Sampei.Nihira

A possible future vulnerability based on that code. It may be that it doesn't even work on Windows XP. Interesting is the possibility offered by Novirusthanks OSA which has 2 specific rules:

In my opinion in XP Home the file is absent. My PC with XP Home is therefore safe from the exploit.

Gmail???? Have you read this article? https://www.ghacks.net/2019/05/18/gmail-tracks-all-your-purchases-and-it-is-difficult-to-delete-them-and-impossible-to-stop/

@roytam1 You are the best. Congratulations.

https://www.zdnet.com/article/windows-10-zero-day-exploit-code-released-online/ Can not run. There is no Schtask.exe in System32. In XP, it's mstask.exe.

@ To all user Chrome 360. Check to see if this privacy issue and related fix are present: https://www.techpowerup.com/247931/chrome-69-adds-forced-login-threatens-privacy-how-to-fix-it

Nanobot informs me elsewhere, that DoaJC_Blogger guy is working to bring Chromium 76 to Win Xp: https://browser.taokaizen.com/forum/viewtopic.php?p=3219#p3219 https://browser.taokaizen.com/forum/viewtopic.php?t=2766

That's no good. The effectiveness of the sandbox is directly proportional to the kernel that hosts it. If the OS is unpatched in the future, the effectiveness of the sandbox may be affected. Furthermore, the effectiveness of sandboxes depends on other factors, which reduce their protection in OS like XP. For example, the protection of Chrome's sandbox is less effective in Windows XP: https://chromium.googlesource.com/chromium/src/+/master/docs/design/sandbox.md https://threatpost.com/using-kernel-exploits-bypass-sandboxes-fun-and-profit-031813/77638/

___________________________________________________ A specifying custom settings in the search URL can reduce privacy by leaking data to the clicked result sites. I prefer the obfuscated URL of Startpage compared to the non-obfuscated URL from DuckDuckGo.

Hi. It is difficult to make a Chrome setting with a good level of usability and privacy. Could you insert some tests? Thank you. P.S. I would be more interested in seeing the connections blocked with UBO https://pazguille.github.io/demo-battery-api/ https://www.whatismyreferer.com/ https://audiofingerprint.openwpm.com/ https://browserleaks.com/webgl https://browserleaks.com/canvas https://browserleaks.com/webrtc https://browserleaks.com/fonts https://browserleaks.com/rects

Any unauthorized modifications that can be made by the browser are always to be avoided.

Why not use the method I use? Set as homepage Startpage and a different Search Engine.

t is not an inconvenience, it is an advantage. If you can't do it, not even malware can do it. Act maliciously by means of the browser to modify sensitive areas of the system. I don't know if you remember this 3D: With the browser running with limited rights it was not even possible to write the registry keys.

It is not necessary to use a extension for the Search Engines management: It is possible to add other search engines in the way I described in the first topic:

With New Moon I set Startpage as my homepage and Ecosia as deafult's search engine. ______________________________________________________________________________________________ If I use DuckduckGo with I.E.8 I don't have access to the search engine settings. Qwant Lite also works with IE8. But I think research is penalized. You could verify? TH. ***** EDIT **** Interesting tool to add a search engine such as Duckduckgo or Qwant Lite to Internet Explorer. Can anyone make it work? http://www.enhanceie.com/ie/searchbuilder.asp

I could do it but I won't. And excuse me Vistalover for this if I do not collect your request. Users of that forum are very rude, misguided and prejudiced. They have the donkeys they deserve. Sorry again.

https://www.ghacks.net/2019/05/14/mozilla-releases-add-on-to-fix-signing-issue-in-older-firefox-versions/ https://addons.mozilla.org/en-US/firefox/addon/disabled-add-on-fix-52-56/

Private Search Engines - The Ultimate Guide (2019) recently updated by Sven Taylor elects Startpage as the best private search engine. https://restoreprivacy.com/private-search-engine/ Pale Moon default search engines do not include Startpage. For those who want to add this search engine: https://addons.palemoon.org/search-plugins/ With New Moon I choose to save my personal settings without a cookie. I set the Homepage in New Moon via the Obfuscated URL With I.E.8 it is not possible to use Startpage,I use DuckDuckGo. Which Search Engine do you prefer?

Pro New Moon - Less RAM usage - More fluid - The development of Pale Moon does not stop,the future of Basilisk is uncertain. - Developers tend to consider Pale Moon safer than Basilisk* * = This could be even more true given that the development of webextensions in the original Basilisk project was interrupted and was restored here. Therefore it is possible that any present and future security flaws in this area cannot be patched by Roytam1. But this must be asked directly from Roytam1 himself.

8/23. The Exploit Test Tool is a very specific test to evaluate the areas of intervention or not of the Anti-Exploit. OSA has been specifically designed to be combined with other security softwares. With regard to an overlap of intervention that could inhibit softwares, given that I myself collaborated with the developer Andreas on many improvements, I exclude it categorically.Especially for MBAE + OSA in the versions I use in Windows XP.

Usually it is with Flash that you can have some problems. Flash is always run out-of-process. With Process Explorer version 16.12 it is possible to highlight what has been said. It is also interesting to note: - The "Description" reads "Plugin Container for New Moon" (not Pale Moon) and the "Company Name" is "Mozilla Corporation". - Both PaleMoon.exe and Plugin-container.exe are not signed. - Plugin-container.exe also injected (by default) the MBAE dll.

@Mathwiz Th. Have you checked whether the changes cause problems with the plugin-container.exe? With XP.......