Live data from Hacker News

Windows Sandbox

techcommunity.microsoft.com

311–320 of 328 posts

Re: Windows Sandbox

#311
Mods: Would you fix the link? Currently it is the following (410 characters; you'll have to find a way to read it):

https://techcommunity.microsoft.com/t5/Windows-Kernel-Intern...

I'm not going to try to parse and decode that, but it's mostly unnecessary and my security software thinks it's an XSS attack (a false positive, I would guess). This link works:

https://techcommunity.microsoft.com/t5/Windows-Kernel-Intern...

Re: Windows Sandbox

#312

Earlier quoted context omitted.

Tell that to my father who still uses decades-old software. I agree with the gp, Windows Home users need this feature the most. Folks who don't mind Windows S would already be using android/ios.

"S Mode" (as opposed to Windows S which was briefly a separate SKU) in current builds of Windows 10 (Home/Pro/Enterprise) is now arbitrarily admin activatable/deactivatable. As your father's admin (assumedly in this example) you deactivate S Mode, install all the old apps, then reactivate S Mode. Your father still gets access to the old apps, and can install new apps from the Windows Store [1] without your involvemen…

I don't think you can launch non-signed apps when S Mode is on. Does not matter, if you installed them when it was off.

Re: Windows Sandbox

#313

Earlier quoted context omitted.

Looks like you're singing the proprietary software blues. No worries, just spend more money. That solves everything on Windows.

When it comes to computers, there's never a silver bullet, not even money.

I digress. With the exception of biological disease there has never been a problem that more money couldn't solve. Whoever believes otherwise simply doesn't have enough money (or doesn't want to spend enough money) to accomplish what they're trying to do. Especially with computers.

Take a car wreck

Re: Windows Sandbox

#314

Earlier quoted context omitted.

When it comes to computers, there's never a silver bullet, not even money.

I digress. With the exception of biological disease there has never been a problem that more money couldn't solve. Whoever believes otherwise simply doesn't have enough money (or doesn't want to spend enough money) to accomplish what they're trying to do. Especially with computers. Take a car wreck

How much money would it take to make volcanoes stop existing?

Re: Windows Sandbox

#315

Earlier quoted context omitted.

> I see some people are really annoyed that it isn't available for the Home version and I too am somewhat annoyed but in this case it is somewhat understandable since it depends on a feature that is (somewhat more reasonable) limited to Pro versions. Hyper-V does function under the garb of 'Windows Hypervisor Platform' and 'Virtual Machine Platform' even under Windows 10 Home. I have it installed and it provides the…

> So there is no reason why MS cannot implement Windows Sandbox even on Home since the underlying tech actually functions on all Windows editions By that logic Microsoft could also allow Windows 10 Home to run Active Directory. The reason there's a Pro/Home split is a commercial decision not a technical one, so trying to view it through a technical lens is faulty. Regardless, if we want to talk about security feature…

> By that logic Microsoft could also allow Windows 10 Home to run Active Directory. The reason there's a Pro/Home split is a commercial decision not a technical one, so trying to view it through a technical lens is faulty.

You misread the post.

eitland was saying that: 1) sandbox needs hyperv for technical reasons 2) hyperv is not in home for commercial reasons 3) therefore home can't have sandbox

Santosh83 wasn't trying to view the entire thing through a technical lens. Their post has an implicit understanding of the commercial argument when it comes to unlocking the full hyperv feature set. They were simply correcting the technical portion of someone else's argument.

Re: Windows Sandbox

#316

On Linux Firejail/Firetools offer such functionality.

Firejail is based on the same type of tech as containers, namely process restrictions that you can activate on a per namespace basis. The MS sandbox is a separate VM with its own sandboxed kernel, which sounds like stronger isolation on the face of it.

You are right but I stand my point, the main functionality (isolation) is the same. One may indeed prefer a stronger isolation and be ready to accept a larger memory footprint, less easy ways to fine-tune isolation in order to let the isolated software access to some system-wide resources...

Re: Windows Sandbox

#317

Nowadays it's almost impossible to uninstall an app completely, because most of them creating files willy nilly. And it's same on all known OSes. The side effect we see is system size growing in time. IMO running an app in a sandbox should be the default option. On Windows, I used to like sandboxie, which virtualized every write into single directory. Uninstall was easy as removing that dir. This MS sandbox doesn't a…

Frankly, the very concept of "installing" an application is a ridiculous invention. Many systems of the past had self-contained applications that could just be dragged around between disks, copied, and deleted, seamlessly meshing with the files & folders desktop metaphor. Of course none of those systems enforced this behavior, which is something we could do today but, for the most part, don't. At least on Windows I h…

You said ‘systems of the past’, but isn’t this how macOS works?

If I download an app, I’m anticipating a .dmg to mount, which holds a self-contained .app which runs anywhere, and a link to /Applications, to suggest a sensible place to put it.

It’s not enforced, but it is the norm.

Re: Windows Sandbox

#318
post #221

Seems like a really nice feature. I've been thinking about something like this for a while. I see some people are really annoyed that it isn't available for the Home version and I too am somewhat annoyed but in this case it is somewhat understandable since it depends on a feature that is (somewhat more reasonable) limited to Pro versions. The thing that annoys me more (hi MS guys, feel free to tell the relevant peopl…

> they have started to add ads to the login screen and my start menu A coworker has asked what reasons I could have for not wanting to run "the best OS". this is enough for me.

What was your reason before ads were added to Windows?

Re: Windows Sandbox

#319
post #221

Earlier quoted context omitted.

> they have started to add ads to the login screen and my start menu A coworker has asked what reasons I could have for not wanting to run "the best OS". this is enough for me.

What was your reason before ads were added to Windows?

Forced updates that risk randomly breaking my machine the night before a big deadline

Re: Windows Sandbox

#320

Nowadays it's almost impossible to uninstall an app completely, because most of them creating files willy nilly. And it's same on all known OSes. The side effect we see is system size growing in time. IMO running an app in a sandbox should be the default option. On Windows, I used to like sandboxie, which virtualized every write into single directory. Uninstall was easy as removing that dir. This MS sandbox doesn't a…

Total Uninstall. Basically a system diff tool. I run it before & after every install.
Post reply on HN