Jump to content

Bypassing security


ken69

Recommended Posts

ccleaner . when updating, seems to bypass Zone Alarm and go straight to it's site.

How is this possible. I've deleted cookies, but it still tells me the status of ccleaner on this computer. The name is not even in Zone Alarm Program Control List. Others like Lavasoft and spy bot etc , seek permission.

Internet Explorer and microsoft are automatically set, but even they had to ask for permission in the first place. ????

Can anyone enlighten.

Link to comment
Share on other sites

  • Moderators

Perhaps it's just sending the site URL straight into your default browser, but more importantly your default browser is already configured and has permission in the firewall settings to access the Internet, therefore CCleaner doesn't get added into the list of programs with Internet access.

Link to comment
Share on other sites

Perhaps it's just sending the site URL straight into your default browser, but more importantly your default browser is already configured and has permission in the firewall settings to access the Internet, therefore CCleaner doesn't get added into the list of programs with Internet access.

 

25744[/snapback]

 

 

 

 

 

 

Thank you And., understand that, but it still doesn't explain why Zone Alarm didn't pick up on the transfer of info from my comp to ccleaner.

If I clear cookies, how does ccleaner know who I am and whether I have the latest update???

Perhaps a Zone alarm problem!!

Link to comment
Share on other sites

  • Moderators
Thank you And., understand that, but it still doesn't explain why Zone Alarm didn't pick up on the transfer of info from my comp to ccleaner.

If I clear cookies, how does ccleaner know who I am and whether I have the latest update???

 

25845[/snapback]

 

 

 

I don't use the update check however with some/many programs the server/site compares you're installed version to the version currently available. Some programs actually download a very small .txt file with version information into the Internet Explorer Temporary Internet Files folder for the checking.

 

You could change your setting in ZA to "ASK" for your default web browser to see if it would pick it up then and prompt you about it. Other than that I don't know -- however I don't think it's a ZA problem since you've already got your browser as a trusted application with Internet access.

Link to comment
Share on other sites

ZoneAlarm isnt going to intercept something launching your browser, if it has trusted access. Notice the link it launches?

 

http://www.ccleaner.com/update/?v=1.26.218&l=1033

(Emphasis added, notice the bold number?)

 

See how it has your version number in the link? The server just blindly reads that link and says "you need an update" if it finds anything other than the latest version.

 

If you made it read "http://www.ccleaner.com/update/?v=1.10.218&l=1033 ", it would tell you that you need an update. In fact, if you made it read anything other than the latest version, you get the upgrade message.

 

No personal information is being transmitted, and this isnt a security issue.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.