Reply to thread

Message

<blockquote data-quote="DeepWeb" data-source="post: 716321" data-attributes="member: 63811">Personally I think people have sandboxing backwards but what do I know (literally, what do I know <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite126" alt=":ROFLMAO:" title="ROFL&nbsp; &nbsp; :ROFLMAO:" loading="lazy" data-shortname=":ROFLMAO:" />). I think we should focus on sandboxing/virtualizing the kernel and the most essential components of Windows so that they cannot be compromised to get access to everything else. In essence, Microsoft already offers this but it breaks so many programs that they are too afraid to shovel it down everyone&#039;s throat. Just finding the instructions alone is a big deterrent to most average users. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite121" alt=":cautious:" title="Cautious&nbsp; &nbsp; :cautious:" loading="lazy" data-shortname=":cautious:" /> Oh and only available for Windows 10 Pro and up since it requires Hyper-V.<a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/enable-virtualization-based-protection-of-code-integrity" target="_blank">Enable virtualization-based protection of code integrity</a>I really think Microsoft is wasting so much potential here. They already have the entire virtualization environment and they do offer application virtualization.... to enterprise customers. The entire application environment should be completely separated from the driver/kernel environment like it&#039;s done in mobile operating systems. But I know that would piss some people off.</blockquote>

[QUOTE="DeepWeb, post: 716321, member: 63811"] Personally I think people have sandboxing backwards but what do I know (literally, what do I know :ROFLMAO:). I think we should focus on sandboxing/virtualizing the kernel and the most essential components of Windows so that they cannot be compromised to get access to everything else. In essence, Microsoft already offers this but it breaks so many programs that they are too afraid to shovel it down everyone's throat. Just finding the instructions alone is a big deterrent to most average users. :cautious: Oh and only available for Windows 10 Pro and up since it requires Hyper-V. [URL="https://docs.microsoft.com/en-us/windows/security/threat-protection/enable-virtualization-based-protection-of-code-integrity"]Enable virtualization-based protection of code integrity[/URL] I really think Microsoft is wasting so much potential here. They already have the entire virtualization environment and they do offer application virtualization.... to enterprise customers. The entire application environment should be completely separated from the driver/kernel environment like it's done in mobile operating systems. But I know that would piss some people off. [/QUOTE]

Verification