AIProtection

[dieter]

I have read the Asus FAQ on AIProtection (https://www.asus.com/support/faq/1012070/). However there is not much detail on how this works.

I'm nervous about Trend Micro servers capturing login IDs and PWs.

Is there a white paper on AIProtection?

Thanks.

 

[VANT]

aiprotection not work with crypted transmision (ssl etc.)

 

[dieter]

aiprotection not work with crypted transmision (ssl etc.)

I'm not doing encryption. Just normal browsing...

 

[dieter]

I have found this on the Trend Micro privacy policy:
https://www.trendmicro.com/en_us/about/legal/privacy-policy-product.html
I still would like to know what, besides URLs and malicious file "metadata", they capture, or specifically, what they don't capture.

 

[snakebite3]

I have found this on the Trend Micro privacy policy:
https://www.trendmicro.com/en_us/about/legal/privacy-policy-product.html
I still would like to know what, besides URLs and malicious file "metadata", they capture, or specifically, what they don't capture.

Couldn't you email Trendmicro directly?

 

[dieter]

I have no way to contact TM. But I have put the question to Asus and will report back here.

 

[dieter]

I have no way to contact TM. But I have put the question to Asus and will report back here.

Asus could not provide any more info from TM's EULA and Privacy Notice.
I have now emailed TM's legal department to get more details on AIProtection's data collection.

 

[dieter]

No reply from Trend Micor's legal department.

 

[RMerlin]

I don't think you'll be able to get any technical details. Best you can get is the EULA linked to AiProtection. After logging to your router, directly access the EULA there:

http://192.168.1.1/tm_eula.htm

The EULA mentions this, if you still want to dig more:

18. QUESTIONS. If You have a question about the Software, visit: www.trendmicro.com/support/consumer. Direct all questions about this Agreement to: legalnotice@trendmicro.com.

 

[sfx2000]

FWIW - I've dealt with many vendors over the years - including Trend Micro - I've found Trend to be one of the more ethical companies in the space...

Worst case - if one doesn't trust Trend Micro - there's always the option to disable the feature.

 

[RMerlin]

I don't know all the details, but from the basic info I have, you are only sending Trend Micro the URL you are accessing. Since login data is part of the POST, they do not get these, even if it were unencrypted.

This is the same technology used in their business product BTW. Their WRS (Web Reputation System) is one of the best in the industry.

For the record, I sell Trend Micro products for most of my small business customers. I have only one running Eset's business solution (in part because I wanted to get the expertise with an alternative, and knew Eset would be a solid product so it wouldn't be a compromise for the customer).

I used to be a member of Trend Micro's PUG (Power User Group) program. That group was betatesting their products as well as signature files. I still wear the jacket they sent me back then for my participation to their program

 

[dieter]

TM legal has not responded to my queries, even after reminders.
It seems to me that a white paper could be made public of their process without revealing trade secrets.
Even Dashlane offers up such a white paper on their secure PW management process.