Online Armor's NEW release has a wicked new feature

Run Safer Goes GREEN!

Lets just talk about one of the new features of Online Armor (free and paid) - the green border around apps that are currently running in "Safer" mode.

Try this for a test:

1) Download a file from a browser you are running "Safer" and launch it from the browser. You will see, because the process was created by the browser (with lowered rights) that this program inherits the green bordering - a nice indication that the program is also running in "Safer" mode.

If you save the file from the browser, and then manually open it with a double click - it will run "Normal".

This may cause some new users to complain that when they download a desired file, it cannot install because of a permissions issue - BUT if this were a drive by, it would not be able to (for example) write to windows, the root of the drive, or program files directory.

This is a really cool feature (runsafer itself did not change, just the visualisation of it) - but the bordering/indication really makes it clear what's happening. I thought about not including the bordering in the free version - but it's just too cool not to make it available for everyone.

2) Set your Outlook/Outlook Express/EmailClientOfChoice to run-safer. Restart it so you see the border (indicating protection). Now, if you have an email with an attachment (PDF, whatever) - double click it from inside the mail client.

What you should see is that (in the pdf example) acrobat cranks up as you'd expect (or foxit ) - with your document - and again, with a nice green border around it.

Do the same with your IM clients - except for when you want to update them - and you have a nice, easy and visible layer of protection that really works across several key infection points. You can also run MS Word, MS Excel as safer as well with ease. (On my system I'm running Outlook, my chat clients and web browsers (FF and IE) in safer mode now)

With the addition of this visualisation - run safer is now firmly my favorite OA feature. You could experiment further with changing some other settings (for example: turn off prompts in webshield, turn off prompt on unknown and auto-allow trusted to connect to the net to off as well) and you'd probably get fairly few popups - with runsafer doing the heavy lifting in terms of protecting you against accidental clickage.

I thought I would take the time to highlight one of it's most overlooked features (and , IMHO one of the coolest)

Mike








Subscribe in a reader

What is the Shields Up Test?

Many firewall users put a good deal of emphasis on the Shields UP test over at grc.com. The purpose of this test is to check your firewall remotely to see what's open, or visible. Many modern firewalls, including Online Armor pass these tests - if the test is performed properly.

The problem is that nowadays many computers are behind modems, routers or even hardware firewalls making it very difficult, or impossible to test.

How does the test work?

Putting it simply, when you run the test the shields-up server will start to fire data at your computer. So, the data comes out of the ShieldsUP server, whizzes it's way over the internet, undersea cables, fiber, you name it. It gets to your ISP... whizzes through their systems, and out another pipe towards your home. Once it gets to your home, it squirts through your modem or router and into your PC. Once it's on your PC, it's up to the firewall to deal with it. If it sends back ANY response at all - it's a fail.

So why does my software firewall fail?

Before we start talking about software firewalls failing, how do you know the data is even reaching your software firewall? Remember above where we talked about the pathway that the packets take? There's the problem. If you have a router, or a modem - or your ISP does anything tricky - or, if you are plugged into someone's wirless network in a hotel, the packets may not actually reach your computer.

The animation below shows the ShieldsUP test in action. The first one shows a normal test, working the way the SheildsUP guys intended, reacting against a computer connected to the internet, but in all it's stealthy glory.

The second animation shows a firewall that sends something back. That's a straight fail in ShieldsUp talk.... bad firewall, go to the back of the class.

The LAST animation is the interesting one. Here, the data squirts to your PC, hits your modem which cries "I'm alive! I'm here" - this causes ShieldsUp to fail - but the data actually got nowhere near your computer at all. It's also more interesting if you have more than one computer behind your firewall/router - because you wont necessarily know which one, if any, answered it.

So - what to do in this case? You could always turn off your computer - if you still get a failure then it must be the modem. Unfortunately - if you turn off your computer, you can't request the test :(

If GRC changed the test so you could request the test, turn off your computer - then come back and collect the results 5 minutes later, then that would work for those on a fixed IP - or, if you're a tenacious sort then you can probably figure out how to configure your modem differently to not respond to those pings.

Online Armor does (when properly tested) pass these tests as do many other firewalls - but the test cannot be passed (or failed) by your firewall if the data does not reach your software firewall. Now the only remaining question is whether there is any benefit to the ShieldsUP test, other than as a quick "do I have any open ports".