that both criteria needs to be met :)

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#134

Post by superpano »

Can anyone explain why the Qt DLLs are offset in size? I compared them to Qt 5.3 and even replaced them and app works fine with original Digia compiled versions. Maybe it is the digital signature? I just recall a trojan people used before by re-compiling the Qt Libraries with malicious intent.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#135

Post by [deleted] »

mback2k wrote: post #77
ToastyMallows wrote: post #44

Earlier quoted context omitted.

Awesome thanks, I'll have to check this out tonight! Just a feature that I'm thinking of right now that would be nice is if it alerted you that your VPN dropped or was disconnected.

Yep, I second that feature request. My OpenVPN connection with redirect-gateway enabled sometimes looses its route definitions and suddenly all my traffic goes directly to the internet instead.

[deleted]

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#136

Post by MichaelGG »

schoen wrote: post #11
greenwalls wrote: post #9

Earlier quoted context omitted.

Feel free to check it out in a virtual machine if you're worried, or upload to VirusTotal.com.

How does VirusTotal.com know this isn't a trojan?

I don't think that's even possible. The best you could do is analyze a program and see if it does things that are "suspicious". Otherwise it's just going to match known binaries/strings.

It'd take an amazingly complicated scanner to detect if GlassWire was, for instance, capturing your DNS requests and sending them somewhere. Or allowing updates to get loaded into its process space. I'd guess you'd need a nearly general AI to determine if any program is malicious.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#137

Post by wglb »

codexon wrote: post #130

Not to be a downer, but I don't see how this is any better than a real firewall like Comodo. If you cannot block new connections, it is likely the valuable information on your computer has been siphoned off, or glasswire bypassed before you noticed it on those fancy but useless graphs.

It is also about unexpected outgoing connections. This is mostly what I use little snitch for.

And yes, I check each one that pops up and don't put an approved one in permanently unless I know what it is.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#138

Post by schoen »

MichaelGG wrote: post #136
schoen wrote: post #11

Earlier quoted context omitted.

How does VirusTotal.com know this isn't a trojan?

I don't think that's even possible. The best you could do is analyze a program and see if it does things that are "suspicious". Otherwise it's just going to match known binaries/strings. It'd take an amazingly complicated scanner to detect if GlassWire was, for instance, capturing your DNS requests and sending them somewhere. Or allowing updates to get loaded into its process space. I'd guess you'd need a nearly gene…

That was actually the point I was hoping to make, but it can be hard to convey whether a question is meant seriously or not.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#139

Post by higherpurpose »

greenwalls wrote: post #36
blub wrote: post #32

This looks brilliant and is badly needed on Windows. However the fact that it's free gives me pause, especially since we're talking about privacy software that is not open source. What usually happens with freeware like this is that it becomes adware or dies. I think you have enough features to charge for it now.

Thank you! The bottom of our index page explains that we plan to make a paid version with more features in the future. We're working on a list of paid features. I don't think it would be appropriate for a privacy type application to include adware so please don't worry about that.

As long as you keep the main functionality free - because more people need to be using this sort of app, and I feel having to pay would be a pretty significant obstacle.
Post reply on HN