Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 708171" data-attributes="member: 32260">So, it is quite secure even when the Internet connection is not blocked.There are still some possibilities to spy when:<ol>
<li data-xf-list-type="ol">The malicious document is opened when the Confidential private document was not closed or was saved into Documents folder (and redirected to ReHips User profile). That can happen to the inexperienced user.</li>
<li data-xf-list-type="ol">Malware in the sandbox will exploit the application (for example not supported by Microsoft - Office 2007), and then it will have the read access to all user&#039;s documents.</li>
<li data-xf-list-type="ol">Malware in the sandbox will scan the disk, read registry keys, .ini files, installed software, etc. to gather the information about the system.</li>
</ol>The points 3. and 2. can be connected because the malware can gather information, and next the targetted exploit will be applied to MS Office 2007. I cannot say if the danger is real nowadays, but the malware evolves in that direction, so it may be real in the future.Anyway, I am impressed by anti-spying capabilities of ReHips sandbox.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" />.Post edited in green.</blockquote>

[QUOTE="Andy Ful, post: 708171, member: 32260"] [B]So, it is quite secure even when the Internet connection is not blocked.[/B] There are still some possibilities to spy when: [LIST=1] [*]The malicious document is opened when the Confidential private document was not closed or was saved into Documents folder (and redirected to ReHips User profile). That can happen to the inexperienced user. [*]Malware in the sandbox will exploit the application (for example not supported by Microsoft - Office 2007), and then it will have the [COLOR=#00b359][B]read[/B][/COLOR] access to all user's documents. [*]Malware in the sandbox will scan the disk, read registry keys, .ini files, installed software, etc. to gather the information about the system. [/LIST] The points 3. and 2. can be connected because the malware can gather information, and next the targetted exploit will be applied to MS Office 2007.[B] I cannot say if the danger is real nowadays, but the malware evolves in that direction, so it may be real in the future.[/B] Anyway, I am impressed by anti-spying capabilities of ReHips sandbox.:) . [B][COLOR=#00b359]Post edited in green[/COLOR][/B]. [/QUOTE]

Verification