Search found 90 matches

by Lumberjack
Tue Aug 11, 2015 12:00 pm
Forum: Anything Else
Topic: Sandboxes against a simple API exploit, Sandboxie fails...
Replies: 5
Views: 1231

Re: Sandboxes against a simple API exploit, Sandboxie fails.

Peter2150 wrote:That has already been posted and Craig has stated they are working on it. No need to double post.
OK, but could you give me the link to that thread, please?
Big thanks in advance.
by Lumberjack
Mon Jul 20, 2015 1:42 am
Forum: Quick Questions
Topic: Chrome sandboxed
Replies: 3
Views: 862

Re: Chrome sandboxed

@Curt Reading this post of a user at Wilders some doubts surfaced but first I want you to read his quote and post your comments on this, please: 1. The primary purpose behind a "sandbox" is to limit access to resources (repeat until you get it). In that respect, Chromium sandbox architecture is alr...
by Lumberjack
Fri Dec 19, 2014 4:18 pm
Forum: Quick Questions
Topic: Disabling Chrome's built-in sandbox
Replies: 30
Views: 4617

Re: Disabling Chrome's built-in sandbox - Good idea?

Well children, from where does this notion of browser sandboxing being bad comes from? I have always tried to treat softwares so that one does not have to depend on just one solution. Because one day they will be gone, SBIE too. Seems here are a lots of "gurus" in this thread, but when talking abou...
by Lumberjack
Thu Dec 04, 2014 3:52 am
Forum: Feature Requests
Topic: Google Chrome Updating
Replies: 40
Views: 7194

Re: Google Chrome Updating

What about Google Chrome and Sandboxie which one gives greater security? It depends on what you call a "security". For me security is not just the absence of exploits. For me it is a combination of: 1) not being vulnerable to remote attacks to root/own my computer; 2) being at control of what other...
by Lumberjack
Wed Dec 03, 2014 9:33 am
Forum: Feature Requests
Topic: Google Chrome Updating
Replies: 40
Views: 7194

Re: Google Chrome Updating

Question ? So, Sandboxie "makes use of" certain Windows security aspects. Is this "make use of" simply an internal program feature or does Sandboxie "look" for these relationships at user logon and expect to find a fully updated OS ? For any software to be more powerful that the other software - th...
by Lumberjack
Tue Nov 11, 2014 1:11 pm
Forum: Anything Else
Topic: Does and can SBIE4 protect against win32k.sys vulnerability?
Replies: 16
Views: 5401

Re: Does and can SBIE4 protect against win32k.sys vulnerabil

Curt, 2 very quick questions, first question: Does Sandboxie (3x and 4x versions) use a kernel mode driver combined with user-mode hooks on both 32-bit and 64-bit versions ? Second very quick question: Does Sandboxie (3x and 4x versions) use the Windows kernel to ensure that system changes are made...
by Lumberjack
Sat Nov 08, 2014 12:04 pm
Forum: Anything Else
Topic: Does and can SBIE4 protect against win32k.sys vulnerability?
Replies: 16
Views: 5401

Re: Does and can SBIE4 protect against win32k.sys vulnerabil

Another major difference is that Sandboxie uses a kernel mode driver combined with user-mode hooks. Chrome Sandbox only uses user-mode hooks -- it does not have a kernel mode driver. User-mode hooks can easily be bypassed. Sandboxie uses the Windows kernel to ensure that system changes are made onl...
by Lumberjack
Sat Oct 18, 2014 2:02 am
Forum: Anything Else
Topic: Sandboxie4 vs. Angler Exploit Kit...
Replies: 29
Views: 7111

Re: Sandboxie4 vs. Angler Exploit Kit...

Did you mean by this that by design, security and protections options Invincea FreeSpace=Sandboxie4? Lumberjack, I think Curt means that Freespace is Sandboxie and more. And when he posted the link below, he is telling you that what the link says, it applies to Sandboxie as well. :) http://www.invi...
by Lumberjack
Fri Oct 17, 2014 3:33 pm
Forum: Anything Else
Topic: Sandboxie4 vs. Angler Exploit Kit...
Replies: 29
Views: 7111

Re: Sandboxie4 vs. Angler Exploit Kit...

Curt@invincea wrote:Invincea FreeSpace is built on top of Sandboxie.
Did you mean by this that by design, security and protections options Invincea FreeSpace=Sandboxie4?
by Lumberjack
Fri Oct 17, 2014 2:24 pm
Forum: Anything Else
Topic: Sandboxie4 vs. Angler Exploit Kit...
Replies: 29
Views: 7111

Re: Sandboxie4 vs. Angler Exploit Kit...

Unless, you're saying that SBIE4 is very similar to Invincea when it comes to design and protection options, which I somehow doubt very much. Invincea is the name of the company, not the name of any software product. Yes, but this does not answer my questions about SBIE4 vs. memory exploits/memory ...
by Lumberjack
Fri Oct 17, 2014 8:47 am
Forum: Anything Else
Topic: Sandboxie4 vs. Angler Exploit Kit...
Replies: 29
Views: 7111

Re: Sandboxie4 vs. Angler Exploit Kit...

This PDF discusses EMET and memory exploitation. http://www.invincea.com/why-invincea/microsoft-emet-comparison/ But what does this have to do with my questions about SBIE4 protection against all forms of exploits, including memory based exploits/memry-based malwares, plus buffer overflows? Unless,...
by Lumberjack
Wed Oct 15, 2014 2:59 pm
Forum: Anything Else
Topic: Sandboxie4 vs. Angler Exploit Kit...
Replies: 29
Views: 7111

Re: Sandboxie4 vs. Angler Exploit Kit...

1) You can't block win32k.sys with Sandboxie. 2) MS did say that a workaround to prevent Duqu (and other True Type font vulnerabilities) was to remove access to t2embed.dll. So, you could have done the same with Sandboxie (by blocking t2embed.dll) -- if you had known to do it. But could than and ca...
by Lumberjack
Thu Oct 09, 2014 7:09 am
Forum: Anything Else
Topic: Sandboxie4 vs. Angler Exploit Kit...
Replies: 29
Views: 7111

Re: Sandboxie4 vs. Angler Exploit Kit...

Sandboxie blocks exploits from affecting the host by containing them in the sandbox. My general question about Sandboxie 4.12/alpha 4.13.5 are: against what forms of exploits, malwares, operation system vulnerabilities, dll injections, browser exploits, and etc. super-tightly configured Sandboxie d...
by Lumberjack
Tue Oct 07, 2014 1:57 am
Forum: Anything Else
Topic: Sandboxie4 vs. Angler Exploit Kit...
Replies: 29
Views: 7111

Re: Sandboxie4 vs. Angler Exploit Kit...

Sandboxie blocks exploits from affecting the host by containing them in the sandbox. Quick question if Sandboxie 4.12/beta 4.13.5 Alpha can fully protect against the following on Sandboxie FAQ I read this: Detecting Key Loggers Note two caveats: • The Internet access feature is neither a replacemen...