3 ms·

There is at least one advantage I believe for using Sandboxie instead of Windows Sandbox: performance. Using Win Sandbox, Edge sandbox, Defender application gu

There is at least one advantage I believe for using Sandboxie instead of Windows Sandbox: performance. Using Win Sandbox, Edge sandbox, Defender application guard or Docker for Windows enables Hyper-V system wide and makes your current host Windows runs inside a special VM which incur obviously a small performance impact.

securewindow 7y ago
New Windows installations are already run inside Hyper-V, due to new security features like Memory Integrity: > Memory integrity is a powerful system mitigation that leverages hardware virtualization and the Windows Hyper-V hypervisor to protect Windows kernel-mode processes against the injection and execution of malicious or unverified code. Code integrity validation is performed in a secure environment that is resistant to attack from malicious software, and page permissions for kernel mode are set and maintained by the Hyper-V hypervisor. https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/memory-integrity https://docs.microsoft.com/en-us/windows/security/threat-pro...
- TheRealPomax 7y ago
  Unless your VM solution is a VMWare technonoly, in which case hyper-v gets turned right back off because VMWare has its own hypervisor that needs to run as low as possible.
  - ComputerGuru 7y ago
    Just announced that the next version of VMware workstation will be able to use hyper-v for compatibility with these security features (and more pressingly for their user base, WSLv2).
    - noisem4ker 7y ago
      Oracle is also attempting to solve the same problem with VirtualBox, but it's not there yet.
big_chungus 7y ago
My big gripe with that is that ms hyperv breaks vmware, which I need, so no sandbox for me.
- ComputerGuru 7y ago
  Just announced that the next version of VMware workstation will be able to use hyper-v for compatibility with these security features (and more pressingly for their user base, WSLv2).

securewindow 7y ago

New Windows installations are already run inside Hyper-V, due to new security features like Memory Integrity: > Memory integrity is a powerful system mitigation that leverages hardware virtualization and the Windows Hyper-V hypervisor to protect Windows kernel-mode processes against the injection and execution of malicious or unverified code. Code integrity validation is performed in a secure environment that is resistant to attack from malicious software, and page permissions for kernel mode are set and maintained by the Hyper-V hypervisor. https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/memory-integrity https://docs.microsoft.com/en-us/windows/security/threat-pro...

TheRealPomax 7y ago
Unless your VM solution is a VMWare technonoly, in which case hyper-v gets turned right back off because VMWare has its own hypervisor that needs to run as low as possible.
- ComputerGuru 7y ago
  Just announced that the next version of VMware workstation will be able to use hyper-v for compatibility with these security features (and more pressingly for their user base, WSLv2).
  - noisem4ker 7y ago
    Oracle is also attempting to solve the same problem with VirtualBox, but it's not there yet.

big_chungus 7y ago

My big gripe with that is that ms hyperv breaks vmware, which I need, so no sandbox for me.

ComputerGuru 7y ago
Just announced that the next version of VMware workstation will be able to use hyper-v for compatibility with these security features (and more pressingly for their user base, WSLv2).