possible new product

[asaens]

Here is the scenario ... a person is worried about security and has a computer (desktop/laptop) that is a regular computer except for a product we'll call SecureSandbox. SecureSandbox works like a sandboxing program in that the user sets up various sandboxes for different applications but when the user enters that sandbox a password is requested (keyed in or key file or both) and that password is used to encrypt all of the sandboxed area and files within the sandbox. Therefore the user can use the normal application and all files written by the application will be encrypted and unreadable by anyone that might gain access to the computer. There should be a user password and admin password so that the work area/sandbox/virtual area can be deleted if so desired. Otherwise normally the area remains with the encrypted data for future use. 2 main differences over Sandboxie is a password is required to use the secured data and all reading and writing of the data is decrypted or encrypted. A person that uses SecureSandbox could delete all the sandboxed areas and the computer should be nearly the same as it was when SecureSandbox was installed except for the usual maintenance the Windows operating system requires. A person could also delete the work area and the data is already encrypted and only needs for any links to those data files to be quickly written with random data to make the encrypted data unretrievable. I don't think I've seen an application that works exactly like this and there should be a market for it by people concerned about security.

Some people are concerned about encrypting the whole disk and others might be worried about creating a virtual disk and not enough information (information written to the registry) being secured. SecureSandbox makes everything secure without having to encrypted the whole disk or use a virtual computer such as VMWare Workstation or not enough data being encrypted with a product like TrueCrypt. The only problem I see is some applications don't work as fast within a sandboxed environment and the user must be convinced that the extra security more than offsets the small decrease in speed. That's about it. I'd be interested in purchasing a program like this if it was reasonably priced and didn't slow my computer or use too much memory. In addition, I wouldn't mind beta testing this program if your company decides to make something similar. Thanks.

[doktornotor]

Hmmm. Dunno but what is wrong with EFS? Right-click the sandbox folder, properties, advanced, there...

[Mike]

2 main differences over Sandboxie is a password is required to use the secured data and all reading and writing of the data is decrypted or encrypted.

I know you're describing an idea for a nice, complete solution, but if you're already using Sandboxie, it seems that this can roughly be accomplished by placing your sandboxes in TrueCrypt volumes. You can have a different Truecrypt volume for each user or each sandbox, if you like. Each volume would require a password to mount, and all data written to the volume would be encrypted. Without the password, sandboxed applications and data would be inaccessible.

SecureSandbox makes everything secure without having to encrypted the whole disk or use a virtual computer such as VMWare Workstation or not enough data being encrypted with a product like TrueCrypt.

In the situation I described above, I don't think there's any more data that could possibly be encrypted. All sandbox data is contained in the sandbox folder.

Dunno but what is wrong with EFS?

That should work too, although it provides less granular control over what data is accessible and when.

[asaens]

okay, how do you put the data on another drive other than the default "C" drive?

[Mike]

To change the default location for all sandboxes, go to Sandbox > Set Container Folder in Sandboxie Control. Or, use the FileRootPath setting in sandboxie.ini, applied either globally or to individual sandboxes.

Also, welcome to the forum.

@tzuk: Fyi, the FileRootPath documentation doesn't yet reflect the fact that BoxRootFolder is deprecated.

[asaens]

thanks for the info about relocating the default disk drive ... tried it and it worked. I also set up a TrueCrypt container and everything worked as expected but I still think a more streamlined program would have its appeal and people would buy it if it was marketed in the right direction.

[tzuk]

@tzuk: Fyi, the FileRootPath documentation doesn't yet reflect the fact that BoxRootFolder is deprecated.

Initially I didn't think it should, that feels to me like new stuff carrying baggage of old stuff. But I see the FileRootPath page does mention the BoxRootFolder setting so you're right and I revised it slightly.