Pale Moon a system process?

[xeon 3]

I want to monitor, but you see...

EAM version 2018.1.0.8407

Download Image

[JeremyNicoll 48]

What sort of behaviour do you want to be monitored, and why?

[xeon 3]

Being a browser I would think everything that can be monitored.

It is not a system process.

[JeremyNicoll 48]

But, being a browser, wouldn't you have to allow anything/everything?

[GT500 518]

16 hours ago, xeon said:

Being a browser I would think everything that can be monitored.

It is not a system process.

It's digitally signed right? If so, then everything will be automatically allowed.

Keep in mind that EAM doesn't monitor malicious scripts running in the browser, and can't tell the difference between normal browser activity and malicious browser activity (<- this statement is slightly misleading, as browsers themselves are not malicious, and is not intended to suggest that browsers actually act maliciously). The Behavior Blocker protects your computer by monitoring unknown processes for potentially malicious behavior, and not by scrutinizing browsers. Trying to block behavior of a browser will simply results in problems during normal usage.

[xeon 3]

23 hours ago, GT500 said:

(<- this statement is slightly misleading,

Thanks for the explanation.

I would think this is a minor bug;

"This is a system process and therefore monitoring is not supported."

Thanks GT500, you explained a lot.

 

[GT500 518]

We'll look in to why it's showing as a System process. It's more than likely, as you said, a minor bug.

[stapp 123]

Opera browser also shows as a system process.

[Nightwalker 2]

23 hours ago, GT500 said:

It's digitally signed right? If so, then everything will be automatically allowed.

Keep in mind that EAM doesn't monitor malicious scripts running in the browser, and can't tell the difference between normal browser activity and malicious browser activity (<- this statement is slightly misleading, as browsers themselves are not malicious, and is not intended to suggest that browsers actually act maliciously). The Behavior Blocker protects your computer by monitoring unknown processes for potentially malicious behavior, and not by scrutinizing browsers. Trying to block behavior of a browser will simply results in problems during normal usage.

So why is Chrome being monitored?

 

 

[xeon 3]

Now that is interesting about Chrome being monitored.

[stapp 123]

8 minutes ago, xeon said:

Now that is interesting about Chrome being monitored.

Yes it is interesting, especially when Opera and Palemoon are not being monitored..

[Quirky 6]

On 2/2/2018 at 3:36 PM, GT500 said:

It's digitally signed right? If so, then everything will be automatically allowed.

I don't think it's currently digitally signed: No more code-signing options

[JeremyNicoll 48]

I wonder if there's a difference between rules that existed before the merged app rules/BB screen was invented, and those that get displayed from now on? 

I've lots of programs whcih say "Monitored" but also have the green tick (pity one can't sort on that column) saying they are digitally signed.  And also quite a few 'Trusted' programs which don't have a tick - does that mean things I previously defined a rule for myself?

[xeon 3]

Possibly on the first sentence.

On the second, i have not defined any rules.

[xeon 3]

6 hours ago, CBMman said:

I don't think it's currently digitally signed: No more code-signing options

"Code/digitally signing" like using an umbrella to stop missiles, big money maker that's all.

[GT500 518]

On 2/3/2018 at 9:37 AM, Nightwalker said:

So why is Chrome being monitored?

There's a difference between "trusted" and "not monitored". The Behavior Blocker automatically allows any "trusted" processes, even though they are monitored. Excluded processes are not monitored, as they should not be monitored for one reason or another.

 

On 2/3/2018 at 10:58 AM, CBMman said:

I don't think it's currently digitally signed: No more code-signing options

That's unfortunate, however there's a good reason why code signing certificates are not easy to obtain. We do not want it to be easy for criminals to abuse them. They are, after all, used by software companies to establish trust and help users validate where software came from and that it has not been tampered with.