How to update sandboxed Google Chrome?

[Lumberjack]

I'm scared of doing anything because we're talking about sandbox inside a sandbox-what exactly should I do?
Also, should I be worried about the following:
Big thanks to all.

[doktornotor]

Huh? Restart Chrome when it notifies you about update -> done?

[bo.elam]

The Bromium thing don't make me blink. I am not worried and I don't think you should either. You might get to be my age, still be using SBIE and what they talk about still only be a POC, a PDF and a video. CWS, relax and have fun.

Bo

[Guest10]

I'm scared of doing anything because we're talking about sandbox inside a sandbox-what exactly should I do?

There is no "sandbox inside a sandbox" when updating Chrome, because you update Chrome when it's *not* running sandboxed. Then you should make sure that the sandbox you use for Chrome is empty before starting sandboxed Chrome.

[Lumberjack]

The Bromium thing don't make me blink. I am not worried and I don't think you should either. You might get to be my age, still be using SBIE and what they talk about still only be a POC, a PDF and a video. CWS, relax and have fun.

Bo

Thanks, Bo I have the same thoughts, it's a POC, it's alll just a pure hypothesis.
I willy enjoy in my SBIE and its tight configuation, it's really worth it, but I wanted to ask you since my license in the next 3 months is coming to an end:
I want to know should I protect my removable drives with something else?

[Lumberjack]

I'm scared of doing anything because we're talking about sandbox inside a sandbox-what exactly should I do?

There is no "sandbox inside a sandbox" when updating Chrome, because you update Chrome when it's *not* running sandboxed. Then you should make sure that the sandbox you use for Chrome is empty before starting sandboxed Chrome.

I do now understand that I need to update Chrome outside the sandbox, but isn't this the same case also with Firefox and IE?

[Guest10]

I do now understand that I need to update Chrome outside the sandbox, but isn't this the same case also with Firefox and IE?

Yes.

[bo.elam]

I want to know should I protect my removable drives with something else?

I think you are using an antivirus, right? If you are, the antivirus and forcing the removable drives is enough protection, in my opinion. As a Sandboxie user, the best advice that I can give you, another Sandboxie user, is this: run most of your files and programs sandboxed and be extra careful about the ones that you run out of the sandbox and your computer is gonna be clean when you turn it off, every time.

Bo

[Lumberjack]

I want to know should I protect my removable drives with something else?

I think you are using an antivirus, right? If you are, the antivirus and forcing the removable drives is enough protection, in my opinion. As a Sandboxie user, the best advice that I can give you, another Sandboxie user, is this: run most of your files and programs sandboxed and be extra careful about the ones that you run out of the sandbox and your computer is gonna be clean when you turn it off, every time.

Bo

Sure, thanks. But there is a huuuge possibility that perhaps my antivirus is redundant:
http://www.precisesecurity.com/tools-re ... ve-autorun

Plus, I also use application called NoAutorun-it automatically scans all of my removable drives, plus I can write-protect my usb so nothing can copy itself to my computer.
What do you think?
I use 0xFF option-Disables AutoRun on all kinds of drives-what do you think?

[bo.elam]

I think you are fine but remember, force sandboxed your flash drives, that way programs will run sandboxed if they get to run.

Bo

[yabbadoo]

Updating anything in a sandbox is fundamental BAD practice, especially a browser. In fact my Chrome automatically FAILS when it tries to update within Sandboxie. If I wish to update Chrome or any other browser, I do it UNSANDBOXED. Then it all goes like clockwork.

Golden rule - NEVER update any program in a sandbox and that of course applies to using Sandboxie.

[Guest10]

Golden rule - NEVER update any program in a sandbox and that of course applies to using Sandboxie.

Unless it's a program that was installed inside of a sandbox, and (preferably) does not exist outside of the sandbox.

[mouse]

Guys, I fully support your attitude to not have anything updated while running it in a sandbox but I believe Chrome is actually running an updater outside the browser in the sandbox.
I also run Firefox and know that every so often I need to run it unsandboxed to to update but Chrome updates without me doing anything about it. I previously raised this issue here and Tsuk stated

I think Chrome sometimes installs a Google Update service (running in the background, outside the sandbox). Probably that component is responsible for updating your Chrome

I also note that on my system (Win 7/64 bit) using SB 4.06 pro - I have one sandbox configured to only allow three programs (IE, FF and Chrome) access to the net. Several times I noticed that chrome no longer worked in this sandbox, whereas in my main sandbox (allowing all programs to access the net), there was no problem. I then checked my program folder and found I had not only chrome.exe but also new_chrome.exe. I may be mistaken but my interpretation is that chrome upated and created a new exe file as I was already running chrome at the time. Only the existing chrome exe had permissiong to access the net inside my 2nd sandbox. Once I deleted the older chrome.exe and renamed the newer exe to just chrome.exe, everything went back to normal.

Now this is my interpretation based on what I noticed - if someone has a better explanation, I would love to hear it.

[doktornotor]

I still don't understand what's this thread is about. You simply close and restart Chrome when you get notified about the update (i.e., the "settings" icon turns green). As said above, it's pretty damn impossible to miss, since after the update (which is done automatically in the background), no new tab actually works until you close Chrome and let the update finish. Google Update scheduled tasks run outside the sandbox.

[yabbadoo]

@ Mouse

When I try to update my Chrome within Sandboxie, it fails. I have to update Chrome unsandboxed, then it goes OK.

I have also had a big problem with updating Chrome extension Click & Clean within Sandboxie. Caused a lot of hassle until I found that when I installed C&C unsandboxed, it all went OK.

I ALWAYS update and install outside of Sandboxie. That way, if there is any trouble at least Sandboxie is ruled out.