191–200 of 328 posts
>this feature ships with Windows 10 Pro and Enterprise. No need to download a VHD! Swing and a miss. It's interesting how Microsoft will force their slow AV onto every win10 home edition device, yet won't give actual tools users can protect themselves with.
Power users get Pro, typical home users think that sandboxes are children playgrounds.
Nowadays it's almost impossible to uninstall an app completely, because most of them creating files willy nilly. And it's same on all known OSes. The side effect we see is system size growing in time. IMO running an app in a sandbox should be the default option. On Windows, I used to like sandboxie, which virtualized every write into single directory. Uninstall was easy as removing that dir. This MS sandbox doesn't a…
Unless I am mistaken, I don't think this is the case for iOS, Android, ChromeOS, FirefoxOS, and many game consoles.
This is really just a problem with desktop and server operating systems, not with operating systems as a whole. It's also getting bettwe with package managers, the Windows Store, and UAC.
Did Microsoft fix the issue that when Windows virtualization is enabled then VirtualBox VMs do not run [0]? Better they focus some of their resources to fix that first. If not yet, then Windows Sandbox it is a less useful feature that it may seem, because we have to choose between Windows Virtualization and VirtualBox VM snapshots all the time. [0] https://www.virtualbox.org/ticket/16801
This. I cannot use docker on my gaming rig to use it as dev machine sometimes because I need VirtualBox on it.
This is pretty cool, I know where I'm going to run my browser from now on :-).
Earlier quoted context omitted.
I could but I won't. What keeps me on VMware if that I can easily expand the vm to use 1 or more monitors. I am not sure if hyperv handles resizing of the window as smooth as VMware the adjust the display settings in the client. Last time i checked hyperv (rdp) just gave me scrollbars. It is probably antitrust concerns that is the reason why Microsoft never has improved the RDP client.
I haven't used HyperV in a while. I rarely connected to VMs via the hyperv console, just for installations or cases where windows wasn't booting properly. I use MSTSC (MS Terminal Services Client). That has supported multimonitor for the 12 or so years I've used it.
Earlier quoted context omitted.
I'm not speaking hypothetically, but from experience. I have a 4 year old 200gbp Android phone running Pie, took 10 minutes. I also have an iPhone 8, this is an Ok phone but is a worse experience than the 4 year old Android phone. Despite the cost being much higher, the screen is worse quality, for instance. My partner has a 6 and it is remarkably slower than both. To the point where you sometimes just want to give u…
Which cheapo Android has a better screen than an iPhone 8??
Nowadays it's almost impossible to uninstall an app completely, because most of them creating files willy nilly. And it's same on all known OSes. The side effect we see is system size growing in time. IMO running an app in a sandbox should be the default option. On Windows, I used to like sandboxie, which virtualized every write into single directory. Uninstall was easy as removing that dir. This MS sandbox doesn't a…
> Nowadays it's almost impossible to uninstall an app completely, because most of them creating files willy nilly. This has always been the case on Windows. In fact if anything, nowadays it’s better than its ever been because thanks to the UAC and other controls Microsoft have put in place, developers aren’t so free to do whatever they like to the host machine. But that’s remember a time before the UAC when it would…
Earlier quoted context omitted.
A lot (most?) of the hardware Home runs on doesn't support hardware virtualization.
Effectively all x86_64 hardware from the last 10+ years supports hardware virtualization, so I can't agree.
> In other words, the same executable pages of ntdll, are mapped into the sandbox as that on the host.
> We take care to ensure this done in a secure manner and no secrets are shared.
I would really like to see that last point elaborated. They claim it's completely separated from the host, yet they say it maps to the same physical memory, yet somehow it's done securely.
Ok, we're taking bets on what the first sandbox-escaping attack will target. My money is on a privilege escalation based on this gem: > Our solution is to construct what we refer to as “dynamic base image”: an operating system image that has clean copies of files that can change, but links to files that cannot change that are in the Windows image that already exists on the host. The majority of the files are links (i…