Q&A Do I need browser extensions with Sandboxie?

Discussion in 'Sandboxie (Invincea)' started by HarborFront, Oct 26, 2017.

  1. HarborFront

    HarborFront Level 34
    Content Creator

    Oct 9, 2016
    2,300
    5,763
    Far East
    #1 HarborFront, Oct 26, 2017
    Last edited: Oct 26, 2017
    I'm not using SB and I'm thinking of getting it. Just a few questions.

    a) If I have 15 extensions and having SB do I still need the same number of extensions? If not, then what minimum extensions do I need or no extension is required if I have SB?
    b) Does SB protects my privacy data from being siphoned off like preventing fingerprints at work?
    c) Can I carry out financial transactions over the net within SB or do I need to come out of SB to do that?
    d) Extensions require updating like the filters of uBlock Origin etc. Do I need to exit SB to perform the updates?
    e) Is it true that AV/AM software will only work if the files are saved and ran outside of the sandbox? Will the AV/AM work if the file is executed within SB i.e. downloaded and ran within SB
    f) If I need to update a software I need to exit SB to do, right?

    Thanks
     
    bjm_, Sunshine-boy, Rengar and 2 others like this.
  2. plat1098

    plat1098 Level 5

    Aug 23, 2017
    228
    1,334
    Brooklyn
    Windows 10
    Microsoft
    Sandboxie - Frequently Asked Questions

    Sandboxie - Known Conflicts

    May not cover every question you have. There's a forum there. I currently run version 521-7 beta, which works flawlessly so far on Fall CU w/Internet Explorer, HitmanPro Alert and one extension--AdBlock Plus. All financial transactions I do inside the sandbox and the contents deleted when session is closed. Since I d/l and install security software specifically outside the sandbox, they would be updated outside the box anyway. :)
     
  3. HarborFront

    HarborFront Level 34
    Content Creator

    Oct 9, 2016
    2,300
    5,763
    Far East
    So you answered my questions c) and f)

    Thanks
     
    given, bjm_, Sunshine-boy and 2 others like this.
  4. shmu26

    shmu26 Level 53

    Jul 3, 2015
    4,268
    13,580
    Utopia
    It depends a lot on how you configure SBIE. For instance, you can deny read permission to certain folders, and then you won't have to worry about data theft from those locations.
    I am not an expert but I think that many of your questions do not have a blanket "Yes or No" answer.
     
  5. Rengar

    Rengar Level 14

    Jan 6, 2017
    694
    4,416
    Greece
    Windows 8.1
    Avast
    15 extensions:ROFLMAO::ROFLMAO::ROFLMAO:
     
    given, plat1098, Paul Lee and 4 others like this.
  6. TerrakionSmash

    TerrakionSmash Level 16

    Nov 17, 2016
    750
    2,127
    Somewhere underwater or over water. I am water!
    Windows 10
    Microsoft
    and probably 15 security extensions at that.
     
    Sunshine-boy, shmu26, given and 4 others like this.
  7. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,163
    29,652
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    SBie doesn't count extensions, it is not ReHIPS ^^

    Nope, it just isolate the browser/app/folder; it doesn't involve in privacy; by default settings even a keylogger downloaded and ran inside Sbie will transmit datas to the attacker (unless the settings are tweaked to prevent so)

    You can, same as a regular browser.

    I use Chrome with sync ON, so whatever i do extension will be updated inside. If you don't use sync, sandboxie will replicate what is done outside, for example if you open a page on real system , close the page and then run Sbie, the page will be opened in Sbie too.

    They should scan, i never got any malware to get AVs scan inside SBie though.

    It Is what i do. But you can do it inside Sbie too, depend on the settings.

    SBie is just a sandbox, it isolate everything ran inside, it doesn't have Application Control like ReHIPS, so all you do with downloaded files is on your responsibility.

    I use it since years, never get real major issues with, it just "annoyed" me sometimes.
     
    shmu26, given, TerrakionSmash and 2 others like this.
  8. Quassar

    Quassar Level 7

    Feb 10, 2012
    326
    727
    Poland, Bielsko - Biała
    A) Kinda stupid question not matter how much extensions you use its deppen what they do.
    B) Browser fingerprints - will be stored till you clean/delete files from sandbox, btw sandboxie dont mask your browser its only izolator you will other soft like VPN to mask IP, Computer etc.
    C)Dunno how answer on it... if your pc is infected in system behind sandbox runing infected program in sandbox dont change anything
    BUT !!! if you browse some xxx site and than got infection and it not bypass sandboxie, after clean container you should back to clean status and safely browse once again.
    D) Yes and no.. If you exlude specific files where adblock storage filters for specific counteiner/program process in advanced menu. Than you dont must start browser behind sandboxie for take changes.
    Sandboxie - Resource Access Settings
    E) AV is instaled inside system not sandbox so should take action even if malware are inside sandbox but some softare can be incompatibilia but im not sure with it at all.

    F) Its depend on your style usage of Sandboxie
    1) Instal Browser behind Sandboxie and than runing it for future izolate next new incomming files etc than you must update behind sandboxie for keep changes.
    2) If you wanna instal software fully/totaly inside sandboxe for test it and you dont wanna affect myself system by instaling and using this softare than you must update it in sandbox.
     
    Sunshine-boy, given and bjm_ like this.
  9. Andy Ful

    Andy Ful Level 22

    Dec 23, 2014
    1,100
    4,708
    business
    Poland
    Windows 10
    Microsoft
    #9 Andy Ful, Oct 27, 2017
    Last edited: Oct 27, 2017
    Do you plan to use paid version or free?
    With the paid version you can do much more, for example, prevent keyloggers or another application (except required) from running in the sandbox. You can also prevent applications in the sandbox to read/write files located into chosen folders/disks. With Sandboxie, you can configure the sandbox to be anti-exploit, anti-keylogger, anti-exe, and privacy protection for programs which are going to run in that sandbox.
    You can safely restrict the sandbox in a way, that would make Windows completely unusable, if the restrictions were system-wide.
     
    Sunshine-boy, shmu26, given and 2 others like this.
  10. Andy Ful

    Andy Ful Level 22

    Dec 23, 2014
    1,100
    4,708
    business
    Poland
    Windows 10
    Microsoft
    For example. You installed VLC to watch films. The recommended sandbox restrictions:
    1. No internet connection.
    2. Every instance of vlc.exe is automatically sandboxed.
    3. Only vlc.exe can run in the sandbox and only as standard user.
    4. VLC can read files only from C:\Windows, VLC folders, and Film folder.
    5. VLC can write files only to VLC folders.
    6. VLC cannot have access to memory of applications running outside the Sandboxie sandbox.
    :)(y)
     
    Sunshine-boy, shmu26 and given like this.
  11. Quassar

    Quassar Level 7

    Feb 10, 2012
    326
    727
    Poland, Bielsko - Biała
  12. Andy Ful

    Andy Ful Level 22

    Dec 23, 2014
    1,100
    4,708
    business
    Poland
    Windows 10
    Microsoft
    #12 Andy Ful, Oct 27, 2017
    Last edited: Oct 27, 2017
    I also can recommend the ssj100's Security Setup.
    But, you do not need the points 11-16.
    The point 11 is obvious, the virtual machine is more recommended.
    The points 12-13 prevented AutoRun feature (not needed from Vista SP2).
    .
    11. This step is obviously optional: have one sandbox to test applications/malware in (the DefaultBox will do) where the only configurations are to enable automatically delete and block file access to any areas of your computer containing sensitive information (eg. “My Documents”).
    12. Create separate sandboxes for each USB/external drive hardware you have connected (or would connect) to your computer. Force run the relevant drive letter to run in the relevant sandbox. Other configurations/restrictions may be applied here (see above).
    13. Create separate sandbox(es) for your CD/DVD drive(s). Force run the relevant drive letter to run in the relevant sandbox. Other configurations/restrictions may be applied here (see above).
    14. Create a separate sandbox for your Virtual Machine program. Other configurations/restrictions may be applied here (see above).
    15. Create a separate sandbox for opening newly introduced files (with a sandboxed explorer.exe) on your REAL system. For easy access, you will also need to create a shortcut to this sandbox and place this shortcut appropriately. Configure this sandbox to automatically delete on closing. Please click here for more information about this step.
    16. This step is only necessary if you're using SRP to block cmd.exe (see above):
    Make a copy of cmd.exe and rename it (eg. cmd1234.exe). Change the Sandboxie Delete Command accordingly in each sandbox to:
    %SystemRoot%\System32\cmd1234.exe /c RMDIR /s /q "%SANDBOX%"
     
  13. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,163
    29,652
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    Oh didn't know this guide, but i also done most of the step mentioned, guess im not so bad with Sandboxie :p
     
    Andy Ful and harlan4096 like this.
  14. Sunshine-boy

    Sunshine-boy Level 22

    Apr 1, 2017
    1,171
    5,189
    IRAN
    Windows 10
    ESET
    1-What are the differences between Q360 sandbox and Sandboxie?
    2-which one is better? and why?
    Rehips sandbox seems stronger but cant runs every software isolated and hard to config(because the settings are too complicated).
     
  15. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,163
    29,652
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    @Sunshine-boy i never used Qihoo one, because i have all i need with Sandboxie or ReHIPS, sandboxie paid version and ReHIPS as well allows any number of dedicated sandbox has lot of setting to play with which make them very customizable and tight.
     
    mlnevese and Sunshine-boy like this.
Loading...
Similar Threads Forum Date
Here's What You Need to Know About Mozilla's New Firefox Browser Coming Next Week Browsers and Extensions Nov 8, 2017
Why you don't need Avira Browser Safety Avira Apr 2, 2017
Need help removing "Similar Deals" popup bar in Chrome browser Malware Removal Assistance For Windows Nov 30, 2016