Sandboxie Acquired by Invincea

Hey guys check out this video https://www.youtube.com/watch?v=AycS3pl_fAc

 

Sharing and caring! Goes with Overkill! Above post!

http://malwaretips.com/threads/sandboxes-against-a-sinple-api-exploit.49345/#post-419786
Making life a little confusing for me!

Kind regards,

 

Hmmm, a bit disappointing that SBIE does not block this. Is it the same as this?

http://www.testmypcsecurity.com/sec...5sk1=a88ed141c222ef1227fb4fa1f9bc0952b438629b

 

Hi Wolf, if you like to go back to 5.01.6, you can workaround the plugin container crashing issue by disabling Flash Protected mode. To do that, in about:config, change the preference below to true. If you go back to 5.01.6 and change the preference, it is likely that your Palemoon will work at 100% with no crashes of any kind in your W7.

dom.ipc.plugins.flash.disable-protected-mode

FWIW, I dont keep any plugins installed in my W7. But for testing latest SBIE betas, I install Flash under Shadow mode. And the plugin is not crashing for me when I test streaming Braves games and open YouTube videos in another tab at the same time in W7. But in XP, after 5.01.3, I have to disable plugin container, otherwise, the plugin crashes for me soon after streaming something. I believe, a fix will be coming out soon.


Bo

 

Hi Moose. Relax. If you tick Drop rights in Sandbox settings, all is well.

Bo

 

Did that Bo. 5.01.6 worked ok with Palemoon 25.6 the latest update in mozilla code. I'm trying out Palemoon 26.0 Goanna public beta as seen here http://www.palemoon.org/WIP/ which is a different code from mozilla and in SB 5.01.6 flash and plugin container crashes even if disabling Flash Protected mode, not so in 5.01.3. "dom.ipc.plugins.flash.disable-protected-mode" is not in Palemoon about:config only in FF. Have to go into sysWOW64/mms.cfg and set Protected mode to 0 for PM. Go Vikes tomorrow

 

Thank you! Bo!

http://forums.sandboxie.com/phpBB3/viewtopic.php?f=53&t=21354

 

please dont change mms.cfg! this is for ALL applications which uses the flash plugin, not only firefox!

from sandboxie forum

as i mentioned some where before palemoon is using since v25 another gecko fork not supported by mozilla. if they have phased-out that code - damn stupid... you can look out for that option in pale moon but i think it wont be there since the line in about:config is also not available. so pale moon is lowering security with modified mms.cfg because flash is running with same rights as pale moon - either sandboxed or not. you should remember this!

as Overkill pointed out without dropped rights sandbixe will be vulnerable. if you cant see the video, go
https://ssyoutube.com/watch?v=AycS3pl_fAc
and hit the download button (requires cookies and script).

 

@Brummelchen,

Tried to watch the video in post # 1683. Not working

"https://ssyoutube.com/watch?v=AycS3pl_fAc
and hit the download button (requires cookies and script)."

would love to watch,ect.....

Kind regards,

Moose

 

you need flash for watching - otherwise download as written. or you provide more details whats going wrong, maybe your security software is interacting or something else. no trouble here that far.

 

Does this setting stop this "exploit"?

 

Latest version 5.01.7 Beta has been released. http://forums.sandboxie.com/phpBB3/viewtopic.php?f=53&t=21354 (Hope Bo don't get angry. )
EDIT: Just took it for a spin with Palemoon Goanna and no flash/plugin crashes with flash protection on. Lookin' good so far.

 

According to Buckaroo, it does. I trust him.

http://forums.sandboxie.com/phpBB3/viewtopic.php?f=17&t=21562#p111907

Bo

 

I love it, Wolf, specially the results you are getting. We ll see what I get. Here are the changes.

http://forums.sandboxie.com/phpBB3/viewtopic.php?f=53&t=21354#p110484

According to Curt, this beta should fix all plugin container issues. Lets hope that is so.

Bo

 

Sanboxie vs an API Exploit redux
https://www.youtube.com/watch?v=QEem5--d8Nc

 

Overkill, someone over there who uses Sandboxie everyday and run many programs in the sandbox, ought to tell Cruelsister that most programs that one has installed in their system, will run sandboxed perfectly fine with Drop rights enabled. Drop rights is not supposed to stop programs that are installed in your system from running in a sandbox. But Drop rights stops programs (in SBIE, whether they are good or bad doesn't make a difference) from installing in the sandbox. Thats one clear thing that the setting does. And its exactly what I use it for.

Tell him that Sandboxie doesn't work like Comodo. Sandboxie is not supposed to tell the user anything about any sandboxed files and is not supposed to let (quoting him) "good files through while stopping any malicious activity" Sandboxie doesn't work like that. Sandboxie treats all files, good or bad, the same way.

Bo

 

Do you mind if I quote you?

 

Same here. All feels well in Firefox too.

Bo

 

Good to know, Pete.

Bo

 

Of course not. I have been reading guests posts about SBIE. In my opinion, lately, he has been on the money when talking about SBIE. He can tell him as well.

Bo

 

http://malwaretips.com/threads/sandboxie-vs-an-api-exploit-redux.49446/#post-421068

 

I meant no disrespect to the lady. I thought it was a he who likes folk music of the good kind.
https://en.wikipedia.org/wiki/Cruel_Sister_(Pentangle_album)
https://www.youtube.com/watch?v=P3S2brPXjEM

Bo

 

I'll relay this to her...aren't you a member of MalwareTips?

 

i learnt a new expression , thx Bo

By the way , i have a question: how do you get rid of the "bits" alert? (Win10, Sbie v5)