Author Topic: Ask Questions Here - ReHIPS Features & Unexpected Behaviors  (Read 172965 times)

Umbra

  • Active Testers
  • Hero Member
  • *****
  • Posts: 568
  • Beta tester
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #510 on: April 25, 2017, 01:11:07 pm »
So if you set ask in MS Word to ask it will ask each time you launch it if you want to launch it isolated or normal. I know it's not ideal but maybe at some point we will have a whitelisted folder feature that ignores rules isolation.
I thought about that too, but not the ideal to me.

Seems it comes down to an old request i made implementing folders rules.
« Last Edit: April 25, 2017, 01:13:42 pm by umbrapolaris »

fixer

  • Administrator
  • Hero Member
  • *****
  • Posts: 1395
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #511 on: April 25, 2017, 01:35:11 pm »
For beginners, would it be simpler if it was possible to do it from the GUI?
One-button solutions are always simpler, and we'll get there, one step at a time ;)

Folders filtering feature will be there in next major build (2.3.x). But I don't think it'll solve this question. You see, filtering works on program-level. Like we have folder A and programs 1.exe, 2.exe and 3.exe in that folder. It'll be possible to allow all from folder A resulting in allowed 1.exe, 2.exe and 3.exe. But documents, it's a different thing. They're not programs by themselves, program is the same for all of them, like winword.exe. To filter documents command line parsing is required. And it's a real pain. And I don't mean it's complicated and we're too lazy to implement it. I mean it's prone to errors (you can google for a lot of vulnerabilities in other products regarding command line parsing) and these errors often result in system compromise like allowing some document that should be isolated. So it's a risky road and I don't think it's a good idea.

Umbra

  • Active Testers
  • Hero Member
  • *****
  • Posts: 568
  • Beta tester
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #512 on: April 26, 2017, 06:54:21 am »
Folders filtering feature will be there in next major build (2.3.x).
How it will work?

Quote
Like we have folder A and programs 1.exe, 2.exe and 3.exe in that folder. It'll be possible to allow all from folder A resulting in allowed 1.exe, 2.exe and 3.exe.
and block or isolate all i guess?

Quote
But documents, it's a different thing. They're not programs by themselves, program is the same for all of them, like winword.exe. To filter documents command line parsing is required. And it's a real pain. And I don't mean it's complicated and we're too lazy to implement it. I mean it's prone to errors (you can google for a lot of vulnerabilities in other products regarding command line parsing) and these errors often result in system compromise like allowing some document that should be isolated. So it's a risky road and I don't think it's a good idea.
ok so don't bother hahahaha, better getting alerts than introducing potential vulnerabilities.

fixer

  • Administrator
  • Hero Member
  • *****
  • Posts: 1395
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #513 on: April 26, 2017, 05:10:05 pm »
It'll work just like any other program now, but will support wildcards like "block C:\Windows\Temp\*". You'll be able to allow, block, isolate-just like any other program. Most of it is already implemented, but it'll be in the next major build as it hasn't been tested yet.

Umbra

  • Active Testers
  • Hero Member
  • *****
  • Posts: 568
  • Beta tester
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #514 on: April 27, 2017, 08:26:56 am »
It'll work just like any other program now, but will support wildcards like "block C:\Windows\Temp\*". You'll be able to allow, block, isolate-just like any other program.
Perfect , exactly what i wanted.

fixer

  • Administrator
  • Hero Member
  • *****
  • Posts: 1395
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #515 on: April 27, 2017, 11:42:41 am »
As a small peak into the future, the next big feature is fine-grained parenting rules. Like we have program A, we can allow it to create child processes B and C, isolate child process D and block other child processes. Don't know which major version it'll be in though, maybe 2.3.0, maybe the next one after it.

Umbra

  • Active Testers
  • Hero Member
  • *****
  • Posts: 568
  • Beta tester
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #516 on: April 27, 2017, 02:37:17 pm »
As a small peak into the future, the next big feature is fine-grained parenting rules. Like we have program A, we can allow it to create child processes B and C, isolate child process D and block other child processes. Don't know which major version it'll be in though, maybe 2.3.0, maybe the next one after it.
That will be quite useful. :)

Ozone

  • Jr. Member
  • **
  • Posts: 80
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #517 on: April 30, 2017, 03:35:13 pm »
it is possible to make tray icon color to reflect active profile, currently it has only enabled – green and disabled – red

usually when I am installing new apps I change profile to permissive and sometimes I forgot to change it back to standard


Umbra

  • Active Testers
  • Hero Member
  • *****
  • Posts: 568
  • Beta tester
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #518 on: May 01, 2017, 07:47:21 am »
it is possible to make tray icon color to reflect active profile, currently it has only enabled – green and disabled – red

usually when I am installing new apps I change profile to permissive and sometimes I forgot to change it back to standard
good idea.

aDVll

  • Active Testers
  • Hero Member
  • *****
  • Posts: 1119
  • Windows 10 latest 64 bit
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #519 on: May 01, 2017, 10:57:53 am »
it is possible to make tray icon color to reflect active profile, currently it has only enabled – green and disabled – red

usually when I am installing new apps I change profile to permissive and sometimes I forgot to change it back to standard
Already suggested and they are thinking about it.

Ozone

  • Jr. Member
  • **
  • Posts: 80
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #520 on: May 14, 2017, 11:54:46 am »
currently ReHIPS doesn't have "autodelete" option
but playing with firefox portable give me idea, if I run it in IE (because of restriction) I have to run it locally, and it will copy profile and program to Temp folder
so the idea is: it is possible to add option to automatically delete contents in Temp folder after last isolated program is closed

aDVll

  • Active Testers
  • Hero Member
  • *****
  • Posts: 1119
  • Windows 10 latest 64 bit
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #521 on: May 14, 2017, 12:00:35 pm »
currently ReHIPS doesn't have "autodelete" option
but playing with firefox portable give me idea, if I run it in IE (because of restriction) I have to run it locally, and it will copy profile and program to Temp folder
so the idea is: it is possible to add option to automatically delete contents in Temp folder after last isolated program is closed
No reason to do that. They will add proper reset isolated environment and solve the issue the proper way.

fixer

  • Administrator
  • Hero Member
  • *****
  • Posts: 1395
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #522 on: May 14, 2017, 02:56:11 pm »
Autodelete option is planned for the next major release (2.3.x), so don't worry, it'll be there.

Ozone

  • Jr. Member
  • **
  • Posts: 80
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #523 on: May 14, 2017, 05:08:11 pm »
cool
hope it will be soon

Ozone

  • Jr. Member
  • **
  • Posts: 80
Re: Ask Questions Here - ReHIPS Features & Unexpected Behaviors
« Reply #524 on: May 21, 2017, 01:29:07 pm »
I can change location of TEMP/TMP for main user in "Environment Variables", but it is possible for IE?