Solved Enabled Secunias' "secure browsing" and almost pooped my pants

[RoloDman]

Enabled Secunias' "secure browsing" and almost pooped my pants

Please see attached image.

What should/can be done about this?

 

[ignatzatsonic]

I just went to Secunia and attempted to do what you did.

Couldn't find a link about "secure browsing".

Can you post it so I can compare my results to yours?

I did run their online scanner and got the expected results.

 

[RoloDman]

you would need to download their scanner program and enable it there in settings. link should be on home page

 

[ignatzatsonic]

Ok; I just downloaded "PSISetup.exe" and will install and run it.

Is that what you downloaded?

 

[RoloDman]

yes it is

you can turn on secure browsing in the configuration panel, I was mistaken when I reffered to it as settings

 

[ignatzatsonic]

I just ran it.

I don't see a tab in my case about "Secure Browsing" like you do.

My scan found only 1 "insecure"---Thunderbird. My version is quite old and I'm not going to update it.

Notice that my Adobe Flash Player 11 is patched and OK, unlike yours.

My Internet Explorer 8 is also patched and OK, even though I don't use IE.

My Sun Java 6 is patched and OK.

VLC is not installed on my system.

Have you attempted to patch Sun Java, Adobe Flash, and IE?

 

[RoloDman]

go into configuration, then settings then tick enable secure browsing. As far as I knew I was up to date. Maybe I dont understand patch.

 

[ignatzatsonic]

OK, I enabled Secure Browsing. Below are the results. Pretty much like yours.

I have no idea why it says my Java, Flash, and IE or OK in the first scan and unpatched in the second.

I'm not going to worry about it.

All I can suggest is to ask at Secunia's own forums.

 

[RoloDman]

on my way and i'm gonna make em wish they were never born!

 

[ignatzatsonic]

OK; post back in this thread with any new information.

 

[ignatzatsonic]

Another thing I don't understand:

Why does your screen shot show a Secunia rating of 100%, even though you were unpatched and vulnerable?

I got a 93%, whatever that means.

 

[RoloDman]

i dont think the secure browsing score is factored in.

 

[Phone Man]

Got the same thing on my system. The main screen is clean but the Safe Browser shows problems. On mine I show VLC plugin but that plugin is not installed on my browsers so this report is a little misleading.



Jim :banghead:

 

[Phone Man]

RoloDman,
I saw your post at Secunia and I posted a reply. I found this statement on another thread at Secunia.

In the scan results, only vulnerabilities that have patches available are reported.
The secure browsing feature lists unpatched vulnerabilities as well. This is an aid to deciding which browser to use. In this case, all browsers are deemed to be affected so the only steps you can take is to be careful which website you visit and hope your antivirus will block anything you come across.

That is what I am getting so that may be the reason. Hope someone else gives a reply to confirm that statement.

Jim

 

[RoloDman]

here is a link to the Secunia thread I created. So basically the alerts are there but cant be remedied at the moment. The alert is just that, an alert.

https://secunia.com/community/forum...ure_browser_mode_what_does_it_all_mean_bazzle

 

[ignatzatsonic]

RoloDman,
I saw your post at Secunia and I posted a reply. I found this statement on another thread at Secunia.

In the scan results, only vulnerabilities that have patches available are reported.
The secure browsing feature lists unpatched vulnerabilities as well. This is an aid to deciding which browser to use. In this case, all browsers are deemed to be affected so the only steps you can take is to be careful which website you visit and hope your antivirus will block anything you come across.

That is what I am getting so that may be the reason. Hope someone else gives a reply to confirm that statement.

Jim

Jim:

If my reading comprehension and understanding of the issue is correct, that quoted passage should read:

"The secure browsing feature lists unpatchable vulnerabilities as well"

rather than

"The secure browsing feature lists unpatched vulnerbilities as well" (which is misleading to me).

Correct?

And I wonder why the default scan (without enabling "secure browsing") should indicate a patched state when in fact you are not. I was not even previously aware of that "secure browsing" choice and had been lulled into a false sense of security.

All in all--less reason for me to bother with Secunia.

 

[RoloDman]

RoloDman,
I saw your post at Secunia and I posted a reply. I found this statement on another thread at Secunia.

In the scan results, only vulnerabilities that have patches available are reported.
The secure browsing feature lists unpatched vulnerabilities as well. This is an aid to deciding which browser to use. In this case, all browsers are deemed to be affected so the only steps you can take is to be careful which website you visit and hope your antivirus will block anything you come across.

That is what I am getting so that may be the reason. Hope someone else gives a reply to confirm that statement.

Jim

Jim:

If my reading comprehension and understanding of the issue is correct, that quoted passage should read:

"The secure browsing feature lists unpatchable vulnerabilities as well"

rather than

"The secure browsing feature lists unpatched vulnerbilities as well" (which is misleading to me).

Correct?

And I wonder why the default scan (without enabling "secure browsing") should indicate a patched state when in fact you are not. I was not even previously aware of that "secure browsing" choice and had been lulled into a false sense of security.

All in all--less reason for me to bother with Secunia.

thems sounds like fighting words to me

 

[profdlp]

Maybe their definition of "Safe Browsing" is like the definition of "Safe Sex" - anything less than complete abstinence involves some risk.

 

[RoloDman]

you earned your rep..

 

[A Guy]

Secunia reports vulnerabilities in the browsers and their addons. If there is no patch, or update to fix it, they report currently no solution. With the state of these programs, they are almost always reported as insecure with no solution. I've been using PSI since it came out, and that has always been the case. There was one time I remember all 3 of my browsers (Opera, FF, and IE) being secure. If you have all the available solutions, you are as protected as anyone.

A Guy