Welcome, Guest. Please login or register.

Author Topic: Sandboxing a windows browser? Effective?  (Read 4883 times)

Description:

0 Members and 1 Guest are viewing this topic.

Offline Ral-ClanTopic starter

  • Hero Member
  • *****
  • Join Date: Feb 2006
  • Posts: 1979
  • Country: ca
    • Show all replies
    • http://www3.sympatico.ca/clarke-santin/
Sandboxing a windows browser? Effective?
« on: December 20, 2013, 12:52:01 AM »
Hi,

All my non-amiga, everyday-use computers run Windows XP.  They are too old to update to a later version of Windows, and frankly, I've got them running very nicely and I don't really want to upgrade Windows.  They do absolutely everything I want to do, just the way I want so I'd like to keep them the way they are.

But, Windows XP support is ending in April.  So that means the end of Microsoft patches for Windows XP vulnerabilities. I'm running updated Anti-virus and firewalls, however.  

The only thing I really do that would make my XP computers vulnerable to malicious software is browsing the internet.  So I'm thinking, how can I make my browsing more secure after April 2014?

I'm wondering if I can run my browser in some sort of sandboxing software.  Has anyone done this before?  Can you recommend a sandboxing software?

Apparently, this makes the browser run in its own separate "bubble" and any malicious software that tries to infect the computer through the browser will be trapped in the bubble (sandbox).

The only one I've looked into so far is "Sandboxie".

I'd love to hear any advice on whether or not it's worth it, and if it's worth it, what people would recommend.

Please don't advise me to "upgrade Windows" or "install Linux".  That's not the route I'd like to take...

Thanks.
« Last Edit: December 20, 2013, 02:16:59 AM by ral-clan »
Music I've made using Amigas and other retro-instruments: http://theovoids.bandcamp.com
 

Offline Ral-ClanTopic starter

  • Hero Member
  • *****
  • Join Date: Feb 2006
  • Posts: 1979
  • Country: ca
    • Show all replies
    • http://www3.sympatico.ca/clarke-santin/
Re: Sandboxing a windows browser? Effective?
« Reply #1 on: December 20, 2013, 01:41:05 AM »
Thanks guys.

Yes, I am running the latest version of Firefox and latest Avast Anti-virus.

Oldsmobile_Mike, I didn't think I could run a virtual machine under Windows XP - I thought that was for later versions of Windows.

I back up my system once a month to an external hard drive and always keep several backup iterations (about four or five months of backups on the drive).

I just love my XP system - WinUAE runs flawlessly and allows me to run all sorts of Amiga productivity and creativity software at amazing speeds, WinVICE runs VIC-20 and C64 stuff almost like those real machines, I use the PageStream version for Windows and for video I have really grown to enjoy Sony Vegas.  I also have some animation and music recording software on this machine and a pro-level hardware soundcard that all runs well under Windows XP. Like I said, the system is set up and tweaked so well with old and new software that I don't want to rock the boat.  The system is speedy and lean and does everything I need it to.

I have been reading about people still using Windows 98SE with updated kernels even today.  I think this is really cool. This gives me hope that people will do the same for Windows XP (update the kernel to keep XP useable years into the future).  I suspect they might as Windows XP seems to have been well liked.

Really, I hope to use these Windows XP systems for as long as its really possible for me to.

I've read recently that even today XP accounts for 29% of installed operating systems.  So I guess it will be a target for a while.  But as its use declines, I'm hoping that it won't be worth it for malware authors to write software to exploit it - so may be less of a target in future.  I wonder if Windows 98 is actually LESS vulnerable nowadays because its so old and not on the malware authors' radar anymore.
« Last Edit: December 20, 2013, 02:19:43 AM by ral-clan »
Music I've made using Amigas and other retro-instruments: http://theovoids.bandcamp.com
 

Offline Ral-ClanTopic starter

  • Hero Member
  • *****
  • Join Date: Feb 2006
  • Posts: 1979
  • Country: ca
    • Show all replies
    • http://www3.sympatico.ca/clarke-santin/
Re: Sandboxing a windows browser? Effective?
« Reply #2 on: December 20, 2013, 01:45:06 AM »
Quote from: XDelusion;754750
I've used Sandboxie, worked very well for me, just had to remind my self to back up what ever data I didn't want to loose. Never tried IE in it, only ran Firefox and some other programs.

Hi XDelusion, I'm not sure what you mean by having to back stuff up that is run in a Sandbox (never yet having used one). Can you explain what you mean by this?  Thanks.
Music I've made using Amigas and other retro-instruments: http://theovoids.bandcamp.com
 

Offline Ral-ClanTopic starter

  • Hero Member
  • *****
  • Join Date: Feb 2006
  • Posts: 1979
  • Country: ca
    • Show all replies
    • http://www3.sympatico.ca/clarke-santin/
Re: Sandboxing a windows browser? Effective?
« Reply #3 on: December 20, 2013, 02:15:22 AM »
Quote from: commodorejohn;754753
Wow, six whole posts and the "USING OUTDATED SOFTWARE IS A SIN, YOU FILTHY PERVERT! DON'T YOU KNOW THAT HACKERS CAN TURN YOUR COMPUTER INTO A BOMB!?" brigade haven't shown up yet.

You should see the amount of fear-mongering that is being whipped up on the 'net over the approaching Windows XP deadline.  Just do a simple Google search for "Windows XP end of support".

Granted, some caution is warranted, but it reminds me of the approach of Y2K.
« Last Edit: December 20, 2013, 02:24:47 AM by ral-clan »
Music I've made using Amigas and other retro-instruments: http://theovoids.bandcamp.com
 

Offline Ral-ClanTopic starter

  • Hero Member
  • *****
  • Join Date: Feb 2006
  • Posts: 1979
  • Country: ca
    • Show all replies
    • http://www3.sympatico.ca/clarke-santin/
Re: Sandboxing a windows browser? Effective?
« Reply #4 on: December 20, 2013, 02:21:00 AM »
Quote from: Duce;754754
Sandboxie would work just swell for your purposes, I recommend it highly.


Is Sandboxie (or any sandboxing software) something one has to constantly keep updated, like AntiVirus software, in order for it to remain good protection?
Music I've made using Amigas and other retro-instruments: http://theovoids.bandcamp.com
 

Offline Ral-ClanTopic starter

  • Hero Member
  • *****
  • Join Date: Feb 2006
  • Posts: 1979
  • Country: ca
    • Show all replies
    • http://www3.sympatico.ca/clarke-santin/
Re: Sandboxing a windows browser? Effective?
« Reply #5 on: December 20, 2013, 02:22:35 AM »
Quote from: Duce;754754
Sandboxie would work just swell for your purposes, I recommend it highly.


Does one constantly have to update sandboxing software in order for its protection to remain effective, like with anti-virus software?
Music I've made using Amigas and other retro-instruments: http://theovoids.bandcamp.com
 

Offline Ral-ClanTopic starter

  • Hero Member
  • *****
  • Join Date: Feb 2006
  • Posts: 1979
  • Country: ca
    • Show all replies
    • http://www3.sympatico.ca/clarke-santin/
Re: Sandboxing a windows browser? Effective?
« Reply #6 on: December 20, 2013, 02:28:17 AM »
Quote from: XDelusion;754758
In short, everything you do in the Sandbox is lost when you close the Sandbox, unless you purposefully back what ever files you downloaded or created while in the Sandbox.


Ah, I see.  Thanks.  I wonder if Sandboxing would have any benefit when logging into one's bank account, etc. or protection from keylogging?

Really, it would only protect against malware downloaded (and trying to install itself) during a browsing session, I'm thinking.
Music I've made using Amigas and other retro-instruments: http://theovoids.bandcamp.com
 

Offline Ral-ClanTopic starter

  • Hero Member
  • *****
  • Join Date: Feb 2006
  • Posts: 1979
  • Country: ca
    • Show all replies
    • http://www3.sympatico.ca/clarke-santin/
Re: Sandboxing a windows browser? Effective?
« Reply #7 on: December 20, 2013, 03:03:31 AM »
As I read more online about sandboxing, I am learning that both IE and Chrome have sandboxing built-in.

Firefox doesn't, currently, but the developers are working on something similar to sandboxing.
Music I've made using Amigas and other retro-instruments: http://theovoids.bandcamp.com
 

Offline Ral-ClanTopic starter

  • Hero Member
  • *****
  • Join Date: Feb 2006
  • Posts: 1979
  • Country: ca
    • Show all replies
    • http://www3.sympatico.ca/clarke-santin/
Re: Sandboxing a windows browser? Effective?
« Reply #8 on: December 20, 2013, 03:29:00 AM »
Just thought of one potential hitch...

If one is running a browser in a sandbox, can the browsing protection feature of the system's anti-virus software still monitor it? Or are the two completely isolated from each other?  If the latter , then sandboxing a browser would be slightly self defeating in this regard.
« Last Edit: December 20, 2013, 03:31:05 AM by ral-clan »
Music I've made using Amigas and other retro-instruments: http://theovoids.bandcamp.com