Win 11 system requirements and compatibility talk

Started 5 months ago | Discussions thread
abelits
abelits Contributing Member • Posts: 810
Re: Win 11 system requirements and compatibility talk

Austinian wrote:

abelits wrote:

Austinian wrote:

abelits wrote:

Austinian wrote:

Great idea, too obstructive. If it did a popup message like the firewall dose when a new application tries to access a folder it would work

That's a good idea; I know what to expect, but a naive user may not.

No one can reliably make a decision, what is and what is not a legitimate file access based only on the names of files and programs involved. It's not difficult for an attacker to give his program a legitimate-sounding name, and most exploits run from the context of legitimate vulnerable processes in the first place.

This can also block a scheduled legitimate procedure that runs unattended, for example, backup, while malware will be running under the guise of another existing service.

Should such malware ever invade my system it would still run if I didn't use Controlled folders. If you expect any single defense to be absolutely perfect you're likely to be disappointed. Consider it just another brick in the security wall.

Computer security does not work like that. Defense is supposed to be in depth, not in breadth, with all those "bricks" laid randomly in hope that the next attack will hit them and not the widely open space next to them.

Surely you don't imagine I rely on Controlled folders for all my security.

That's not the point. The problem is, its protection is very, very specific, and attacks successfully avoid it. It's about as useful as a copy of antivirus from three years ago -- sure, you might happen to get a specific old version of malware that existed then, however most likely if there will be a threat, it will be something else. In the same way, malware may just happen to run an executable called "my_31337_5p10i7.exe" to encrypt your data, like they did at some point before, however most likely it will hijack a program that is supposed to be able to access your files.

If I were to see a program blocked aside from one I'd just executed myself for the first time ( I haven't), I wouldn't whitelist it but start an investigation instead.

And cause data inconsistency for some service that happened to be recording its state at the time.

I have seen no evidence of Controlled folders causing any problems in my system.

Unless I see a good reason to not use them, I plan to continue despite your endless criticism.

It's a matter of probabilities. It's much more likely to happen than a successful prevention of an attack.

 abelits's gear list:abelits's gear list
Fujifilm X-Pro1 Fujifilm X-T2 Fujifilm XF 35mm F1.4 R Fujifilm XF 14mm F2.8 R Fujifilm XF 18-55mm F2.8-4 R LM OIS +16 more
Post (hide subjects) Posted by
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
Keyboard shortcuts:
FForum PPrevious NNext WNext unread UUpvote SSubscribe RReply QQuote BBookmark MMy threads
Color scheme? Blue / Yellow