Wilders Security Forums  

Go Back   Wilders Security Forums > Software, Hardware and General Services > sandboxing & virtualization
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old December 10th, 2010, 05:04 PM
whitedragon551's Avatar
whitedragon551 whitedragon551 is offline
Very Frequent Poster
 
Join Date: Sep 2008
Location: USA
Posts: 2,761
Default AIS Sandbox vs Sandboxie

Alright over the last day or two Im under the impression Avast IS Sandbox is no where near functional yet.

On an x64 system there are issues with flash being able to display on webpages if your browser is sandboxed. It happens in IE, IEx64, and FF. This is my main gripe. With flash being as prominent is it is in the online world there is no reason for AIS to not function properly with flash. IMHO its simply unacceptable.

It can auto delete contents, but that requires you to dig into expert settings and unchecking a box.

My last gripe with AIS sandbox is that it is always on. If you want to turn it off you have to delete a program from the list of virtualized processes, update, and then read it to the list.

Discuss.
__________________
|Kaspersky Anti-Virus 2013|Private Firewall|HitmanPro|MBAM|Keriver Image|WinPatrol Plus|

Looking for volunteer authors to write articles, reviews, and How-Tos. If you think you have what it takes, contact me.
|http://pc-babble.com/|

Last edited by whitedragon551 : December 11th, 2010 at 09:01 AM.
  #2  
Old December 10th, 2010, 05:08 PM
Boost's Avatar
Boost Boost is offline
Very Frequent Poster
 
Join Date: Feb 2007
Posts: 1,249
Cool Re: AIS Sandbox vs Sandboxie

No comparison between the two IMO.

Sandboxie is a proven sandbox,period. Avast's "sandbox" has a loooong ways to go before it's even comparable to Sandboxie.
__________________
Windows XP SP3 & GeSWall
  #3  
Old December 10th, 2010, 05:09 PM
whitedragon551's Avatar
whitedragon551 whitedragon551 is offline
Very Frequent Poster
 
Join Date: Sep 2008
Location: USA
Posts: 2,761
Default Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by Boost
No comparison between the two IMO.

Sandboxie is a proven sandbox,period. Avast's "sandbox" has a loooong ways to go before it's even comparable to Sandboxie.

Any reasons you have come to this conclusion?
__________________
|Kaspersky Anti-Virus 2013|Private Firewall|HitmanPro|MBAM|Keriver Image|WinPatrol Plus|

Looking for volunteer authors to write articles, reviews, and How-Tos. If you think you have what it takes, contact me.
|http://pc-babble.com/|
  #4  
Old December 10th, 2010, 05:19 PM
3x0gR13N 3x0gR13N is offline
Frequent Poster
 
Join Date: May 2008
Posts: 581
Default Re: AIS Sandbox vs Sandboxie

Sandboxie is more configurable, which is a big plus.

a!'s sandbox still needs to prove itself against malware samples. Being bypassed by TDL3 for ex. is an ongoing issue. Although it can be backed up by other AIS components there's no real reason not to adress these kinds of issues.
  #5  
Old December 10th, 2010, 08:30 PM
Halffull Halffull is offline
Regular Poster
 
Join Date: Sep 2010
Posts: 50
Default Re: AIS Sandbox vs Sandboxie

Sandboxie has higher compatibility rating, which makes it a superior product.
__________________
Q9400 | 4GB Ballistix | 1.5TB | HD4870 | Tagan 530W | Budget Mobo | 24" Iiyama
Online storage services - separating the wheat from the chaff
  #6  
Old December 10th, 2010, 08:44 PM
Boost's Avatar
Boost Boost is offline
Very Frequent Poster
 
Join Date: Feb 2007
Posts: 1,249
Default Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by whitedragon551
Any reasons you have come to this conclusion?

If you knew how powerful sandboxie was,you wouldnt be asking this question.
__________________
Windows XP SP3 & GeSWall
  #7  
Old December 10th, 2010, 09:12 PM
whitedragon551's Avatar
whitedragon551 whitedragon551 is offline
Very Frequent Poster
 
Join Date: Sep 2008
Location: USA
Posts: 2,761
Default Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by Boost
If you knew how powerful sandboxie was,you wouldnt be asking this question.

It has nothing to do with that. I switched from Sandboxie and Spyshelter with LnS realtime with Avast free as a on demand scanner once a week to what I have now. Im versed with Sandboxie.

However just saying Sandboxie hands down doesnt make you look more knowledgeable unless you back up your claims.
__________________
|Kaspersky Anti-Virus 2013|Private Firewall|HitmanPro|MBAM|Keriver Image|WinPatrol Plus|

Looking for volunteer authors to write articles, reviews, and How-Tos. If you think you have what it takes, contact me.
|http://pc-babble.com/|
  #8  
Old December 10th, 2010, 10:11 PM
Boost's Avatar
Boost Boost is offline
Very Frequent Poster
 
Join Date: Feb 2007
Posts: 1,249
Cool Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by whitedragon551
It has nothing to do with that. I switched from Sandboxie and Spyshelter with LnS realtime with Avast free as a on demand scanner once a week to what I have now. Im versed with Sandboxie.

However just saying Sandboxie hands down doesnt make you look more knowledgeable unless you back up your claims.

I played with GIGS of malware using Sandboxie and nothing got passed it.

Avasts sandbox is new and buggy,I wont even attempt to test it against all the viruses / malware I threw @ sandboxie.

You can believe what you want,do what you wish,the true fact is,at this point in time,Sandboxie is a proven sandbox,period,and I'll stand by my previous comment,there is NO comparison.
__________________
Windows XP SP3 & GeSWall
  #9  
Old December 10th, 2010, 10:12 PM
whitedragon551's Avatar
whitedragon551 whitedragon551 is offline
Very Frequent Poster
 
Join Date: Sep 2008
Location: USA
Posts: 2,761
Default Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by Boost
I played with GIGS of malware using Sandboxie and nothing got passed it.

Avasts sandbox is new and buggy,I wont even attempt to test it against all the viruses / malware I threw @ sandboxie.

You can believe what you want,do what you wish,I could care less,the true fact is,at this point in time,Sandboxie is a proven sandbox,period,and I'll stand by my previous comment,there is NO comparison.

Thats fine. I also think Sandboxie is better, but just saying so without any real world data or info to back it up isnt going to cut it.
__________________
|Kaspersky Anti-Virus 2013|Private Firewall|HitmanPro|MBAM|Keriver Image|WinPatrol Plus|

Looking for volunteer authors to write articles, reviews, and How-Tos. If you think you have what it takes, contact me.
|http://pc-babble.com/|
  #10  
Old December 10th, 2010, 10:15 PM
Boost's Avatar
Boost Boost is offline
Very Frequent Poster
 
Join Date: Feb 2007
Posts: 1,249
Cool Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by whitedragon551
Thats fine. I also think Sandboxie is better, but just saying so without any real world data or info to back it up isnt going to cut it.

My data was a total of a gig of malware / viruses,etc,thats plenty for me.You wanna know data,collect it for yourself.

Dont expect everyone to do the work for YOU.Take it upon yourself once,and compare the data / information.
__________________
Windows XP SP3 & GeSWall
  #11  
Old December 10th, 2010, 10:22 PM
whitedragon551's Avatar
whitedragon551 whitedragon551 is offline
Very Frequent Poster
 
Join Date: Sep 2008
Location: USA
Posts: 2,761
Default Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by Boost
My data was a total of a gig of malware / viruses,etc,thats plenty for me.You wanna know data,collect it for yourself.

Dont expect everyone to do the work for YOU.Take it upon yourself once,and compare the data / information.

Clearly a credible source.

Im going to say AIS sandbox is better. I have personal data to back it up that its superior to Sandboxie.

Regardless what other major differences are there between the two that Avast should consider implementing?
__________________
|Kaspersky Anti-Virus 2013|Private Firewall|HitmanPro|MBAM|Keriver Image|WinPatrol Plus|

Looking for volunteer authors to write articles, reviews, and How-Tos. If you think you have what it takes, contact me.
|http://pc-babble.com/|
  #12  
Old December 10th, 2010, 10:35 PM
Boost's Avatar
Boost Boost is offline
Very Frequent Poster
 
Join Date: Feb 2007
Posts: 1,249
Cool Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by whitedragon551
Clearly a credible source.

Im going to say AIS sandbox is better. I have personal data to back it up that its superior to Sandboxie.

Regardless what other major differences are there between the two that Avast should consider implementing?

Contact tzuk and inform him how strong a newly developed like AIS is better then a product such as his, which has been around longer,been tried and trued many many times,I'm sure he'd glad take on your personal data.
__________________
Windows XP SP3 & GeSWall
  #13  
Old December 11th, 2010, 01:01 AM
Hugger Hugger is offline
Very Frequent Poster
 
Join Date: Oct 2007
Location: Hackensack, USA
Posts: 1,003
Default Re: AIS Sandbox vs Sandboxie

"Im going to say AIS sandbox is better. I have personal data to back it up that its superior to Sandboxie."

Care to enlighten us?
  #14  
Old December 11th, 2010, 02:22 AM
aladdin's Avatar
aladdin aladdin is online now
Very Frequent Poster
 
Join Date: Jan 2006
Location: Oman
Posts: 2,325
Default Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by whitedragon551
My last gripe with AIS sandbox is that it is always on. If you want to turn it off you have to delete a program from the list of virtualized processes, update, and then readd it to the list.

Discuss.
You have left it to be always on. You can remove it from the list of permanent virtual process and whenever you want to run it virtual state, right click the icon and run it virtual.

Quote:
Originally Posted by whitedragon551
It can auto delete contents, but that requires you to dig into expert settings and unchecking a box.
Sandboxie comes with no default setting with nothing, no auto-delete nor to keep the contents. AIS comes default with keeping the contents and there is no digging to change this default setting. It is on the first menu of the settings.

Kind regards,

KOR!

Last edited by aladdin : December 11th, 2010 at 02:36 AM.
  #15  
Old December 11th, 2010, 09:04 AM
m00nbl00d m00nbl00d is offline
Incredibly Massive Poster
 
Join Date: Jan 2009
Posts: 6,561
Default Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by King of Rapture
[...]
Sandboxie comes with no default setting with nothing, no auto-delete nor to keep the contents. [...]
Kind regards,

KOR!

I'm hoping I'm not misunderstanding you, but considering I'm a long time user of Sandboxie, I'd like to provide the information that if the user does not define Sandboxie to delete a sandbox contents, then the contents will remain after the user closes the sandbox.

Either one of two things would happen: it would either automatically delete contents, which would be a bad thing, in case some users would like to keep the contents, or would keep the contents, which is the case, if the user leaves the options to delete contents as it is, when Sandboxie is installed.

So, unless I misunderstood you, Sandboxie does keep the contents in sandboxes, unless you define the sandbox settings to delete the contents, when closing the executed programs.
If one does not do that, then one can right-click a sandbox, which is one of the ways of doing it... the others would be in the Menu or tray bar icon, to delete the contents.

  #16  
Old December 11th, 2010, 09:06 AM
whitedragon551's Avatar
whitedragon551 whitedragon551 is offline
Very Frequent Poster
 
Join Date: Sep 2008
Location: USA
Posts: 2,761
Default Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by m00nbl00d
I'm hoping I'm not misunderstanding you, but considering I'm a long time user of Sandboxie, I'd like to provide the information that if the user does not define Sandboxie to delete a sandbox contents, then the contents will remain after the user closes the sandbox.

Either one of two things would happen: it would either automatically delete contents, which would be a bad thing, in case some users would like to keep the contents, or would keep the contents, which is the case, if the user leaves the options to delete contents as it is, when Sandboxie is installed.

So, unless I misunderstood you, Sandboxie does keep the contents in sandboxes, unless you define the sandbox settings to delete the contents, when closing the executed programs.
If one does not do that, then one can right-click a sandbox, which is one of the ways of doing it... the others would be in the Menu or tray bar icon, to delete the contents.


To empty contents in AIS you have to dig through menu's to the process virtualization, and then into expert settings, and then to delete contents. It cant be done from the tray like it can with Sandboxie.
__________________
|Kaspersky Anti-Virus 2013|Private Firewall|HitmanPro|MBAM|Keriver Image|WinPatrol Plus|

Looking for volunteer authors to write articles, reviews, and How-Tos. If you think you have what it takes, contact me.
|http://pc-babble.com/|
  #17  
Old December 11th, 2010, 09:12 AM
m00nbl00d m00nbl00d is offline
Incredibly Massive Poster
 
Join Date: Jan 2009
Posts: 6,561
Default Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by whitedragon551
[...]
My last gripe with AIS sandbox is that it is always on. If you want to turn it off you have to delete a program from the list of virtualized processes, update, and then read it to the list.
[...]

That actually is a great thing. Maybe not for you and for some of Wilders people, but it is good thing that it like that, because, by default it will sandbox those more dangerous applications... I believe that's what it does? I haven't yet played with AIS.

Unlike some other sandboxing applications, like Sandboxie, which the user needs to be exactly aware of what needs to be sandboxed and which would be the best options for each sandboxed programs.

I believe that, in the past, AIS sandbox wouldn't automatically add any programs. But, due to users suggestions, AVAST decided to do it. A great thing, IMO.

Sure, things like the Flash problem you're having are to be worked. But, as an example:

If I sandbox Chromium, and only allow chrome.exe to run in the sandbox, then no sound will be heard in Youtube, for example.
Gmail also seems to be having problems with Flash plugin lately as well. I've added permissions to Flash plugin and will see if this solves the issue with Gmail.
Or, if it is just a bug with Sandboxie report it.

You see, no one single application will ever leave users free of issues. A sad reality.
  #18  
Old December 11th, 2010, 09:15 AM
m00nbl00d m00nbl00d is offline
Incredibly Massive Poster
 
Join Date: Jan 2009
Posts: 6,561
Default Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by whitedragon551
To empty contents in AIS you have to dig through menu's to the process virtualization, and then into expert settings, and then to delete contents. It cant be done from the tray like it can with Sandboxie.

And, that's one of the things, among others, that make Sandboxie great of using, once you got every set up and running.

avast!'s sandbox is new and AVAST needs to have input from their user base about what they'd like this sandbox to work like and what features to provide.

Have you tried suggesting ways of simplifying the use of their sandbox? Who knows.
  #19  
Old December 11th, 2010, 04:22 PM
whitedragon551's Avatar
whitedragon551 whitedragon551 is offline
Very Frequent Poster
 
Join Date: Sep 2008
Location: USA
Posts: 2,761
Default Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by m00nbl00d
That actually is a great thing. Maybe not for you and for some of Wilders people, but it is good thing that it like that, because, by default it will sandbox those more dangerous applications... I believe that's what it does? I haven't yet played with AIS.

Unlike some other sandboxing applications, like Sandboxie, which the user needs to be exactly aware of what needs to be sandboxed and which would be the best options for each sandboxed programs.

I believe that, in the past, AIS sandbox wouldn't automatically add any programs. But, due to users suggestions, AVAST decided to do it. A great thing, IMO.

Sure, things like the Flash problem you're having are to be worked. But, as an example:

If I sandbox Chromium, and only allow chrome.exe to run in the sandbox, then no sound will be heard in Youtube, for example.
Gmail also seems to be having problems with Flash plugin lately as well. I've added permissions to Flash plugin and will see if this solves the issue with Gmail.
Or, if it is just a bug with Sandboxie report it.

You see, no one single application will ever leave users free of issues. A sad reality.

No no no. You misunderstood. Avast sandbox doesnt auto sandbox. You have to configure programs to be sandboxed. If its a malicious item and it isnt set up via the Expert Settings to run sandboxed it wont. You can right click and run sandboxed.
__________________
|Kaspersky Anti-Virus 2013|Private Firewall|HitmanPro|MBAM|Keriver Image|WinPatrol Plus|

Looking for volunteer authors to write articles, reviews, and How-Tos. If you think you have what it takes, contact me.
|http://pc-babble.com/|
  #20  
Old December 11th, 2010, 05:08 PM
m00nbl00d m00nbl00d is offline
Incredibly Massive Poster
 
Join Date: Jan 2009
Posts: 6,561
Default Re: AIS Sandbox vs Sandboxie

Quote:
Originally Posted by whitedragon551
No no no. You misunderstood. Avast sandbox doesnt auto sandbox. You have to configure programs to be sandboxed. If its a malicious item and it isnt set up via the Expert Settings to run sandboxed it wont. You can right click and run sandboxed.

OK... thanks for clarifying/correcting me.
  #21  
Old December 29th, 2010, 03:28 PM
ExtremeGamerBR's Avatar
ExtremeGamerBR ExtremeGamerBR is offline
Frequent Poster
 
Join Date: Aug 2010
Posts: 963
Default Re: AIS Sandbox vs Sandboxie

I've used both, in my opinion, what I'm seeing, I think the sandbox of Sandboxie is better, it allows many, many settings, but for an normal user, both do their job well, and we agree that it is easy to tamper with the avast! than in Sandboxie.

Sorry for my english.
__________________
Windows 7 Home Premium 64 Bits
Sandboxie | Keyscrambler Pro | Norton ConnectSafe
Chrome > Ghostery (all enabled) | Adblock Plus | AntiSocial | Laspass
Malwarebytes' Anti-Malware (PRO) | Keriver 1-Click Restore Pro | Skydrive
  #22  
Old December 30th, 2010, 06:25 AM
Franklin's Avatar
Franklin Franklin is offline
Very Frequent Poster
 
Join Date: May 2005
Location: West Aussie
Posts: 2,517
Default Re: AIS Sandbox vs Sandboxie

Turned off all realtime shields and ran a malware sample via Avast SB.

Didn't seem to leak but couldn't kill a few processes which couldn't be killed via Task Manager either.

XP VM wouldn't restart so used the reset switch then scanned with Avast and MBAM with both finding the original sample sitting on desktop and nothing else.

Avast sandbox IMHO is nowhere as good as Sandboxie but early days.

I will say Avast Pro is a decent AV overall but not my type of security app.

Name:  Process Avast.JPG
Views: 589
Size:  40.1 KB
 

Wilders Security Forums > Software, Hardware and General Services > sandboxing & virtualization « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 10:18 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums