Battle What's the best Free Sandbox in 2020?

[Chri.Mi]

What sandbox would u use?

Suites are allowed too (COMODO,360,etc)

 

[Chuck57]

From what I understand, they offer (used to offer) a basic version that was good for a single application for free. They also have an enterprise version with which you could make multiple sandboxes, or something like that, kind of like the free and paid versions of Sandboxie.

 

[Freki123]

Since you brought up Cruelsister I remembered her post about Shade. No clue if it was fixed or not.

Cybergenic Shade-sandbox tool

We all always have our eye out for something new like this especially if it's strong enough to solidly keep containment and safely dump out the chaos...

www.wilderssecurity.com

Post 177+
e.g:"As examples, looks like a Service can be created by an application run from within the sandbox, and even worse it seems that a sandboxed process can both fork and autostart a legit Windows file."

 

[Outpost]

@pablozi
You're right. Last time I used it, there was a home free version and a paid Enterprise. Now, obviously, things have changed. I apologize for the misinformation.

 

[Chri.Mi]

So if i understand the situation is this:
1. sandboxie have many incompatibility
2. shade isnt free
3. comodo firewall is good, but have to install comodo
4. quihoo (i saw videos blocking ransomwares, for what i understand should be good)

Missing somethings?

 

[cruelsister]

CM- Remember that Comodo is an Auto-Containment system. This is of extreme importance!

For instance, plop your browser into Sandboxie and anything that arises out of the use of the browser will be contained with the ability of reversal; but run some malware file without directing Sandboxie to contain it and you are lost. CF, on the other hand, will sandbox that file no matter where it comes from and WITHOUT user input. An important and useful difference.

 

[LDogg]

The only "free" dedicated sandbox is Sandboxie. I believe this sort of software is a dying breed now.

~LDogg

 

[Chuck57]

Of the few remaining, Comodo is probably the most secure. But most people won't take the time, don't know how, or don't know they can adjust settings.
A properly configured Comodo firewall is formidable. I'm not saying it can't be beaten. Anything can. But I gather it isn't easy.

 

[AMD1]

With Windows Sandbox, i note this comes with the legacy Edge Browser. Is there a way to replace/update this with the newer Chromium Edge Browser rather than it revert to legacy once the sandbox is closed and re-opened ?

 

[SumTingWong]

Virtual Box free

VMWare paid

MY recommendation is Shadow Defender because it sandbox the entire system. Great if you lend your pc to someone to use for a while.

 

[oldschool]

With Windows Sandbox, i note this comes with the legacy Edge Browser. Is there a way to replace/update this with the newer Chromium Edge Browser rather than it revert to legacy once the sandbox is closed and re-opened ?

Edit: I don't believe so, but you can use Application Guard to run Edge Chromium.

 

[Vitali Ortzi]

Best for security VM, Windows Sandbox.
Best automatic sandbox Comodo Firewall Cruel.
Best overall Comodo firewall Cruel, Sandboxie.

 

[Vitali Ortzi]

Of the few remaining, Comodo is probably the most secure. But most people won't take the time, don't know how, or don't know they can adjust settings.
A properly configured Comodo firewall is formidable. I'm not saying it can't be beaten. Anything can. But I gather it isn't easy.

Not most secure but very hard to break.

COModo: From Sandbox to SYSTEM (CVE-2019–3969)

Antivirus (AV) is a great target for vulnerability hunting: Large attack surface, complex parsing, and various components executing with…

medium.com

 

[LDogg]

If sandbox as a security feature does eventually die out, I think Rollback or virtualization features could be the next thing after this.

~LDogg

 

[Vitali Ortzi]

If sandbox as a security feature does eventually die out, I think Rollback or virtualization features could be the next thing after this.

~LDogg

Many avs have sandbox /virtualization sandbox
Although mostly just for malware unpacking /BB monitoring.

 

[ichito]

Many avs have sandbox /virtualization sandbox

I don't use AV from years...tell me please how many and which...

Best for security VM, Windows Sandbox.

Windows sandbox?...best for security? It's as good as good and solid is Windows 10 that is in constant renovation...so why do you think that?

 

[Lenny_Fox]

Question about Sandboxie: it is free now and will be open source (in future): I am not a programmer, so apologize when this question is stupid

Open source means everyone can (re)view the source code. Would that give hackers an extra option to find vulnabilites?

As said I am not a programmer: how is the vetting/approval of open source software managed. Is is possible that hackers can slip-in code to create backdoors et cetera. How is the promotion of newly added code managed (e.g. from test to beta to production)? Which authority approves a change?

 

[Vitali Ortzi]

Question about Sandboxie: it is free now and will be open source (in future): I am not a programmer, so apologize when this question is stupid

Open source means everyone can (re)view the source code. Would that give hackers an extra option to find vulnabilites?

As said I am not a programmer: how is the vetting/approval of open source software managed. Is is possible that hackers can slip-in code to create backdoors et cetera. How is the promotion of newly added code managed (e.g. from test to beta to production)? Which authority approves a change?

A hacker will run a debugger/ fuzzer and disassemble it anyway if it was closed software of course but open source would save them much time especially running an old hardware .
But it's very important for bringing more security researchers to protect it .
So as long a program developer does very hard work hardening the program and security researchers find where the developers made mistakes and you will have a very good security .
But unfortunately reality is opposite.
Developers cut corners abandoned quickly , get mad of all the requests of supporting making open source and don't give a ##### about it.

 

[ichito]

Hi @Vitali Ortzi ...one week ago I've asked you questions. Do you forget it or just ignore me?

 

[Aleeyen]

What if we run one sandbox inside another sandbox? Is that even possible?

 

[ichito]

I didn't meet with such behaviour on this forum thru the years except one explanation - asked person have no idea how is the answer.