Should you block all your k'd software's hosts sites?

Discussion in 'Lounge' started by jdigsdeluxe, Nov 28, 2021.

  1. waverider

    waverider Rock Star

    Joined:
    Oct 8, 2018
    Messages:
    849
    Likes Received:
    431
    Very interesting! Thank you. I always wondered if that was possible, only to learn now there's specialized adapters for it.
    Do these things introduce a lot of latency? Both in terms of video and audio?
     
  2. Sylenth.Will.Fall

    Sylenth.Will.Fall Audiosexual

    Joined:
    Aug 21, 2015
    Messages:
    2,668
    Likes Received:
    1,846
    You're welcome. There are zero latency issues with Video OR audio with mine, but I really cant say that for all.

    The only issue I have sometimes is my mouse freezes, but I stick a USB mouse (Which I have in case of that happening) into a separate USB port until I wish to reboot. Then it comes back fine without the need for it. But that is rare!
     
  3. stopped

    stopped Platinum Record

    Joined:
    Mar 22, 2016
    Messages:
    586
    Likes Received:
    209
    I have every app blocked by default and only allow things to connect when I want. Most plugins I can authorize through vsthost and leave ableton blocked forever
     
  4. HikaruSniper

    HikaruSniper Kapellmeister

    Joined:
    Nov 20, 2021
    Messages:
    70
    Likes Received:
    40
    As said, just block your DAW internet access. I use TinyWall which basically blocks everything unless you give permission, can't beat that.
     
  5. HikaruSniper

    HikaruSniper Kapellmeister

    Joined:
    Nov 20, 2021
    Messages:
    70
    Likes Received:
    40
    If you like shadow defender, there's something even better IMHO, Rollback RX Server.
     
  6. Lois Lane

    Lois Lane Audiosexual

    Joined:
    Jan 16, 2019
    Messages:
    4,856
    Likes Received:
    4,774
    Location:
    Somewhere Over The Rainbow
    I've built a Faraday Cage for my computer and will be fabricating one that our entire house fits inside of. What happens in Vegas stays in Vegas. I suggest that you too do the same.

    [​IMG]
     
    • Funny Funny x 5
    • Agree Agree x 1
    • List
  7. BuntyMcCunty

    BuntyMcCunty Rock Star

    Joined:
    Nov 13, 2019
    Messages:
    594
    Likes Received:
    338
    Location:
    Liverpool
    There's definitely software I use that manages to call home despite having the executables firewalled and the company websites in my host file. Shouldn't it be possible though, to block any outgoing network connection you don't intentionally initiate? Seems to me that a firewall is pointless if it can't do this.
     
    • Interesting Interesting x 1
    • List
  8. HikaruSniper

    HikaruSniper Kapellmeister

    Joined:
    Nov 20, 2021
    Messages:
    70
    Likes Received:
    40
    TinyWall
     
  9. No Avenger

    No Avenger Audiosexual

    Joined:
    Jul 19, 2017
    Messages:
    9,127
    Likes Received:
    6,367
    Location:
    Europe
    Interesting, you like to tell us which?
     
  10. clone

    clone Audiosexual

    Joined:
    Feb 5, 2021
    Messages:
    7,567
    Likes Received:
    3,334
    There is a Serum clone like this. Vaporizer2. (Mac version) it's because they use other domains and IP addresses to avoid being blocked via Hosts. As soon as their plugin loads, it attempts to communicate out to the cloud; which then deauthenticates the plugin. You don't even need to packet sniff to verify it. Turn WIFI connection off or kill ethernet, and it no longer deauths/locks up.

    As an example of one. I understand from a security standpoint it is not the same thing. They are evading a firewall/hosts rule, not bypassing one.They can also do this by having the outbound solicitation originate from a different PID (file). But that is what it looks like to the end user.
    It looks like that extra oscillator came with a tiny little Kevin Mitnick in there; not that an unblocked other application is communicating at will with the internet. This is in general, why Application Layer firewalls are often not considered true "firewalls" to begin with. It's why I would use Zone Alarm, if I was to be a windows user.
     
    Last edited: Feb 4, 2022
    • Interesting Interesting x 1
    • Useful Useful x 1
    • List
  11. Sylenth.Will.Fall

    Sylenth.Will.Fall Audiosexual

    Joined:
    Aug 21, 2015
    Messages:
    2,668
    Likes Received:
    1,846
    I used Rollback RX long before Shadow Defender (About 10 years ago) . I stopped for two reasons.

    1) It wasn't perfect as in you relied heavily on previous snapshots working well
    2) And the more important worry factor was that it did weird things to my computer. For example, Whilst it was installed, it regularly opened up remote access even though I kept turning it off. That in itself is a dangerous thing as it allows anyone with the skill and know-how to take control of your computer.
     
  12. Sylenth.Will.Fall

    Sylenth.Will.Fall Audiosexual

    Joined:
    Aug 21, 2015
    Messages:
    2,668
    Likes Received:
    1,846
    ALL firewalls can do it, the problem though is they aren't set up by default to do that and not all are easy to use.
     
  13. HikaruSniper

    HikaruSniper Kapellmeister

    Joined:
    Nov 20, 2021
    Messages:
    70
    Likes Received:
    40
    1- No problem so far, hope it keeps that way on my side.
    2- I use W11 GhostSpectre which has remote desktop removed. And TinyWall protects me in the eventual case. Love TinyWall.
     
  14. BuntyMcCunty

    BuntyMcCunty Rock Star

    Joined:
    Nov 13, 2019
    Messages:
    594
    Likes Received:
    338
    Location:
    Liverpool
    None of them is audio related. Off the top of my head, it happens with UltraEdit and Internet Download Manager.

    I used Tinywall for years and years. A little while ago, I swapped over to the MalwareBytes front end for Windows Firewall. I believe I've got it set up to only allow stuff through that I initiate, but I occassionally see stuff from Windows attempting to connect on the sly without my initiating a request. Generally Windows system .dll files rather than .exe files. Because I believe I've got the system locked down tight, I think it generally asks for my permission to go through but I'm always anxious that stuff could be just disguising itself web requests, sneaking out on port 80 without my knowing about it. And I guess you can't lock internet access completely off from an app like Internet Download Manager.
     
    • Interesting Interesting x 1
    • List
  15. BuntyMcCunty

    BuntyMcCunty Rock Star

    Joined:
    Nov 13, 2019
    Messages:
    594
    Likes Received:
    338
    Location:
    Liverpool
    I also used Rollback RX back in the day and stopped for the same reasons you did. I'm all about Macrium these days but will check out Shadow Defender.
     
  16. No Avenger

    No Avenger Audiosexual

    Joined:
    Jul 19, 2017
    Messages:
    9,127
    Likes Received:
    6,367
    Location:
    Europe
    I need to try this with Windows. [​IMG]
     
  17. clone

    clone Audiosexual

    Joined:
    Feb 5, 2021
    Messages:
    7,567
    Likes Received:
    3,334
    I am just saying, I could understand being skeptical; because technically it is wrong. The application, .component, .vst and .vst3 plugins all blocked by firewall ruleset; and it will still deauthorize and not work. Wifi Off, works perfect.

    It is like they are using virus author tactics, where they have some domain which appears to be some "third party" for Command/Control; so that blocking their websites explicitly via hosts does not work. it is just not an actual failure of the firewall.
     
    Last edited: Feb 5, 2022
  18. No Avenger

    No Avenger Audiosexual

    Joined:
    Jul 19, 2017
    Messages:
    9,127
    Likes Received:
    6,367
    Location:
    Europe
    Oh, no, it's not scepticism but curiosity. As I said earlier, I only block all my audio apps in the firewall, not in the hosts file at all. So far no problems, let's see if that little sucker will find a way out. [​IMG]
     
  19. No Avenger

    No Avenger Audiosexual

    Joined:
    Jul 19, 2017
    Messages:
    9,127
    Likes Received:
    6,367
    Location:
    Europe
    That little bitch claims my CPU isn't capable of SSE2 and refuses to install. WTF, of course it is. :bash: It's maybe that the min sys req Win8 is correct - in this case and since I'm running Win7...
     
  20. Polomo

    Polomo Guest

    • Interesting Interesting x 1
    • List
Loading...
Loading...