Help - Search - Members - Calendar
Full Version: What's the difference between DW and Sandboxie?
Gladiator Security Forum > SoftSphere Technologies Support Forums > DefenseWall HIPS
carioca
uhm.gif
Hi Dear Forum users!
What's the difference between DW and Sandboxie? Should I use both? One might misfunction the other?Did DW already include it? Could you explain the aim of both? Does it worth to use both of them? Thank you for your helpful hints? Best Regards.
Ilya Rabinovich
Well, the main difference is file system virtualization. SBIE store all the files created or modified by "sandboxed" processes into virtualization container folder.

DW and SBIE perfectly runs together, so, you may try SBIE and choose the best protection solution.
carioca
:)
Thank you for your accurate and sincere replies. Best Regards.
carioca
QUOTE (Ilya Rabinovich @ Mar 2 2007, 01:36 PM) *
Well, the main difference is file system virtualization. SBIE store all the files created or modified by "sandboxed" processes into virtualization container folder.

DW and SBIE perfectly runs together, so, you may try SBIE and choose the best protection solution.


uhm.gif
HI, Ilya,
What I learned one may be usable with other and no conflicts at all. Sandboxie only works up if you make up your mind to use it and DW is automatically sandbox.Should DW fulfill the Sandboxie, Shouldn't it? Because they are the same but they work differently. What I mean Is It advisable to use both or unnecessary? Is It redundant? There is another important difference. SandBoxie corrals off all downloaded and changed files into a special area of your disk: the sandbox. These files are not easily accessible unless you go hunting around in the sandbox and choose to move them to the normal working areas of your disk.
Could one smart hacker be capable go hunting inside your system and move some infected files to the open areas of your pc and cause a destruction over your disk?
Ilya Rabinovich
QUOTE
into a special area of your disk: the sandbox


Virtualizaion container, not sandbox.

As about "destruction"- well, not sop dramatically, but some data corruption is possible as DefenseWall doesn't control all the files in the system, only important/sensitive ones. Theoretically, it is not very good. Practically, such is the price for defense simplicity. I can make 100% bulletproof defense system, but it will be impossible to be used every day. Especially, for average users.

How many such the corruption malware ITW do you know? I know almost non of them but ransomeware, that is not wildley used + DW protects many types of document files + there is "secured files" protection feature.
KikiBibi
Just like to add my opinion:
I feel that "Support" is the main difference.

Sandboxie support has disappoint me twice with answers like:
- "It is not sandboxie's fault"
- "You need some antispyware to fix your system"

Sandboxie may be free but the support sux to the core.
carioca
winner_first.gif
I agree with you 100%. This is the big difference Defensewall support excells its customer service and all answers are replied almost immediately and is a very responsive one and all replyes are very clear and professional because no other hips overwon it. Besides its effectiveness! Sandboxie support has disappointed me too with no technician replies. Other reason, I don't know if It's really a freeware because after 30 days comes up an annoying popup message to register it and you have to pay USD 25.00 to take it off. Best Regards.
Ilya Rabinovich
Well, the point is that SBIE business model is wrong. Why? Let me explain.

It is, in fact, donationware, as product do not make users buy it. This mean that author have no obligations to its users. From other side, SBIE is more spreaded in the world as it is free for many people. This means that many users need support as any software have bugs and compatibility issues- such is life. So, we have: many users need support, author have no obligations as it is donationware. From the other side- $25 of lifetime registration means that support and products improvements are paid by new comers, old users do not pay for it (!). And, as I see, product have no background investments to hire more support people and keep its high quality. So, the result is obvious. There is no guarantee that commersial project have a good support, but there is a guarantee that freeware/donationware have a big problems with it.
lucy
Well Ilya,

With few millions euros on your bank account, I guess you could afford making DW free or donatioware with (almost) the same quality of service.

But such is life.

PS: well, actually, with a few millions euros on your account, I am not sure you would spend so much energy doing such a software.
Ilya Rabinovich
QUOTE
doing such a software


Aha, and supporting it :)
Euthanize Hippies
QUOTE (Ilya Rabinovich @ Apr 13 2007, 11:42 AM) *
SBIE: donationware


its really nagware, but I see your point.
MCHAL
Hi, Ilya:

I've got a licensed copy of DefenseWall through the Giveawyoftheday scheme. Many thanks.

I guess you should use download.com to promote your products. I've seen daily download instances there reaching stunning figures, such as 300 million downloads in a single day (for ZoneAlarm or Lavasoft, I guess)!

Your program seems to be a very good one of its kind. But there's one thing I couldn't manage to find out how to set on it, that is a way of using a web browser and yet preserve its surfing session history, tabs etc. When run as unstrusted, no such program preserves its session settings. A pity... Sandboxie is able to do it.

Have you ever heard about the programs available at the links bellow:


Best regards,

MCHAL
Ilya Rabinovich
1. DW do not erase your browsing session, history, cookies,... It is an utility for everyday use.

2. Yes, I know about those tools.
MCHAL
Hi, Ilya:

DefenseWallHIPS seems to be a fine product, but, unfortunately, according to one of my antivirus, its setup executable (from Giveawayoftheday) has a builtin trojan named Trojan.Win32.Agent.ph. Sadly, it's not only that. After installing it and giving it a short spin, my system began to act strangely soon after my firewall reported that DefenseWall (latest version) was trying to remote-control the programs started through it.

A real pity for such an apparently nice product and for the very ones seeking a defense wall against so much disgusting net crap and malware. :(

MCHAL
Ilya Rabinovich
Your AV report is, definitely, false positive. Please, tell me the name of this AV.

As about remote-control- it is a false positive too, DW do not remote control any other software but its own components. What is your firewall name?
MCHAL
QUOTE (Ilya Rabinovich @ Nov 22 2007, 01:07 PM) *
Your AV report is, definitely, false positive. Please, tell me the name of this AV.

As about remote-control- it is a false positive too, DW do not remote control any other software but its own components. What is your firewall name?


Hi.

Thanks for your attention.

I've consulted with a security expert over the net and, according to him, you're known to be a highly regarded security expert around the web and a serious guy. That's reassuring.

Sorry, I am not back to reveal the firewall I use, but to ask you for a bit more of support. DefenseWallHIPS reports that, upon being closed, Seamonkey (latest version) seems to take a screenshot of my Destkop. Could you please investigate this? I got a FACTUAL passing glimpse of such behavior one or two months when using another Gecko-based browser. Does DefenseWallHIPS prevent screenshot taking?

Regards,

MCHAL
Ilya Rabinovich
Hi!

I still need to know the names od your AV and firewall to contact them about false positives.

As about SeaMonkey- I have the latest version of it and I see no getting screenshot attempts with the logs. And yes, DW protects from screenshot taking (in fact, it protects from data taking from the windows of trusted processes by untrusted ones).
MCHAL
Hi.

Now Arovax Antispyware reports the file actskn43.ocx, installed with DefenseWallHIPS, is a keylogger. By the way, look it up on Google, you'll see that other antispyware programs reports actskn43.ocx as malware, as this one here:

MCHAL
Cybermage
Hello MCHAL,

i think actskn43.ocx is certainly not a keylogger, but is related to the skin engine Ilya uses.


Best regards,
Dirk
Ilya Rabinovich
actskn43.ocx is the ActiveSkin v4.3 engine file. It is definitely not a keylogger. Anti-spyware are not any reliable for a long time already...
barabek
QUOTE (MCHAL @ Nov 24 2007, 06:35 PM) *
Hi.

Now Arovax Antispyware reports the file actskn43.ocx, installed with DefenseWallHIPS, is a keylogger. By the way, look it up on Google, you'll see that other antispyware programs reports actskn43.ocx as malware, as this one here:
[removed]
MCHAL

Yes, I have the SpyHunter v 2.9 of Try.He had my Worldacquaintances legitimate AV-Scanner as "Spyware Quake is a fake anti-spyware program ..." , and write down that he Trojans install can.These tools,what such warnings in the, People must not use,what it does not understand.Such programs can not answer detailed know.On the site also says that a file also legitimate and so can be dangerous.There is also,how to learn.It going about that actskn43.ocx from SpyViper is,spyware is.
JWill
I would question that program SpyHunter along with that website SpywareRemover before questioning DefenseWall.
SpyHunter will scan and find spyware on your PC during a trial version but it will not remove it unless you buy the program, so I'm definitely not using their free spyware scanner.
http://www.spywarewarrior.com/rogue_anti-spyware.htm#sh_note
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.