App Review Comodo Sandbox (Auto-Containment) have a bug on Windows 10?

[Av Gurus]

Comodo Sandbox (Auto-Containment) is set to Restricted Mode but when you run some files with Admin privileges it run that file as Partially Limited.
This happens in Windows 10 and with UAC turned ON.
If UAC is turned OFF in GPE then this is not happens.

Here is a short video demonstration:



EDIT:
Here is a topic about that in Comodo forum:
Comodo Sandbox (Auto-Containment) bug? - Bug Reports - CIS

 

[509322]

Comodo Sandbox (Auto-Containment) is set to Restricted Mode but when you run some files with Admin privileges it run that file as Partially Limited.
This happens in Windows 10 and with UAC turned ON.
If UAC is turned OFF in GPE then this is not happens.

Here is a short video demonstration:



EDIT:
Here is a topic about that in Comodo forum:
Comodo Sandbox (Auto-Containment) bug? - Bug Reports - CIS

Why don't you ask COMODO engineering ?

 

[Chimaira]

Good video. We need more attention on this. There needs to be an explanation.

 

[Av Gurus]

Why don't you ask COMODO engineering ?

I ask on Comodo forum, where else to ask?

 

[shmu26]

You can't expect Comodo to behave as expected. We see this over and over again.

 

[Mahesh Sudula]

I ask on Comodo forum, where else to ask?

I have encountered the same bug..when i asked their support they said we haven't received any sort of thing like you said..but we will luk on to it
They dont care anything we say...only they listen if we are a paid customer:notworthy:
I dont know how this company around till date...They are a SSL security provider..thats it
Great post @ Av Gurus

 

[show-Zi]

I would like to watch the progress of the official forum.
The comodo staff seems to harden their attitude on negative inquiries. Is it such a company's policy..

 

[Av Gurus]

For now nothing on Comodo forum about this bug.

 

[Sunshine-boy]

We see this over and over again.

Thera are better alternatives! SpyShelter Free Anti Keylogger or Sandboxie free!no reason to Auto sandbox everything unknown.and if i want to lock down my pc? then Hard Configurator does the job better than Comodo.

 

[509322]

I ask on Comodo forum, where else to ask?

Go straight to the top of COMODO.

There are COMODO staff members on the COMODO forum. Send them a PM. You can send Melih a PM with a link to your video and ask him who at COMODO you should contact to get an answer. You can send a PM to BuketB. She manages the quality improvement program at COMODO. You can send a PM to Haibo Zhang (ask Melih how to contact him), he is, or was, the Director of COMODO Engineering - China.

If you ask Melih a straight question, he will answer you. It might take a while, but he will answer. He answered my questions every time I posed one to him.

 

[Av Gurus]

Tnx.
I send a PM to BuketB. We will see what happens now.

 

[AtlBo]

Funny thing about this to me is that I can't say it's a bug with Comodo. Well, the broken sandbox is a bug. However, I wonder if the limitation being set to partially limited could be tied to this bug somehow, as in any other restriction broke the sandbox beyond repair on W10. In that case, I guess it would be part of the broken sandbox bug.

The other thing I have considered is the difference between operating systems. Could Comodo have just decided that Partially Limited in Windows 10 will get you the same security as Restricted in former versions (i.e. W7)? Not going to put it past Comodo to decide something like this, especially if their view of the intention of the privilege elevation alert is to give you an opportunity to run the process in a more risky way. Maybe the difference with W7 simply reflects that they decided not to change it, thinking who cares or that W7 is less secure in the first place? That's how bonkers it can be not knowing what they are thinking. Just maybe Comodo is thinking this is the way to give you more security than actually running completely unrestricted under Windows system restrictions only

Has anyone chronicled whether the sandbox breaks in Windows 7? Maybe that would provide some useful information on what might be happening with this bug if anyone is available to test. Thanks very much to @Av Gurus for following through with this bug with Comodo and for the thread. I am sure it means alot to Comodo at the important levels to hear concerns like this one...

 

[Av Gurus]

In Win 7 there is not such bug like in Win 10.

 

[woodrowbone]

Tnx.
I send a PM to BuketB. We will see what happens now.

I always find umesh to be interested in solving problems, if you cant reach Buket.

/W

 

[Morphius]

Contact Umesh, Buket is no longer part of the team.

 

[shmu26]

You can't expect Comodo to behave as expected. We see this over and over again.

But in truth, it is unfair to just bash Comodo all the time. There are plenty of "respectable" security softs that have bugs and don't always do what they are supposed to. I don't want to give a list, or EVERYBODY will hate me...

 

[illumination]

As already mentioned above, Umesh would be the best person to contact with this, he is very responsive and will look into, or provide answers to this if it is an intended behavior or a bug.

 

[Av Gurus]

Umesh replay:
This is a known technical limitation. Only "partially limited" level is supported in such case.

 

[bribon77]

Well, I think you should fix this error, those of Comodo, Aver if of MT take us into consideration.
But ... I do not want them to think that I am defending this error.
But the software that is free of Bugs that throws the first stone.

 

[AtlBo]

Sounds like native W10 defenses take up where Comodo's partially limited protection ends. That or maybe W10 UAC won't permit some of the restrictions in "limited" or "restricted"?

My perception is that "Restricted", "Limited", and "Partially Limited", with regards to the Comodo settings, are each defined by Comodo. This I believe is a separate definition for the terms than what Microsoft might attach. Only a suspicion. Maybe someone is more familiar than I on this topic. Only saying this because I believe "Partially Limited" is more restrictive by Comodo's standard than even "Restricted" would be by Microsoft's definition of that term (as in limited user account /resttricted)...

I guess one question might be whether this is an issue in Comodo's program or a W10 issue. Maybe Umesh will have more to say if queried. I think more information would help.

Still the breaking sandbox there too to think about...