(censored)'s (censored) vs. sandboxing products

lwc · Post by **lwc** » Mon Mar 26, 2007 8:53 am

Look in this FAQ for the question "What's the difference between (censored) and sandboxing products?" (I guess they focus their brains on their programs instead of providing direct links to questions).

How do you respond to that? Should I ditch Sandboxie ((censored) also has a free limited version plus a forum) or can you counter that?

Thanks!

tzuk · Post by **tzuk** » Mon Mar 26, 2007 9:30 am

In this FAQ answer you link to, the term "sandboxing product" is interchangable with the term "HIPS tool".

In other words, the sandbox/HIPS tool is one which will pop up questions for you to allow/deny specific operations.

Sandboxie is different than that. It is a virtualization solution, similar in spirit to (censored), where programs are allowed to do almost anything, yet everything they do is confined.

For more information please read the Sandboxie FAQ.

OwenBurnett · Post by **OwenBurnett** » Mon Mar 26, 2007 10:00 am

I tested BZ some time ago and it dows not work well for me:
1. It have leaks
1a. it leaks the *.virtual files into my entier system
1b. it does not protect the drive against low sector reading/writing
1z. this was enough to be considderes useles for me.
2. it vonflicts with my HIPS in such a bad way that when an program tryes to access a key protected by my HIPS it freezes and cant be terminated or killed, only a remot helps. (i complained about this thay vever answered)
3. You have only one sandbox

Sandboxie is the best!

Owen

lwc · Post by **lwc** » Mon Mar 26, 2007 2:33 pm

Hey tzuk, what does "HIPS" stand for?

Also, I already know what does Sandboxie do in itself (and I use it

), but I'd like to know how would you compare it against this program. What does it do which that program doesn't (or vice versa)?

Thanks!

OwenBurnett · Post by **OwenBurnett** » Mon Mar 26, 2007 2:44 pm

HIPS: Host Intrusion Prevention System like here: http://www.proactive-hips.com/ <- the one I use.

Owen

Guest · Post by **Guest** » Mon Oct 15, 2007 4:33 am

The main difference: (censored) protects your whole computer (with apllication control), Sandboxie isolates only the sandboxed applications. If BZ notice creating or changing an executable file on your drive (worm, trojan, virus infection), it will mark that as untrusted and run it isolated. Sandboxie cannot catch malicious programs only if you run those sandboxed. Howewer, you have to buy BZ pro version if you would like the application control feature. (Feature winner: BZ, price winner: SB)

(censored) supports only one sandbox, with Sandboxie you can create more. In BZ if you empty sandbox, all modifications are gone. In SB you can empty only for example sandbox of suspicious files and sandbox of browser will be untouchable. (Winner: SB)

In BZ you can terminate processes running in sandboxone by one, in Sandboxie you cannot terminate one process only all of them. In BZ there is many visual aids (red boxes around icons and windows). BZ integrates with the original system, Sandboxie not. For example if you go into your downloads folder you can see all of your downloaded files (sandboxed [by virtual.lnk files] and not sandboxed), in SB you have to browse your real folder then your sandbox. (Winner: BZ)

The installer of Sanboxie is small, resource usage is low, it works without reboot. (Winner: SB)

I think there is no absolute winner. There are many pros and cons. My solution: I have bought (censored) Pro for my home computer and I install Sandboxie on my work computer.

Guest · Post by **Guest** » Mon Oct 15, 2007 4:42 am

And another thing: Sandboxie much better than BZ free (comparing features of free versions only). It's fact.

street011 · Post by **street011** » Mon Oct 15, 2007 8:14 am

the non-intergration into the real system makes SB a winner for me, after all, thats what i want sandboxie for, to keep my real system totaly clean, so no virtual things either!

If i want that i can just open up a sandboxed explorer and everything is there.

Also, you can terminate processes one by one... use taskmanager (people without basic knowledge of their operating environment shouldn't use a computer at all)

(censored) has leaks, is heavy for the system.

The only advantage it has is the ability to put a colored border around a protected window. I'd like to see that as option on sandboxie. (has been discussed before, never gonna happen)

I've met a lot of people complaining about sandboxie, but when i ask them how they would handle it, they have either no idea or their idea will result in an affected system.

If anyone doesnt like sandboxie or is too underskilled to use it. Stay away from computers or get infected

oh btw, that was in general, not @ TS

MitchE323 · Post by **MitchE323** » Mon Oct 15, 2007 8:44 am

I agree with Street except with one thing - lol

The only advantage it has is the ability to put a colored border around a protected window.

Funny but I see this as THE single most DIS-advantage between the programs. lol I think the hash marks are fine, and I actually don't even like them (but they have become sorta a Sandboxie 'signature' almost like a copywrite thing).

For me it's a balancing act - How protected am I? How smooth and fast is my computer? And how does my computer look? Make a case that another program makes your comp more safe and I will prove that it also makes your comp more slow - or in this case, 'uglies' up your computer.
mitche323

street011 · Post by **street011** » Mon Oct 15, 2007 3:39 pm

i just changed my opinion... the colored border makes it too fat...

Guest as above · Post by **Guest as above** » Mon Oct 15, 2007 3:41 pm

Street: Have you ever used application control in (censored) at all? There is no alternative in Sandboxie. Recently at my workplace a network administrator tried to make a remote install silently on my computer. He sucked because BZ cought it smoothly

A poetic question: what makes computer slower? (censored) alone, or Sandboxie + Firewall + Antivirus?

Nowadays computer performance is better and better. I believe you, Street, if you have an old computer BZ may slow it (not running, only starting). But on my Pentium 4 there is no problem. I love BZ for very good protection. I love Sandboxie for unique features. I will use and test them continously. And Mitch is right: more protection more slow. And a nice and comfortable gui cause more slow too.

MitchE323 · Post by **MitchE323** » Mon Oct 15, 2007 8:07 pm

This quote is from that FAQ page;

Another reason to keep using your anti-virus or anti-spyware protection is for that day when, for whatever reason, you decide that you want to move a file or program from the (censored) Virtual Machine to your actual PC; in such a case, let your anti-virus or anti-spyware first scan and clean the file or program.

So I'm not sure why Sandboxie gets burdened with the A/V in the equation;

what makes computer slower? (censored) alone, or Sandboxie + Firewall + Antivirus?

I can see the merits of both programs "if" they both work as promised. But after awhile it would sure be confusing with BZ as to what was virtual and what was real. I guess that's why the border is needed. Maybe it's a good deal, but I have seen too many programs that promise to know the differance in programs (trusted vrs alien), and end up conflicting all over your comp. World famous for this are A/V and A/S programs.
mitche323

Guest as above · Post by **Guest as above** » Tue Oct 16, 2007 4:06 am

MitchE323 wrote: So I'm not sure why Sandboxie gets burdened with the A/V in the equation;
mitche323

Mitch, you're wrong. The quote from FAQ warn you of human error, not the need of A/V. If you have a virus and you move out it from BZ by chance... Notice this: You have a network and there is an infected computer in it. The virus goes into your computer by using a network share, and gets installed silently. BZ can catch it without A/V, Sandboxie not. The equation is right. BZ protection also works if you don't run programs by "run in sandbox" feature exactly.

I believe If I install an infected software into BZ or SB I can notice that. Unknow processes, many new files, strange behaviour etc. And I will empty the sandbox, not moving out files. It does good to test programs in BZ awhile. However, I think Sandboxie is much better for testing apps. And Tzuk answers and helps faster.

I'm testing BZ and SB hard. For example I have a virtual computer with network connection and BZ protection only. And malwares can comes...

The BZ promise is more serious than others. Check its page if you want.

MitchE323 · Post by **MitchE323** » Tue Oct 16, 2007 7:09 am

OK thanx, now I understand your comparison. Seems more like an educated user finding the right products to fit with the special ways they use their computer, than wondering which is 'better' as a blanket question. For me Sandboxie is tops, but I also do not have network shares and such. Congrats. I think it's exciting that we are entering an age where products actually work and put us one up over the bad guys.
mitch

Guest · Post by **Guest** » Tue Oct 16, 2007 7:56 am

Amen to that mitch

Sandboxie Support

(censored)'s (censored) vs. sandboxing products

(censored)'s (censored) vs. sandboxing products

Who is online