Hi all,
I've been researching this for a while and I've noticed it being recommended in the tenforums.com community, but I've been too cautious to install it myself.
How can I know that it's secure and safe to use? I'd love to know what Windows security experts think?
Link:
Sandboxie-Plus Features | Sandboxie-Plus
Thank you
Yes, it works and it is secure.
The former owner of Sandboxie, Invincea, decide a couple of years ago ( give or take) that they did not want to support Sandboxie anymore so they made all the code open sourced. A brilliant developer took over development and has been fine tuning it every since. However in my opinion he has made it harder to use with a lot of complex options and it seems like it is in perpetual beta now as he is always releasing new versions, sometime 2 in a week. So yes it works well especially if you are a somewhat advanced user, then you may love it.
The developer posts new versions and answers questions on the Wilders Security forum.
Wrong. It went from Ronen Tzur to Invincea to Sophos. Sophos made it open source.
David Xanatos is brilliant for sure, but your remark re being harder to use does not make sense, as the program still comes with a separate Classic UI (to be able to use Classic, just run SbieCtrl.exe as opposed to SandMan.exe) that looks, feels, and functions the same as when Invincea still owned the original Sandboxie. So, the "Plus" in Sandboxie-Plus is referring to the fact that all the added stuff is completely optional, and the driver is still basically the same. It's definitely not in perpetual beta, as you can decide for yourself on whether you want to stick to the stable releases or not.A brilliant developer took over development and has been fine tuning it every since. However in my opinion he has made it harder to use with a lot of complex options and it seems like it is in perpetual beta now as he is always releasing new versions, sometime 2 in a week. So yes it works well especially if you are a somewhat advanced user, then you may love it.
It is officially hosted on GitHub, though.The developer posts new versions and answers questions on the Wilders Security forum.
@NiceAndShy
I have been using Sandboxie (and now Sandboxie-Plus) for ages. I use it primarily as an added layer of browser protection with portable Firefox. As a matter of fact, I have set sandboxed portable Firefox as my Default Browser in Windows, and, I can run multiple instances of it at once, concurrently that is, and can do so with various many different settings in each─in parallel. (Both the browser settings/configuration and the sandbox settings can be different for each different instance running.) The level of flexibility that can be achieved in this manner is huge. Yet, it is not that much harder to do, nor takes that much time/effort to set up, than it is to use a Firefox addon like Multi-Account Containers─that I also use in addition to the strategy I just described. But I have come to the conclusion that nobody here is even remotely interested in this particular subject. Maybe it's because everyone here always wants to do almost everything the hard way, honestly I don't know. I see several people on here running a VM (most of them not understanding half of what a VM is factually intended for), one or two people know some stuff about the concept of containerization, but when it comes to isolation (sandboxing), the silence here on this forum and on elevenforum.com is deafening to say the least. The more time I spend trying to educate people on how Sandboxie-Plus can be used to help protect the browser and to make it more practical to use while avoiding to go in depth re advanced features of Sandboxie-Plus, the less interested they all seem to become so... I have been considering to go on strike soon.
There is Sandboxie-Plus and Sandboxie Classic. I use the Classic version. I tried the Plus version and it was an entangled nightmare of code creep.
Besides that, have been using Sandboxie now since circa 2015 when it was a paid-for product and I refused never to run my browsers without It. It can help keep the crap at bay, especially polymorphic malware like ransomware. Back in the day I used to swear by the Firefox add-on NoScript (when Firefox was a great browser...) as a kinda of drawbridge before the anti-virus. But now-a-days with websites being so JS heavy and whatnot, even allowing base 2nd level domains still made my use of NoScript cumbersome to use. When I found Sandboxie I was then able to reluctantly get rid of NoScript and just depended upon Sandboxing the browser in hopes nothing jumped the sandbox. Because after all, nothing in the cybersecurity world is 100% full proof. NOTHING! With my browsers running in Sandboxie, blocking Ads and whatnot (due to malvertising) via uBlock Origin, checking ALL downloads (even images) at VirusTotal, and common sense, I have no need for over bloated, privacy invading anti-virus software anymore. I completely stopped using anti-virus software the same time I started using Sandboxie. In fact, I have my parents who are close to 70 use Sandboxie and they have NEVER acquired malware. Believe me. I do memory dumps and other things looking for crap.
The caveat with Sandboxie though is that it takes some getting used to and knowing how to configure everything. Just take your time and learn about it all. Remember, the more security the more the cumbersomeness. That's pretty much the trade off it seems. It's like that with my layers of security at my website. It can be a sudo -PITA...
Once upon a time I REALLY nerded out Sandboxie and had its temp sandbox directory in a RAM drive. That started to be a problem with rather large downloads. LOL
Yes, I forgot about Sophos.
I said it was harder to use based on posts in Wilders from people who have used Sandboxie for years, David is getting guys to run scripts to use or correct options.
David releases numerous versions per year with additions/corrections etc. asking for testers to check for errors and suggestions. To me that does not indicate a stable release but rather a perpetual beta.
I said code creep, I meant feature creep. Feature creep - Wikipedia
Nah. It doesn't start to be a problem with large downloads, you just need to nerd it out more. Not a lot more, I mean. Just a tiny little bit more. You know. Like so:
Open File Path | Sandboxie-Plus
I apply sandboxing to downloads so there's no surprises...
Already familiar with that facility...
There are no surprises as long as you don't open the downloaded files, but if you are worried about it no matter still, then you could always decide to pick a downloads folder location that's in a separate sandbox─the sandbox location of which isn't on the ramdisk. Think outside the box or think inside a different box if you must, but whatever you do, NEVER think different! lol
@hdmi you are not the only star in the sky. The way you talk its easy to see that you think you are on some more knowledgeable level than others. You can be articulate and knowledgeable at the same time without talking above other people.
Basically if you look at your first post in here all the underlying padding is showing that you are trying to place yourself above others in context and then trying to sound knowledgeable at the same time. There is a thin line between being constructive vs being a bit domineering.
No not trying to tell you anything but i have noticed several posts from you so i though i would say something because i am blunt like that.
For example you are not the only person sandboxing their browser ive been doing it for 20 years.
I think also the last person you started talking above basically said to you that they know what to do.
Quote