Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: I got hacked, felt paranoid, made an app – GlassWire

glasswire.com

Post reply on HN
Print view View original

201–210 of 341 posts

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#201

Post by bbarn »

I know some have mentioned white/black lists, but in addition to known malicious stuff, one feature that might be really helpful is a known list of what connections are used for, or processes/executables.

i.e., "spynetus.microsoft.akadns.net" could have some clearly Glasswire edited note that said something like "Used by Windows Defender". You could even add a +1232 Safe/-12 Unsafe that linked to a crowdsourced/forum sourced "what's this" registry. Sort of like reviews on processes or hosts.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#202

Post by andrewchambers »

Sir_Cmpwn wrote: post #177
lucb1e wrote: post #168

Earlier quoted context omitted.

> All software related to security should be open source Why just security-related software? It doesn't get special permissions or anything. All software can do equal damage on most operating systems. > I personally avoid using closed-source tools for security purposes I too prefer open source tools for security purposes, but that means that for security purposes I prefer all my software to be open source.

In a perfect world, all software would be open source. Our world isn't perfect so I just live with asking people to make their security-related software open source.

How do you know software isn't security related if you can't see its source? They might tell you it isn't :)

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#203

Post by greenwalls »

bbarn wrote: post #201

I know some have mentioned white/black lists, but in addition to known malicious stuff, one feature that might be really helpful is a known list of what connections are used for, or processes/executables. i.e., "spynetus.microsoft.akadns.net" could have some clearly Glasswire edited note that said something like "Used by Windows Defender". You could even add a +1232 Safe/-12 Unsafe that linked to a crowdsourced/forum…

I like this idea. Thanks!

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#205

Post by kijin »

bbarn wrote: post #201

I know some have mentioned white/black lists, but in addition to known malicious stuff, one feature that might be really helpful is a known list of what connections are used for, or processes/executables. i.e., "spynetus.microsoft.akadns.net" could have some clearly Glasswire edited note that said something like "Used by Windows Defender". You could even add a +1232 Safe/-12 Unsafe that linked to a crowdsourced/forum…

This is brilliant! Windows users are seriously in need of an authoritative source for information like that. Especially since the URL you mentioned looks just like a phishing site that pretends to be Microsoft and distributes spyware.

Search for any common Windows service or .dll filename, and you'll get dozens of forum threads where people who have no idea what they're talking about try to figure out whether it's a normal part of the OS or the worst virus ever. These are the same people who open Task Manager every day and blindly kill everything that they don't recognize. (Doing so does tend to make Windows run faster, which reinforces the impression that svchost.exe was indeed a virus.)

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#206

Post by zdrummond »

greenwalls wrote: post #120
ddevault wrote: post #113

All software related to security should be open source. This particular piece of software doesn't sit at a crucial point in a secure system, but a greater deal of transparency would be appreciated. I personally avoid using closed-source tools for security purposes, and especially closed-source tools that are hoping to monetize. I use Linux, though, so I guess it doesn't really matter to me in this case :) I would als…

Thanks for your feedback. We'll try to add more transparency. The calling home is for software updates and it shows up on the graph, and GlassWire can even block itself.

Update channels are very hard to secure and is a huge opportunity to take ownership of the software (and from it, the machine).

For an example, check out the Defcon 22 talk Hack All the Things[1], page ~61. NTV200-100NAS owned through unsigned updates....

[1] http://download.gtvhacker.com/file/generic/GTVHacker-DEFCON2...

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#208

Post by px1999 »

Impressive software. Simple (looking, and to use) and beautiful; but with plenty of technical depth/value. I've been running it on my machine all day, and plan to roll it out to others in my local network.

I'm definitely curious to see what the paid features will be...

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#210

Post by greenwalls »

px1999 wrote: post #208

Impressive software. Simple (looking, and to use) and beautiful; but with plenty of technical depth/value. I've been running it on my machine all day, and plan to roll it out to others in my local network. I'm definitely curious to see what the paid features will be...

Thanks! If you find any problems please contact us or post in our forum.
Post reply on HN