Sandboxie Technologies (SBIE Open source)

Discussion in 'sandboxing & virtualization' started by bo elam, Apr 22, 2020.

  1. Peter 123

    Peter 123 Registered Member

    Joined:
    Feb 1, 2009
    Posts:
    267
    Location:
    Austria
    I admit that I was not aware of this problem:

    In David's thread about "Sandboxie Plus" Krabbath asked:
    And David's answer is:
    From this statement I conclude that using version 5.33.6 is a certain security risk. What do the experts think? Is this risk important so that one should change to David's fork (Sandboxie Plus) or can it be neglected and 5.33.6 can still be used without worries (until the issues will be fixed here in Tom's project too)?
     
  2. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    649
    In my opinion if you use Sandboxie in a normal way, for browsing news sites, forums, install programs from trustable sites, etc., you can stay with 5.33.6 until Tom releases his version and include security fixes.

    If you use Sandboxie + BSA to do malware analysis, then updating to David's 5.42.0 is a must.
     
  3. Peter 123

    Peter 123 Registered Member

    Joined:
    Feb 1, 2009
    Posts:
    267
    Location:
    Austria
    Thanks for your clear answer, Buster_BSA.
     
  4. zmechys

    zmechys Registered Member

    Joined:
    Dec 29, 2012
    Posts:
    700
    Location:
    usa
    I wonder what kind of Sandboxie the following web-site is promoting?

    Last Updated: 2020-07-11


    https://yepdownload.com/sandboxie



    Or the this one?

    https://chromecastapp.net/sandboxie-2/
     
  5. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    612
    Location:
    Viena
    one is 5.12 i.e. old
    and the other is fake or at least it tries to install you some sort of 3rd party downloader
     
  6. zmechys

    zmechys Registered Member

    Joined:
    Dec 29, 2012
    Posts:
    700
    Location:
    usa
    Thank you.
    It looks like an OPEN FIELD for malware specialists to abuse that "open source" Sandboxie.
     
  7. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    5,754
    Location:
    Nicaragua
    Hi Zmech, this is nothing new. Fake versions of Sandboxie have been around for years. Before open source, they were made for people who didnt want to buy a license. This users looked for ways to get away from buying the license, and found fakes. And when they started experiencing issues, sometimes they even reported the issue at the old Sandboxie forum. It was funny to see this. Curt had told me about an infamous Russian fake SBIE version and what this users would eventually experience after installing this particular versions, so I knew how to spot this users when they reported experiencing the issue that was designed as (I guess it can be called) a counter attack from SBIE.

    Bo
     
  8. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    612
    Location:
    Viena
    so what was it?
     
  9. Dirk41

    Dirk41 Registered Member

    Joined:
    Mar 22, 2016
    Posts:
    16
    I found what happened to Sandboxie few weeks ago, glad and grateful someone kept it alive. Disappointend by sophos, just like other big companies, they first acquire a good software and then try to delete it.

    thank you @bo elam

    I see now everyone can create multiple sandboxes.. but in settings I still see "require registration" sometimes..where should we register sandboxie?
     
  10. Special

    Special Registered Member

    Joined:
    Mar 23, 2016
    Posts:
    354
    Location:
    .
    This is not what happened at all, I suggest your better inform yourself.
     
  11. Dirk41

    Dirk41 Registered Member

    Joined:
    Mar 22, 2016
    Posts:
    16
    Oh thank you Sophos for deleting the old SBIE forum and website, what a nice suprise!

    When someone does not know what to say, he says “better inform yourself”
     
  12. n8chavez

    n8chavez Registered Member

    Joined:
    Jul 19, 2003
    Posts:
    2,754
    Location:
    Location Unknown
    He's right. If Sophos was just trying delete the product, thus eliminating the competition, they would not have released the source code for it!
     
  13. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    5,754
    Location:
    Nicaragua
    Hi Dirk. You don't need to register anything. You just need to install a Sandboxie version that was released after Sandboxie became free. Last version released by Sophos was 5.33.6, you can get the installers from this link. It can be installed over the top, after updating SBIE, you ll be able to use multiple sandboxes at the same time.

    Announcing Sandboxie 5.33.6 release and open source update - Sandboxie Forum (Read Only) - Sandboxie (Read Only) - Sophos Community

    Bo
     
  14. Dirk41

    Dirk41 Registered Member

    Joined:
    Mar 22, 2016
    Posts:
    16
    Thank you very much but I already have the latest version of sandboxie, I downloaded it days ago and installed it over the top
     
  15. hidebu

    hidebu Registered Member

    Joined:
    Jul 23, 2020
    Posts:
    2
    Location:
    canada
    Is there a performance boost when opening different browsers in separate sandboxes? If so, how does one go about opening Firefox, say, in one sandbox and Brave, for example, in another one?

    Thank you.
     
  16. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    5,754
    Location:
    Nicaragua
    What you get when you run browsers (or programs) in separate sandboxes is better isolation, and you better the chances for this programs to work properly and smoothly in the sandbox.

    You get better isolation because using dedicated sandboxes, allows you to tailor, setup each sandbox according to the dedicated program. You can restrict according to the specific program you created the sandbox for. Security can be setup more tight. Sandboxing is isolation, by using dedicated sandboxes you ll be isolating programs not only from the system but from other programs as well. More isolation is better isolation.

    And you better the chances for program to work better or properly sandboxed because the chances of programs interfering with each other becomes almost 0. Sometimes one program might mess up another one. So, you better the chances for things to go smoothly.

    Bo
     
  17. Proger

    Proger Registered Member

    Joined:
    Jul 24, 2020
    Posts:
    2
    Location:
    eu
    Please anyone tell me, can I set the default settings for new users?

    To immediately apply these settings to a new user on first start:

    SbieCtrl_ShowWelcome=n
    SbieCtrl_SettingChangeNotify=n
    SbieCtrl_HideWindowNotify=n
    SbieCtrl_ReloadConfNotify=n
    SbieCtrl_EditConfNotify=n
    SbieCtrl_EnableLogonStart=y
    SbieCtrl_EnableAutoStart=y
    SbieCtrl_AddDesktopIcon=n
    SbieCtrl_AddQuickLaunchIcon=n
    SbieCtrl_AddContextMenu=n
    SbieCtrl_AddSendToMenu=n
    SbieCtrl_AutoApplySettings=n
     
  18. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    4,477
    It has been a long time for me guys. Where to download Sandboxie these days? I lost track when Sophos took over. Thanks!

    EDIT: Nevermind I found it. Installed it, but it won't open.
     
    Last edited: Jul 30, 2020
  19. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    15,077
    Location:
    UK
  20. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    4,477
  21. Azure Phoenix

    Azure Phoenix Registered Member

    Joined:
    Nov 22, 2014
    Posts:
    1,226
    I don't think they wanted to acquire sandboxie. They acquired the company that at the time own sandboxie. They got sandboxie as a bonus in a way.
     
  22. zmechys

    zmechys Registered Member

    Joined:
    Dec 29, 2012
    Posts:
    700
    Location:
    usa
    Bo,

    Could you help us with the following?
    We are trying to incorporate new Privazer to secure delete contents of Sandbox, but it's not working.
    Maybe, you have some ideas?

    Here is what Privazer advised to us:

    C:\Program Files (x86)\PrivaZer \PrivaZer.exe" DELETE "%SANDBOX%"

    https://www.wilderssecurity.com/threads/privazer-discussion-thread.341840/page-93#post-2935074
     
  23. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    5,754
    Location:
    Nicaragua
    Hi zmechys, I am not familiar with secure delete. I always used Sandboxie's own deleting process. But, read this 2 links, they should have the information you need to do what you want.

    https://sandboxie-website-archive.github.io/www.sandboxie.com/DeleteSettings.html#command

    https://sandboxie-website-archive.github.io/www.sandboxie.com/SecureDeleteSandbox.html

    Bo
     
  24. zmechys

    zmechys Registered Member

    Joined:
    Dec 29, 2012
    Posts:
    700
    Location:
    usa
  25. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    15,077
    Location:
    UK
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.