DefenseWall v3.03

View previous topic View next topic Go down

DefenseWall v3.03

Post by Ruhe on 26/6/2010, 02:43

DefenseWall v3.03 beta has started.

This build introduces strong anti-TOCTTOU protection, also, it includes few simplifications. Now on, if you open an untrusted document (.doc, .ppt, xls, ...), not allowed to be modified by untrusted process, with your standard editor program (WordPad, MS Office, etc), DefenseWall will allow it to modify certain document opened. Also, it solves few issues found with previous versions.

Developers thread
avatar
Ruhe
Valued Member
Valued Member

Posts : 261
Join date : 2010-04-16
Location : Germany

View user profile

Back to top Go down

Re: DefenseWall v3.03

Post by ssj100 on 26/6/2010, 03:52

Ilya writes:

Going to release it ASAP as the changes are very important.

He also writes in the topic title:

TOCTTOU is not an issue now!

Makes me think of all those people criticising Matousec at both the Wilders and the Sandboxie forums (mainly saying that this TOCTTOU isn't a new issue and has been around for 10+ years etc). It's got at least one developer fired up to fix the issue as soon as possible in any case!

It does make me wonder as to what other (hidden/unknown) vulnerabilities software like DefenseWall has though. If this vulnerability has been known for so long, how come Ilya wasn't aware of it? Did it really take a public statement by Matousec to get him (and other developers) to patch it?

_________________
Sandboxie + LUA + SRP + DEP + SuRun
Windows Firewall + NAT Router + IPSec (on-demand)
VirtualBox (on-demand)
Drive SnapShot (on-demand)
avatar
ssj100
Administrator
Administrator

Posts : 1389
Join date : 2010-04-14

View user profile http://ssj100.fullsubject.com

Back to top Go down

View previous topic View next topic Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum