Sandboxie leaking cookies?

[Bellzemos]

It happened again on one of my laptops: when I go to youtube.com (not signed in!) I get offerings of the things I watched before.

I went to CCleaner and I saw that there were indeed cookies saved on my computer. This should not happen since I have not allowed them in the sandbox settings (I always use Firefox in the DefaultBox).





After cleaning the cookies with CCleaner youtube.com stops offering me things I watched before. What is going on? This happened before on this particular laptop but it has all the same settings and programs like my other one (Windows 7 x64, Avast free, Sandboxie 4.20 - so nothing unusual).

Please help.

[Bellzemos]

Any idea, anyone? I'm clueless.

[btm]

Not sure what to say, are you sure the browser was sandboxed at the time? I find the entire situation odd, your screenshot shows sbie control but it doesn't have the 'usual' background - instead it's clean/white/blank. Are you using a modified sbiectrl.exe?

[JoeHood]

Sync'd to a cloud?

[nanana1]

@Bellzemos

You should clean up all your cookies, empty your sandbox and use Firefox again in your DefaultBox again to reproduce your reported cookies leak.

[rpljhun]

It happened again on one of my laptops: when I go to youtube.com (not signed in!) I get offerings of the things I watched before.

I’ll be repeating myself again. This is due to you or anyone using your laptop being unaware of using your Firefox unsandboxed. There are two theory I have. First is that you intentionally run the browser unsandboxed to make your browser up to date then being unaware and have use it to visit youtube.com(You are just human, you can’t just say that you can’t have this mistake). Second, SBIE service was disabled(for unknown reason), failed to run, or failed to load sbie driver. When Windows started and sbiectrl.exe detected the service isn't running then it will try to run the service. If you didn’t disable your UAC you’ll be prompted with Yes or No but if disabled it will be silent without you being notice. So when this happen you’ll be running Firefox unsandboxed, for some users, you or anyone might be unaware but you can notice this by looking the SBIE tray icon.

[Craig@Invincea]

@rpjhun:
I'm certain @Bellzemos knows how SBIE works... I'm certain he will report back any additional findings.

[rpljhun]

Sorry for double post, I can't edit my previous post for clarification.

It happened again on one of my laptops: when I go to youtube.com (not signed in!) I get offerings of the things I watched before.

This is due to you or anyone using your laptop being unaware of using your Firefox unsandboxed. There are two theories I have. First is that you intentionally run the browser unsandboxed to make your browser up to date then mistakenly use it to visit youtube.com without knowing it(You are just human, you can’t just say that you can’t have this mistake). Second, SBIE Service might not be running at that time for unknown reason. It might be that it was disabled by malicious program, failed to run, or failed to load SBIE Driver. When Windows started and sbiectrl.exe detected the service isn't running then it will try to run the service. If you didn’t disable your UAC you’ll be prompted with Yes or No but if disabled it will be silent without you being notified. At that time when this failure occurred the force sandbox will not be working. So, you’ll be running Firefox unsandboxed which will make you believe that it was leaking if unnoticed. For some users, you or anyone might be unaware but you can notice this by looking the SBIE tray icon having exclamation.

[Bellzemos]

Thank you all for responses.

Not sure what to say, are you sure the browser was sandboxed at the time? I find the entire situation odd, your screenshot shows sbie control but it doesn't have the 'usual' background - instead it's clean/white/blank. Are you using a modified sbiectrl.exe?

Yes, Firefox was sandboxed at the time. What do you mean by blank background? I have the official Sandboxie, no modifications at all.

Sync'd to a cloud?

No, I don't ever use cloud services.

You should clean up all your cookies, empty your sandbox and use Firefox again in your DefaultBox again to reproduce your reported cookies leak.

I tried it just now and nothing happened, Sandboxie did it's job, as usual. But sometimes it happens. It's driving me crazy cause I want to know what's causing this weird anomaly (leaking cookies).

[bo.elam]

Hi Bellzemos. Thats a luge list of cookies. The only thing I can figure is that you ran Firefox unsandboxed for a while and then found the cookies when running CCleaner. I certainly never seen anything like that. I suggest you add Firefox to the Program alert list. That way, if for whatever reason Firefox runs unsandboxed, you ll get a SBIE message 1301 warning you about.
http://www.sandboxie.com/index.php?ConfigureMenu#alert

You could also create a new sandbox and use it to Force Firefox instead of the old DefaultBox. Another thing you can do is (something that I do) set cookies in Firefox Options to be kept until Firefox closes. Set "Keep until" to "I close Firefox". You can do this by using custom settings for history.
https://support.mozilla.org/en-US/kb/se ... -history_2

Bo

[btm]

I meant the control interface background looks completely white, I didn't see the standard faded yellow sandboxie squares but looks like I need to tweak my primary monitors settings! I was asking because I have experienced some 'odd behavior' in other programs (haven't tested sbiectrl) after I edited menus, icons or images using resource hacker x64 in the past. Sbiectrl is in charge of the 'delete' process so I thought maybe something like that could have been going on with you if you had edited it to remove the background.

[bo.elam]

Btm, in my W7, I get the white background like in Bells picture. In Xp, I get the colored background.

Bo

[btm]

Guess I had my brightness a tad too high! (Actually it turned out to be messed up color settings) Moving my browser to another monitor shows the squares just fine in his pic. That's weird you notice a difference across windows versions though. I just reset to default and I can see it fine on my primary monitor again. Apparently I messed it up sometime and never realized till now....so oops, sorry for wasting your time!

[bo.elam]

That's weird you notice a difference across windows versions though.

This is what settings windows looks like in XP. The Sandboxie icons "squares" in Sandboxie control look the same for me in XP and W7.

Bo

[btm]

Guess I misunderstood then

Btm, in my W7, I get the white background like in Bells picture. In Xp, I get the colored background.

My 'settings' are always white as well (I'm on W7), I was referring to the general sbie ctrl background and assumed that's what you meant as well. Either way, my end has been sorted now and I can once again see the expected background even on his ScreenShot. ~sorry for the offtopic hijack due to my stupidity!

~another off topic comment: now I can't see in the dark on minecraft....wonder if that's why I tweaked it in the first place? My kid will be sad as we always run out of torches while mining....