Sandboxie Support

As the title says really, can we have support for Microsoft Edge please?

It's being worked on, but it's not a simple task. It's an OS within an OS basically.

I should imagine it's a pretty difficult task. Thanks for replying and I look forward to it in the future. Happy to help beta test when it gets that far.

Hi, any update on this please? an ETA perhaps?
Thx.

hottroc wrote:Hi, any update on this please? an ETA perhaps?
Thx.

There is no ETA.

Hi,
OK thanks....but I think the idea of an ETA is that you ESTIMATE when it might be ready. I wont hold you to it but it has been 7 months since I started this topic, when you were supposedly working on it, so I would have thought by now you would at least have a rough estimate of how long it will be. Can you at least narrow it down to 2016, 2017 or later?

hottroc wrote:Hi,
OK thanks....but I think the idea of an ETA is that you ESTIMATE when it might be ready. I wont hold you to it but it has been 7 months since I started this topic, when you were supposedly working on it, so I would have thought by now you would at least have a rough estimate of how long it will be. Can you at least narrow it down to 2016, 2017 or later?

We have limited resources and other priorities when it comes to SBIE.
If our Enterprise customers on the Invincea side that use the SB container technology (XML instead of INI) (Invincea X) push more and more towards it, then it'll get more of a look. But that has not been the case. The container (SB) is an option in Invincea X.

It was being worked on, along with Metro apps, but other priorities in the company and for SBIE came up. That was months ago, and I have not been privy to any movement on it.

As of right now, I don't have an ETA. It hasn't been discussed in a while...this goes for Metro apps. Probably 2017 if at all.

OK, slightly disappointing on the timescale, but thanks for the info.

I do understand your resource problems and appreciate your efforts and your needs to prioritize your Enterprise customers. But 2017 is quite a long way off, by which time I might have got used to Edge's "In Private" mode instead. Particularly as Flash is not working in sandboxed IE any more (as per my other topic).

Edge has improved since its release and I use it almost exclusively now when I don't need a sandboxed browser. While there are still a few features I miss from IE, there are some features in Edge I like that are not in IE and I think the future as far as MS/Win10 is concerned is heading towards Edge.

So I'll keep my fingers crossed that your Enterprise customers also start asking for Edge support soon, lol.

All the best.

Metro support is inevitable because more and more of Win 10 is moving in that direction. It is possible we may have some support for Metro by the end of the year. It is still in research, so please bear with us.

Metro Apps (Edge, mail, weather, maps, etc...) are running in Appcontainer (Win10's own "sandboxing" ability), at an Integrity Level one step deeper/safer than the one used by actual sandboxing softwares (which are at Untrusted) . So basically, asking Sandboxie to support Metro Apps is like asking to reduce the Integrity Level of those apps, hence their security.

Unless an overall rewrite of the code is made, i don't see implementation of Appcontainer in Sandboxie (and others) anytime soon.

In the case of Edge, Microsoft is even planning to implement virtualization on it, making sandboxing softwares unneeded to protect it,

However, sandboxing softwares like Sandboxie will be useful for 3rd party apps/softs.

As I understand it, all apps (note I said app and not program) are, by their very nature, like virtual machines within the OS and Edge, I believe, is an app so it should be by default the equivalent of being sandboxed. Of course I could be wrong.

lylejk wrote:As I understand it, all apps (note I said app and not program) are, by their very nature, like virtual machines within the OS and Edge, I believe, is an app so it should be by default the equivalent of being sandboxed. Of course I could be wrong.

more like isolated apps that virtual machines, all Metro Apps (and Edge) are "sandboxed" using Appcontainer:

https://blog.nextxpert.com/2013/01/31/d ... -8-part-i/

https://news.saferbytes.it/analisi/2013 ... ontainers/

They are only allowed with very limited rights and only in locations they are supposed to use, nothing else.

So if you ask Sandboxie to sandbox Edge is like sandboxing a sandboxed apps which is irrelevant. However it would be possible for Sandboxie to add other protection mechanisms to Metro Apps.
If you use Chrome (or chromium-based browsers) , you can even implement Appcontainer on it via a small tweak, so you increase Chrome security by one step.

Umbra wrote:So if you ask Sandboxie to sandbox Edge is like sandboxing a sandboxed apps which is irrelevant.

Are you able to run two separate (isolated) MS Edge sessions? No, you are not. So it's not irrelevant.

Dun wrote:

Umbra wrote:So if you ask Sandboxie to sandbox Edge is like sandboxing a sandboxed apps which is irrelevant.

Are you able to run two separate (isolated) MS Edge sessions? No, you are not. So it's not irrelevant.

What are you talking about?

Edge and all Metro Apps (& extensions for them) all run in AppContainer Integrity level (IL) , they are built with it, doesn't matter how many sessions you have.



At the moment, Sandboxing softs would reduce Metro Apps' IL (they ran all softs isolated in them at Untrusted IL) , so tell what is the point to add a security soft that would reduce the apps original IL?

Screenshot shows chrome ran by a sandboxing soft



The only gains you would have (now) if Sandboxie could isolate Edge will be all the locking options it offers, but to me it is not worth the shot.
However, when Sbie will be able to keep/offer Appcontainer's IL to all softs ran in it , then i will be more than happy to use it with Metro Apps.

Problem i think, is that Sandboxie will have to set which area is allowed for every existing softs, since Appcontainer principle is that Metro Apps are built to have access only to some specific system's areas , the ones they need to perform properly. Huge work.

When you run Edge as is it can change things eg Favorites, History, settings etc. If ran via Sandboxie then when you delete the contents of the sandbox these changes are avoided. That's my primary usage of Sandboxie.