PDA

View Full Version : Sandboxie question and holiday security!


ratchet
December 13th, 2008, 11:43 AM
So the daughters, sons, nieces and nephews will be descending upon us for the holidays. Not really to concerned about the daughters and sons but the nieces and nephews will be social networking, etc. to the gazzilionth power. Last year I installed Windows Steady State without issue and it was quite stable but with all its bells, whistles it's kind of overkill. We quick launch Firefox sandboxed (not sure my wife even knows what the Ff and IE icons are for, lol) but I keep Ff and IE available in the quick launch area. I could force Ff and IE to open Sandboxed. The thing I like about that setup is I know my security apps (NOD32, ThreatFire, etc.) are still functional and updating, plus I could just periodically delete the Sb. Is this sufficient defense while they are here? Thank you for your opinion.

dw426
December 13th, 2008, 01:39 PM
In my opinion Sandboxie will be more than enough to cover you. I have people that come here and they'll play online games that require downloading components and God knows what else, and Sandboxie makes them all go away with the close of the browser.

burning_chrome
December 13th, 2008, 02:45 PM
If you create a LUA for your holiday guests coupled along with Sandboxie, that combo should prevent any malware from making it onto the computer.

Otherwise, if it were me, I would just download the Deep Freeze trial-ware version to secure my current config and revert to it once the guests had left.

beethoven
December 13th, 2008, 04:57 PM
How likely are they to restrict themselves to just browsing? Sandboxie will protect you from inadvertent downloads from bad sites but if the kids intentionally download some funny game or ppt. presentation and know how to recover this outside the sandbox, all odds are off. Are any of them using flashdrives?

chrome_sturmen
December 13th, 2008, 05:26 PM
teens?

luanme
December 13th, 2008, 05:30 PM
Speaking of this, what do you think is better, sandboxie or altiris svs?

chrome_sturmen
December 13th, 2008, 05:35 PM
-{ Quote: "Speaking of this, what do you think is better, sandboxie or altiris svs?" }-

altiris is made for testing software, it will not protect you - sandboxie will defend you even agianst the most malign codes

farmerlee
December 13th, 2008, 05:38 PM
I think your best option is something like returnil. Anyone is free to do whatever they like and it can all be removed with a reboot. Simple and effective.

chrome_sturmen
December 13th, 2008, 05:40 PM
-{ Quote: "I think your best option is something like returnil. Anyone is free to do whatever they like and it can all be removed with a reboot. Simple and effective." }- he'll be asleep, they will be ****ing around online- hence he will not be able to manage a reboot session in the case it should occur

luanme
December 13th, 2008, 05:42 PM
-{ Quote: "altiris is made for testing software, it will not protect you - sandboxie will defend you even agianst the most malign codes" }-
and i guess you can also use sandboxie as a software tester right?

chrome_sturmen
December 13th, 2008, 05:45 PM
indeed you can to an extent friend - though the program's focus is security

chrome_sturmen
December 13th, 2008, 05:55 PM
i've got his solution!:-\

Tony
December 13th, 2008, 05:58 PM
-{ Quote: "he'll be asleep, they will be ****ing around online- hence he will not be able to manage a reboot session in the case it should occur" }-
Been a while since i have used returnil, but if i remember right, you can set the option to keep retunil turned on after reboot until you deem otherwise.

chrome_sturmen
December 13th, 2008, 06:00 PM
-{ Quote: "Been a while since i have used returnil, but if i remember right, you can set the option to keep retunil turned on after reboot until you deem otherwise." }-

no way man, the only virtualization app that can do that is shadowserver - if you mean continue a shadow session after reboot

Firebytes
December 13th, 2008, 06:03 PM
-{ Quote: "he'll be asleep, they will be ****ing around online- hence he will not be able to manage a reboot session in the case it should occur" }-

No problem, just set Returnil to start in protected mode at system boot and password protect your settings.

Firebytes
December 13th, 2008, 06:06 PM
-{ Quote: "no way man, the only virtualization app that can do that is shadowserver - if you mean continue a shadow session after reboot" }-

I think he means what I was just saying in my last post. You can have Returnil start in protected mode at each boot. He is not talking about retaining system changes across reboot in the free version.

Tony
December 13th, 2008, 06:07 PM
-{ Quote: "No problem, just set Returnil to start in protected mode at system boot and password protect your settings." }-
Thats what i meant to say.
Just have not used it for a while so i forgot the exact phrase to use.
Change protection status to on

Tony
December 13th, 2008, 06:08 PM
-{ Quote: "I think he means what I was just saying in my last post. You can have Returnil start in protected mode at each boot. He is not talking about retaining system changes across reboot in the free version." }-
Just beat me to it lol.

Thanks :)

chrome_sturmen
December 13th, 2008, 06:12 PM
I have a proper solution for em;D

chrome_sturmen
December 13th, 2008, 06:41 PM
i'd say really if you'd be bothered with it, make a snapshot for your visitors and such, let them enjoy the season as young people will:



204810

once saint nicks gone and you're worrying how you'll put off the holiday fat:



204811

ratchet
December 14th, 2008, 03:44 AM
-{ Quote: "teens?" }-
Yes!

Also chrome, nice looking tutorial!

Thank You!

ratchet
December 14th, 2008, 03:46 AM
-{ Quote: "no way man, the only virtualization app that can do that is shadowserver - if you mean continue a shadow session after reboot" }-

chrome, you could re-boot into a prior session with Windows Steady State if I recall. Also, I noticed this in the last Comodo DiskShield beta, "NEW! Virtual Drives: You can define a virtual drive in which all the data will persist after a reboot", if you need something like this.