tzuk i think a program jumped outside the sandbox!

If it doesn't fit elsewhere, it goes here
Post Reply
Unknown_User_327
Posts: 0
Joined: Wed Dec 31, 1969 7:00 pm

tzuk i think a program jumped outside the sandbox!

Post by Unknown_User_327 » Sun May 14, 2006 11:07 am

i've been testing sandboxie for a while now. this thing laughed off spyware quake, spysheriff, etc.. it also passed the spycar websites attempts to access my "real" C:\ with ease. however running another test found at this website: http://www.(censored)/index.php i think one of their test programs actually jumped outside sandboxie and had access to my real C:\

i was running the "setup file test" and it actually saw what was in my "real" mydocuments folder on my C:\. did this test actually have access to my "real" drive or was it just accessing the sandboxed version? the reason i ask is, i check the contents of the sandbox and mydocuments wasn't there. so i assumed it really had access to my "real" mydocuments folder on my C:\.

tzuk
Sandboxie Founder
Sandboxie Founder
Posts: 16076
Joined: Tue Jun 22, 2004 12:57 pm

Post by tzuk » Sun May 14, 2006 11:47 am

What, well in fact happened? Was the test able to modify stuff outside the sandbox? Or was it just able to see stuff outside the sandbox?

Sandboxie does NOT normally hide any files, folders or registry elements from sandboxed processes. [*] But Sandboxie DOES trap modifications, and redirect them the sandbox.

[*] You can configure Sandboxie to hide stuff, though nobody seems to care enough to ask about this.
tzuk

Unknown_User_327
Posts: 0
Joined: Wed Dec 31, 1969 7:00 pm

Post by Unknown_User_327 » Sun May 14, 2006 1:54 pm

tzuk wrote:What, well in fact happened? Was the test able to modify stuff outside the sandbox? Or was it just able to see stuff outside the sandbox?
it was just able to see stuff outside the sandbox.
Sandboxie does NOT normally hide any files, folders or registry elements from sandboxed processes. [*] But Sandboxie DOES trap modifications, and redirect them the sandbox.

[*] You can configure Sandboxie to hide stuff, though nobody seems to care enough to ask about this.
ah ha so that's why it could view the files! thanks tzuk i just posted this to double check. so far sandboxie is 10 for 10 when it comes to stopping malicious software from wrecking havok on my pc. thanks again for this excellent program!

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest