ReHIPS forum

English Subforum => ReHIPS => Topic started by: XhenEd on June 18, 2016, 05:51:16 AM

Title: Isolated Cyberfox and IDM
Post by: XhenEd on June 18, 2016, 05:51:16 AM
Whenever IDM, with its extension, tries to capture the links to attempt to download, isolated Cyberfox would return an error "Cannot transfer the download to IDM". But if Cyberfox is outside ReHIPS' isolation, IDM can capture the link successfully.

I only tried pdf files with this.

Surprisingly, Pale Moon has no problem about this. Firefox is maybe good enough for reproducing this issue since Cyberfox is very close to Firefox.
Title: Re: Isolated Cyberfox and IDM
Post by: aDVll on June 18, 2016, 09:58:23 AM
Some info so i can try to reproduce. What version of Cyberfox and do i get the 64 bit? About idm i assume latest.
Also the most important does Cyberfox run on the same desktop without hooks or on a different desktop with hooks and what about palemoon?
Title: Re: Isolated Cyberfox and IDM
Post by: XhenEd on June 18, 2016, 12:06:24 PM
Cyberfox Intel 64-bit. IDM latest.
Unchecked separate desktop and hook control.

Pale Moon is same as before. No separate desktop and hook control. What is different is that Pale Moon has no IDM extension because the extension is not yet compatible with Pale Moon.
Title: Re: Isolated Cyberfox and IDM
Post by: aDVll on June 18, 2016, 12:10:08 PM
Probably idm addon can't communicate with the idm application because it's isolated. What you want to try is isolating idm application on the same isolated environment as Cyberfox.
Btw i have no idea what you mean with palemoon. You are saying so idm can get links from palemoon without an addon but it can't do it on Cyberfox?
Title: Re: Isolated Cyberfox and IDM
Post by: XhenEd on June 18, 2016, 12:11:40 PM
Quote from: aDVll on June 18, 2016, 12:10:08 PM
Probably idm addon can't communicate with the idm application because it's isolated. What you want to try is isolating idm application on the same isolated environment as Cyberfox.
Btw i have no idea what you mean with palemoon. You are saying so idm can get links from palemoon without an addon but it can't do it on Cyberfox?
About Pale Moon, that's why I'm surprised.  ;D
Title: Re: Isolated Cyberfox and IDM
Post by: aDVll on June 18, 2016, 12:13:38 PM
Just try isolating idm on same isolating environment as Cyberfox and we go for there. I haven't really used idm for years because it has minimal benefit for me so i am not up to date on how they deal with different browsers.
Title: Re: Isolated Cyberfox and IDM
Post by: XhenEd on June 18, 2016, 12:52:45 PM
IDM wouldn't launch if it's in an isolated environment.
Title: Re: Isolated Cyberfox and IDM
Post by: aDVll on June 18, 2016, 12:57:25 PM
It probably needs hooks that's why.
Title: Re: Isolated Cyberfox and IDM
Post by: XhenEd on June 18, 2016, 01:06:13 PM
I tried to put it in a separate desktop with hook control enabled, but it still wouldn't work. Yes, IDM would now launch, but the same error occurred when trying to download a pdf file.
Title: Re: Isolated Cyberfox and IDM
Post by: aDVll on June 18, 2016, 01:34:34 PM
Quote from: XhenEd on June 18, 2016, 01:06:13 PM
I tried to put it in a separate desktop with hook control enabled, but it still wouldn't work. Yes, IDM would now launch, but the same error occurred when trying to download a pdf file.
Ok will look at it later today when i get some time but don't get your hopes up. I already told you all the ideas i had so 99% you will have to wait for the devs ;)

EDIT: Totally forgot about this even though i prepared everything. Sorry. Will try it in a bit.
Title: Re: Isolated Cyberfox and IDM
Post by: aDVll on June 23, 2016, 09:37:11 PM
Question. It's saying addon is not compatible with cyberfox 47. I tried to get the addon from here. Any ideas what i am doing wrong?
http://www.internetdownloadmanager.com/support/firefox_integration2.html (http://www.internetdownloadmanager.com/support/firefox_integration2.html)

I can't even get idm to grab stuff without cyberfox isolated. Something is not right. Waiting for more info.
Title: Re: Isolated Cyberfox and IDM
Post by: XhenEd on June 24, 2016, 04:06:51 AM
Quote from: aDVll on June 23, 2016, 09:37:11 PM
Question. It's saying addon is not compatible with cyberfox 47. I tried to get the addon from here. Any ideas what i am doing wrong?
http://www.internetdownloadmanager.com/support/firefox_integration2.html (http://www.internetdownloadmanager.com/support/firefox_integration2.html)

I can't even get idm to grab stuff without cyberfox isolated. Something is not right. Waiting for more info.
I used the add-on located at the installation folder of IDM. It's an .xpi file.
Title: Re: Isolated Cyberfox and IDM
Post by: aDVll on June 24, 2016, 10:23:35 AM
Ok i managed to reproduce it though it's above my skill level to fix. Will lay out the steps so Fixer can check it out when he has time.
Install cyberfox https://cyberfox.8pecxstudios.com/cyberfox-intel-version-x64/ (https://cyberfox.8pecxstudios.com/cyberfox-intel-version-x64/)
Install idm trial https://www.internetdownloadmanager.com/download.html (https://www.internetdownloadmanager.com/download.html)
Go in "C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi" and install this addon into cyberfox
Make rules for cyberfox and plugin container to run isolated exactly like firefox rules
Try to grab a file and it will fail
Even if you install idm in same isolated environment and different desktop it will fail. Addon probably has to access something and it can't but not sure how to check and i am not familiar with what idm does. So mate lets wait for devs to check it.  ;)
Title: Re: Isolated Cyberfox and IDM
Post by: XhenEd on June 24, 2016, 10:33:57 AM
Quote from: aDVll on June 24, 2016, 10:23:35 AM
Ok i managed to reproduce it though it's above my skill level to fix. Will lay out the steps so Fixer can check it out when he has time.
Install cyberfox https://cyberfox.8pecxstudios.com/cyberfox-intel-version-x64/ (https://cyberfox.8pecxstudios.com/cyberfox-intel-version-x64/)
Install idm trial https://www.internetdownloadmanager.com/download.html (https://www.internetdownloadmanager.com/download.html)
Go in "C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi" and install this addon into cyberfox
Make rules for cyberfox and plugin container to run isolated exactly like firefox rules
Try to grab a file and it will fail
Even if you install idm in same isolated environment and different desktop it will fail. Addon probably has to access something and it can't but not sure how to check and i am not familiar with what idm does. So mate lets wait for devs to check it.  ;)
Thanks for reproducing!

Maybe this also affects Firefox as Cyberfox is just mostly the same as Firefox.
Title: Re: Isolated Cyberfox and IDM
Post by: aDVll on June 24, 2016, 10:50:41 AM
Yeah it's the same. It's something to do with how the addon communicates with idm i believe. I am not sure though someone capable will need to check it out and see if something can be done but in my opinion it's idm issue.

EDIT: Btw for now if you try to grab a link and obviously it will not grab go in idm application and click on grabber. It will already have the link there.  ;)
Just a temp solution until we see what can be done.
Title: Re: Isolated Cyberfox and IDM
Post by: fixer on June 26, 2016, 10:59:48 PM
I looked into this issue. This is how it all works. We've got 2 possible cases.
1. Some program addon. This is Cyberfox case. IDM engine is implemented as DCOM (distributed COM) object and started from current real user. Isolated browser is started from ReHIPS user, and isolation denies access to DCOM, running from real user. So it fails with access denied error. Running browser non-isolated is a security risk. Running IDM isolated won't be of much use as it's restarted from real user. So not much can be done here.
2. Some unknown program without addon. This is PaleMoon case. IDM uses driver to intercept network traffic. If something looks like download, it spawns DCOM process and shows windows for download. Driver works across all sessions and users, so it works fine for isolated environment.
In other words one of possible solutions is to use second scenario with Advanced browser integration and without addons. Other than that... I don't think much can be done as IDM is based on hooks, multiple processes (some of which are designed to be non-isolated) and heavily relies on interprocess communication, and ReHIPS denies this communication for security purposes.
Title: Re: Isolated Cyberfox and IDM
Post by: XhenEd on June 27, 2016, 06:28:48 AM
Quote from: fixer on June 26, 2016, 10:59:48 PM
I looked into this issue. This is how it all works. We've got 2 possible cases.
1. Some program addon. This is Cyberfox case. IDM engine is implemented as DCOM (distributed COM) object and started from current real user. Isolated browser is started from ReHIPS user, and isolation denies access to DCOM, running from real user. So it fails with access denied error. Running browser non-isolated is a security risk. Running IDM isolated won't be of much use as it's restarted from real user. So not much can be done here.
2. Some unknown program without addon. This is PaleMoon case. IDM uses driver to intercept network traffic. If something looks like download, it spawns DCOM process and shows windows for download. Driver works across all sessions and users, so it works fine for isolated environment.
In other words one of possible solutions is to use second scenario with Advanced browser integration and without addons. Other than that... I don't think much can be done as IDM is based on hooks, multiple processes (some of which are designed to be non-isolated) and heavily relies on interprocess communication, and ReHIPS denies this communication for security purposes.
Thanks for taking a look at the issue, fixer!
Cyberfox, then, in isolated environment, has to give up IDM.

There must be a thread here, or something of sorts, in the future about incompatibilities/issues just like Sandboxie's forum thread and MBAE's forum thread.