Tech people. What do you guys think of the "CUJO - Smart Internet Firewall"?

[Notorious P.I.M.P.]

I about to read up on it more but for now I'm wondering if anyone here has any knowledge or opinion of this device.

============================================================================







CUJO is a smart firewall that keeps your connected home safe. From smartphones to laptops, CUJO secures all devices against hacks and web threats. Plus, CUJO lets you control what your kids access online and keep them safe.

How CUJO Secures My Home:

CUJO analyzes your local network traffic data locally and in real time. It then sends statistics on that data to the cloud for further analysis. For your privacy as well as performance reasons, we don’t send the contents of those packets to the cloud. If a threat or suspicious activity is detected, CUJO will tell the cloud what it has blocked so you can receive a notification on your mobile app to confirm it.


https://www.getcujo.com/

 

[misterX]

"It then sends statistics on that data to the cloud for further analysis." Why? Regular firewalls have the analytics as part of the software they run on ... "For your privacy as well as performance reasons, we don’t send the contents of those packets to the cloud." For some reason I find this hard to believe ...

 

[donwuan]

"It then sends statistics on that data to the cloud for further analysis." Why? Regular firewalls have the analytics as part of the software they run on ... "For your privacy as well as performance reasons, we don’t send the contents of those packets to the cloud." For some reason I find this hard to believe ...

Some commercial firewalls are now actually doing this as well. Palo Alto does and it's about the best there is.

 

[HellBoy]

Short answer: Your "local" network is no longer local if it shares your traffic/protocols/application data with an outside source.

I wouldn't use it.

A firewall on a home network is overkill. Everything you need should/can be provided by a decent router.

 

[GAMETHEORY]

and whats the best android app to record whatsapp and normal calls?

 

[MrSid]

Short answer: Your "local" network is no longer local if it shares your traffic/protocols/application data with an outside source.

I wouldn't use it.

A firewall on a home network is overkill. Everything you need should/can be provided by a decent router.

A firewall is always a must , you know how many routers are leaking home networks on to the internet .

Get pfsense and throw it on a intel nuc .

 

[MrSid]

and whats the best android app to record whatsapp and normal calls?

Dump the chic , no need for a app .

 

[MrSid]

Some commercial firewalls are now actually doing this as well. Palo Alto does and it's about the best there is.

Palo Alto was pawned .

 

[MrSid]

"It then sends statistics on that data to the cloud for further analysis." Why? Regular firewalls have the analytics as part of the software they run on ... "For your privacy as well as performance reasons, we don’t send the contents of those packets to the cloud." For some reason I find this hard to believe ...

Any router which doing cloud based DPI , walk away .

 

[Efkie]

Palo Alto was pawned .

Recently ?? care to share that info ?

 

[HellBoy]

A firewall is always a must , you know how many routers are leaking home networks on to the internet .

Get pfsense and throw it on a intel nuc .

Leaking as in?

Are you saying they are sharing the MAC addresses (and more) from behind the NAT?

When I say firewall, Im talking hardware. Shouldn't anything calling home from a PC be the responsibility of endpoint security?

Also, yes please point me to the article on PA's being owned. I get their feed daily and I watch patch logs... haven't heard of anything in recent history.

Thanks

 

[kain]

Routers will not route private IPs
Your connection is NATed to your WAN IP.
I turn off all ports in my router and allow only those needed to have my server and LAN to access the internet.

 

[MrSid]

Leaking as in?

Are you saying they are sharing the MAC addresses (and more) from behind the NAT?

When I say firewall, Im talking hardware. Shouldn't anything calling home from a PC be the responsibility of endpoint security?

Also, yes please point me to the article on PA's being owned. I get their feed daily and I watch patch logs... haven't heard of anything in recent history.

Thanks

Use Shodan to query the customer public ip range of your isp . Spend a few minutes using the default passwords of some of the routers you will find and also notice how many default features are always turned on . I have respect for most domestic appliances if we put effort into hardening them .

The pawning for the Palo Alto has been covered by SEO , and also the cvs was patched , same timeline as wen the juniper and cisco asa got pawned .

 

[MrSid]

Routers will not route private IPs
Your connection is NATed to your WAN IP.
I turn off all ports in my router and allow only those needed to have my server and LAN to access the internet.

spot on about securing ports , hence why I said so many default features and also using default passwords .

 

[kain]

spot on about securing ports , hence why I said so many default features and also using default passwords .

I change all the passwords and SSIDs and keys.
I was trying to find the password of the day numeric seed to get into the administrative part of my modem.

 

[HellBoy]

Routers will not route private IPs
Your connection is NATed to your WAN IP.
I turn off all ports in my router and allow only those needed to have my server and LAN to access the internet.

Exactly, thats why I didnt understand what he meant by leaking... leaking what.

Use Shodan to query the customer public ip range of your isp . Spend a few minutes using the default passwords of some of the routers you will find and also notice how many default features are always turned on . I have respect for most domestic appliances if we put effort into hardening them .

The pawning for the Palo Alto has been covered by SEO , and also the cvs was patched , same timeline as wen the juniper and cisco asa got pawned .

Yes, Im familiar with Shodan... I've looked up a few IP cameras.

The default user/pass is customer error driven and more susceptible to wardriving vs internet hacking. Not sure how a firewall would help that. Also wouldnt the public IP from the ISP be to the modem?

 

[donwuan]

The pawning for the Palo Alto has been covered by SEO , and also the cvs was patched , same timeline as wen the juniper and cisco asa got pawned .

You talking crazy. Every firewall on the market gets patch damn near daily.

 

[Notorious P.I.M.P.]

So is this the new normal for the world we live in? In order to be secure as possible shit like this may be necessary?

Also is it a big deal if I buy or not?

 

[HellBoy]

So is this the new normal for the world we live in? In order to be secure as possible shit like this may be necessary?

Also is it a big deal if I buy or not?

IMO it is an unnecessary piece of hardware. This firewall opens up your home network to a company, who will no doubt monetize your information. "Secure" is relative. Those who want in, will get in. Your goal is to keep the majority out.

 

[Notorious P.I.M.P.]

IMO it is an unnecessary piece of hardware. This firewall opens up your home network to a company, who will no doubt monetize your information. "Secure" is relative. Those who want in, will get in. Your goal is to keep the majority out.

So what would you suggest to keep the majority out?

 

[HellBoy]

So what would you suggest to keep the majority out?

Your home network is private IP space. The only IP the internet can see is your router. Make sure your router's user/pass are changed from the default. Keep the firmware updated as suggested by the vendor.

As for your PCs, make sure you use your (software) firewall.

You should be fine with these precautions.

 

[misterX]

Hide your wireless (turn off SSID broadcast), change the UID/PWD and secure ports you're not using and you won't need a firewall. Worst case if you do not want WAN traffic monitored use a VPN. A "home firewall" is a money sink for the uninitiated. Today most people have their ISP setup their home network and this is the most backwards practice I have ever seen. Comcast tech tried to tell me he couldn't give me the router password to the router I was paying for. I told him if he doesn't he can pack ALL that "ish" up and cancel my service.

 

[THE DRIZZY]

 

[Notorious P.I.M.P.]

On sale for $189 at Amazon. Are opinions still the same?

 

[BenQ]

On sale for $189 at Amazon. Are opinions still the same?

This is for hipsters