Re: [Full-disclosure] why not a sandbox

2010-04-08 Thread Marius
Am 05.09.09 04:28, schrieb Fatherlaptop: ok. that's cool. not sure about enterprise compatibility or my English but will check it out. my other option is front end. Lately, we have ha lots of drive by infections. I have though trained users and get calls on the fake alert box. It's a

Re: [Full-disclosure] why not a sandbox

2009-09-07 Thread yersinia
On Sat, Sep 5, 2009 at 12:58 PM, Adrenalin adrenali...@gmail.com wrote: It seems like the plugins in Chrome are not in a sandbox One additional, important area that is not covered by the sandbox are plugins like Flash. Restricting what plugins can do does not fit well with what users expect,

Re: [Full-disclosure] why not a sandbox

2009-09-06 Thread Elazar Broad
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 http://www.sandboxie.com/ On Fri, 04 Sep 2009 14:05:24 -0400 RandallM randa...@fidmail.com wrote: how come we just can't sandbox the browser in away from the system. its the users that just get gmail and click links, watch youtube vids and check

Re: [Full-disclosure] why not a sandbox

2009-09-05 Thread BlackHawk
doesn't chrome already run any single tab in a sandbox? http://dev.chromium.org/developers/design-documents/sandbox ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia -

Re: [Full-disclosure] why not a sandbox

2009-09-05 Thread Adrenalin
It seems like the plugins in Chrome are not in a sandbox One additional, important area that is not covered by the sandbox are plugins like Flash. Restricting what plugins can do does not fit well with what users expect, which makes plugins a major vector for attack. Langley said that the plugin

[Full-disclosure] why not a sandbox

2009-09-04 Thread RandallM
how come we just can't sandbox the browser in away from the system. its the users that just get gmail and click links, watch youtube vids and check FaceBook and Mypace that infect the network! -- been great, thanks a.k.a System ___ Full-Disclosure -

Re: [Full-disclosure] why not a sandbox

2009-09-04 Thread Guy
On Fri, Sep 4, 2009 at 2:05 PM, RandallMranda...@fidmail.com wrote: how come we just can't sandbox the browser in away from the system. Who or what says you can't? Guy ___ Full-Disclosure - We believe in it. Charter:

Re: [Full-disclosure] why not a sandbox

2009-09-04 Thread frank^2
hmmm. yes. quite. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] why not a sandbox

2009-09-04 Thread John Menerick
Many people, institutions, and programs do just this. No reason why it can't be done. John Menerick On Sep 4, 2009, at 11:05 AM, RandallM wrote: how come we just can't sandbox the browser in away from the system. its the users that just get gmail and click links, watch youtube vids and

Re: [Full-disclosure] why not a sandbox

2009-09-04 Thread James Rankin
You could try VMWare to do something like this, for starters http://www.vmware.com/appliances/directory/80 There are many other ways to achieve this aim. As others say, how come you think you can't? 2009/9/4 RandallM randa...@fidmail.com how come we just can't sandbox the browser in away from

Re: [Full-disclosure] why not a sandbox

2009-09-04 Thread Kurth Bemis
Check out: http://www.sandboxie.com/ http://www.xenocode.com/Browsers/ ~k On Fri, 2009-09-04 at 13:05 -0500, RandallM wrote: how come we just can't sandbox the browser in away from the system. its the users that just get gmail and click links, watch youtube vids and check FaceBook and Mypace

Re: [Full-disclosure] why not a sandbox

2009-09-04 Thread Rohit Patnaik
Doesn't Vista already run Internet Explorer in a sort of sandbox? -- Rohit Patnaik On Fri, Sep 4, 2009 at 3:12 PM, Kurth Bemis kurth.be...@gmail.com wrote: Check out: http://www.sandboxie.com/ http://www.xenocode.com/Browsers/ ~k On Fri, 2009-09-04 at 13:05 -0500, RandallM wrote: how