Some users have reported an issue when installing on some (all?) Windows 7 systems. We have identified the cause of this and will soon be releasing a new installer / binary that fixes the issue.
Also, we have some improvements for the UI and the emails in the pipeline.
We are looking for various sources of information about vulns and new security related patches.
We will naturally monitor all relevant vendor websites, but as we all know, the vendors aren't always open and upfront when they fix security related issues, so we need a number of other sources.
And for too long the NVD and CVE has not been up-to-speed, nor do they cover everything.
We are aware of the following open databases:
https://sec.hpi.de/vulndb/
https://vuldb.com/
https://www.securityfocus.com/bid/
https://www.kb.cert.org/vuls/
https://jvn.jp/en/jp/index.html
https://www.exploit-db.com/
http://seclists.org/fulldisclosure/
Please comment on this topic, with links to other sources you may find relevant.
This has been a great week. We have achieved a lot in terms of development, testing and generating content / rules.
And we expect to release the first Tech Preview on Tuesday (8th of May).
This is, as I have promised before, a very early stage of the product.
You will be able to install it.
It will scan your system and find around 20 of the most common programs on your Windows desktop.
You should note, that there is no direct communication between the user interface and the agent. This is very unlike the PSI, which was a local program, that talked directly to the agent and could do "live" scans. This will be changed, but it is a low priority and will not be made before later this year.
Also, patching, or auto updating, is not due to be implemented before around August, give or take a bit.
In the first two or three weeks (maybe more), you should not rely on it to provide a reliable reporting of Safe / Unsafe programs.
But we need you to install it anyway, so we get data to generate new rules from. And we will work to improve rules and reporting everyday, from now on.
And remember, we do read all the posts and comments here on https://vulndetect.org - but we are not anywhere near being able to implement all the great ideas and feedback you have provided, yet. (but keep posting)
We are currently updating the forum, changing hosting and moving the database.
SecTeer Personal Carma installation instructions.
You must install the SecTeer Personal Carma Agent in order to use SecTeer Personal Carma.
Note that the SecTeer Personal Carma Agent has no graphical user interface.
All user interaction with SecTeer Personal Carma (other than installing the Agent) is through the web page:
https://carma.secteer.com/personal-carma/ https://vulndetect.com/?1
There are 2 ways to install SecTeer Personal Carma Agent:
1)
A) Start by downloading the agent installer: secteerSetup.exe.
B) Run the agent installer, enter your email address when prompted, and complete the installation.
If an account does not already exist for that email address, it is created, a password is generated and sent to the email address, and an additional email is also sent to the email address, containing an account confirmation link.
C) Open the account confirmation link in a web browser and then log in to the account using the email address as a username, and the password that was sent in the email.
D) Go to the Configuration page and approve the agent.
2)
A. Start by going to the web page: https://carma.secteer.com/personal-carma/ https://vulndetect.com/?1
B. Use your email address to register, supplying your own password. An email is sent to you, containing an account confirmation link.
C. Open the account confirmation link and then log in to the account using the email address as a username, and the password you supplied when registering.
D. From the Configuration page, download the agent installer: secteerSetup.exe.
E. Run the agent installer, enter your email address when prompted, and complete the installation.
F. In the your browser, refresh the Configuration page and approve the agent.
Note that at this time, there is no way to change the account password.
If you register by first installing the agent, then a password is generated and emailed to you, and there is no way to change the password.
If you first register an account on the web page, then you can select your own password, but there is no way to change or reset it at this time.