Replies

Microsoft is working to enhance threat protection in Windows 10 with Windows Defender ‘Advanced Threat Protection’, but it’s important to note that many other ‘baked in’ Windows 10 Security features that may or may not be affected, disabled (or merely unecessarily duplicated) by installing third party security suites might include Protected Mode, SmartScreen Filtering, InPrivate Filtering or others.

https://blogs.windows.com/windowsexperience/2016/03/01/announcing-windows-defender-advanced-threat-protection/

, & of course your original incorrect statement that there are only three real choices of android apps that are compatible with KeePass PC databases.

I made no statement, incorrect or otherwise, I was asking about KeePass for Android.

Apologies. Please substitute/correct the word “your” above with the word “the”.
But purely to answer a previous question elsewhere within the thread. KeePass databases are ‘compatible’ in that they can be easily imported (or exported out) into or from Safe-In-Cloud.

On the basis that my Thread was specifically about KeePass, I think you’ve pushed your product sufficiently…you could always start another Thread of course. :huh:

Apologies. Just attempting to justify some kind of answer to Paul T’s comment on why anyone would want to use SafeInCloud over KeePass, & of course your original incorrect statement that there are only three real choices of android apps that are compatible with KeePass PC databases. It’s not my product. I only have a licence to use it & much prefer it over Keepass, for just some of the reasons mentioned. I’ll refrain from going into any other reasons in your thread.

Browser extension capability works well too with SafeInCloud, pulling in the individual specific URL related encrypted database either with Chrome or Firefox, it’s a pity though, as neither Internet explorer is covered, or Windows phone, but I have every suspicion the developer will tackle a Windows 10 Microsoft Edge extension or perhaps support a Windows 10 universal app too.

Physical security of the database itself might be the worry, if for example the database got lost or corrupted. Like any cloud backup, it can be a godsend when a local copy is destroyed or lost for whatever reason. It is only the database that syncs encrypted to any cloud of your choice, not to other devices. Naturally the whole thing is protected same as keepass with single master password of your choosing. Ability to use portable devices (in themselves encrypted totally) with the same password vault is extremely useful. Driving licence copies, passport copies, notes you name it can also be synced. Not sure if keepass can store images & important personal ‘copies’ of documents too. The user interface of SafeInCloud appears less ‘verbose’ than keypass & has material design. But you pays your money, you takes your choice. The good thing is that it is easy to change from either to either with the superb import export capability.

On the contrary, I believe the website (not necessarily the Google play store front) is just as detailed if not more professional in appearance than the keepass site https://safe-in-cloud.com/en/

Moreover, whereas keepass appears to offer near exact same 256 AES encryption, not certain that it offers full cloud synchronisation too enabling all cross platform devices like PC, Mac, tablet (android or iOS) & phone to be restored from encrypted cloud database if the device(s) themselves are lost or stolen. Just depending on a local copy of the encrypted database only for example can be risky. SafeInCloud also seems to have similar portable tools. No not open source but just a one off (very inexpensive) support payment instead.

It should be noted that the SafeInCloud Password Manager does have a Windows version also, so syncing is superb between android & windows directly. Almost all existing password manager databases can also be imported (or exported back from) SafeInCloud. Have been using it for years. I unusually found a database of another password manager which did not import, & worked with the developer who went to the trouble of specifically updating the app to accept it’s particular format.

Exactly the method I have been very successfully using, except of course for the knujon addition, which with thanks I will now add. Whilst Spam has increased through filters of late, using the method ensures that it does all seem to end up nicely in the GMail spam folder. Mostly Casino stuff nowadays & the odd Romantic advance fee stuff, typically though only a dozen or so a month. All the more for knujon, I guess!

This is a very good point that was overlooked previously. An updating tool that has the weakness of necessity to require one of the very platforms it is actually employed to audit in the first instance! I iterate once more. Ninite is an updater, it does not use any of the very add ons that you’re checking in the first place to actually do the job. I’ve managed to thankfully live without Java more recently, finding it was only really needed for some speed test sites. One other thing I’ve also noticed is that when deploying a Ninite updater installer file, it completes without presentation of any additional EULA’s. The annoying EULA pop ups with the original third party vendors update might include these if additional wording does bundle such extras like the toolbars, trials or even other browsers.

Since I now use Windows 8, & have no Java installed, & since flash is already integrated in IE10 & updated with the browser itself (not as an add on), I just use a Ninite updater installer file (which I keep on the desktop) & deploy it at audit, at will, or whenever I am notified by my pdf reader (sumanta), or quicktime player (only need that for MPEG 4 codec in my video editor), that an update is available. I never follow through with the vendors prompt to update (because clicking next, next, next & an additional EULA is always required, along with the precautionary hunt for covert toolbars etc. All of that is completely unnecessary by simply instantly deploying a tailored Ninite installer file instead.

The paid version of Ninite, (which they actually label or ‘brand’ as an updater) simply gives the additional automatic updating facility by way of a start up entry or scheduled check. The free version (not labelled as an updater by branding), updates only on demand when run. You could of course, script its created shortcut to run on a schedule anyway, or just deploy it when you feel like it.

Yes most if not all third party programs might access the internet, even if they don’t access the browser. But you do not have to install those unnecessarily in the first place! If you’ve already got unnecessary programs on your system that might access the internet get rid of em. If however they are absolutely necessary, then you probably do need an updater with the ‘automatic’ check feature. Bear in mind though, that it could just be a scheduled ‘time based’ check for updates, not a real time automatic deployment the ‘true minute’ that any program is actually patched.

Don’t forget the minimum security baseline, with the minimum ‘required’ amount of browser plug ins installed (say just flash, java, and a pdf reader), can be maintained with the automatic checks that the third party vendors already offer for these programs by default. Even though I use the free ninite to occasionally manually purge my system for updates to those said installs, I still ensure I keep the start up entries supplied by those programs active to maintain their already built in automatic notification functions, thereby allowing them to report and deploy any necessary patches ‘automatically’ anyway.

I have never experienced spyware, installation of toolbars, additional installs, or the requirement to ever click Next, Next, Next with Ninite. These do not exist. For this reason, I prefer to do the updates themselves through Ninite and NOT the vendor, (because the vendor might actually offer a toolbar with the follow through of their automatic update, which is never present when deployed through Ninite).

I must repeat, paid or free, Ninite is NOT intended to be used as a software updater service. It is intended to load up a new PC with “recommended” software, in case you aren’t intelligent or diligent enough to choose programs for yourself. Then it keeps the “recommended” software up to date, with all their defaults, toolbars and all.

These days, name me one Application which NEVER accesses the Internet, not even to check for updates?

Good point about naming one application which NEVER accesses the internet. However the Secunia OSI offers a fast way to scan your PC for the most common programs and vulnerabilities, thus checking if your PC has a minimum security baseline against known patched vulnerabilities.

Just because a program accesses the internet, it does not mean that you have to install it on your system. In terms of a minimum, the OS (eg Windows 7), can handle the patching of its own vulnerabilities. It is only any added third party essentials (that are usually browser based, browser plug-ins, platforms or runtimes), that require internet access, not just to update their program versions and features but more importantly their specific vulnerabilities.

I find that I can get away with flash (haven’t given up on that just yet), Java, a pdf reader (I use sumantra pdf specifically because it has fewer vulnerability updates than adobe), VLC media player and QuickTime.

Incidentally, the Secunia OSI ironically, actually requires Java to be able to run at all, something that free ninite does not need, but of course can be installed if selected. Also there are no ‘tool bars and all’ associated with ninite. It does not require unticking of boxes or clicking of Next, Next, Next on installers. I seem to remember Java sometimes including Google toolbars on update, also having to click Next, Next, Next through secunia. This is not something that is needed using free ninite at all, even if by your definition, it is not intended to be used as an updater, I have certainly been using it as one.

The Secunia offers an ‘automatic mode’. In my experience though, ‘automatic’ updates usually just mean either a start-up registry entry, or some kind of periodic scheduled check. Where relied upon by convenience, I have known this to be unreliable, and prefer to manually check for updates from time to time for peace of mind.

Ninite also actions updates for VLC media player, which when completed presents on the windows start menu “reset VLC media player preferences and cache files” ready for use.

31596-ninite

No. Fred talked about the Secunia OSI, which is what i used to use before the free Ninite. The OSI checks your software but DOES NOT update it. (It presents links to actually allow you to do so manually). You are required to follow through such links, sometimes with multiple clicks. With Ninite, unlike the OSI, the updating is done. There is no requirement or presentation of follow through links, since all the software you required was originally pre selected permanently. This not only places it in a category similar to the OSI, but also surpasses it in terms of advantage & faster performance of getting the updates done (not only with a single click), but also without any ‘are you sure’ prompts, or extra toolbars!

Yes, Ninite IS free. The paid version you refer to does ‘automatic updating’. The ninite i refer to is free. It is not automatic. Just a one click updater that purges existing versions. This means nothing runs in the background. Since i find it only necessary to update apps that access the internet. It is ideal when manually deployed with one click from time to time.

Ninite is not an updater. It’s supposed to be used with a new Pc installation to rapidly load up some popular titles. Not a real updater.

Sorry but ninite IS an updater to the extent that it can successfully be used to update third party apps. Not just on new pc installations, but on old ones too. You don’t need to install anything. Just select the programs to update, download the file to deploy, keep it on the desktop ready for anytime and it will update said apps on demand. Please check things before you make incorrect statements.

Excellent article. But i would have thought, fred, that it might have been worth mentioning a way to update all the main important third party apps like Java, flash, & pdf readers etc, without actually installing another app. I use the excellent Ninite (http://www.ninite.com) to not only install with one click any essential apps, but also to actually keep them up to date. Once chosen products are selected (just the important third party apps that actually access the internet for example), and the ninite shortcut put on the desktop, it can be deployed at any time with one click to literally update said apps in one foul swoop. Should updates not exist, ninite just leaves existing products intact. Naturally there are no toolbars selected. If you find it only necessary to update essential security risk programs. This is really easy. Great if you prefer not to install an additional program like Secunia PSI. I used to use their OSI but found it typically slower than ninite since it would only check items and present links, where ninite completes in one hit instantly. Job done.