Tech Preview

[bobie2]

I am having no luck with login in on my computer says wrong email or password or someone has attempted to use your email address

[Tom]

@bobie2 We have confirmed your account, so it should work now. We have also fixed the email issues and changing of password in the UI.

[Tom]

A new binary has been released:
https://carma.secteer.com/dl/secteerSetup.exe https://vulndetect.com/dl/secteerSetup.exe

Changelog

v0.6.1.1 2018-05-14

• New application icon
• Move start menu shortcut, use new application icon for it
• Minor change to the way the local timezone is reported to the server

v0.5.3.1 2018-05-10

• Explicitly enable TLS1.2 in WinHTTP, it is disabled by default on older Windows versions
• Set service to AutoStart, and DelayedAutoStart if possible
• Add Start Menu icon that loads the SecTeer? Personal Carma web page in the user's default browser

v0.5.2.1 2018-05-09

• Unsigned binary sent to user to test TLS change

v0.5.1.1 2018-05-08

• First release

[Tom]

v0.7.1.2 2018-05-14

• Add ability to reset a forgotten password: 'Forgot password?' link available via the login page. Case #74.
• Add ability to change a user's password: 'Change password' option available under the Configuration page, for a logged in user. Case #74.

v0.7.1.1 2018-05-10

• milestone:"Personal Carma Tech Preview Update 1"
• Show Application icons in the UI - #73
• Add ability to expand results row to see more information - #75
• Add last activity and expected next activity times to UI - #76

v0.7.0.1 2018-05-08

• First release

[TheFly]

What is the link for Version 0.7.1.2. The only version I get is 0.6.1.1.

[VulnDetect]

@thefly 0.7.1.2 is the UI version. The agent is still at 0.6.1.1. Sorry if this isn't clear enough.

[OLLI_S]

@TheFly I had the same problem that the version numbers are a bit confusing here in the forums.
I already suggested that it should made more clear what version is for the local agent and what version is for the web UI.

@tom wrote me this in a chat:
UI is at 7.1.2
Agent is at 6.1.1

[GregAlexandre]

@tom Thanks. I was finally able to connect and install the agent.
At this time waiting for displayed data. Regard.

[GregAlexandre]

@vulndetect I reset my password and now it is working.
Quite surprising because I use KeePass to store my passwords and so its quite difficult for me to forget them :-)!

[Tom]

@gregalexandre This may be due to the account creation process not being streamlined in the first few days. Btw. KeePass is awesome, but KeePassXC even more so.

[GregAlexandre]

@tom KeepassXC is the one I recommend for those who are not lucky enough to have a PC :-))!

[thebox]

Login page at the Secteer website is broken and will not allow browsers to remember passwords (why do people do that?)
Uninstalling, will try again if this gets fixed.

[thebox]

OK NVM, I got it working on another browser, must be a firefox thing. First site of many that I have had this issue with though , so something must be different.

[OLLI_S]

@thebox said in Tech Preview:

OK NVM, I got it working on another browser, must be a firefox thing. First site of many that I have had this issue with though , so something must be different.

Does the problem still occur?
What website exactly is affected (is it https://carma.secteer.com/personal-carma/ https://vulndetect.com/?1) ?
Does this only occur in Firefox?
Does it also occur when you start Firefox with deactivated Add-Ons (found in the menu top right -> Help)?

[thebox]

The problem does seem to be with firefox only (even with add-ons disabled).
Basically when you login on most sites for the first time, firefox asks if you wish to save login and password details to make it easier next time. Some https sites block this, but there are bookmarklets which up till now have allowed those sites to have their passwords saved also.
The website (as you mentioned) is https://carma.secteer.com/personal-carma/ https://vulndetect.com/?1
When I logged in the first time in chrome, it offered to save the login details as normal. I was then able to import passwords from chrome to firefox.
(Apologies for the stressy first post, I was already having a bad morning before this!)

[OLLI_S]

@thebox So is your problem solved now?

[thebox]

@olli_s Yes, I managed to get it working using chrome first, however this is likely to be an issue with other firefox users.

[Tom]

A lot of work has been done in the last month.

Most of this work has been on things that are not immediately visible. Most has been on creating new rules, improving the rule matching engine (to ensure that we can deal with 32/64bit app bundles, app components like Java, compress utilities, etc. and bundled apps like Office) and on our internal tool to create and edit the rules.

This work should complete by next week, so we can start building "second" generation rules for improved detection of these "complicated" apps.

We have opened a new category in the forum Detection issues and Suggestions please suggest any missing apps and feel free to report any errors you spot. There is a post with some guidelines about what information would aide us creating correct rules.

We have also added detection of a few games and will potentially also add detection of drivers. This is purely a test and not something we are certain will continue, but everything depends on your feedback.

Initially there was some issues with the first versions of the agent, a few of you have not yet upgraded, I strongly recommend upgrading, to get continuous inspection results. The latest version seems to be stable for all who upgraded.

[Tom]

Today we are rolling out some breaking changes to the database and back end. This will cause some downtime. We do not expect any loss of data, however, some inspections may be postponed until tomorrow, because the back end is unavailable for a while.

[OLLI_S]

Does this also need a new local client?