I'm glad to finally see some innovation on Windows that is not user hostile.
It could just be that we simply haven't had time to figure out the manner in which it's hostile.
Windows Sandbox
31–40 of 328 posts
Re: Windows Sandbox
#32Earlier quoted context omitted.
Sandboxie is a UI nightmare IMO - it took me ages to work out how to launch a single program in a sandbox.
Interesting. How long ago was this? I've used Sandboxie for around 10 years and in that entire time, it has always just been a matter of right-clicking the program and "Run Sandboxed", even trivially accessing the sandboxed start menu via the notification icon.
I agree, been using Sandboxie for way over 6 years now and it's the easiest thing ever to use.
Re: Windows Sandbox
#33Please do not make this a Pro / Enterprise feature. I do remote tech support for my parents and would love for them to browse / use apps in a sandbox.
why not just buy them a pro edition? I know it's more expensive, but that would also get you remote desktop, bitlocker, and group policy, which would all also be great for remote supporting your parents.
Because sometimes they buy a new computer and it is a while before I am able to visit them across the planet and install a new OS in it. Would really like a good out of the box experience.
Re: Windows Sandbox
#34>this feature ships with Windows 10 Pro and Enterprise. No need to download a VHD! Swing and a miss. It's interesting how Microsoft will force their slow AV onto every win10 home edition device, yet won't give actual tools users can protect themselves with.
I've found Defender to be a definite performance hit but what's a better option? I'd rather not have the subscription costs.
Not running a tool that makes your attack surface bigger in exchange for questionable benefits?
Re: Windows Sandbox
#35Sandboxie has been providing similar functionality on versions of Windows since XP: https://www.sandboxie.com/ It's probably nowhere near as elegant as the Windows 10 feature, but it should be very handy if you have older versions of Windows!
I would want to know how the software works before really trusting it. Like, I am aware since XP (NT?) Windows has had some ability to drop privileges, but I have no idea what the Windows API offers for isolation. If it were to use a solution like patching NTDLL routines in memory it would be escapable by syscalling manually, so surely that can't be it. What is the magic API they can use to sandbox and isolate IPC, files, the registry?
Re: Windows Sandbox
#36This is not a sandbox. All this does is launch windows in hyper-v virtual machine and configures the virtual environment automatically for you.
You could achieve all of this yourself manually and you still wouldn't call it a sandbox, you would call it VM.
Re: Windows Sandbox
#37Earlier quoted context omitted.
I've found Defender to be a definite performance hit but what's a better option? I'd rather not have the subscription costs.
Not running a tool that makes your attack surface bigger in exchange for questionable benefits?
They've put Defender into a sandbox nowadays.
https://cloudblogs.microsoft.com/microsoftsecure/2018/10/26/...
Re: Windows Sandbox
#38Only Microsoft would come up with a new security feature and then intentionally and arbitrarily limit its availability to the most expensive version of their OS.
This is the same company that thinks putting ads in the fucking file explorer is appropriate on an OS they charge hundreds and hundreds of dollars for.
Re: Windows Sandbox
#39Prerequisite: AMD64. Does that mean it will work with my Ryzen, but no intel chips?
That’s a nice win for AMD at the expense of intel if true for corporate environments.
Re: Windows Sandbox
#40This is not a sandbox. All this does is launch windows in hyper-v virtual machine and configures the virtual environment automatically for you. You could achieve all of this yourself manually and you still wouldn't call it a sandbox, you would call it VM.
Can't you use a VM as a sandbox?