Sandboxie Forum - Can I safely install programs if Drop Rights are not select? (13036)

JustPassingBy:

Sun Jun 10, 2012 11:43 am

The mods in Wilders finally banned him. I thought the day would never come.

tzuk:

Sun Jun 10, 2012 8:58 am

I guess that's par for the course.

Blues:

Sun Jun 10, 2012 1:59 am

I hope he finds help somewhere. And I don't mean with Sandboxie or any other software...

D1G1T@L:

Sun Jun 10, 2012 1:26 am

[size=18:3c3ace89fd][url=http://www.wilderssecurity.com/showthread.php?t=325106]This[/url] followed by:[/size:3c3ace89fd] [img:3c3ace89fd]http://i.imgur.com/Xzgcn.jpg[/img:3c3ace89fd] [size=18:3c3ace89fd]= Double lol [/size:3c3ace89fd] :lol: :lol:

tzuk:

Tue Jun 05, 2012 6:39 pm

Alright. I locked his account.

Buster:

Tue Jun 05, 2012 1:56 pm

[img:a686cee813]http://i656.photobucket.com/albums/uu286/TheWatchmen/BAN_HIM.jpg[/img:a686cee813]

Blues:

Tue Jun 05, 2012 1:00 pm

Tzuk, please ban this idiot before he ruins the forum for everyone else with his antics. It'd be bad enough if this was the first and only instance of this behavior...but it's widespread and well documented regardless of the nom de plume he chooses on any given site.

tzuk:

Tue Jun 05, 2012 8:52 am

Alright, let's just stop here. tonyseeking, you said you weren't going to come back to this forum, and I wish you kept your word.

tonyseeking:

Sun Jun 03, 2012 1:18 am

I come here in good faith to learn about SBIE and get help, instead I get falsely accused and personally attacked.

Blues:

Sun Jun 03, 2012 12:00 am

]]>Quoting Buster: ]]>I just made a little experiment... I saw tonyseeking connected to Sandboxie�s forum and I went to check at Wilders if TheMozart was connected. Yes, he was connected. I will not give comments, just facts. ]]> How can you be in two places at once when you're not anywhere at all? (Man does that take me back to the days of Firesign Theatre.)

Buster:

Sat Jun 02, 2012 11:39 pm

I just made a little experiment... I saw tonyseeking connected to Sandboxie�s forum and I went to check at Wilders if TheMozart was connected. Yes, he was connected. I will not give comments, just facts.

CPB:

Sat Jun 02, 2012 10:08 pm

]]>Quoting tonyseeking: ]]>False accusations! ]]> And yet you and 'Mozart' are the only ones I've ever seen whine about needing videos to illustrate every function in SB. What an amazing coincidence. Perhaps you two are long lost brothers, separated at birth. I think you should try to contact him. Not only can you have a heartfelt family reunion, but perhaps you can pool your collective knowledge of SB and offer the world the videos you two so desperately need. Then again, maybe not. Coming never to no theater nowhere near you - [size=16:e0a4f96e51]Sandboxie: The Video[/size:e0a4f96e51]

tonyseeking:

Sat Jun 02, 2012 8:59 pm

]]>Quoting JustPassingBy: ]]>Guys, I just want to warn you not to take that guy seriously. He will just annoy you to no end with retarded questions that can be answered by common sense. This is TheMozart, that states that tzuk denied him of help a long time ago. (he states it as tzuk is defensive of criticism or something like that). He stated that Sandboxie's forum is a wasteland. You can find a thread about it in Wilders. I am warning you that he will just waste your time. He sees things like running 10 videos in separate windows under Sandboxie will slow his system down and blame Sandboxie with the cause. (he doesn't realize how retarded it is to run 10 different videos SIMULTANEOUSLY). I am not doing this to harm his reputation (he has none). I am doing this so that tzuk and the others will not waste their time. link to the Wilders thread -http://www.wilderssecurity.com/showthread.php?s=ff33f9cf2878fc411ff45ac646aa80f3&t=323950 ]]> False accusations!

JustPassingBy:

Sat Jun 02, 2012 11:51 am

Guys, I just want to warn you not to take that guy seriously. He will just annoy you to no end with retarded questions that can be answered by common sense. This is TheMozart, that states that tzuk denied him of help a long time ago. (he states it as tzuk is defensive of criticism or something like that). He stated that Sandboxie's forum is a wasteland. You can find a thread about it in Wilders. I am warning you that he will just waste your time. He sees things like running 10 videos in separate windows under Sandboxie will slow his system down and blame Sandboxie with the cause. (he doesn't realize how retarded it is to run 10 different videos SIMULTANEOUSLY). I am not doing this to harm his reputation (he has none). I am doing this so that tzuk and the others will not waste their time. link to the Wilders thread -http://www.wilderssecurity.com/showthread.php?s=ff33f9cf2878fc411ff45ac646aa80f3&t=323950

tonyseeking:

Sat Jun 02, 2012 6:14 am

]]>Quoting D1G1T@L: ]]>Defrag programs would require driver installation which won't fly I'm afraid. And now in reply to your last few too many posts, I want you to take a deep breath and repeat with me: [size=24:37717d4ef2] [color=darkred:37717d4ef2][u:37717d4ef2]NOTHING IN THE SANDBOX CAN HAVE ANY EFFECT ON ANYTHING OUTSIDE IT![/u:37717d4ef2][/color:37717d4ef2] [/size:37717d4ef2] There is a nice little diagram on the site's main page for your convenience. [url=http://www.sandboxie.com/]It demonstrates the point once and for all[/url] Now there, see, that wasn't a hard concept to envision after all. :) ]]> So when I ran Wise Registry from INSIDE SBIE, it found errors from programs I installed BEFORE I even installed SBIE. So does this mean that whenever I run SBIE that SBIE makes a COPY of my proper W7 Registry into the SBIE and Wise scanned the SBIE registry? If so, where is the copy of the whole W7 Registry in the SBIE? :shock: Is it the file called "RegHive"? Is that the file Wise Registry cleaner was scanning and cleaning? And D1G1T@L, do this... type regedit in start menu, choose to run INSIDE SBIE and then click on "HKEY_LOCAL_MACHINE/SECURITY". Why does it say "An error is preventing this key from being opened, ACCESS DENIED"? And ANOTHER question... when I installed Eraser into SBIE and run it from INSIDE SBIE and chose to wipe my K: partition, why did Eraser begin to wipe my actual K: Parition and even show the exact files on it? :shock:

D1G1T@L:

Sat Jun 02, 2012 5:51 am

Defrag programs would require driver installation which won't fly I'm afraid. And now in reply to your last few too many posts, I want you to take a deep breath and repeat with me: [size=24:a498bf222a] [color=darkred:a498bf222a][u:a498bf222a]NOTHING IN THE SANDBOX CAN HAVE ANY EFFECT ON ANYTHING OUTSIDE IT![/u:a498bf222a][/color:a498bf222a] [/size:a498bf222a] There is a nice little diagram on the site's main page for your convenience. [url=http://www.sandboxie.com/]It demonstrates the point once and for all[/url] Now there, see, that wasn't a hard concept to envision after all. :)

tonyseeking:

Sat Jun 02, 2012 4:39 am

I have a QUESTION: If I install a hard drive Defrag program into SBIE and run the program, will it DEFRAG the proper hard drive, or some kind of fake SBIE "hard drive" inside SBIE? AND, if I install a Registry program inside SBIE and run it, will it check the SBIE Registry or my proper Windows 7 Registry? Because I installed Wise Registry cleaner into SBIE and ran it from inside SBIE, but I think it's scanning my REAL W7 Registry?!? Anyone with an answer? :shock: And it's reading my Startup menu as well, but how come a program installed into SBIE and run from INSIDE SBIE can read my proper W7 Startup menu???

tonyseeking:

Fri Jun 01, 2012 10:07 pm

]]>Quoting bo.elam: ]]> ]]>Quoting tonyseeking: ]]> So Bo, if that's the case, then why do we need to ENABLE "Drop Rights from Admins....."? :shock: ]]> You don't enable Drop Rights to keep changes inside the sandbox. Enabling Drop Rights keep programs from doing certain things when they are inside a sandbox. Thats whats for, like for example, programs wont be allowed to be installed sandboxed. Bo ]]> So "Drop Rights from Admins....." has nothing to do with programs INSIDE the SBIE being allowed or disallowed to do anything OUTSIDE the SBIE? I always thought that I should enable "Drop Rights from Admins....." so to stop anything INSIDE the SBIE from doing anything OUTSIDE the SBIE. So that's not the case at all? Even if "Drop Rights from Admins....." is DISABLED, no program INSIDE the SBIE can do anything OUTSIDE the SBIE anyway? But why would you need or want to limit what programs can do INSIDE the SBIE seeing they are INSIDE the SBIE anyway and cannot touch anything OUTSIDE the SBIE? :shock: In other words, WHY exactly would you need to specify whether Sandboxie will strip Administrator rights from programs running INSIDE a sandbox, seeing the programs can only do things INSIDE the SBIE anyway? Anyone able to give me understanding and clarity about that?

bo.elam:

Fri Jun 01, 2012 2:07 pm

]]>Quoting tonyseeking: ]]> So Bo, if that's the case, then why do we need to ENABLE "Drop Rights from Admins....."? :shock: ]]> You don't enable Drop Rights to keep changes inside the sandbox. Enabling Drop Rights keep programs from doing certain things when they are inside a sandbox. Thats whats for, like for example, programs wont be allowed to be installed sandboxed. Bo

tonyseeking:

Fri Jun 01, 2012 6:20 am

]]>Quoting bo.elam: ]]>Changes don't affect your system as they take place inside the sandbox and are kept there until you delete it. Your real system remains intact. Bo ]]> So Bo, if that's the case, then why do we need to ENABLE "Drop Rights from Admins....."? :shock:

bo.elam:

Thu May 31, 2012 1:38 pm

Changes don't affect your system as they take place inside the sandbox and are kept there until you delete it. Your real system remains intact. Bo

tonyseeking:

Thu May 31, 2012 6:14 am

]]>Quoting bo.elam: ]]> ]]>Quoting tonyseeking: ]]> What are the settings I can do, to make sure installing programs WORKS, yet enough protection to avoid any program leaking from SB into my system? ]]> Hi Mozart, a default settings sandbox is more than enough protection when you are trying programs but make sure to disable Drop Rights, otherwise programs wont install. Also set the sandbox to delete on closing or not to delete if you want to keep the sandboxed program for a while. Thats what I do whenever I install a program in a sandbox and have never seen anything get out of the sandbox. :D Bo ]]> Hey Bo, so if we disable Drop Rights, and install a program which ends up being malware or a messy program, does that mean the program can change files and add files OUTSIDE the Sandbox because we have disabled Drop Rights? :shock:

bo.elam:

Wed May 30, 2012 11:09 pm

]]>Quoting tonyseeking: ]]> What are the settings I can do, to make sure installing programs WORKS, yet enough protection to avoid any program leaking from SB into my system? ]]> Hi Mozart, a default settings sandbox is more than enough protection when you are trying programs but make sure to disable Drop Rights, otherwise programs wont install. Also set the sandbox to delete on closing or not to delete if you want to keep the sandboxed program for a while. Thats what I do whenever I install a program in a sandbox and have never seen anything get out of the sandbox. :D Bo

tonyseeking:

Wed May 30, 2012 9:40 pm

]]>Quoting D1G1T@L: ]]>Please read about it here: http://www.sandboxie.com/index.php?ExperimentalProtection Experimental Protection To Enable Experimental Protection: Open Sandboxie Control > Configure Menu > Experimental Protection (64-bit) ]]> I am running W7 32 bit, not 64 bit. Anyone able to answer my question? :shock: What are the settings I can do, to make sure installing programs WORKS, yet enough protection to avoid any program leaking from SB into my system?

D1G1T@L:

Wed May 30, 2012 12:19 pm

Please read about it here: http://www.sandboxie.com/index.php?ExperimentalProtection Experimental Protection To Enable Experimental Protection: Open Sandboxie Control > Configure Menu > Experimental Protection (64-bit)

tonyseeking:

Wed May 30, 2012 6:44 am

]]>Quoting D1G1T@L: ]]>Even if installing under admin rights you should be fine as long as experimental protection is enabled. If you want a super locked down sandbox then you can go ahead and drop rights and restrict writing even within the sandbox. Also you can restrict what programs are allowed to run in the first place. ]]> What is experimental protection? And how do I enable that in 3.70? And the problem is, if I drop rights, then programs won't install into the Sandbox. So what is the settings I can do, to make sure installing programs WORKS, yet enough protection to avoid any program leaking from SB into my system?

D1G1T@L:

Wed May 30, 2012 1:44 am

Even if installing under admin rights you should be fine as long as experimental protection is enabled. If you want a super locked down sandbox then you can go ahead and drop rights and restrict writing even within the sandbox. Also you can restrict what programs are allowed to run in the first place.

tonyseeking: Can I safely install programs if Drop Rights are not select?

Wed May 30, 2012 12:51 am

If "Drop Rights from Admin..." is NOT selected, and if C:\Windows and C:\Program Files folder is not listed in "File Access/Read-Only Access", can installing programs into SBIE be a security threat and can the program, if malware of virus, then infect my entire Windows? Thanks in advance :)