3 ms·

What's different from running in Sandboxy?

• beardog 3y ago
  Windows Sandbox is an official Microsoft feature that uses hardware virtualization for quickly made disposable Windows VMs. Sandboxie is an OS-level 3rd party app that uses syscall hacks to sandbox applications. I say use Windows Sandbox if you care about security more than convenience.
• andersa 3y ago
  Windows Sandbox is a full VM with all the advantages that brings, like most definitely a stronger security boundary around it, as well as all the disadvantages, like not properly sharing RAM and GPU access. You also can't make a Windows Sandbox persistent in any way which makes the feature entirely useless for most uses cases I can think of. Don't understand the decision.
  • eviks 3y ago
    Yeah, lack of persistence is a bummer
    • akyuu 3y ago
      You can more or less get around this by using shared folders and logon commands on the .wsb configuration file [1]. For example, suppose you want to sandbox your torrent client. You can create a .wsb file to give the sandbox access to the torrent client application folder as well as your downloads folder, and specify a logon command like "C:\Shared\Torrent client\torrent.exe". When you click the .wsb file, a sandbox will spawn and the torrent client will automatically start, but it will only have access to the two folders you shared, not all the filesystem. And once you close it, the sandbox will be wiped, but the data on the shared folders will remain. This can work for many programs, especially portable applications, games, and other software that doesn't interact with the broader OS. Just by sharing the program folder, you can get "persistence" in a way. [1] https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file https://learn.microsoft.com/en-us/windows/security/applicati...
      • eviks 3y ago
        Thanks for the tip