Protector update v3.41 and 3.5beta

Reply New Topic
2009/11/17 9:31:32
#1
wuddel
Offline
Just can not stay away

Protector update v3.41 and 3.5beta

taken from GIJoe's Website

Quote:

= CHANGES =

3.41 (2009/11/17)
- fixed some swf/swc files are confused often
- added language files
-- polish_utf8 (thx jagi)



Quote:

= CHANGES =

3.50 beta (2009/11/17)
- modified filters can be turned on/off by preferences of Protector
- moved filters under filters_disabled/ into filters_byconfig/
- added manipulation checker against ftp worms or silent raiders
_________________
v1.24
http://www.peter-durm.de
http://www.suedtirolerspitzbuam-fanclubs.de
http://mwa.kleiner-lausbub.de
Create PDF from Post Print
Reply Quote Report Top

2009/11/17 9:34:27
#2
david
Offline
Home away from home

Re: Protector update v3.41 and 3.5beta

Thank you wuddel

I spotted the 3.41 update - but not the 3.5
Create PDF from Post Print
Reply Quote Report Top

2009/11/18 4:21:52
#3
fiammybe
Offline
Webmaster

Re: Protector update v3.41 and 3.5beta

I would hold of from the 3.50 until it is out of beta.
_________________

Me on OpenHub
Create PDF from Post Print
Reply Quote Report Top

2009/11/18 5:15:30
#4
Vaughan
Offline
Home away from home

Re: Protector update v3.41 and 3.5beta

i dunno.. Gijoes Betas are usually pretty darn stable..
_________________
Live as if you were to die tomorrow, Learn as if you were to live forever

The beauty of a living thing is not the atoms that go into it, but the way those atoms are put together!
Create PDF from Post Print
Reply Quote Report Top

2009/11/18 5:38:33
#5
fiammybe
Offline
Webmaster

Re: Protector update v3.41 and 3.5beta

true, but to the outside world, using a beta version in such an important area (security) might give the wrong impression.
_________________

Me on OpenHub
Create PDF from Post Print
Reply Quote Report Top

2009/11/18 7:29:04
#6
Will
Offline
Home away from home

Re: Protector update v3.41 and 3.5beta

didn't 3.4 JUST come out of beta as well?

Haven't we all been using a beta this whole time anyway?

I am all about 3.5
Create PDF from Post Print
Reply Quote Report Top

2009/11/18 7:32:39
#7
Vaughan
Offline
Home away from home

Re: Protector update v3.41 and 3.5beta

to be honest yep, the last 2 releases were using a beta i think.
_________________
Live as if you were to die tomorrow, Learn as if you were to live forever

The beauty of a living thing is not the atoms that go into it, but the way those atoms are put together!
Create PDF from Post Print
Reply Quote Report Top

2009/11/18 7:37:47
#8
Vaughan
Offline
Home away from home

Re: Protector update v3.41 and 3.5beta

besides, the only way really to test security modules such as this, is to get them tested in a working environment. just because the module is a final version, does not mean it gives you any more protection than a newer beta version, and that it doesn't contain any bugs. security exploits are usually only ever discovered and reported when tested in the field on live sites, and if they aren't tested in the field, then you find the beta's will take a lot longer to become final, and then you can't fully guarantee they are 100% (or as we all know 100% is a myth) efficient. they have to be put through their elements.
_________________
Live as if you were to die tomorrow, Learn as if you were to live forever

The beauty of a living thing is not the atoms that go into it, but the way those atoms are put together!
Create PDF from Post Print
Reply Quote Report Top

2009/11/18 7:52:35
#9
Vaughan
Offline
Home away from home

Re: Protector update v3.41 and 3.5beta

in regards to protector 3.41 and 3.5 beta.

the main differences are admin options for the various filters.

and

- added manipulation checker against ftp worms or silent raiders

now this new feature in 3.5

to quote gijoe

Quote:


http://www.viruslist.com/en/weblog?discuss=208187897&return=1

A notify system for such worms via FTP has just been implemented in Protector-3.50.

It checks mtime of XOOPS_ROOT_PATH and mtime/inode of XOOPS_ROOT_PATH/index.php

It works like a noisemaker in banks.

Though it cannot protect any manipulation of your site, you can avoid to scattering such worms from your site by the notifying mail.

Of course, the first priority must be "Keeping the client secure from such worm".

And it might be better "Watching sites by each other" than "Watching a site by myself" if we implement an observing system for servers.



it's a logging system which will only ever get proper testing in the field due it's nature of trying to log and catch these new types of ftp worms.. so my preference would be to go with the beta in this case.
_________________
Live as if you were to die tomorrow, Learn as if you were to live forever

The beauty of a living thing is not the atoms that go into it, but the way those atoms are put together!
Create PDF from Post Print
Reply Quote Report Top

Reply New Topic extras
 Previous Topic   Next Topic
You can view topic.
You can start a new topic.
You can reply to posts.
You cannot edit your posts.
You cannot delete your posts.
You cannot add new polls.
You cannot vote in polls.
You cannot attach files to posts.
You can post without approval.