Questions tagged [sandbox]
A sandbox is a security mechanism for containing and restricting untrusted programs. Such programs could contain malicious code, which would otherwise harm the user's system.
212
questions
6
votes
1
answer
273
views
What are the appropriate steps to take after installing a questionable Android app?
Situation:
User installed an Android app from the Google Play Store.
User's device is rooted, but that app does not have root privileges.
XPrivacy reveals that the app is trying to make IPC (inter-...
- 3,144
5
votes
2
answers
6k
views
How secure is "Browser in the Box"?
I'm wondering how secure is "browser in the box" from Sirrix?
They said in their official website:
In contrast to simple sandboxing methods provided by standard browsers
"Browser in the Box" ...
- 10.2k
5
votes
3
answers
3k
views
Can someone read a iOS class variable from outside the app?
a class variable like this:
@property (strong, nonatomic) NSString *privateValue;
Can someone read the value of that variable while it´s in memory? I can´t find anything about this on the apple docs ...
- 53
5
votes
2
answers
607
views
Are there cases where malicious scripts on websites breached the sandbox of a browser so that files on the user's computer could be accessed?
Whenever a hosted script on a website tries to access a file on a user's computer the sandbox prevents it, but has there been any documented case where this sandbox obstacle was somehow overcome by ...
- 553
5
votes
1
answer
2k
views
Are there any known breaches of the .NET AppDomain isolation?
.NET AppDomains provide several levels of isolation for untrusted or partially trusted code. The AppDomain sandbox is widely deployed in ASP.NET and Silverlight, although only the latter of these is ...
- 1,220
5
votes
1
answer
1k
views
Does sandboxie "grab" all the system calls?
Sandboxie: http://www.sandboxie.com
Does sandboxie "grab" all the system calls, e.g.: filesystem calls? Or it "grabs" all the low level calls from a process?
- 6,279
5
votes
2
answers
210
views
How do I montior exactly what a program does? [closed]
I would like to run some program, preferably in a sandbox, and see exactly what it does/did. I'm currently puzzled by disk access and network, since there's so much other stuff happening there at the ...
- 1,593
5
votes
1
answer
3k
views
How dangerous is a virus introduced to a malicious website in chrome?
I am using Google's Chrome browser under Linux (Ubuntu) 64 bit for web browsing.
If I a virus uses for example a leak in the flash player, the virus will get the privileges of the user who started ...
- 568
5
votes
1
answer
859
views
VM vs System Call Interposition vs Software Fault Isolation
I have an exe file that I don't trust (maybe its infected with malware). I know that running it in a VM will isolate the exe file from my system, but what about using mechanisms such as System Call ...
- 51
4
votes
3
answers
582
views
What are the security precautions taken to ensure a virtualized domain can't compromise its host
I recently started learning about xen and became more interested in visualization. I read a few whitepapers, did a search here, but couldn't find an answer. My guess is someone will link me to some ...
user11869
4
votes
2
answers
250
views
Is it secure to keep malware in filesystem of VMs?
We are going to install a sandbox solution that requires Ubuntu Server as the underlying OS (the product is not shipped as a ready to install appliance). For performance reasons the malware samples ...
- 1,578
4
votes
2
answers
3k
views
Wrapping system call (in reliable and secure way)
It there reliable method of "wrapping" system calls under Linux ?
(Like LD_PRELOAD for wrapping shared library function calls.)
Is there reliable, secure method of "wrapping" system calls (and, maybe ...
4
votes
3
answers
3k
views
Is there a way to safely run untrusted code on a local machine for a videogame
I want to create a simple videogame engine that can run untrusted custom code in order to add functionality to the game. I thought a about using an akka like concurrent actor system, so that the code ...
- 155
4
votes
2
answers
695
views
Sandbox escape of an isolated turing complete language?
Ethereum's Solidity documentation states:
The Ethereum Virtual Machine or EVM is the runtime environment for smart contracts in Ethereum. It is not only sandboxed but actually completely isolated, ...
- 215
4
votes
1
answer
250
views
How to secure application VM?
This question is derived from my previous question on Isolating Web application where two approaches were recommended.
Apache Chroot Jail
Isolation through Virtualization
My question is if one of ...
- 4,844
4
votes
1
answer
285
views
Any suggestions while testing a sandboxing driver?
I am doing penetration testing of a sandboxing driver and trying to break the sandbox. It is implemented as a kernel mode driver. A sandboxed process will have :
A whitelist of disk locations for ...
- 143
4
votes
1
answer
955
views
How to sandbox students' Python 3 code submissions for automatic assignment evaluation on Windows 10?
I am the TA for a coding class in which students will have to write Python 3 scripts to solve programming problems. An assignment consists of several problems, and for each problem the student is ...
- 141
4
votes
1
answer
363
views
Disguise System as VM
Malware sometimes uses anti-vm and anti-sandbox behavior to act like harmless software.
Wouldn't it be a good prevention strategy to disguise the host machine as a VM so that potential malware would ...
- 41
4
votes
2
answers
1k
views
Are sandboxes overrated?
I've stumbled upon the following on the blog of the NoScript developer Giorgio Maone.
First, he quotes the following ArsTechnica article about an XSS bug in Adobe Flash:
As useful as sandboxes are in ...
user10356
4
votes
2
answers
792
views
Native OS X sandbox profile to control network access (IP/host-based)
On Mac OS X, is it possible to limit an application's accessible hosts by using sandbox-exec?
I can easily do it via a firewall app, but I would prefer to do it via the native sandbox mechanism in ...
- 41
4
votes
1
answer
3k
views
Android app isolation risks & implementation
Are Android apps, specifically Chrome, isolated?
Can other apps listen to other apps' activity?
If so, how can apps be sandboxed?
- 303
4
votes
1
answer
646
views
What security problems does copying .Xauthority to another user present?
If I want to use a GUI application with another user (example: webbrowser), I can copy the .Xauthority file to that given user's home then I can "su - user" and start the GUI app.
Question: but what ...
4
votes
1
answer
3k
views
Is Windows Sandbox a viable alternative to conventional VM solutions considering its design?
The idea of having a fast, disposable VM at the palm of my hand appeals to me very much. It makes adding an extra layer of security to any thing I want to do so easy - just launch the sandbox ...
- 224
4
votes
0
answers
309
views
Doing builds in a sandbox
I'm keen to start allowing people to build Electron apps on my cloud infrastructure.
On Linux the security I'm employing is with throwaway Docker containers. I know it's not 100% secure but it's ...
- 91
4
votes
0
answers
389
views
How to indicate that content in an iframe is untrusted
As part of a website I am developing, untrusted content is displayed in a sandboxed iframe. The content is loaded using the srcdoc attribute, but the iframe is sandboxed using sandbox="allow-scripts", ...
- 141
4
votes
3
answers
1k
views
Is Chrome in Metro Mode more secure than Chrome in Desktop Mode?
With Windows 8, Microsoft introduces the Metro Apps which run in a sandbox environment, and therefore should be more secure. I would be interested to know if this higher security that the metro apps ...
- 141
3
votes
3
answers
4k
views
Is using Gmail App over Web Gmail more safe?
Is using Web Gmail over Gmail App is more safe, for example, see following options:
Android Google Chrome or Android App
Windows Google Chrome or Windows Universal App
MacOS Safari or MacOS App Store ...
- 2,731
3
votes
3
answers
946
views
How hard it would be to infect a system with malware through a portable web browser
If I use a portable web browser on a USB device like
Google Chrome Portable how hard it would be to get infected by a malware/virus in the system to which the USB device is connected?
Google Chrome ...
- 568
3
votes
2
answers
1k
views
Why aren't Microsoft Office macros sandboxed?
For about 20+ years now, Microsoft Office macros have been used to spread malware. Even in recent years those threats have not disappeared and they often resurface in one form or another e.g. World’s ...
- 307
3
votes
2
answers
906
views
Security concerns with user Python scripts
I am generating dynamic images in a web service. The current setup is:
Request image.py
image.py does a database lookup to determine what data to use to generate the image
image.py calls a sub-script ...
- 151
3
votes
2
answers
477
views
Setup and record outbound traffic from a botnet in a sandbox/secure environment
How do I record the outbound 'attack' traffic from a botnet on a Windows XP machine? The captured traffic will be in the Windows XP firewall log.
I need to setup some kind of an experiment where I ...
- 131
3
votes
2
answers
4k
views
Do Chrome/browser extensions break the tab sandbox?
So, as far as I know, Chrome and possibly other browsers have a very low privilege process spawned for every tab.
How do browser extensions interact in regard to this sandboxing? I'm not talking ...
- 1,040
3
votes
2
answers
3k
views
Fake output of CPUID instruction
I am trying to analyze a malware in a virtual machine (linux), but it uses the cpuid output to verify if it is in a virtual machine/sandbox, and refuses to run malign code if inside a virtualized ...
- 53
3
votes
3
answers
2k
views
Does Java/Dalvik's Java Native Interface JNI make Android prone to better attacks?
Java has a feature named Java Native Interface (JNI), which allows to call native machine code function from inside the Java's bytecode. This feature allows effectively running machine native code ...
- 1,452
3
votes
5
answers
14k
views
How can I sandbox a Wine application on Linux?
I would like to run Microsoft Office programs such as Word but do not trust them, nor should anyone. Without running a virtual machine, is there a good way to sandbox a windows application to run on ...
- 31
3
votes
2
answers
484
views
Java code signing vs. sandboxing
I'm trying to understand the rationale behind Java Applet development these past few years. Back in the old days, most Applets were unsigned, and the code for these was run in a sandbox where barring ...
- 745
3
votes
1
answer
5k
views
Can I safely run a virus using sandboxie? [duplicate]
I want to test some untrusted software to check them, for this reason, I researched for a good sandbox software and I found Sandboxie I tested few safe application, but I am not sure if I can run ...
- 1,357
3
votes
1
answer
4k
views
Running Firefox from inside a Docker container
Will I increase my security level by running Firefox from inside a Docker container (XUbuntu) under a non root user?
Does it make sense to do so to protect against different kind of malware & ...
- 263
3
votes
2
answers
335
views
Security Benefits in Replacing Windows Desktop Programs with New Windows Store Apps for Higher-Risk Uses?
Question:
I'll put this as concretely as I can: For a small business-owning user of a Windows 10 PC who's highest-security-risk activities involve opening plenty of email attachments of PDF and ...
- 2,755
3
votes
1
answer
620
views
Windows 10's (Windows Defender Application guard) VS Browser Sandboxing
Microsoft has introduced a new feature called "Windows Defender Application Guard"
The video from Microsoft explained that (WDAG) allows the user to isolate the code running within one page in what ...
- 998
3
votes
1
answer
368
views
Ctf creation sandboxed question
I have a tiny question, we are creating a ctf but we stumbled upoun a idea that we don't know how to solve.
As several websites that create ctf's as hack.me use sandboxes.
Due to the security and ...
- 33
3
votes
1
answer
199
views
What OS should I use for sandboxing/running viruses designed for IoT devices?
I have a telnet and ssh honeypot (more specifically, cowrie). Most viruses I get there are designed for routers, cameras, etc...
The virtualization software I am using is VirtualBox, and I am using ...
- 199
3
votes
1
answer
236
views
How realistic is to be 'hacked' by ONLY clicking a link [duplicate]
In the case of phishing training, most training will say "don't click the link, you can get hacked!"
If there was an exploit that could bypass the chrome sandbox on an up-to-date verison of ...
- 31
3
votes
0
answers
435
views
Sandboxing untrusted JavaScript execution by redeclaring variables
Some irrelevant background (read only if you want to say "no, just use an iframe")
Scenario
Suppose that I downloaded a string jsCode containing arbitrary JavaScript code from a (potentially ...
- 131
3
votes
0
answers
140
views
Search function in Outlook and attachements
I am wondering how the search function of Outlook is working, especially in regards to researching key words that are presents in emails attachements. Does the Outlook search function opens the files ...
- 31
3
votes
1
answer
690
views
Meltdown and Spectre regarding Firewalls and Sandboxing [duplicate]
I don't deeply understand Meltdown and Spectre -- all I know is that they are basically keylogging-like vulnerabilities within the CPU, which bypass any application layer stuff; correct me if I'm ...
- 39
3
votes
1
answer
2k
views
What kind of attacks do Javascript WebWorkers protect against?
What kind of attack are prevented by running code submitted by the user in a Javascript Web Worker? Do they prevent attacks like XSS, or is it better to use some other sandboxing method to protect ...
2
votes
5
answers
1k
views
Designing a sandbox or how to "perfectly" isolate an app?
I have been thinking on how an app could be "perfectly" isolated from the rest of the system. Now I know we will never achieve "perfect" in practice, but in theory, how could one go about it? I put ...
- 169
2
votes
1
answer
3k
views
Can hackers compromise a VM to the point that they compromise your host OS? [duplicate]
Recently I was reading up on various security strategies and one that has been around for a while but is starting to gain traction now is working within a VM on your desired OS. If that VM ever gets ...
- 123
2
votes
1
answer
123
views
Can I use SELinux to add an extra layer of protection against 0-day VM escape exploits in KVM/QEMU?
My host is Fedora, and I want to add an extra layer of protection against 0day KVM/QEMU exploits that execute code on the host. For example there have been CVEs where if we run a specially crafted ...
- 410