Using a sandbox as extra security?

joe2cool

Hi just wondered if anyone is using 'Sandbox software' like 'Bufferzone Pro' http://www.trustware.com/BufferZone-Pro/

Is it a good way to prevent programs leaving junk on your PC ?
The software runs in a secure section of your PC's hard drive or memory.

Is it as good as it seems? Any problems? Which software are you using?

Any advice if used or are using such software would be appreciated.

somersethillbilly

I've been using sandboxie for over a year, it's great but it does take a bit of getting used to. http://www.sandboxie.com/

joe2cool

Hi what was difficult to get used to? Does everything stay within 'a red box' (Isolation)?

somersethillbilly

joe2cool wrote: »

Hi what was difficult to get used to? Does everything stay within 'a red box' (Isolation)?

Yes, basically.."What happens in the sandbox stays in the sandbox", maybe I overstated getting used to it. Have a good read of the tutorials and there are several good guides on YouTube. I would n't be without it now, it's free, effective, uses very few resources and is well supported with a good user forum. Others may suggest it is overkill or snake oil, but I would disagree...prevention is always better than a cure. Just my opinion. Good luck with whatever you choose.

joe2cool

Cheers..............

mr_fishbulb

Used to use sandboxie on my main machine until I went 64 bit. Back then they didn't make a 64 bit version. They do now, but I haven't bothered to put it on. It's a good idea in theory, but I use no script and if I have to open up any dodgy looking files then I have a VM which has sandboxie.

I see bufferzone pro now supports 64 bit. May try it out.

Gillor

A copy of a post I made last year on the same subject which may be helpful:

Having had a really vicious computer infection from a so-called safe site, and getting really p*ss*ed off by the failure of conventional ( signature based) anti-virus solutions to protect my computer, I spent a couple of weeks investigating Sandboxie and trying to understand the concept.

As a non-techie, initially there were more questions than answers but I went for it anyhow on the basis that it's better to prevent an infection in the first place than to try and clean up everything afterwards.

That was around eighteen months ago. I started with the free version to try it out and was so impressed I upgraded to the paid-for version.

I have run all my internet browsing in Sandboxie ever since so that it doesn't matter what junk is downloaded onto my system, virus's, spyware, malicious URLs, as soon as I close the browser it's gone.

It makes it sound as if I make a habit of visiting unsafe sites - I don't but I there is so much malware around and a lot of it seems to be coming from sites which on the face of it are reputable but have been hijacked and that signature based anti-virus software seems unable to recognise until it is too late.

For me I can't recommend Sandboxie highly enough. It's saved my bacon a number of times and once you can get your head round the concept it really is quite simple.

Sandboxing or HIPS security certainly seem to be the way to go as with the amount of malware released each day most AV programmes are just playing catch-up.

I am not a techie but a silver surfer who has had to learn the hard way. Conventional anti virus software is great if it recognizes the virus/malware signature but for zero day threats is generally pretty useless. Whichever signature-based a/v you choose,for comprehensive protection you really need an additional layer of security such as that provided by a Sandboxie or similar HIPS type software.The a/v you put on your system is really just the start.

joe2cool

Thank you, appreciated

Gillor

joe2cool wrote: »

Thank you, appreciated

No problem. Sandboxie is really quite simple - initially it's the concept that can take a little getting your head round.

Just post if you if you need any further info.

I have no connection with Sandboxie by the way, just an enthusiastic convert.

esuhl

I've used Sandboxie too, and it works really well. You'll probably want to have a glance at the short guide to see how to use it, but once you know, it's very quick & easy to use. If you're worried about web security, it's not really any extra effort to run your browser in a sandbox.

I can't remember the last time I needed to use it, though. I don't download anything that might be dodgy, have malware-protecting add-ons for my web browser and use Linux most of the time anyway...