6 ms·

https://www.sandboxie.com/ https://www.sandboxie.com/ You can either run Steam sandboxed which in turn will sandbox all the games it runs, or you have to do a

by _nedR 9y ago

https://www.sandboxie.com/ https://www.sandboxie.com/ You can either run Steam sandboxed which in turn will sandbox all the games it runs, or you have to do a bit of finagling if you want to individually sandbox your games.

chrisper 9y ago
Does that work well for you? I have had certain issues with sandboxed applications.
- _nedR 9y ago
  It works well enough for most applications and games although I have had issues at times; for example with firefox installs. Using portable version of apps will make it easier in such situations. It is mostly trial and error fiddling with the level on f restrictions you want while not breaking apps. In my case, i have a template profile of permissions, most of which are for restricting access to personal/confidential files/folders like Documents, Browser profiles, etc. Instead of blocking access outright though , i usually make the files/folders write-only.. So, for example the other day i wanted to download a 60fps video from youtube, and the only practical option was to use an adware ridden java downloader.. So i just downloaded it created a new sandbox (based on the template sandbox) for the app, installed it (i recall i had some minor kinks in the install process but managed to get it to work in the end). After i was done with it , i deleted the sandbox and i was off on my way without having to worry if the application had left some unsavoury bits on my system.. edit: I might add that a key advantage of Sandboxie as opposed to other solutions like VMs is that afaik, Sandboxie mostly works by intercepting API calls to the underlying OS.. This maybe more leaky than a VM, but it is also much more lightweight, and as a consequence it has given me good performance for stuff like games, etc.
moviuro 9y ago
Here, sandbox your binaries in yet another untrusted binary :( What's to prove that sandboxie is not worse?.. [/tinfoil] Seriously though, has it been audited?
- _nedR 9y ago
  Fair enough. It does not seem to have undergone the level of scrutiny that one would hope for. But for me it seems to make sense to trust one app rather than having to individually trust the dozens of random apps i encounter day-to-day use. I am pasting an example i gave in a reply to another comment : "So for example the other day i wanted to download a 60fps video from youtube, and the only practical option was to use and adware ridden java downloader.. So i just downloaded it, created a new sandbox (based on the template sandbox) for the app, installed it (i recall i had some minor kinks in the install process but managed to get it to work in the end); after i was done with it , i deleted the sandbox, and i was off on my way without having to worry if the application had left some unsavoury bits on my system.." edit: It seems Sandboxie was acquired by Sophos, so now you have to decide whether you trust Sophos or not.

by _nedR 9y ago

chrisper 9y ago

Does that work well for you? I have had certain issues with sandboxed applications.

_nedR 9y ago
It works well enough for most applications and games although I have had issues at times; for example with firefox installs. Using portable version of apps will make it easier in such situations. It is mostly trial and error fiddling with the level on f restrictions you want while not breaking apps. In my case, i have a template profile of permissions, most of which are for restricting access to personal/confidential files/folders like Documents, Browser profiles, etc. Instead of blocking access outright though , i usually make the files/folders write-only.. So, for example the other day i wanted to download a 60fps video from youtube, and the only practical option was to use an adware ridden java downloader.. So i just downloaded it created a new sandbox (based on the template sandbox) for the app, installed it (i recall i had some minor kinks in the install process but managed to get it to work in the end). After i was done with it , i deleted the sandbox and i was off on my way without having to worry if the application had left some unsavoury bits on my system.. edit: I might add that a key advantage of Sandboxie as opposed to other solutions like VMs is that afaik, Sandboxie mostly works by intercepting API calls to the underlying OS.. This maybe more leaky than a VM, but it is also much more lightweight, and as a consequence it has given me good performance for stuff like games, etc.

moviuro 9y ago

Here, sandbox your binaries in yet another untrusted binary :( What's to prove that sandboxie is not worse?.. [/tinfoil] Seriously though, has it been audited?

_nedR 9y ago
Fair enough. It does not seem to have undergone the level of scrutiny that one would hope for. But for me it seems to make sense to trust one app rather than having to individually trust the dozens of random apps i encounter day-to-day use. I am pasting an example i gave in a reply to another comment : "So for example the other day i wanted to download a 60fps video from youtube, and the only practical option was to use and adware ridden java downloader.. So i just downloaded it, created a new sandbox (based on the template sandbox) for the app, installed it (i recall i had some minor kinks in the install process but managed to get it to work in the end); after i was done with it , i deleted the sandbox, and i was off on my way without having to worry if the application had left some unsavoury bits on my system.." edit: It seems Sandboxie was acquired by Sophos, so now you have to decide whether you trust Sophos or not.