1–10 of 16 posts
After quick check on my system, I realized I might have failed the test due to the presence of PrivDog (http://www.privdog.com/) on my system.
Here is a screenshot of Bank of America http://i.imgur.com/pbEFW5X.png
Is this another Superfish?
The fact that you're getting this result from the Badfish test page means that Privdog is not validating SSL certificates correctly. This is incredibly bad -- uninstall this software immediately.
Yes, it is! The fact that you're getting this result from the Badfish test page means that Privdog is not validating SSL certificates correctly . This is incredibly bad -- uninstall this software immediately.
Looks like one of those malwares that takes the ads out of a website and replaces them with its own. In order to do this over SSL/TLS it has to use its own certificate—as if that weren't bad enough, you're vulnerable to man-in-the-middle attacks through HTTPS.
It does TLS MitM, but it doesn't do any verification at all. It just accepts every self-signed cert and replaces it with a cert signed by it's locally installed root cert.
So it completely disables HTTPS protection. Everyone who has this: get rid of it, this is super-dangerous.
Looks like one of those malwares that takes the ads out of a website and replaces them with its own. In order to do this over SSL/TLS it has to use its own certificate—as if that weren't bad enough, you're vulnerable to man-in-the-middle attacks through HTTPS.
Why would comodo promote such a software ???
This really makes me put more faith into microsofts own defender.
Yes, it is! The fact that you're getting this result from the Badfish test page means that Privdog is not validating SSL certificates correctly . This is incredibly bad -- uninstall this software immediately.
Its bad enough because this was bundled with Comodo Internet Security ( https://help.comodo.com/topic-72-1-451-6840-.html and https://help.comodo.com/topic-169-1-413-6109-.html )
Edit : Just re-read the linked document. Yes, it does indicate that it's an install-time option. However, I've yet to see confirmation that Comodo software comes bundled with the SSL-intercepting version of PrivDog.