Version 4.01 - Major changes to underlying architecture

[jan73]

I would like to say thanks for this version 4.01.
Although it is in beta status, it seems to me quite stable.
But I'm talking from a general perspective, I mean I didn't test with nasty websites or files.

I am glad that the "experimental 64 bit" option is gone. No more restarts when it is enabled for the first time.
I have as OS Windows 7 64-bit and I'm NOT going to change to windows 8, unless I really have to.
But still I like the new approach you have taken with the new major version.
Thanks for such a great piece of software !

Currently running comodo dragon inside it with drop rights enabled and I see no errors and the browser is responsive as always.
I don't have a LUA or SUA account, I'm always logged in as admin
But I have other security programs running as well, firewall, hips and AV, behavorial blockers.
Nothing is as comforting as a sandbox, makes me feel more safe than using only other security products.

Anyway, thanks and cheers !

(edit: not to brag or kiss *** or anything, but I did buy the lifetime license for sandboxie)

[Buster]

What are the differences between 32-bit and 64-bit versions in version 4?

[tzuk]

Thanks for the kind words jan73.

Buster, I'm not sure I understand the question. In a general sense, there aren't any differences.

[Buster]

In version 3.xx, 32-bit variant did not have "Experimental Protection" while 64-bit had it.

If I understood fine, in version 4.xx the "Experimental Protection" is not available, so that difference between 32-bit and 64-bit version is gone.

Is there any other difference still present between 32-bit and 64-bit version in 4.xx?

[Buckslayr]

Just purchased the lifetime license. I really like the product. Thank you for such a fine program. I'm using the 4.01 beta. I have to say for a beta it runs great. It's running on (1) XPsp3, (1) win7 32-bit, and (1) win8 64-bit. Haven't run into any bugs yet.

[Bellzemos]

In version 3.xx, 32-bit variant did not have "Experimental Protection" while 64-bit had it.

If I understood fine, in version 4.xx the "Experimental Protection" is not available, so that difference between 32-bit and 64-bit version is gone.

Is there any other difference still present between 32-bit and 64-bit version in 4.xx?

You mean in terms of security? I'm interested in that too. Sandboxie 3.xx 64-bit security was inferior to the 32-bit version without the experimental protection enabled. How is it with that in Sandboxie 4.xx? Are both, 32-bit and 64-bit versions totally equal in terms of strength of security?

[tzuk]

As I said, in a general sense, there isn't any difference between version 3 and version 4, or between 32-bit and 64-bit. "In a general sense" I mean that regardless of implementation details between various systems -- for example whether this is a 32-bit XP with version 3 or a 64-bit Windows 8 with version 4 -- Sandboxie offers the same level of protection.

The only exception to the above is that version 3 required Experimental Protection to enable some protection features. This is no longer necessary in version 4 as 64-bit Sandboxie offers all protection features "out of the box".

[Bellzemos]

As I said, in a general sense, there isn't any difference between version 3 and version 4, or between 32-bit and 64-bit. "In a general sense" I mean that regardless of implementation details between various systems -- for example whether this is a 32-bit XP with version 3 or a 64-bit Windows 8 with version 4 -- Sandboxie offers the same level of protection.

The only exception to the above is that version 3 required Experimental Protection to enable some protection features. This is no longer necessary in version 4 as 64-bit Sandboxie offers all protection features "out of the box".

So in version 4 it's as if the Experimental Protection is always enabled? I'm happy.

[ssj100]

As I said, in a general sense, there isn't any difference between version 3 and version 4, or between 32-bit and 64-bit. "In a general sense" I mean that regardless of implementation details between various systems -- for example whether this is a 32-bit XP with version 3 or a 64-bit Windows 8 with version 4 -- Sandboxie offers the same level of protection.

The only exception to the above is that version 3 required Experimental Protection to enable some protection features. This is no longer necessary in version 4 as 64-bit Sandboxie offers all protection features "out of the box".

Sounds like some incredible work that you've done there tzuk. I think Ilya from DefenseWall will be very interested to know how you've done that!

[Escalader]

As I said, in a general sense, there isn't any difference between version 3 and version 4, or between 32-bit and 64-bit. "In a general sense" I mean that regardless of implementation details between various systems -- for example whether this is a 32-bit XP with version 3 or a 64-bit Windows 8 with version 4 -- Sandboxie offers the same level of protection.

The only exception to the above is that version 3 required Experimental Protection to enable some protection features. This is no longer necessary in version 4 as 64-bit Sandboxie offers all protection features "out of the box".

Sounds like some incredible work that you've done there tzuk. I think Ilya from DefenseWall will be very interested to know how you've done that!

What is the meaning of the refrence to DefenseWall? Are they competing with Sandboxie?

[DR_LaRRY_PEpPeR]

I observed that in Process Explorer, for example, there doesn't appear to be ANY indication or difference (Security tab, etc.) between processes whose Admin rights are:

1) Fully intact
2) Stripped by Drop Rights
3) Stripped by SRP (on XP(/Vista?))

With SBIE 3.x, it was easy on the Security tab... (Although there should really only be 2 distinct states (YES or NO), with no difference between Drop Rights vs SRP.)

Is there any way to check or determine that information externally now? Is Sandboxie checking some other standard "thing" (token, etc.?) internally; or, more likely, keeping track of stuff itself?

[tzuk]

You can run Process Explorer itself under Sandboxie to see the security permissions that are in effect for the process.

In version 4, sandboxed processes run with untrusted security so they can't do anything without the help of Sandboxie. When you use Process Explorer outside the sandbox, all you're going to see is a security context which denies access to anything and everything.

[Buckslayr]

I'm still seeing the same issue on win8 64bit with forced folders not being sandboxed.

[Guest10]

I'm still seeing the same issue on win8 64bit with forced folders not being sandboxed.

Keep in mind that Forced Folders only forces "programs" (exe) that are located in those folders.
Is that what isn't working?

[Buckslayr]

I'm still seeing the same issue on win8 64bit with forced folders not being sandboxed.

Keep in mind that Forced Folders only forces "programs" (exe) that are located in those folders.
Is that what isn't working?

No. I give direct access to documents, downloads, pics, music. Then I force them to open sandboxed. That way anything that was downloaded or saved is forced into a sandbox. Works perfectly fine on 3.76.