Sandboxing a windows browser? Effective?

[Ral-Clan]

Hi,

All my non-amiga, everyday-use computers run Windows XP.  They are too old to update to a later version of Windows, and frankly, I've got them running very nicely and I don't really want to upgrade Windows.  They do absolutely everything I want to do, just the way I want so I'd like to keep them the way they are.

But, Windows XP support is ending in April.  So that means the end of Microsoft patches for Windows XP vulnerabilities. I'm running updated Anti-virus and firewalls, however.  

The only thing I really do that would make my XP computers vulnerable to malicious software is browsing the internet.  So I'm thinking, how can I make my browsing more secure after April 2014?

I'm wondering if I can run my browser in some sort of sandboxing software.  Has anyone done this before?  Can you recommend a sandboxing software?

Apparently, this makes the browser run in its own separate "bubble" and any malicious software that tries to infect the computer through the browser will be trapped in the bubble (sandbox).

The only one I've looked into so far is "Sandboxie".

I'd love to hear any advice on whether or not it's worth it, and if it's worth it, what people would recommend.

Please don't advise me to "upgrade Windows" or "install Linux".  That's not the route I'd like to take...

Thanks.

[Oldsmobile_Mike]

I assume you're running something more up-to-date than IE 8 (the last version supported under XP), correct?  As long as you're running the latest version of... well, anything else (Opera, Firefox, Chrome, etc.) you should be fairly secure.  You could also always install a Virtual Machine and just use that for browsing, LOL.  

[Iggy]

I can't see XP being that much of a target as time passes.
And the are people still using Win 95 and 98 successfully.
Backup your system regularly and don't let it worry you.

BTW - The system I'm typing this on has WinXP installed on it too.
Its an older Sun workstation with a dual core Opteron overclocked to 3 GHz and a Radeon X1900GT video card.
Dated hardware, dated software, and it flies.

[XDelusion]

I've used Sandboxie, worked very well for me, just had to remind my self to back up what ever data I didn't want to loose. Never tried IE in it, only ran Firefox and some other programs.

[Ral-Clan]

Thanks guys.

Yes, I am running the latest version of Firefox and latest Avast Anti-virus.

Oldsmobile_Mike, I didn't think I could run a virtual machine under Windows XP - I thought that was for later versions of Windows.

I back up my system once a month to an external hard drive and always keep several backup iterations (about four or five months of backups on the drive).

I just love my XP system - WinUAE runs flawlessly and allows me to run all sorts of Amiga productivity and creativity software at amazing speeds, WinVICE runs VIC-20 and C64 stuff almost like those real machines, I use the PageStream version for Windows and for video I have really grown to enjoy Sony Vegas.  I also have some animation and music recording software on this machine and a pro-level hardware soundcard that all runs well under Windows XP. Like I said, the system is set up and tweaked so well with old and new software that I don't want to rock the boat.  The system is speedy and lean and does everything I need it to.

I have been reading about people still using Windows 98SE with updated kernels even today.  I think this is really cool. This gives me hope that people will do the same for Windows XP (update the kernel to keep XP useable years into the future).  I suspect they might as Windows XP seems to have been well liked.

Really, I hope to use these Windows XP systems for as long as its really possible for me to.

I've read recently that even today XP accounts for 29% of installed operating systems.  So I guess it will be a target for a while.  But as its use declines, I'm hoping that it won't be worth it for malware authors to write software to exploit it - so may be less of a target in future.  I wonder if Windows 98 is actually LESS vulnerable nowadays because its so old and not on the malware authors' radar anymore.

[Ral-Clan]

I've used Sandboxie, worked very well for me, just had to remind my self to back up what ever data I didn't want to loose. Never tried IE in it, only ran Firefox and some other programs.

Hi XDelusion, I'm not sure what you mean by having to back stuff up that is run in a Sandbox (never yet having used one). Can you explain what you mean by this?  Thanks.

[commodorejohn]

Wow, six whole posts and the "USING OUTDATED SOFTWARE IS A SIN, YOU FILTHY PERVERT! DON'T YOU KNOW THAT HACKERS CAN TURN YOUR COMPUTER INTO A BOMB!?" brigade haven't shown up yet.

[Duce]

Sandboxie would work just swell for your purposes, I recommend it highly.

[Ral-Clan]

Wow, six whole posts and the "USING OUTDATED SOFTWARE IS A SIN, YOU FILTHY PERVERT! DON'T YOU KNOW THAT HACKERS CAN TURN YOUR COMPUTER INTO A BOMB!?" brigade haven't shown up yet.

You should see the amount of fear-mongering that is being whipped up on the 'net over the approaching Windows XP deadline.  Just do a simple Google search for "Windows XP end of support".

Granted, some caution is warranted, but it reminds me of the approach of Y2K.

[Ral-Clan]

Sandboxie would work just swell for your purposes, I recommend it highly.

Is Sandboxie (or any sandboxing software) something one has to constantly keep updated, like AntiVirus software, in order for it to remain good protection?

[Ral-Clan]

Sandboxie would work just swell for your purposes, I recommend it highly.

Does one constantly have to update sandboxing software in order for its protection to remain effective, like with anti-virus software?

[XDelusion]

Hi XDelusion, I'm not sure what you mean by having to back stuff up that is run in a Sandbox (never yet having used one). Can you explain what you mean by this?  Thanks.

In short, everything you do in the Sandbox is lost when you close the Sandbox, unless you purposefully back what ever files you downloaded or created while in the Sandbox.

[Ral-Clan]

In short, everything you do in the Sandbox is lost when you close the Sandbox, unless you purposefully back what ever files you downloaded or created while in the Sandbox.

Ah, I see.  Thanks.  I wonder if Sandboxing would have any benefit when logging into one's bank account, etc. or protection from keylogging?

Really, it would only protect against malware downloaded (and trying to install itself) during a browsing session, I'm thinking.

[XDelusion]

Ah, I see.  Thanks.  I wonder if Sandboxing would have any benefit when logging into one's bank account, etc. or protection from keylogging?

Really, it would only protect against malware downloaded (and trying to install itself) during a browsing session, I'm thinking.

Yes totally. It's about as secure as one can get inside a Windows environment.

[Iggy]

Using old software is a sin and terrorists could turn your computer into a bomb.

No, just kidding.
And to be intentionally repetitive, I don't even worry about it.

Btw - There is a drive to develop an open XP like OS.

Personally, I am none to fond of any OS that I couldn't give it up.
I just don't see the point in paying repeatedly for yet another derivitive of NT.