Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Sandboxie: Sandbox-based isolation software for Windows NT-based OS's

github.com

Post reply on HN
Print view View original

1–10 of 34 posts

Re: Sandboxie: Sandbox-based isolation software for Windows NT-based OS's

#3

Post by gigel82 »

iamevn wrote: post #2

I rarely feel the need for sandboxie but the times I do, I feel that I'd be better served by a full VM. Got burned once because I misjudged risk level and the thing I ran within sandboxie managed to grab my browser's saved passwords.

I like the Sandbox app / feature built into Win10/11 (very fast to boot). I wish it'd allow saving snapshots and being automated. I want to set one up with a full dev environment for example.

Full HyperV VMs are significantly slower to boot and run.

Re: Sandboxie: Sandbox-based isolation software for Windows NT-based OS's

#4

Post by senectus1 »

iamevn wrote: post #2

I rarely feel the need for sandboxie but the times I do, I feel that I'd be better served by a full VM. Got burned once because I misjudged risk level and the thing I ran within sandboxie managed to grab my browser's saved passwords.

ouch. unexpected lesson to be learned here...

Don't use browser password saving. I presume a third party app like bitwarden would have been better. though if the browser auto syncs and installs the extension your risk is a little higher.

Re: Sandboxie: Sandbox-based isolation software for Windows NT-based OS's

#5

Post by tsujamin »

gigel82 wrote: post #3
iamevn wrote: post #2

I rarely feel the need for sandboxie but the times I do, I feel that I'd be better served by a full VM. Got burned once because I misjudged risk level and the thing I ran within sandboxie managed to grab my browser's saved passwords.

I like the Sandbox app / feature built into Win10/11 (very fast to boot). I wish it'd allow saving snapshots and being automated. I want to set one up with a full dev environment for example. Full HyperV VMs are significantly slower to boot and run.

Can second Windows Sandbox - 3s startup time, can copy things into it and it does like 85% of what I need completely isolated.

I mainly use it to test silent install flags when I'm deploying apps or running untrusted things :)

Re: Sandboxie: Sandbox-based isolation software for Windows NT-based OS's

#7

Post by kritr »

gigel82 wrote: post #3
iamevn wrote: post #2

I rarely feel the need for sandboxie but the times I do, I feel that I'd be better served by a full VM. Got burned once because I misjudged risk level and the thing I ran within sandboxie managed to grab my browser's saved passwords.

I like the Sandbox app / feature built into Win10/11 (very fast to boot). I wish it'd allow saving snapshots and being automated. I want to set one up with a full dev environment for example. Full HyperV VMs are significantly slower to boot and run.

If you haven’t already messed around with WSB files, I would encourage them for more complicated use cases.

https://docs.microsoft.com/en-us/windows/security/threat-pro...

The WinGet github repository has some scripts to setup and install programs inside.

Re: Sandboxie: Sandbox-based isolation software for Windows NT-based OS's

#8

Post by MuffinFlavored »

iamevn wrote: post #2

I rarely feel the need for sandboxie but the times I do, I feel that I'd be better served by a full VM. Got burned once because I misjudged risk level and the thing I ran within sandboxie managed to grab my browser's saved passwords.

I just tried it for the first time and the app I didn't trust could tell it was being sandboxed/spoofed/debugged/etc.
Post reply on HN