What do you think of "sandbox" type of software?

Post removed (X-No-Archive: yes)

Re: What do you think of "sandbox" type of software?

Post removed (X-No-Archive: yes)

Re: What do you think of "sandbox" type of software?

On Fri, 12 Jan 2007 18:59:12 +0100, Sebastian Gottschalk wrote:

> Anonyma wrote:
>
>> The following ones in particular.
>>
>> GesWall
>> http://www.gentlesecurity.com/getstarted.html
>>
>> Sandboxie
>> http://www.sandboxie.com/
>
> Trivial:
>
> 1. start up the "Windows keyboard input manager" inside such a supposed
> sandbox
> 2. open the Start, Run dialog
> 3. click the keys on that virtual input. 'c','a','l','c', should
> give you an obvious result
>
> Now draw your conclusion how much sandbox these things actually are. Or
> better, what the general reason is why no such sandbox could work.

To the OP - I don't know what GesWall claims to do but, as far as Sandboxie
is concerned, your open-ended question is perhaps a bit meaningless in the
comp.security.firewalls group, since (as far as I'm aware) Sandboxie makes
no claim to be a firewall.

However, my own opinion is that software like Sandboxie can be very useful
in protecting a computer from the ravages of malware (or just badly
designed software), if it lives up to its claims.

It allows you to try software out in a manner which prevents the softwaare
from making any permanent changes to your Hard Drive - ie any data written
to the Hard Drive is confined to the "virtual" section of the machine and
can be dumped later if need be. In the same way, you can use Sandboxie to
browse internet sites without having to put up with the risk of them
dumping unwanted cookies or trojans in the "real" section of your computer.

I'm not competent to judge whether the claims made about Sandboxie are
fully correct, but it seems to be reasonably well regarded. If you are
interested in reading (what appears to me to be) a competent review of
Sandboxie and other "virtual machine" type protection software, try the
site at:-

http://www.techsupportalert.com/security_virtualization.htm

Cheers,

John S

Re: What do you think of "sandbox" type of software?

Post removed (X-No-Archive: yes)

Re: What do you think of "sandbox" type of software?

Post removed (X-No-Archive: yes)

Re: What do you think of "sandbox" type of software?

Post removed (X-No-Archive: yes)

Re: What do you think of "sandbox" type of software?

Sebastian Gottschalk;992719 Wrote:
> Anonyma wrote:
> Trivial:
> 1. start up the "Windows keyboard input manager" inside such a
> supposed
> sandbox
> 2. open the Start, Run dialog
> 3. click the keys on that virtual input. 'c','a','l','c',
> should
> give you an obvious result
> Now draw your conclusion how much sandbox these things actually are.
> Or
> better, what the general reason is why no such sandbox could work.

well, GeSWall has passed this "Trivial", no virtual keys are succeeded


--
bewe
------------------------------------------------------------ ------------
bewe's Profile: http://unixadmintalk.com/934
View this thread: http://unixadmintalk.com/showthread.php?t=258562

Re: What do you think of "sandbox" type of software?

Post removed (X-No-Archive: yes)

Re: What do you think of "sandbox" type of software?

Sebastian Gottschalk wrote:
> bewe wrote:
>
>> Sebastian Gottschalk;992719 Wrote:
>>> Anonyma wrote:
>>> Trivial:
>>> 1. start up the "Windows keyboard input manager" inside such a
>>> supposed
>>> sandbox
>>> 2. open the Start, Run dialog
>>> 3. click the keys on that virtual input. 'c','a','l','c',
>>> should
>>> give you an obvious result
>>> Now draw your conclusion how much sandbox these things actually are.
>>> Or
>>> better, what the general reason is why no such sandbox could work.
>> well, GeSWall has passed this "Trivial", no virtual keys are succeeded
>
> Then it obviously breaks the systems.

LQTM

--
Notan

Re: What do you think of "sandbox" type of software?

Post removed (X-No-Archive: yes)

Re: What do you think of "sandbox" type of software?

Post removed (X-No-Archive: yes)