Does Sandboxie protect against outbound theft within the sandbox ?

[Airborne]

Has Sandboxie any outbound protection ? I apologise for raising this specific question, but I have searched the web, including the SBxie FAQ`s and found no answer. I have used SBxie Free version for years, taken part in long Forum discussions and am very familiar with it, but I still do not know how secure if indeed at all SBxie is regarding protection of outbound data. Inbound threats - no problem, I understand exactly what happens, fundamental Sandboxie procedure. Is it possible for a member who is very conversant with SBxie to answer what is I suppose is a simple question, which I am still in the dark about after many years of experience? Question ? Does SBxie prevent the outbound theft of personal data ( ID theft, financial data, credit card data etc.) from within the virtual sandbox by malicious infections and other active threats ? My system is Windows XP Home 2002 with SP3. AVG 2011, ZoneAlarm FW, NoScript, ABP, KeyScrambler. Sandboxie and browser = Firefox. Many thanks

[gmiles]

Sanboxie is more of a virtual machine, than it is a scanning app. You should have a good firewall installed to handle traffic patterns, inbound and outbound. Sanboxie works by isolating programs, which means there's no interaction with any other section of your computer w/o your permission. Not for certain, but I don't think it even scans for spyware variants, or has a definition database, it's just black or white...it's either allowed or it's not.

[Bluesplayer.]

From my understanding - and I use Sandboxie on one of my Pc's.

It is the Browser that is being protected and that would mean it is only protecting against inbound threats while online.

You can run other programs in Sandboxie - but their protection ends, once you close down Sandboxie.

 

An infected program or application could, I would imagine, make an outbound connection if run in Sandboxie and maybe call home and steal online passwords etc.

But on a clean system - one using an up to date Anti-Virus Program - regular Spyware scans etc all should be OK.

 

I'd be interested to know what answers were given to this question on their forum.

 

I would use another type of protection when using online banking etc.

Something like Trusteer Rapport.

Other programs are no doubt available.

http://www.trusteer.com/product/trusteer-rapport

 

To clarify the comment above - Sandboxie does not 'scans for spyware variants, or has a definition database'

[Airborne]

From my understanding - and I use Sandboxie on one of my Pc's. It is the Browser that is being protected and that would mean it is only protecting against inbound threats while online. You can run other programs in Sandboxie - but their protection ends, once you close down Sandboxie. An infected program or application could, I would imagine, make an outbound connection if run in Sandboxie and maybe call home and steal online passwords etc. But on a clean system - one using an up to date Anti-Virus Program - regular Spyware scans etc all should be OK. I'd be interested to know what answers were given to this question on their forum. I would use another type of protection when using online banking etc. Something like Trusteer Rapport. Other programs are no doubt available. http://www.trusteer.com/product/trusteer-rapport To clarify the comment above - Sandboxie does not 'scans for spyware variants, or has a definition database'

Blues, now THAT reply is extremely logical and to my thinking absolutely correct. I don`t think Sandboxie is one iota of use in protecting against outbound threats active within the sandbox, but as yet, I have not found much enthusiasm to comment on this. I do hope some more posters will come in on it, particularly those who know exactly how Sandboxie treats outbound threats active within the sandbox. Your reply is as near to an answer I have received as yet. The experts appear to be very bashful on the subject. I have asked this question elsewhere and got nowhere fast.

[Bluesplayer.]

All Sandboxie is doing, is acting like a Virtual Drive.

Whatever is downloaded [even known safe programs] stays in Sandboxie, until the Browser is closed.

As you know, safe programs can be made to run outside Sandboxie but Sandboxie does not recognize which is safe or otherwise.

 

I have watched many reviews online for Sandboxie and it can protect the system files etc as all is contained within and deleted after use.

But a HIPs program and behavior blockers will be the way to go in the future, as Anti-virus programs are always playing catch up.

 

As for buying stuff online - using a separate credit card, away from your main account with a set limit of say £100 - will be a safeguard against fraud.

[Bluesplayer.]

This may or not be of some help.

It blocks a few ports - but thousands [so they say] are used to connect to the internet.

 

Sandboxie - Block Port

http://www.sandboxie.com/index.php?BlockPort