Dedicated browser - Teh Forum

<body> <div id="header"> <span class="left"> <span class="back"><a href="lthread_list.php?webtag=DEFAULT"><span class="image mobile_back" title="Back"></span></a></span> <span class="image mobile_logo" title="Beehive Forum Logo"></span> </span> <ul> <li> <a class="reply_all" href="lpost.php?webtag=DEFAULT&reply_to=41619.0&return_msg=41619.1"> <span class="image mobile_reply_all"></span><span class="text">Reply to All</span> </a> </li> <li> <a class="navigation" href="#"> <span class="image mobile_navigation"></span><span class="text">Show messages</span> </a> </li> <li> <a class="main" href="#"><span class="image mobile_menu" title="Menu"></span> </a> </li> </ul> </div> <div class="menu main"> <ul> <li><a href="lthread_list.php?webtag=DEFAULT">Messages</a></li> <li><a href="lpm.php?webtag=DEFAULT">Inbox</a></li> <li><a href="lsearch.php?webtag=DEFAULT">Search</a></li> <li><a href="llogon.php?webtag=DEFAULT">Login</a></li> </ul> </div> <div class="menu navigation"><a href="lmessages.php?webtag=DEFAULT&msg=41619.1">1–10</a></div> <div id="page_content"> <h3 class="thread_title"><a href="index.php?webtag=DEFAULT&amp;msg=41619.1">Dedicated browser</a> </h3> <div id="messages" data-navigation="41619_1_10_10"> <a name="a41619_1"></a><div class="message" id="message_41619_1"> <div class="message_header"> <div class="message_from"> From: ANT_THOMAS<span class="message_time"> 5 Nov 2015 09:33</span> <div class="clearer"></div> </div><div class="message_to">To: ALL<span class="message_count">1 of 10</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41619.1">41619.1</a></div> <div class="message_body"> I've recently been covering some of the IT stuff at work whilst the normal guy is on holiday, the usual crap - "my printer isn't working" "why have my icons moved" etc. But, this week I've had to sort two computers with viruses that have embedded some javascript into sites, one showing ads, the other just slowing things down massively with nothing visible on screen, just in source, wouldn't be surprised if it was passing data elsewhere, forgot to copy the exact JS line.<br /><br /> Our main system is browser based and we use Firefox.<br /><br /> Is it possible to build firefox as a dedicated portable program that is only used to browse a single site?<br /><br /> Would this be resistant to most virus attempts on browsers?<br /><br /> Or any other ideas the secure the browser based system in some way?</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41619.1&return_msg=41619.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41619.1"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41619_2"></a><div class="message" id="message_41619_2"> <div class="message_header"> <div class="message_from"> From: Drew (X3N0PH0N)<span class="message_time"> 5 Nov 2015 10:01</span> <div class="clearer"></div> </div><div class="message_to">To: ANT_THOMAS <span><span class="image post_read" title="Read: 5 Nov 2015 10:03"></span></span> <span class="message_count">2 of 10</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41619.2">41619.2</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41619.1#a41619_1" target="_self">41619.1</a></div> <div class="message_body"> I assume Windows? If it were Linux you could sandbox it, chroot it, containerise it etc...<br /><br /> If you can't do that then at the least I'd install <a href="https://addons.mozilla.org/en-US/firefox/addon/noscript/">noscript</a>, <a href="https://addons.mozilla.org/en-us/firefox/addon/ublock-origin/">µblock</a> and <a href="https://www.eff.org/https-everywhere">https everywhere</a>, whitelisting necessary sites as needed.<br /><br /> <div class="edit_text">EDITED: 5 Nov 2015 10:10 by X3N0PH0N</div> </div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41619.2&return_msg=41619.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41619.2"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41619_3"></a><div class="message" id="message_41619_3"> <div class="message_header"> <div class="message_from"> From: Drew (X3N0PH0N)<span class="message_time"> 5 Nov 2015 10:08</span> <div class="clearer"></div> </div><div class="message_to">To: Drew (X3N0PH0N) <span><span class="image post_read" title="Read: 5 Nov 2015 10:08"></span></span> <span class="message_count">3 of 10</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41619.3">41619.3</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41619.1#a41619_2" target="_self">41619.2</a></div> <div class="message_body"> Oh and no Flash/Java, obviously.</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41619.3&return_msg=41619.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41619.3"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41619_4"></a><div class="message" id="message_41619_4"> <div class="message_header"> <div class="message_from"> From: ANT_THOMAS<span class="message_time"> 5 Nov 2015 10:28</span> <div class="clearer"></div> </div><div class="message_to">To: Drew (X3N0PH0N) <span><span class="image post_read" title="Read: 5 Nov 2015 10:34"></span></span> <span class="message_count">4 of 10</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41619.4">41619.4</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41619.1#a41619_2" target="_self">41619.2</a></div> <div class="message_body"> Yep, Windows.<br /><br /> noscript looks handy for sure.<br /><br /> Only problem is that people also use Firefox for general browsing at times, I know I do.<br /><br /> Maybe a portable version of Firefox that is centrally served with address bars, menus etc disabled but with various addons to protect installed.<div class="edit_text">EDITED: 5 Nov 2015 10:28 by ANT_THOMAS</div> </div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41619.4&return_msg=41619.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41619.4"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41619_5"></a><div class="message" id="message_41619_5"> <div class="message_header"> <div class="message_from"> From: Drew (X3N0PH0N)<span class="message_time"> 5 Nov 2015 10:35</span> <div class="clearer"></div> </div><div class="message_to">To: ANT_THOMAS <span><span class="image post_read" title="Read: 5 Nov 2015 10:37"></span></span> <span class="message_count">5 of 10</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41619.5">41619.5</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41619.1#a41619_4" target="_self">41619.4</a></div> <div class="message_body"> Noscript is a good start but most malware gets in through ads so an adblocker (and ublock origin is the best) is a must.<br /><br /> There's also Privacy Badger, also by the EFF, which is a more complete solution but will require more fiddling.<br /><br /> And yeah, definitely-without-a-doubt no Flash.<br /><br /> None of that should hamper normal browsing.</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41619.5&return_msg=41619.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41619.5"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41619_6"></a><div class="message" id="message_41619_6"> <div class="message_header"> <div class="message_from"> From: CHYRON (DSMITHHFX)<span class="message_time"> 5 Nov 2015 10:50</span> <div class="clearer"></div> </div><div class="message_to">To: ANT_THOMAS <span><span class="image post_read" title="Read: 5 Nov 2015 11:09"></span></span> <span class="message_count">6 of 10</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41619.6">41619.6</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41619.1#a41619_1" target="_self">41619.1</a></div> <div class="message_body"> You want them to only access the company site? Can you get the site on a non-standard port and block 80 at the firewall?</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41619.6&return_msg=41619.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41619.6"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41619_7"></a><div class="message" id="message_41619_7"> <div class="message_header"> <div class="message_from"> From: ANT_THOMAS<span class="message_time"> 5 Nov 2015 11:12</span> <div class="clearer"></div> </div><div class="message_to">To: CHYRON (DSMITHHFX) <span><span class="image post_read" title="Read: 5 Nov 2015 14:10"></span></span> <span class="message_count">7 of 10</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41619.7">41619.7</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41619.1#a41619_6" target="_self">41619.6</a></div> <div class="message_body"> Not exactly, I have no issue with browsing.<br /><br /> What I want to do is essentially wrap the company site in its own program to try and make it more secure.<br /><br /> (this will probably never happen, but because I've seen two separate users have issues where something has been injected into our main system I think it is worth suggesting if there is a solution).</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41619.7&return_msg=41619.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41619.7"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41619_8"></a><div class="message" id="message_41619_8"> <div class="message_header"> <div class="message_from"> From: Drew (X3N0PH0N)<span class="message_time"> 5 Nov 2015 12:54</span> <div class="clearer"></div> </div><div class="message_to">To: ANT_THOMAS <span><span class="image post_read" title="Read: 5 Nov 2015 12:57"></span></span> <span class="message_count">8 of 10</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41619.8">41619.8</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41619.1#a41619_7" target="_self">41619.7</a></div> <div class="message_body"> If that's what you want to do you could maybe use something like <a href="http://electron.atom.io/">Electron</a> and just build an app that does nothing but point to that one website. Electron is essentially webkit as a platform for building desktop apps on and I'd imagine that getting it to point to a single website would be the simplest app you could make.<br /><br /> </div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41619.8&return_msg=41619.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41619.8"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41619_9"></a><div class="message" id="message_41619_9"> <div class="message_header"> <div class="message_from"> From: CHYRON (DSMITHHFX)<span class="message_time"> 5 Nov 2015 14:17</span> <div class="clearer"></div> </div><div class="message_to">To: ANT_THOMAS <span><span class="image post_read" title="Read: 5 Nov 2015 14:20"></span></span> <span class="message_count">9 of 10</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41619.9">41619.9</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41619.1#a41619_7" target="_self">41619.7</a></div> <div class="message_body"> OK, you lost me. We've had issues with javascripts 'injected' on to clients' web pages, but that has to do with the server security (lack thereof), not the browser (though if you prevented them from running javascripts, then they wouldn't actually be able to do SFA so um... nevermind).</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41619.9&return_msg=41619.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41619.9"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41619_10"></a><div class="message" id="message_41619_10"> <div class="message_header"> <div class="message_from"> From: Mizzy<span class="message_time"> 6 Nov 2015 19:40</span> <div class="clearer"></div> </div><div class="message_to">To: ANT_THOMAS <span><span class="image post_read" title="Read: 6 Nov 2015 21:11"></span></span> <span class="message_count">10 of 10</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41619.10">41619.10</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41619.1#a41619_1" target="_self">41619.1</a></div> <div class="message_body"> Typical attack progression: malwares pay load dropper roots your box then deploys initial payload which is ad injection, or click fraud agents , after a day or so the machine gets sold on and the data exfiltraton is turned on and your data starts moving out the building, once that's complete or they get bored you end up with the nastiest of all the ramsomeware package, you've probably already done a full deep scan, I'd recommend a second with an alternate AV as the payload dropper looks to see which AV your running and drops malware that isn't detected.<br /> HTH<br /> </div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41619.10&return_msg=41619.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41619.10"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div></div> </div> </body>