I Have been using COMODO Firewall and HIPS for many years, which can block writes and executes but not reads.
My threat model has changed to include spyware with trusted digital signature, which by the way, there are many.
Since COMODO HIPS does not provide rule-based file access control, I added Sandboxie, which supports complete resource access control, to my defense and created the following privacy defense protocol:
- Software that does not require internet to function is firewall-blocked.
- Open source software that require internet to function is allowed.
- Close source software that require internet to function is sandboxed with file access control.
However not every software can be sandboxed. Therefore I need an alternative HIPS to deny them access to my data. So far I haven't found any. Any suggestion is much appreciated.
Thanks in advance !