I Can See Underbelly Of The Net With SANDBOXIE!!

Discussion in 'sandboxing & virtualization' started by cortez, Feb 23, 2008.

Thread Status:
Not open for further replies.
  1. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    With the paid version, there is nothing to click. Just force all the browsers into the sandbox.

    Also if you are careful about what you download, you can get by using Sandboxie without an AV. Even after removing a file from the sandbox, you can right click it and open it sandboxed.

    Only if you download really flakey stuff would you be much at risk.

    Pete
     
  2. Dieselman

    Dieselman Registered Member

    Joined:
    Jan 6, 2008
    Posts:
    795
    True Peter but if you only download trusted stuff from trusted sites such as Nvidia drivers then you dont need Sandboxie. Sandboxie cannot tell you that something is a virus unless you scan it first. I have never had any viruses or spyware in over 5 years and I download things everyday. I use NOD32 to scan everything.
     
  3. twl845

    twl845 Registered Member

    Joined:
    Apr 12, 2005
    Posts:
    4,186
    Location:
    USA
    I think this is a case for tough love. Tell her that if she does the above again it will be up to her to fix it. Maybe if she has to stare at the screen with no clue of what to do and no computer for a few days, she will be careful. Of course I don't know where you'll be eating dinner. :D
     
  4. Hugger

    Hugger Registered Member

    Joined:
    Oct 27, 2007
    Posts:
    1,003
    Location:
    Hackensack, USA
    Or do what I did with my wife/boss.
    Smile and tell her you don't know as much about this stuff as you thought you did and she should not rely on you to fix it because it may never work again!
    Then duck.
    Hugger
     
  5. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    First if I don't really know or trust the site, I assume suspicious. But if I still want to try, then I go to the VM machine, and there I can try it, and see what it does, with no risk. Does away the load of an AV. Has worked so far.
     
  6. Hermescomputers

    Hermescomputers Registered Member

    Joined:
    Jan 9, 2006
    Posts:
    1,069
    Location:
    Toronto, Ontario, Canada, eh?
    Actually most issues nowadays have little to do with downloads users do... It's the drive by download via XSS and IFrame injectors that are used to modify browsers and use the browsers built in interpreter that are the high risks... Sandboxie allows you to recover nicely from those in the advent you get hit... Besides if it happens more than likely you would not eve know about it in many cases...
     
  7. Hermescomputers

    Hermescomputers Registered Member

    Joined:
    Jan 9, 2006
    Posts:
    1,069
    Location:
    Toronto, Ontario, Canada, eh?
    Wow... I should try that one... (Great way to save on Viagra!) :D
     
  8. lucas1985

    lucas1985 Retired Moderator

    Joined:
    Nov 9, 2006
    Posts:
    4,047
    Location:
    France, May 1968
    Sandboxie is not for downloaders, because when you put things outside the sandbox you're at your own mercy. Sandboxie is the right tool to protect against drive-by downloads which may happen on casual browsing (even on trusted sites)
     
  9. Dieselman

    Dieselman Registered Member

    Joined:
    Jan 6, 2008
    Posts:
    795
    Well honestly speaking that has never happened at all to me and I surf EVERYTHING. I tried Sandboxie for a week and since I download ateast 5 things a day, recovering everything I downloaded was gettting old. I download WindowBlind skins,Wallpapers,Nvidia drivers. I never download some program from some site I have never been to. I also never just click,click,click. If you are infected how can Sandboxie tell you that? It cant but all you do is empty the box correct? Everyone just seems to me to have gone overboard with protection. Sandboxie,DefenseWall,Safespace. Its all too much for me and seems like paranoia. Ok maybe Sandboxie might save by butt one day but how would I know that if it never gets outside the sandbox.
     
  10. lucas1985

    lucas1985 Retired Moderator

    Joined:
    Nov 9, 2006
    Posts:
    4,047
    Location:
    France, May 1968
    Why would you want to know if you were "infected" in a surfing session with SBIE?
    The point of sandboxes is browse to your heart's content, then delete the virtual container and done. You begin clean and you finish clean.
     
  11. Dieselman

    Dieselman Registered Member

    Joined:
    Jan 6, 2008
    Posts:
    795
    I already do surf till my hearts content..............and never 1 infection.
     
  12. SirMalware

    SirMalware Registered Member

    Joined:
    Jun 6, 2006
    Posts:
    133
    What browser do you use Dieselman?
     
  13. Dieselman

    Dieselman Registered Member

    Joined:
    Jan 6, 2008
    Posts:
    795
    Firefox with adblock and no script. I have Comodo 3.0 and NOD32 3.0. And yes I surf porn.
     
  14. trjam

    trjam Registered Member

    Joined:
    Aug 18, 2006
    Posts:
    9,102
    Location:
    North Carolina USA
    I am 52, I surf coupons for Depends.:oops:
     
  15. lucas1985

    lucas1985 Retired Moderator

    Joined:
    Nov 9, 2006
    Posts:
    4,047
    Location:
    France, May 1968
    Great, but
    NoScript requires a fair involvement from the user. And Comodo 3? You'll have to deal with HIPS and firewalls pop-ups.
    The concept behind sandboxes is simplicity = strong protection, no pop-ups, almost zero configuration, no FPs.
     
  16. Dieselman

    Dieselman Registered Member

    Joined:
    Jan 6, 2008
    Posts:
    795
    I don't get any pop ups unless I am installing something. If you merely put the firewall and D+ in training mode for a week the switch it back you will be fine. Comodo just sits there like NOD32 till it finds something.
     
  17. innerpeace

    innerpeace Registered Member

    Joined:
    Jan 15, 2007
    Posts:
    2,121
    Location:
    Mountaineer Country
    A site I visit everyday was bit yesterday. http://www.askwoody.com/newscomments.php?newsid=1949 It's fixed now, but this serves as an example that even your normal daily sites can't be 100% trusted. I'm glad to have Sandboxie on board.
     
  18. Hermescomputers

    Hermescomputers Registered Member

    Joined:
    Jan 9, 2006
    Posts:
    1,069
    Location:
    Toronto, Ontario, Canada, eh?
    Hello Innerpeace,

    I make noise about it on my site, I blab about it in wilders.. and boy do I get flack for it... (Apparently I'm a fear mongering for doing it. :eek: )

    Just goes to show, the risks are real, and it's really not the "Obvious" site that will bite most users. The problem is most are so poorly secured that it would take a really poorly written hack for them to ever notice anything taking place...
     
  19. Aaron Here

    Aaron Here Registered Member

    Joined:
    Jun 4, 2006
    Posts:
    1,205
    Location:
    USA
    I don't see how SandboxIE can prevent my wife from getting infected if she opens an email attachment with a virus! :doubt:
     
  20. innerpeace

    innerpeace Registered Member

    Joined:
    Jan 15, 2007
    Posts:
    2,121
    Location:
    Mountaineer Country
    For the "Obvious" sites, I turn on Returnil's protection :p. Seriously though, as much as I like Sandboxie, it's just as important to keep everything up to date. The malware would need a vulnerability of some kind to do it's damage. That's also why I check once or twice a month with Secunia's Software Inspector to make sure my broswer, Java, Flash, media players etc. are all up to date.
     
  21. innerpeace

    innerpeace Registered Member

    Joined:
    Jan 15, 2007
    Posts:
    2,121
    Location:
    Mountaineer Country
    Hi Aaron, If you start a program within Sandboxie, anything that happens during that session should stay in the sandbox. If she however decides to recover the attachment to your real computer and open or runs it, then it's game over if the attachment is infected. That is why it's important to scan everything you download and then recover from the sandbox. If the file is under 10MB, you could also upload it to VirusTotal or Jotti to be scanned by multiple scanners. I hope this makes sense.
     
  22. Dieselman

    Dieselman Registered Member

    Joined:
    Jan 6, 2008
    Posts:
    795
    I agree. Then I guess the only thing to do is Sandbox your entire pc. Not. I was only Sandboxing my IE and FF.
     
  23. Aaron Here

    Aaron Here Registered Member

    Joined:
    Jun 4, 2006
    Posts:
    1,205
    Location:
    USA
    Thanks innerpeace, and that does make very good sense to me, but we are talking about my wife here! :p

    As I responded to Chuck, any and all security programs that I install on her laptop will have to work transparently (without the need for her intervention) or it simply will not get done! :doubt:
     
  24. wat0114

    wat0114 Guest

    I see Sandboxie as an insurance policy. Maybe I'll never need it to rescue me, but I know it gives me a much better chance of avoiding infiltration of malware if I come in contact with it while surfing. Of course I'll never give up in the foreseeable future my firewall and HIPS as two of my security workhorses, but Sandboxie has relegated my revered NOD32 to on-demand scanning duty only, except for email downloads; it now plays second-fiddle to Sandboxie. It wasn't long ago I balked at the thought of using a sandbox to surf, but when you just sit back and think in simplest terms what it does to protect you while surfing, it is rather phenomenal to realize it completely isolates your surfing activity from your physical drive. Your machine for all intents and purposes is basically untouchable from malicious activity that could occur while surfing or opening attachments!

    I suppose someday someone will figure out how to defeat the sandbox, but for now it remains imo virtually unparalleled.
     
  25. Chuck57

    Chuck57 Registered Member

    Joined:
    Sep 2, 2002
    Posts:
    1,770
    Location:
    New Mexico, USA
    A thought, and I'm not sure whether this would work or not. What about Faronics AE, or some other anti executable?

    Once it's in place, it's very transparent - until you try to open something, or something tries to open itself, that isn't trusted. Don't know if it would be applicable in Aaron Here's case.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.