Gizmos Freeware Reviews  

Go Back   Gizmo's Freeware Forum > Debating Chamber > Internet, Web Apps and Networking

Reply
 
Thread Tools Display Modes
Old 11. Dec 2011, 06:43 PM   #1 (permalink)
Editor
 
George.J's Avatar
 
Join Date: Oct 2010
Posts: 1,940
Default BitBox: World's Safest Browser

Ever heard of BitBox? Just came across this article now http://www.pcworld.com/businesscente..._security.html and wanted to share with all of you. Its much safer than sandboxing, worth a try if you dont care about the hefty 900MB download and that you're German

http://www.tomsguide.com/us/firefox-...ews-11203.html

What are your thoughts?
__________________
If you seek for attention, do common things in life in an uncommon way!
George.J is offline   Reply With Quote
Old 11. Dec 2011, 08:56 PM   #2 (permalink)
Senior Member
 
deya's Avatar
 
Join Date: Oct 2009
Location: UK
Posts: 1,518
Default

Looks interesting, but that's one heck of a hefty download, and it also requires 2 gigs of HD space. I notice it has VirtualBox included as part of install so I'm wondering if that will conflict in some way with my other virtual program. It also recommends 64 bit and I'm running a 32 bit OS. Might give it a try though.
deya is offline   Reply With Quote
Old 12. Dec 2011, 12:46 AM   #3 (permalink)
J_L
Co-Author, Best Free Security List
 
J_L's Avatar
 
Join Date: Dec 2008
Posts: 2,003
Default

How in the world is it much safer than sandboxing? It is just another form of virtualization (virtual machine I believe), and I doubt it's more secure than Sandboxie with restrictions.
J_L is offline   Reply With Quote
Old 12. Dec 2011, 08:26 AM   #4 (permalink)
Editor
 
George.J's Avatar
 
Join Date: Oct 2010
Posts: 1,940
Default

Quote:
Originally Posted by J_L View Post
How in the world is it much safer than sandboxing? It is just another form of virtualization (virtual machine I believe), and I doubt it's more secure than Sandboxie with restrictions.

I'll get back to you soon after when am free. For now, Bitbox is armoured FF encased in a VM environment (Oracle) and housed inside a Debian Linux (which is inturn more secure). Even though it looks highly complicated, it works just like a regular version of Firefox. I hardly believe that normal users would want to use this type of security except for these Germans and their so called "highly confidential military purposes".

Sandboxie is not perfect and foolproof. Even they say that it should not be your only line of defense. And Chrome's sandbox is less restricted than Sandboxie

Quote:
How safe would I be, by using Sandboxie?

You would be quite safe using Sandboxie. It should be noted that, from time to time, people are able to find some vulnerability in Sandboxie, an open hole through which malicious software can still infiltrate the system.

This happens once every few months, on average, and is quickly resolved by closing the hole that is the attack vector.

Thus it's a good idea to have more traditional anti-malware software. This is is the subject of the following question.
Quote:
Do I need other solutions if I use Sandboxie?

Sandboxie may be your first line of defense, but it should certainly be complemented by the more traditional anti-virus and anti-malware solutions. These solutions can let you know if your system does become infected in any way.

Typically, those other solutions employ various forms of pattern matching to discover malicious software and other threats. Sandboxie, on the other hand, quite simply does not trust any software code enough to let it out of the sandbox.

The combination of the two approaches should keep malicious software -- which is serving the interest of other unknown parties -- out of your computer.

Also Sandboxie fails to box, 3D games properly and is known to provide conflicts especially softwares having large download size. There are more con's. I'll mention them when I get free
__________________
If you seek for attention, do common things in life in an uncommon way!

Last edited by George.J; 12. Dec 2011 at 08:32 AM.
George.J is offline   Reply With Quote
Old 13. Dec 2011, 04:35 AM   #5 (permalink)
Senior Member
 
bo.elam's Avatar
 
Join Date: Nov 2009
Posts: 1,714
Default

Quote:
Originally Posted by George.J View Post
Sandboxie is not perfect and foolproof. Even they say that it should not be your only line of defense. And Chrome's sandbox is less restricted than Sandboxie

Also Sandboxie fails to box, 3D games properly and is known to provide conflicts especially softwares having large download size. There are more con's. I'll mention them when I get free
George, certainly SBIE is not perfect but it provides better and quieter protection against unknown threats than any traditional anti malware or HIPS and IF you learn how to use it properly, knowing what it can do for you and more importantly, what it can not do, then you can run it on its own.

Sure, the perfect scenario is to run SBIE along an AV but Sandboxie does run better and it will protect you better if you run it on its own since doing so, conflicts between security programs will be avoided. Ok.

Programs that install drivers, dont install sandboxed. You are underestimating SBIE and your comments show me that you never used it or used it for 5 days or something like that. I have been using it for almost 3 years and nothing has ever escaped the sandbox and today, I run SBIE alone with nothing else. It feels great.

What is safer, SBIE or BitBox? I don't know and I don't care if you want to claim that BB is safer. It does not matter to me. Anyway, SBIE is more along the lines of the old proverb,"speak softly and carry a big stick". Those words made famous by TR, pretty much tell the story behind SBIE.

Bo
bo.elam is offline   Reply With Quote
Old 13. Dec 2011, 10:11 AM   #6 (permalink)
Editor
 
George.J's Avatar
 
Join Date: Oct 2010
Posts: 1,940
Default

Quote:
Originally Posted by bo.elam View Post

Programs that install drivers, dont install sandboxed. You are underestimating SBIE and your comments show me that you never used it or used it for 5 days or something like that. I have been using it for almost 3 years and nothing has ever escaped the sandbox and today, I run SBIE alone with nothing else. It feels great.
Bo
What's going on here now. I do know that programs that install drivers does not install sandboxed, as well as softwares that does need to set up configuration files and that needs to access the registry. Which part of my comment mentioned anything about the drivers and such. Probably you havn't been infected, but as they claim...

Quote:
How safe would I be, by using Sandboxie?

You would be quite safe using Sandboxie. It should be noted that, from time to time, people are able to find some vulnerability in Sandboxie, an open hole through which malicious software can still infiltrate the system.

This happens once every few months, on average, and is quickly resolved by closing the hole that is the attack vector.

Thus it's a good idea to have more traditional anti-malware software. This is is the subject of the following question.

It should be noted, however, that Sandboxie does not typically stop sandboxed programs from reading your sensitive data. However, by careful configuration of the ClosedFilePath and ClosedKeyPath settings, you can achieve this goal as well.
Infiltrations have been reported once in a while. If you're working in a large organisations with lots of computers interconnected or having a highly confidential information, doesn't it mean that you're compromised to a large extent? Also you have to configure it to some extent for a desired level of protection. But BitBox works straight out of the box. An armoured FF encased in a VM environment (Oracle) and housed inside a Debian Linux is enough to know how safe it can be.

Quote:
What is safer, SBIE or BitBox? I don't know and I don't care if you want to claim that BB is safer. It does not matter to me.
I gave a hyperlink from the reviewer who have tested it and it's not personally not just my claim. IMO these protection measures that implement various levels of security like BitBox is sure to impress large organisation or the military only. Whereas Sandboxie is for all the users.

Also you have to know that, VirtualPC or VirtualBox is much safer than Sandboxie as it has no LINK between the host OS therefore it is impossible for the infection to spread to the host. So, all you have to do is delete the Virtual OS and create a new one.

Towards the end of this thread you can see the comparison of Sandboxie and a Virtual Machine. http://www.sandboxie.com/phpbb/viewt...0351360cefb388 .
__________________
If you seek for attention, do common things in life in an uncommon way!
George.J is offline   Reply With Quote
Old 13. Dec 2011, 03:31 PM   #7 (permalink)
Senior Member
 
bo.elam's Avatar
 
Join Date: Nov 2009
Posts: 1,714
Default

Quote:
Originally Posted by George.J View Post
Probably you havn't been infected, but as they claim...
Thats not a claim, it is a disclaimer.

Hey George, can you find me some threads, posts about users getting infected even though they are using SBIE properly. I am talking about real people George, not laboratory tests. OK.

http://www.sandboxie.com/phpbb/

Bo
bo.elam is offline   Reply With Quote
Old 13. Dec 2011, 04:07 PM   #8 (permalink)
Senior Member
 
Join Date: Jul 2009
Location: Northeast US
Posts: 476
Default

Quote:
Originally Posted by bo.elam View Post
Thats not a claim, it is a disclaimer.

Hey George, can you find me some threads, posts about users getting infected even though they are using SBIE properly. I am talking about real people George, not laboratory tests. OK.

http://www.sandboxie.com/phpbb/

Bo
I've been using Sandboxie for over a year now. I am very familiar with how it works and I have never seen a piece of "security software" that offers better or more complete protect.
__________________
T
Taurus is offline   Reply With Quote
Old 14. Dec 2011, 01:46 AM   #9 (permalink)
J_L
Co-Author, Best Free Security List
 
J_L's Avatar
 
Join Date: Dec 2008
Posts: 2,003
Default

Quote:
Originally Posted by George.J View Post
I'll get back to you soon after when am free. For now, Bitbox is armoured FF encased in a VM environment (Oracle) and housed inside a Debian Linux (which is inturn more secure). Even though it looks highly complicated, it works just like a regular version of Firefox. I hardly believe that normal users would want to use this type of security except for these Germans and their so called "highly confidential military purposes".

Sandboxie is not perfect and foolproof. Even they say that it should not be your only line of defense. And Chrome's sandbox is less restricted than Sandboxie






Also Sandboxie fails to box, 3D games properly and is known to provide conflicts especially softwares having large download size. There are more con's. I'll mention them when I get free
Interesting, Linux VM eh?

No software is.

3D games like? Add proper exclusions (if you even have to), and no such issues. I've downloaded gigabytes w/o problems.
J_L is offline   Reply With Quote
Old 14. Dec 2011, 02:31 AM   #10 (permalink)
Senior Member
 
bo.elam's Avatar
 
Join Date: Nov 2009
Posts: 1,714
Default

Quote:
Originally Posted by Taurus View Post
I've been using Sandboxie for over a year now. I am very familiar with how it works and I have never seen a piece of "security software" that offers better or more complete protect.
Yeah, once the sandbox is restricted, only whats allowed to run in the sandbox and connect to the Internet, would do so and if we block access to sensitive files and folders, the protection becomes complete.

On top, all is done quietly.

Bo
bo.elam is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT +1. The time now is 04:41 PM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2020, vBulletin Solutions, Inc.