Sandboxie Support

Re: Improve the security of its browser ?!

2015-03-30T17:10:54-04:00

Ok, I found the solution.

CODE:

:: Save Login/Passwordmove "%1\user\current\AppData\Roaming\Mozilla\Firefox\Profiles\jzxafyuy.default-1424544488418\key3.db" "%TEMP%\key3.db"move "%1\user\current\AppData\Roaming\Mozilla\Firefox\Profiles\jzxafyuy.default-1424544488418\logins.json" "%TEMP%\logins.json":: Remove the SandboxeRMDIR /s /q "%1":: Restore Login/Passwordmd "C:\Sandbox\myuser\DefaultBox\user\current\AppData\Roaming\Mozilla\Firefox\Profiles\jzxafyuy.default-1424544488418\"move "%TEMP%\key3.db" "C:\Sandbox\myuser\DefaultBox\user\current\AppData\Roaming\Mozilla\Firefox\Profiles\jzxafyuy.default-1424544488418\key3.db"move "%TEMP%\logins.json" "C:\Sandbox\myuser\DefaultBox\user\current\AppData\Roaming\Mozilla\Firefox\Profiles\jzxafyuy.default-1424544488418\logins.json"

Statistics: Posted by laclac1 — Mon Mar 30, 2015 5:10 pm

Re: Improve the security of its browser ?!

2015-03-30T09:12:27-04:00

HI,

I have a problem,

When you active the “automatically delete”, the sandboxe has a new name on each session.
So when I restore my key file, it’s on the old sandboxe. So it’s without effect.

I should disable the “automatically delete”, if I want the same name.
But if I disable this option, the DeleteCommand command is never called.

So my solution doesn’t work.
Do you have an idea ? 

Statistics: Posted by laclac1 — Mon Mar 30, 2015 9:12 am

Re: Improve the security of its browser ?!

2015-03-30T06:02:12-04:00

Hi,

I find a solution, I use the parameter DeleteCommand.
I include the line in the Sandboxie.ini.
DeleteCommand =c:\security.bat "%SANDBOX%"

And in the bat file I writed:

CODE:

:: Save Login/Passwordmove "%1\user\current\AppData\Roaming\Mozilla\Firefox\Profiles\ekarny6u.default\key.db" "%TEMP%\key.db"move "%1\user\current\AppData\Roaming\Mozilla\Firefox\Profiles\ekarny6u.default\logins.json" "%TEMP%\logins.json":: Remove the SandboxeRMDIR /s /q "%1":: Restore Login/Passwordmd "%1\user\current\AppData\Roaming\Mozilla\Firefox\Profiles\ekarny6u.default\"move "%TEMP%\key.db" "%1\user\current\AppData\Roaming\Mozilla\Firefox\Profiles\ekarny6u.default\key.db"move "%TEMP%\logins.json" "%1\user\current\AppData\Roaming\Mozilla\Firefox\Profiles\ekarny6u.default\logins.json"

Now I can empty the real key.db and logins.json of Firefox.
The only good file will be in the sandboxe with a access very secure.

So if a virus attack my computer:
-In the sandboxe, he is block by the closepath
-And outside the sandboxe, the file is empty.

So it’s impossible a program get my passwords.
We can make this with a lot of programs. For example, the password of Filezilla available in the sitemanager, very easy to hack. Or Chrome.
We can secure it with the same method.

Note: If you have an ideo to improve my script, or a feedback 

Statistics: Posted by laclac1 — Mon Mar 30, 2015 6:02 am

Re: Improve the security of its browser ?!

2015-03-30T13:41:43-04:00

Oh my god. It works.
It's perfect ! I'm very happy, my passwords were very safe now. It's a very good news.

But I have an other question..
And if it's possible to have better (but it's already perfect).

My firefox is always in a sandboxe and only it can read the key.db.. But my system (go out the sandboxe) can read it.
So if my system is really infected by a virus ouside the sandboxe, it can read my password.
Is it possible to remove the key.db in my real system, and keep it only in my sandboxe with firefox ?
It s a very very safe

Note: But I automatically my sandboxie. So is it possible to remove the sandboxe automatically but make an exception on the key.db.

Statistics: Posted by laclac1 — Sun Mar 29, 2015 9:33 am

Re: Improve the security of its browser ?!

2015-03-28T20:05:31-04:00

Add this line to your Sandboxie.ini (in the sandbox where Firefox runs):

CODE:

ClosedFilePath=!firefox.exe,key.db

Statistics: Posted by Mr.X — Sat Mar 28, 2015 8:05 pm

Improve the security of its browser ?!

2015-03-28T17:51:01-04:00

I have a question.
I always execute firefox in a sandboxe. But if I download and execute a virus in the same sandboxe, the virus can't infect my system with sandboxie
But it can get my personal and important data.
For example, it can read the list of my password saved by firefox (key.db).

Is it possible to block the access to key.db file for all program except firefox ?

Statistics: Posted by laclac1 — Sat Mar 28, 2015 5:51 pm