Replies

>>was one of his (incorrect) "examples" of why a sandbox won't help.

I didn't say sandboxing in a VM wouldn't help, Wiley. I said if wanted to sandbox, then I'd use the VM created by those who created the OS...

http://www.microsoft.com/windows/virtual-pc/download.aspx

...instead of the ACME "free"ware you (in the typical role of the flatulant god-SA) suggested -- because there is no guarantee that any such utility downloaded from the Internet isn't itself, malware.

In fact, as pointed out by Mark Russinovich during his TechEd session on using SysInternals tools, folks need to be careful when using the "Search Online" feature of Process Explorer because the result list itself will likely contain numerous links to sites that offer "solutions" which are, themselves, malware.

So how do you guarantee that ACME "we'll keep you safe for FREE" ware like Sandboxie isn't itself malware, Wiley? Sign it with something derived from the compromised Microsoft root certificate? Oops.

Oh, and let's review your assertion regarding home usage:

"Home users read the news, email and download music. Some, but fewer, use the PC for creating and managing files of various form. for those who meddle with pirated software.. well, they get what they deserve"

News, Email, and Music. Uhuh.

LOL. How many copies of Microsoft C# Express have been downloaded by "Home Users"? No gamers out there, are there? Nobody uses Facebook or the other plethora of socialware. YouTube has no content at all. Uhuh.

Once again, your list is pretentiously incomplete and laughable - just like this...

"Malware can be a thing of the past of you familiarize yourself with and use a program called "Sandboxie". "

--FunkyZero (Aka Wile E Coyote, Suuuper Administrator)

...is pretentious and laughable.

Did the ACME sandboxie pick up many registrations from your shilling of it here, Wiley?

NO SALE.

I can't say that I understand your seemingly virulent (no pun intended) antipathy towards the sandboxing solution offered by funkyzero. If someone wants to use a sandbox, and they are smart enough to even know how to make it work, more power to them. Personally I prefer VMs, but there is a place for each solution.

As for the problem with it being freeware, my entire desktop is nothing but freeware, from the OS up. Given the utility and security it provides me I fail to find that as a charge against it. Yes, it's probably not a really good idea to take the top hit on Google for something like this, but I also figure that if you're going to take the time to implement sandboxing, it would make a wee bit of sense to also take the time to figure out if it is a good solution for you.

As for getting the VM solution by those who created the OS, that's a pretty iffy statement. As far as security goes, Microsoft, as a vendor doesn't exactly have a sterling history. Of the VM solutions out there, I personally like VMware better, because I like the feature set and stability. I don't have any particular animus towards virtualPC, but last time I took the time to look at it, it was several years behind VMware. That may not be true now, as microsoft has a history of continuing to slog along with inferior products until they finally get it right.

Having choice in the marketplace for different solutions is a Good Thing IMO, because not every solution will fit every need. Sometimes it takes time and effort to even determine what your needs are, and a little trial and error to discover what fills them. I'm just glad we have options and don't have to take just whatever it is that a single vendor decides to make available. Do you recall what happened with Internet Explorer once Microsoft had driven Netscape out of business? They sat on their asses for years while the rest of the world who wanted a browser that actually worked and had things like tabs passed them by. I still think IE is a steaming pile of crap that has market space primarily because of the inertia provided by the lazy and clueless who don't even know about the alternatives. That's my own personal opinion though, given my personal experiences with it. YMMV.

HAND!