AV in your Browser

[system]

I’m hardly an expert, either.

However, I know Proxomitron is able to do filtering (changing/inserting/deleting) of ssl html, js etc.

For example, I have a filter set up for bugzilla (sample bug) which inserts a call for a local stylesheet, to tweak the appearance and (imo) make it easier to read.

Proxomitron has a number of functions, including essentially re-writing webpages before presenting them to the browser. This can involve both security/privacy issues (eliminating webbugs, exploits, etc) and “eye-candy”/usability issues, like my bugzilla example.

The typical form of a web filter is to analyse the page, looking for an expression, which is replaced in the page sent to the browser.

This is an example of a web bug filter, by hpguru:

Name = "Block Web Bugs - hp2"
Active = TRUE
Bounds = "<img *>"
Limit = 512
Match = "*src=\w*"
        "& (*(height=("|)[#1-4])\1)"
        "& (*(width=("|)[#1-4])\2)"
Replace = "<img src="http://Local.ptron/wbani.gif" \1 \2 alt="Web Bug">"

Some are far more complex. So, in the case of Proxomitron, analysis is taking place.

[Lisandro]

If this is the state of the art, let’s wait for Alwil official word… It won’t be bad if we can scan SSL connections and HTTS through avast! 8)

[system]

Yes, I think it would be a good feature.

There are a few forums that have good information about the Proxomitron: Kye-U’s Unofficial Proxomitron Forum, and Castlecops, to name two.

The Proxomitron is no longer under active development, but there is at least one replacement, Proximodo, being worked on.

Filters, however, are being very actively developed and shared by a number of people.

[system]

@Tech post:18

@Thrash post:17

That´s was also where I´m thinking for and that avast can´t scan the webstream itself is right, too … otherwise it would be a security risc, but I thought avast can scan it, because the ssl stream ends on my computer (not elswhere in the net) and so here it is still decrypted.
But than avast (I think) have to be a art of plugin in the webbrowser to scan it, after the browser decryted it and before it load it … right? And thats a little bit difficult I think!?

I think (maybe I’m wrong) that will be impossible.

Web > Web Shield > Browser > Standard Shield
All data is first checked and then passed to the browser, and if the data is cached it can be also checked by Standard Shield.

I think you´re right!

It makes sense to first check the data stream from the web and than(!) give it to the browser. Otherwise the browser save the data (latest step for avast to check the data, but this is what webshield (I think) don´t want, it will be scan all before it is saved)) … and if the data will be scanned after the browser has saved it (and maybe let standard shield don´t find a virus for example in a .js file) than the browser will use it and infect the system … or something like that.

That was a bad and fast idea of me.

@Tech post:18

@Thrash post:17

Than i will be quite!

Sorry, it was not my intention to be rude.

Ouh … sorry it was a joke.
I wasn´t angry or something like that.