However I'm not convinced that overall I don't lose out by not running Chrome in SBIE. I don't dispute AppConiner restricts the ability of exploits to do damage and imposes a further reduction in privilege from Untrusted. I do run Chrome sandboxed because I'm yet to be convinced that overall AppContainer is any better/safer for my threat model than how I run it in the Sandbox. Can still test some software in it and configuration changes to apps at no risk Ability to sandbox anything running in a specific folder or location reducing the risk of opening malicious downloads, infected USB/Discs etc. Easy way of restricting Sandboxed apps access to my personal files Easy way of running apps in a RAM disc (setting SBIE container on Ram Disc)
Runs non-AppContainer apps (which I personally find rather limited from a functional perspective) as untrusted lowering the threat for things like media players, office apps, PDF, P2P, Firefox (and other browsers that don't employ AppContainer) Easy way to flush away the detritus gathered against your will during the average surfing session There are many reasons to use Sandboxie on Win 10.
0 kommentar(er)
