Microsoft Edge support please

Ideas for enhancements to the software
hottroc
Posts: 31
Joined: Tue Sep 29, 2015 11:06 am

Microsoft Edge support please

Post by hottroc » Sat Jan 16, 2016 1:24 pm

As the title says really, can we have support for Microsoft Edge please?

Craig@Invincea
Sandboxie Support
Sandboxie Support
Posts: 3523
Joined: Thu Jun 18, 2015 3:00 pm
Location: DC Metro Area
Contact:

Re: Microsoft Edge support please

Post by Craig@Invincea » Sat Jan 16, 2016 2:03 pm

It's being worked on, but it's not a simple task. It's an OS within an OS basically.

hottroc
Posts: 31
Joined: Tue Sep 29, 2015 11:06 am

Re: Microsoft Edge support please

Post by hottroc » Sat Jan 16, 2016 2:26 pm

I should imagine it's a pretty difficult task. Thanks for replying and I look forward to it in the future. Happy to help beta test when it gets that far.

hottroc
Posts: 31
Joined: Tue Sep 29, 2015 11:06 am

Re: Microsoft Edge support please

Post by hottroc » Fri Aug 19, 2016 11:20 am

Hi, any update on this please? an ETA perhaps?
Thx.

Craig@Invincea
Sandboxie Support
Sandboxie Support
Posts: 3523
Joined: Thu Jun 18, 2015 3:00 pm
Location: DC Metro Area
Contact:

Re: Microsoft Edge support please

Post by Craig@Invincea » Fri Aug 19, 2016 11:25 am

hottroc wrote:Hi, any update on this please? an ETA perhaps?
Thx.
There is no ETA.

hottroc
Posts: 31
Joined: Tue Sep 29, 2015 11:06 am

Re: Microsoft Edge support please

Post by hottroc » Fri Aug 19, 2016 12:02 pm

Hi,
OK thanks....but I think the idea of an ETA is that you ESTIMATE when it might be ready. I wont hold you to it but it has been 7 months since I started this topic, when you were supposedly working on it, so I would have thought by now you would at least have a rough estimate of how long it will be. Can you at least narrow it down to 2016, 2017 or later?

Craig@Invincea
Sandboxie Support
Sandboxie Support
Posts: 3523
Joined: Thu Jun 18, 2015 3:00 pm
Location: DC Metro Area
Contact:

Re: Microsoft Edge support please

Post by Craig@Invincea » Fri Aug 19, 2016 1:22 pm

hottroc wrote:Hi,
OK thanks....but I think the idea of an ETA is that you ESTIMATE when it might be ready. I wont hold you to it but it has been 7 months since I started this topic, when you were supposedly working on it, so I would have thought by now you would at least have a rough estimate of how long it will be. Can you at least narrow it down to 2016, 2017 or later?
We have limited resources and other priorities when it comes to SBIE.
If our Enterprise customers on the Invincea side that use the SB container technology (XML instead of INI) (Invincea X) push more and more towards it, then it'll get more of a look. But that has not been the case. The container (SB) is an option in Invincea X.

It was being worked on, along with Metro apps, but other priorities in the company and for SBIE came up. That was months ago, and I have not been privy to any movement on it.

As of right now, I don't have an ETA. It hasn't been discussed in a while...this goes for Metro apps. Probably 2017 if at all.

hottroc
Posts: 31
Joined: Tue Sep 29, 2015 11:06 am

Re: Microsoft Edge support please

Post by hottroc » Fri Aug 19, 2016 6:08 pm

OK, slightly disappointing on the timescale, but thanks for the info.

I do understand your resource problems and appreciate your efforts and your needs to prioritize your Enterprise customers. But 2017 is quite a long way off, by which time I might have got used to Edge's "In Private" mode instead. Particularly as Flash is not working in sandboxed IE any more (as per my other topic).

Edge has improved since its release and I use it almost exclusively now when I don't need a sandboxed browser. While there are still a few features I miss from IE, there are some features in Edge I like that are not in IE and I think the future as far as MS/Win10 is concerned is heading towards Edge.

So I'll keep my fingers crossed that your Enterprise customers also start asking for Edge support soon, lol.

All the best.

Curt@invincea
Sandboxie Lead Developer
Sandboxie Lead Developer
Posts: 1638
Joined: Fri Jan 17, 2014 5:21 pm
Contact:

Re: Microsoft Edge support please

Post by Curt@invincea » Fri Aug 19, 2016 6:13 pm

Metro support is inevitable because more and more of Win 10 is moving in that direction. It is possible we may have some support for Metro by the end of the year. It is still in research, so please bear with us.

Umbra
Posts: 14
Joined: Sun Jul 26, 2015 4:51 am

Re: Microsoft Edge support please

Post by Umbra » Wed Nov 23, 2016 3:48 am

Metro Apps (Edge, mail, weather, maps, etc...) are running in Appcontainer (Win10's own "sandboxing" ability), at an Integrity Level one step deeper/safer than the one used by actual sandboxing softwares (which are at Untrusted) . So basically, asking Sandboxie to support Metro Apps is like asking to reduce the Integrity Level of those apps, hence their security.

Unless an overall rewrite of the code is made, i don't see implementation of Appcontainer in Sandboxie (and others) anytime soon.

In the case of Edge, Microsoft is even planning to implement virtualization on it, making sandboxing softwares unneeded to protect it,

However, sandboxing softwares like Sandboxie will be useful for 3rd party apps/softs.
Win10: SUA | UAC (Max) | Smartscreen (Max) | WinFW | WinDef
Productivity PC: AppGuard | NVT OSarmor | ReHIPS
Leisure PC: AppGuard | NVT OSarmor | NVT ExeRadarPro | Sandboxie
Test PC: AppGuard | NVT OSarmor | NVT ExeRadar Pro |

lylejk
Posts: 117
Joined: Thu Mar 26, 2009 5:19 pm

Re: Microsoft Edge support please

Post by lylejk » Wed Nov 23, 2016 12:43 pm

As I understand it, all apps (note I said app and not program) are, by their very nature, like virtual machines within the OS and Edge, I believe, is an app so it should be by default the equivalent of being sandboxed. Of course I could be wrong. :)

Umbra
Posts: 14
Joined: Sun Jul 26, 2015 4:51 am

Re: Microsoft Edge support please

Post by Umbra » Wed Nov 23, 2016 10:32 pm

lylejk wrote:As I understand it, all apps (note I said app and not program) are, by their very nature, like virtual machines within the OS and Edge, I believe, is an app so it should be by default the equivalent of being sandboxed. Of course I could be wrong. :)
more like isolated apps that virtual machines, all Metro Apps (and Edge) are "sandboxed" using Appcontainer:

https://blog.nextxpert.com/2013/01/31/d ... -8-part-i/

https://news.saferbytes.it/analisi/2013 ... ontainers/

They are only allowed with very limited rights and only in locations they are supposed to use, nothing else.

So if you ask Sandboxie to sandbox Edge is like sandboxing a sandboxed apps which is irrelevant. However it would be possible for Sandboxie to add other protection mechanisms to Metro Apps.
If you use Chrome (or chromium-based browsers) , you can even implement Appcontainer on it via a small tweak, so you increase Chrome security by one step.
Win10: SUA | UAC (Max) | Smartscreen (Max) | WinFW | WinDef
Productivity PC: AppGuard | NVT OSarmor | ReHIPS
Leisure PC: AppGuard | NVT OSarmor | NVT ExeRadarPro | Sandboxie
Test PC: AppGuard | NVT OSarmor | NVT ExeRadar Pro |

Dun
Posts: 350
Joined: Mon Jun 23, 2014 5:00 am
Location: Poland

Re: Microsoft Edge support please

Post by Dun » Fri Nov 25, 2016 5:45 pm

Umbra wrote:So if you ask Sandboxie to sandbox Edge is like sandboxing a sandboxed apps which is irrelevant.
Are you able to run two separate (isolated) MS Edge sessions? No, you are not. So it's not irrelevant.
Sandboxie 5.19.4 personal lifetime license user || Win10 x64 Pro CU (up to date) || ESET SS 10+ x64 || AppGuard 4+ || Firefox 54+ x64 || UAC on

Umbra
Posts: 14
Joined: Sun Jul 26, 2015 4:51 am

Re: Microsoft Edge support please

Post by Umbra » Fri Nov 25, 2016 11:48 pm

Dun wrote:
Umbra wrote:So if you ask Sandboxie to sandbox Edge is like sandboxing a sandboxed apps which is irrelevant.
Are you able to run two separate (isolated) MS Edge sessions? No, you are not. So it's not irrelevant.
What are you talking about?

Edge and all Metro Apps (& extensions for them) all run in AppContainer Integrity level (IL) , they are built with it, doesn't matter how many sessions you have.

Image

At the moment, Sandboxing softs would reduce Metro Apps' IL (they ran all softs isolated in them at Untrusted IL) , so tell what is the point to add a security soft that would reduce the apps original IL?

Screenshot shows chrome ran by a sandboxing soft

Image

The only gains you would have (now) if Sandboxie could isolate Edge will be all the locking options it offers, but to me it is not worth the shot.
However, when Sbie will be able to keep/offer Appcontainer's IL to all softs ran in it , then i will be more than happy to use it with Metro Apps.

Problem i think, is that Sandboxie will have to set which area is allowed for every existing softs, since Appcontainer principle is that Metro Apps are built to have access only to some specific system's areas , the ones they need to perform properly. Huge work.
Win10: SUA | UAC (Max) | Smartscreen (Max) | WinFW | WinDef
Productivity PC: AppGuard | NVT OSarmor | ReHIPS
Leisure PC: AppGuard | NVT OSarmor | NVT ExeRadarPro | Sandboxie
Test PC: AppGuard | NVT OSarmor | NVT ExeRadar Pro |

hottroc
Posts: 31
Joined: Tue Sep 29, 2015 11:06 am

Re: Microsoft Edge support please

Post by hottroc » Mon Nov 28, 2016 6:50 pm

When you run Edge as is it can change things eg Favorites, History, settings etc. If ran via Sandboxie then when you delete the contents of the sandbox these changes are avoided. That's my primary usage of Sandboxie.

Post Reply

Who is online

Users browsing this forum: No registered users and 0 guests