www.sandboxie.com :: View topic - Experimental Protection [64-bit]

Posted: Tue Apr 12, 2011 1:08 pm

blasev wrote:

Does that explain why firefox 4 keep on crashing while using 3.55.02?
I use win 7 64bit btw
Hopefully the problem will be gone with 3.55.03 Smile

yup the problem is gone with 3.55.03

Posted: Tue Apr 12, 2011 6:53 pm

The next round of Windows updates coming this month (today or tomorrow) will involve patching of the kernel to close up some known security holes. More information can be found on this webpage

Quote:

On Thursday, Microsoft announced that next week's monthly security update will feature a record-tying 17 bulletins that patch a record 64 vulnerabilities, 15 more than the previous largest-ever set in October 2010.

While Microsoft does not reveal much information about the upcoming updates in its advance notifications, the sheer number of critical bulletins that affect Windows -- nine altogether, more than half the total -- likely means that at least one affects the kernel, said Andrew Storms, director of security operations at nCircle Security.

"Although there's not enough to go on from the advance notification, I think one or more kernel patches is a pretty darn good possibility," said Storms. "They've had their problems with the kernel lately."

I'm not an expert user. Will this impact the new security feature of Sandboxie? I can imagine that, at best, this might render the new security feature inoperable. At worst, if Microsoft tweaks PatchGuard, if could cause systems running the new security feature of Sandboxie to BSOD on startup.

Posted: Wed Apr 13, 2011 5:15 am

I can confirmed that new windows update didn't cause any BSOD while using SBIE 3.55.03 on W7 64bit

Posted: Fri Apr 15, 2011 10:43 pm

D1G1T@L wrote:

tzuk wrote:

Supervising this at the kernel level is not possible on 64-bit Windows, except perhaps by messing with the system csrss.exe processes, which would then cause other security software to rightly say that Sandboxie is a saboteur.

If AVs detect FPs we could clear them up quickly like the ones that happened recently. If after trying this and seeing that it won't work by design please say how.

Once Sandboxie was labeled as a "saboteur", it might be hard to restore the program's reputation.
Why would any responsible programmer risk his work like that?

Posted: Sat Apr 16, 2011 5:36 pm

I think I already said all I have to say about EndTask.

Posted: Sat Apr 16, 2011 7:22 pm

I'll take the advice in this pic:

[img]farm4.static.flickr.com/3217/3015062728_6b27f9a6ae.jpg[/img]

Posted: Sun Apr 17, 2011 2:50 pm

D1G1T@L wrote:

I'll take the advice in this pic:

[img]farm4.static.flickr.com/3217/3015062728_6b27f9a6ae.jpg[/img]

Cats: the best friends of forum users. Wink

Posted: Sun Apr 17, 2011 9:31 pm

@ Buster: I lol'd hard

Posted: Sun Apr 17, 2011 11:47 pm

tzuk wrote:

I'll redact your posts on the condition that you create a forum account so stuff like this doesn't happen again.

Aight sounds good.

Posted: Mon Apr 18, 2011 12:10 am

Welcome, new guy. You know, after last time, I was going to register as D1G1T@L just to mess with you.