View Full Version : Is a "Sandbox" recommended inAddition to..?
mrm3601
April 19th, 2008, 12:54 PM
Hello.
I am using:
IE (although I think I'll be switching to FF),
NOD32 v. 3.0,
Online Armor (paid),
SUPERAntiSpyware Professional, and
Window Washer
Can anyone say if a "Sandbox" (DefenseWall or one of the others) recommended as well? And, if so, why so?
Thank you again.
Huupi
April 19th, 2008, 02:04 PM
-{ Quote: "Hello.
I am using:
IE (although I think I'll be switching to FF),
NOD32 v. 3.0,
Online Armor (paid),
SUPERAntiSpyware Professional, and
Window Washer
Can anyone say if a "Sandbox" (DefenseWall or one of the others) recommended as well? And, if so, why so?
Thank you again." }-
In short, Not needed. ;)
mrm3601
April 19th, 2008, 02:13 PM
Thank you. I appreciate it.
Makav3l1
April 19th, 2008, 02:20 PM
It can't hurt to sandbox your browser with something like sandboxie when doing risky surfing.
Huupi
April 19th, 2008, 03:04 PM
-{ Quote: "It can't hurt to sandbox your browser with something like sandboxie when doing risky surfing." }-
Don't hurt,i'm with you,but look at his setup,you don't get any better,IMO any adding is redundant.
BTW many rely only on NOD,without worries !
Joliet Jake
April 19th, 2008, 09:04 PM
-{ Quote: "Hello.
I am using:
IE (although I think I'll be switching to FF),
NOD32 v. 3.0,
Online Armor (paid),
SUPERAntiSpyware Professional, and
Window Washer
Can anyone say if a "Sandbox" (DefenseWall or one of the others) recommended as well? And, if so, why so?
Thank you again." }-
No set up is 100% foolproof. Sandboxie will help.
Kees1958
April 20th, 2008, 04:13 AM
Sandboxie is not needed, when running all your internat facing applications (like LimeWire, OutlookExpress, Webbrowser) with the 'run safer' option. OA also remembers the untrusted status of downloaded files. This will immobilize any malware downloaded not catched by your AV. Avira is a good free alternative to NOD32, see this thread for comparison of OA run safer and SBIE
http://www.wilderssecurity.com/showthread.php?t=206764
Franklin
April 20th, 2008, 05:29 AM
Sandboxie would be an excellent addition to your line up.:thumb:
Here I don't use anything other than Sandboxie, Returnil and ghost images/clones.
Sandboxie is configured to only allow FF to use the sandbox resources where not a single malware, real or test, can run.
No siggys to update with way less resource usage.
Tzuk on Comodo tests (http://sandboxie.com/phpbb/viewtopic.php?t=3180)
Huupi
April 20th, 2008, 06:57 AM
-{ Quote: "Sandboxie would be an excellent addition to your line up.:thumb:
Here I don't use anything other than Sandboxie, Returnil and ghost images/clones.
Sandboxie is configured to only allow FF to use the sandbox resources where not a single malware, real or test, can run.
No siggys to update with way less resource usage.
Tzuk on Comodo tests (http://sandboxie.com/phpbb/viewtopic.php?t=3180)" }-
I'm with you,pretty much same setup here,except for Boclean. :thumb:
subset
April 20th, 2008, 09:35 PM
-{ Quote: "But if you just go to the folder the file is downloaded to then it's just the same user account rights. Is that the same way OA works?" }-
Yes, but OA offers further capabilities.
- If you start the downloaded file and it is not in OA's Whitelist, then it will run as Unknown (OA Rating), which means under tight control of OA.
For example you will get a keylogger warning if a program runs as Unknown, but not if you run the same program as Trusted.
- If the program is in OA's Whitelist, it will run as Trusted per default.
- Nevertheless you can choose the "Run Safer" option within the prompt.
- In addition are some files allowed to run without any prompt, these are files with a (for OA) trustworthy digital certificate.
I hope everything is accurately described. :P
Edit: seems like Reimer's post disappeared, never mind...
Cheers
Reimer
April 20th, 2008, 10:46 PM
-{ Quote: "Yes, but OA offers further capabilities.
- If you start the downloaded file and it is not in OA's Whitelist, then it will run as Unknown (OA Rating), which means under tight control of OA.
For example you will get a keylogger warning if a program runs as Unknown, but not if you run the same program as Trusted.
- If the program is in OA's Whitelist, it will run as Trusted per default.
- Nevertheless you can choose the "Run Safer" option within the prompt.
- In addition are some files allowed to run without any prompt, these are files with a (for OA) trustworthy digital certificate.
I hope everything is accurately described. :P
Edit: seems like Reimer's post disappeared, never mind...
Cheers" }-
Sorry, I had deleted my post because I found an answer in a different thread.
Thanks for the clarification though. I've only got certain processes like my browser and IM program set using SRP at the moment
ErikAlbert
April 21st, 2008, 03:47 AM
I would recommend a sandbox.
I need a sandbox (DefenseWall or Sandboxie) to lock my precious data folders, while I'm surfing on the internet.
This way "nothing" or "nobody" (including myself) on the internet can read, write or steal personal data.
In my case I locked my second harddisk [D:] completely, which contains all my personal data.
Each possible malware is isolated in the sandbox and has to spend its time on my computer without food and water, because there is no data and believe me that makes any malware/bad guy crazy. When I close Firefox, they beg me to kill them. :)
Huupi
April 21st, 2008, 04:22 AM
-{ Quote: "I would recommend a sandbox.
I need a sandbox (DefenseWall or Sandboxie) to lock my precious data folders, while I'm surfing on the internet.
This way "nothing" or "nobody" (including myself) on the internet can read, write or steal personal data.
In my case I locked my second harddisk [D:] completely, which contains all my personal data.
Each possible malware is isolated in the sandbox and has to spend its time on my computer without food and water, because there is no data and believe me that makes any malware/bad guy crazy. When I close Firefox, they beg me to kill them. :)" }-
WOW, yes i hear the screaming,afterall i'm living close to you. lol ;D
trjam
April 21st, 2008, 04:32 AM
yes you will benefit from one.
vBulletin® Copyright ©2000-2012, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2012, Wilders Security Forums