6 replies to this topic

[Peter1]

Windows 10 sandbox is vulnerable to attack via internet leakage.

 

While using Sandboxie, is it also vulnerable though the internet? It seems to be back with a free version.

 

If the above is true, can either or both be used offline? 

[Ztruker]

 

Windows 10 sandbox is vulnerable to attack via internet leakage.

 

Got a link to some articles backing this?

[Peter1]

https://redmondmag.c...box-how-to.aspx

 

I will try to find more. I came across about 4 articles that referred to an internet leak but they are had to trace.

[Ztruker]

So if you subvert the intent of Sandbox then you are exposing yourself to potential problems.

 

 

Even so, the fact that Windows Sandbox can access the Internet means that the sandbox has network connectivity. Thankfully, Microsoft does not make it easy to map a network drive or attach to a file share from within Windows Sandbox.

However, if someone were to attach Windows Sandbox to a network share, iSCSI storage or something like that, then there is a good chance that malware could attack resources outside of the sandbox. As such, I recommend that you avoid establishing any sort of external connectivity beyond whatever Windows Sandbox provides by default.

 

That's a reach. If you're using Sandbox to provide a safe, secure environment to test in, why would you purposely do something to void that safe envelope?

[Peter1]

https://community.sp...etonate-malware

 

https://www.datacent...vercoming-risks

 

Just  interesting discussions about the topic. I will post if I come across a better example of what I read.

Sunday A.M.   Yawn!!                                        

Edited by Peter1, 20 October 2019 - 08:02 AM.

[Ztruker]

Good reading, thanks Peter.

[Peter1]

I hope it was interesting and somewhat pertinent