Trust No Program
Reply to topic
Probably a stupid question
Bellzemos


Joined: 17 Feb 2010
Posts: 369
Location: Slovenia
Reply with quote
But I will ask it anyway. I'm afraid of keyloggers and other malware, so I always terminate the sandbox (and automatically delete it's contents) and then run sandboxed web browser again to log into my email account. I use the normal-default delete command to automatically delete the sandbox contents. Sometimes when I browse on the suspicious sites I terminate the sandbox, then start sandboxed web browser again and termiante it again before opening it for something serious (using my email etc.). I guess that (starting and terminating the sandbox twice) has to be stupid and doesn't help make things any safer? I just need a confirmation on that so I can't stop being paranoid and stop wasting my time with that. Very Happy Also, do you think that the normal-default delete method is enough? Thank you!
View user's profileSend private message
Helper


Joined: 01 Mar 2012
Posts: 122
Reply with quote
Actually, it sounds reasonable to me to delete contents of the sandbox, before and/or after doing those things if you're using the browser for emails and for banking purposes.

Even if all you are doing is opening emails that are stored on the mail server, and composing or replying to emails that are stored there, you would still have to worry that you might have picked up some malware during your Internet surfing that would steal your logon credentials (cookie or password).
If you were to download emails or an attachment, then the risk increases.

Of course, using different sandboxes would be a better way of handling it if you could run separate browser sessions, using the same browser but with different browser profiles and sandboxes, or even using a completely different browser and sandbox combination for checking mail and for banking.

I think the normal RMDIR method of deleting sandbox contents is fine.
View user's profileSend private message
Bellzemos


Joined: 17 Feb 2010
Posts: 369
Location: Slovenia
Reply with quote
Thank you Helper! And what do you think about me running the sandboxed browser once more in between sessions? That is stupid, right?

(Example: 1st run: suspicious surfing, then terminate & delete; 2nd run: just something, then terminate & delete; 3rd run: email, then terminate & delete)

Do I benenit anything in the terms of security with the 2nd run? I'm 99% sure that the answer is no, but I would like to hear opinion of the Sandboxie users.
View user's profileSend private message
Helper


Joined: 01 Mar 2012
Posts: 122
Reply with quote
Bellzemos wrote:
(Example: 1st run: suspicious surfing, then terminate & delete; 2nd run: just something, then terminate & delete; 3rd run: email, then terminate & delete)

Do I benenit anything in the terms of security with the 2nd run? I'm 99% sure that the answer is no, but I would like to hear opinion of the Sandboxie users.
I'd say no, there's no benefit to the "2nd run".
View user's profileSend private message
Bellzemos


Joined: 17 Feb 2010
Posts: 369
Location: Slovenia
Reply with quote
OK, I'm gonna stop doing that. Thank you!
View user's profileSend private message
lylejk


Joined: 26 Mar 2009
Posts: 72
Reply with quote
I sometimes go over a week before deleting my Sandboxie session but usually do delete it either if I suspect weirdness or if my browsing begins to feel slower then it should. I go one step further in that I completely hose my XP VM (run SBIE in an XP VM) and recover from a prestine backup (takes only seconds to do this) and get my OS updates, then I save the result as a new prestine backup. Do this once or twice a month (depending if any of my other programs in my XP VM also gets an update besides the OS itself). This scheme's served me well. Smile
View user's profileSend private message
Probably a stupid question
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

Use the RSS feed to watch this topic for replies
  
  
 Reply to topic  

Sandboxie is Copyright © 2004-2012 by Sandboxie Holdings LLC.  All rights reserved.
Sandboxie.com | Contact Author
This site has been viewed 208,278,160 times since June 2004