Tech Preview
-
Three months have passed and we have received a lot of awesome feedback on this forum and directly via email.
This has kept our developers very busy during the hot summer, and their pipeline is still overflowing.
We had intended to make more frequent releases with smaller changes. However, based on our learnings, we decided to make some fundamentally incompatible changes to the rules, the matching engine and the UI.
We also decided that we needed a new name. Despite our intentions of sharing good CARMA
In short:
Next week we start the deployment of the "new product".First we will be making changes to the rules and the matching engine. So you should expect to see unexpected results
Once these changes manifest, we will be releasing an early alpha version of the new product. Don't be too disappointed, there will not be many visual changes, in the beginning, except the name change - sorry
Shortly after releasing the early alpha version of the new product we will discontinue the SecTeer Personal CARMA. This means that you will need to uninstall Personal CARMA and install the new product.
Coincidentally the new product will be named: VulnDetect
Again thank you very much to everyone who in anyway has contributed to Personal CARMA, now VulnDetect.
I would like to make it clear, that we are (still) firmly committed to providing a free version of VulnDetect for personal use.
-
Cool, I am keen on the "Group" feature.
-
@olli_s What you may start to see is more entries for programs that come with both 32 and 64bit files. Currently, these will be duplicates in the UI, but later they will be "grouped", so only when you decide to expand e.g. CCleaner, will you learn that we detect both ccleaner.exe and ccleaner64.exe
So it is "just" another step in improving the detection. -
Sounds cool
-
@olli_s True. There is no visible changes. This was solely some internal things regarding the processing of inspection data and results, but from a technical point of view, they were significant. However, it allows us to build better rules. So going forward this is a significant improvement. We also improved the performance of the processing.
-
@tom said in Tech Preview:
Today we are rolling out some breaking changes to the database and back end
And what changes should be visible?
I see no changes in the list of applications -
@olli_s No new client is needed. Everything got rolled out without issues and without noteworthy downtime.
-
Does this also need a new local client?
-
Today we are rolling out some breaking changes to the database and back end. This will cause some downtime. We do not expect any loss of data, however, some inspections may be postponed until tomorrow, because the back end is unavailable for a while.
/Tom
Download the latest SecTeer VulnDetect agent here:
https://vulndetect.com/dl/secteerSetup.exe -
A lot of work has been done in the last month.
Most of this work has been on things that are not immediately visible. Most has been on creating new rules, improving the rule matching engine (to ensure that we can deal with 32/64bit app bundles, app components like Java, compress utilities, etc. and bundled apps like Office) and on our internal tool to create and edit the rules.
This work should complete by next week, so we can start building "second" generation rules for improved detection of these "complicated" apps.
We have opened a new category in the forum Detection issues and Suggestions please suggest any missing apps and feel free to report any errors you spot. There is a post with some guidelines about what information would aide us creating correct rules.
We have also added detection of a few games and will potentially also add detection of drivers. This is purely a test and not something we are certain will continue, but everything depends on your feedback.
Initially there was some issues with the first versions of the agent, a few of you have not yet upgraded, I strongly recommend upgrading, to get continuous inspection results. The latest version seems to be stable for all who upgraded.
-
@olli_s Yes, I managed to get it working using chrome first, however this is likely to be an issue with other firefox users.
-
@thebox So is your problem solved now?
-
The problem does seem to be with firefox only (even with add-ons disabled).
Basically when you login on most sites for the first time, firefox asks if you wish to save login and password details to make it easier next time. Some https sites block this, but there are bookmarklets which up till now have allowed those sites to have their passwords saved also.
The website (as you mentioned) ishttps://carma.secteer.com/personal-carma/https://vulndetect.com/?1
When I logged in the first time in chrome, it offered to save the login details as normal. I was then able to import passwords from chrome to firefox.
(Apologies for the stressy first post, I was already having a bad morning before this!) -
@thebox said in Tech Preview:
OK NVM, I got it working on another browser, must be a firefox thing. First site of many that I have had this issue with though , so something must be different.
Does the problem still occur?
What website exactly is affected (is ithttps://carma.secteer.com/personal-carma/https://vulndetect.com/?1) ?
Does this only occur in Firefox?
Does it also occur when you start Firefox with deactivated Add-Ons (found in the menu top right -> Help)? -
OK NVM, I got it working on another browser, must be a firefox thing. First site of many that I have had this issue with though , so something must be different.
-
Login page at the Secteer website is broken and will not allow browsers to remember passwords (why do people do that?)
Uninstalling, will try again if this gets fixed. -
@tom KeepassXC is the one I recommend for those who are not lucky enough to have a PC :-))!
-
@gregalexandre This may be due to the account creation process not being streamlined in the first few days. Btw. KeePass is awesome, but KeePassXC even more so.
-
@vulndetect I reset my password and now it is working.
Quite surprising because I use KeePass to store my passwords and so its quite difficult for me to forget them :-)! -
@tom Thanks. I was finally able to connect and install the agent.
At this time waiting for displayed data. Regard.
