www.sandboxie.com :: View topic

Posted: Thu Sep 04, 2008 7:49 pm

confirmed, not working here.

Posted: Thu Sep 04, 2008 8:17 pm

Anyone been able to find out what driver chrome is loading/installing?

I haven't gotten the chance to look cause I've had a lot of things to do today and traveling alot plus meeting up with some people, etc..

Posted: Thu Sep 04, 2008 8:47 pm

xellos wrote:

seems to be a bug even with load drivers checked (downloads wont start), anyways i couldnt find the driver but it does load kernel.dll maybe thats what sandboxie is catching. (was looking at what it does with filemon, its got me puzzled)

Well I meant to suggest the possibility that Google Chrome does not actually load any drivers.

I don't know yet why that particular checkbox in Sandbox Settings is needed to make it work, but I would be really surprised if it did install a driver. With Windows Vista and UAC it is almost unthinkable that a new and modern browser would try something like this.

Posted: Thu Sep 04, 2008 9:52 pm

tzuk wrote:

I don't know yet why that particular checkbox in Sandbox Settings is needed to make it work, but I would be really surprised if it did install a driver. With Windows Vista and UAC it is almost unthinkable that a new and modern browser would try something like this.

Would running chrome on Vista and/or with UAC really make a difference?

Posted: Thu Sep 04, 2008 10:39 pm

well chrome is just a modified safari browser, has anyone tried normal safari and see if that works any differnet

Posted: Thu Sep 04, 2008 11:16 pm

xellos wrote:

well chrome is just a modified safari browser, has anyone tried normal safari and see if that works any differnet

No it is not.
Safari is closed source and belongs to Apple, there is no way they'd let Google modify their Safari browser and distribute it as the "opensource" Chrome.
Only thing Chrome has in common with Safari, is that chrome uses the Webkit engine, otherwise, they are 2 differet browsers.

Also yes, I have installed Safari and used it sandboxed in the past and it has worked fine.
Although I wouldn't bother installing the "Bonjour" service...

Posted: Thu Sep 04, 2008 11:41 pm

I confirm that. I have successfully run Safari sandboxed in its various versions since release without any problems.
Chrome with low level access checked continues to work just fine, including for downloads on my machine (XP SP3). I am unable to find any drivers loaded by it.

Posted: Fri Sep 05, 2008 2:16 am

SnDPhoenix wrote:

xellos wrote:

well chrome is just a modified safari browser, has anyone tried normal safari and see if that works any differnet

No it is not.
Safari is closed source and belongs to Apple, there is no way they'd let Google modify their Safari browser and distribute it as the "opensource" Chrome.
Only thing Chrome has in common with Safari, is that chrome uses the Webkit engine, otherwise, they are 2 differet browsers.

Also yes, I have installed Safari and used it sandboxed in the past and it has worked fine.
Although I wouldn't bother installing the "Bonjour" service...

Google Inc.
Copyright c 2006-2008 Google Inc. All Rights Reserved.
Portions of this software were licensed from third parties as described at: http://www.google.com/support/chrome/bin/answer.py?answer=100336
Official Build 1583
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.13 (KHTML, like Gecko) Chrome/0.2.149.27 Safari/525.13

taken from help - about google chrome, unless the applewebkit requires them to put that in (and that essentially is the browsers main heart).

but really they are both similar even have the same attack bug (the download exploit http://www.palluxo.com/2008/09/03/apple-safari-carpet-bomb-flaw-hits-google-chrome-browser/), that doesnt effect other browsers.

obviously google built alot into it , sandboxing and other features, but it still relies on apples technology

anyways i like chrome its fast loading heh blows firefox's and ie's load time away although it is slow on pages with a ton of images. and lacks plugin support like firefox (maybe that can change in the future. overall im happy with the beta.

Posted: Fri Sep 05, 2008 3:30 am

Xellos,
Internet Explorers useragent says it is a Mozilla browser, but is it really? No...
It really isn't built off of Safari, the only reason it is affected by the same bug as in Safari is because of that webkit engine. Chrome uses an older version of the webkit engine which is why it is vuln to that bug, whereas Safari uses the most recent webkit that isn't vulnerable.
But seriously all this aside, whether or not it is actually built off of safari or not, I agree.
Chrome is a fast, simple browser, with some unique features.
I would love to see how it progresses, though I will admit, I do miss being able to extend the functionality of the browser with addons as in Firefox. Crying or Very sad

Btw, I have heard that Chrome has "plugins" coming (I guess like for IE) but I haven't seen them anywhere, you guys?
Also, is there any place to get themes for the browser?

On Vista, Chrome looks nice with all the transparency and glassy look, but Chrome on XP = Bleh.
I hate this blue look it has on XP...

Posted: Fri Sep 05, 2008 7:30 am

I was thinking of using Chrome only for sites I know and trust, and otherwise continue to surf IE in Sandboxie.

But since I have a complete back-up -Image- (Acronis) of everything on my machine in its protected back-up space on my hard disk, I am willing to run the risk of letting Chrome run in the lesser safety mode of Sandboxie. See what happens...

I can always set my complete Image -clone- back on my machine if I get a bug. If that would happen too often for my taste, I will return to the "use Chrome only for trusted sites" mode.

In the mean time it looks like I am only able to save Bookmarks in Chrome outside of Sandboxie.

Posted: Fri Sep 05, 2008 11:00 am

SnDPhoenix wrote:

Also about this sandboxing issue, no Googles chrome does not have sandboxing builtin. They acquired greenborder some time ago, but we all know they discontinued it, so I doubt they'd use its technology in their browser. However, that aside, when they say "sandboxing" they dont mean that what the browser does wont affect your PC, it is like what tzuk said here, all they mean is that each window/tab is running in its own memory, process, etc.. which can be thought of as each tab being "sandboxed" away from the other tabs. Which is why if you go to a site in one tab and it causes a hang, you can just close that tab without the other tabs hanging and/or crashing.
Doubt that the tabs are actually "sandboxed" though, which would imply there is some kind of isolation away from the PC...

I read this article that says Chrome's sandboxing does protect the computer from malware, rather than only the tabs from one another. If that is the case, would Chrome actually need to run under the protection of Sandboxie?

Posted: Fri Sep 05, 2008 11:03 am

tzuk wrote:

Before discussing whether it's ok for browsers to load drivers, can anyone please tell me the name of the driver that Google Chrome supposedly loads? Smile

The developer of defensewall had this to say:

Quote:

Chrome's sandboxing is totaly based on Windows built-in mechanisms and doesn't refer to Greenborder's technologies. I found no additional drivers after its installation.

Original source here: http://www.wilderssecurity.com/showpost.php?p=1311655&postcount=9

So, no drivers and no greenborder connection apparently.

Posted: Fri Sep 05, 2008 11:05 am

chrome is very secure as it is, so far the only known exploit is the download one (http://www.palluxo.com/2008/09/03/apple-safari-carpet-bomb-flaw-hits-google-chrome-browser/) so maybe set it to prompt for downloads.

im sure its safe to run untill tzuk can fix it with sb Smile

Posted: Fri Sep 05, 2008 7:28 pm

Hey tzuk, you may want to check Chromes sandbox source code directly:

http://src.chromium.org/viewvc/chrome/branches/official/build_151.1/src/sandbox/

Another thing.... Chromium an alternative(???) version of Chrome which is also open source, does not start at all when run in sandboxie, it crashes immediately.

Posted: Fri Sep 05, 2008 8:30 pm

A portable version has appeared on portableapps.com: http://portableapps.com/node/15456
It can be run sandboxed provided driver loading is allowed (blockdrivers=n).
I'll wait for tzuk's verdict/advice and also wait for this browser to mature before I try it again.