[Sandboxie Status Update] What happened to the Sandboxie site and forums? [Last updated May 22nd]

Hi all,

This is Barb@Invincea (Barb@Sophos in this community).

First, we'd like to explain a bit of what happened with Sandboxie.com and the forums (forums.sandboxie.com -currently offline):

We started experiencing issues with our servers due to a bug that is causing slowness accessing the Sandboxie site, as well as the licensing/activation options.
Added to that, we found a security weakness in the software being used for the forums, and out of an abundance of caution, they were taken down for the time being. 

In order to keep communication going, we have created this temporary forum within our Sophos Community.

Second, here's the current status of things:

  • A new Sandboxie build has been created to help us address part of the issues, but due to the current server status, it cannot be automatically pushed to users.  To manually download it please see below:
           Click here to download Sandboxie 5.30
           Latest Beta versions are listed here
     
          
  • As of now, we will only support issues related to Sandboxie 5.30 (XP users see below).
  • XP Users need to perform the following steps to avoid their computers to constantly use your network to access sandboxie.com :

  • Click Help --> Check for Updates
    Choose "Next week"
    Do not choose "Never" (or your computer will not stop contacting the Sandboxie site, using your network resources). 


  • For the time being, buying options are not available (to prevent additional issues with our licensing server).
  • Licenses and activations are working now.  For activation issues please follow this thread: Activation failed - Please provide feedback
    For Offline activations: the page is not properly redirecting, please use these links instead:
    Offline activation
    Offline activation steps
  • Dev teams are actively working on investigating the issues and finding fixes for them. 

We would like to thank everybody for their patience and understanding. 
Please, feel free to start a new thread in this forum as needed (Sandboxie v5.30 only).

Regards,
Barb.-

  • Can i update to 5.30 without loosing my licence?

  • Thanks Barb,

    Good to know what is going on.

    BTW, The link to Sandboxie 5.30 is not working for me (The connection has timed out). Maybe related to the Sandboxie website issues? I noticed that the link is pointing to: https://www.sandboxie.com/DownloadSandboxie

    It seems that the entire sandboxie.com domain is unreachable for me.

    Best Regards

    Paul

  • In reply to Henny Gerrits:

    Hi Henny,

     

    I upgraded yesterday to version 5.30 (got the install file from a non sandboxie.com website). And now my already registered and activated Sandboxie is de-activated which is due to the unavailability of sandboxie.com domain. I recommend you delay the upgrade until sandboxie.com is available again.

     

    Cheers,

     Walter

  • In reply to Barb@Sophos:

    I downloaded SandboxieInstall.exe from https://www.sandboxie.com/DownloadSandboxie a few minutes ago, and the EXE i got was identically with version 5.28 from February (i checked it with a MD5 compare tool). The EXE from the post above was version 5.30 from April, so i think you should have a look at the download area within sandboxie.com, so that it also is the newest version 5.30 and not the 5.28 with the Update-Loop-problem.

     

    Also you probably want to add the tip for the XP-users (or for all users of version 5.28 and older), that they can manually edit the sandboxie.INI in path c:\windows, and change the value of "SbieCtrl_NextUpdateCheck" to 2124300600, so that the update question is delayed to 25th April 2037. Otherwise they have to click "Next week" every week, and "Never" always adds the date of 18th April 2019 into the INI and so the Update-Question-Loop is restarting. The conversion between Unix-TimeStamp und readable date can be made for example at www.onlineconversion.com/unix_time.htm

  • In reply to Ralph W:

    Hi Ralph,

    I just downloaded the files and they are for Sandboxie 5.30 , the sha/md5 match the ones posted on our website:

    https://www.sandboxie.com/AllVersions.php 

    5.30 All SandboxieInstall-530.exe
     MD5  6b13a590f39d7354e04f13706ebb7ef1 
     SHA1 185be6ab6b4b188aab94d37964ed53c0439e5a39 
    			
      32-bit SandboxieInstall32-530.exe
     MD5  13578bcbf82c867d31b08bc185df8bc6  
     SHA1 40241dee13c07b86011fb4b112f34ea793ad69eb 
    			
      64-bit SandboxieInstall64-530.exe
     MD5  4055456544821aeaffa4f2c315f51ee9
     SHA1 56c8a17a9079b6768efa9f3fa484a1f726d5a4a9  
    			

    Can you provide some screenshots of what are you seeing, and the exact link you used? 

    Regarding the steps for XP users, they are on the front page of Sandboxie com, as well as on the first post in this thread.
    I'll add them to the Downloads section as well. Thanks for the idea! 

  • In reply to Barb@Sophos:

    Hello Barb@Sophos,

    here i describe you, how i downloaded it:

    First, i try to go to https://www.sandboxie.com/DownloadSandboxie , which is not easy since a few days, because i very often have time outs after a while of loading (Statusbar of Firefox shows "TLS handshake with www.sandboxie.com" while loading). When the site has loaded, it shows me the following:

     

    The download links (in red boxes) show me https://www.sandboxie.com/SandboxieInstall.exe, and when i click them...

     

    i got the file, which has MD5-checksum "39cd9e88279d2ffe25cb340be1b6244a", which is from version 5.28 (stored on my harddisk since February).

    But i think, you have corrected the wrong file now, because after typing this posting, i made a new download while capturing the last screenshot for this posting, and now the MD5 is "6b13a590f39d7354e04f13706ebb7ef1", which belongs to version 5.30 (All). So this should be okay now i think.

  • In reply to Ralph W:

    Hi Ralph W,

     

    Glad to hear things are fine now. We did not make any changes, so not sure what could have happened. 

    Do let us know if you can replicate the issue.  

    BTW, I added an additional note for XP users in the downloads section. Thanks again for bringing that up! 

     

  • In reply to Barb@Sophos:

    Greetings all, new member here.

     

    Sandboxie.com is still proving unreachable as I type this. Is the site coming back online or not? I'm somewhat hesitant to install 5.30 until it does.

  • In reply to Mark Lackey:

    I have the same problem, Can't register the purchased version.

    Have tried it for several hours, unfortunately without success. 

  • In reply to Raimund Günther:

    There's something going on then. It shouldn't take DAYS for a major software provider to get back online. The descriptions of cobbled attempts to resurrect a working server somewhere "in an hour or two" don't do much to inspire confidence either.

    Looks like it may be time to find an alternative.

  • In reply to Mark Lackey:

    I agree. I can't believe that a company as big as Sophos can't get the website and forum rehosted by now, and with secure community software. I'm not installing 5.30 until the licensing server is back up and running.

    I also hope this is not the end of Sandboxie, as I can't find anything functionally equivalent. 

  • As the website is now down for a week or so, it would be appreciated if Sandboxie support or the developers can let us know the latest status and provide more details about the problem.

    If you open the Sandboxie Control and click "Check For Update" then sometimes the message "Update check is already in progress. Please wait." appears.
    Is the problem due to this Update check and is it trying to reach the main website "www.sandboxie.com" ?

    The main website is also used for licensing via URL: www.sandboxie.com/index.php
    And the updated version 5.30 still uses the same approach for licensing.

    Most software products are using a subdomain or another domainname for activation and updates so you can separate the webtraffic to other servers. Would this be an option ?
    If you could bring out another version which uses another URL for licensing like activate.sandboxie.com/index.php then at least the users would have the chance to install the new version and get licensed again.

    This also applies for the website. If only www.sandboxie.com is used by the software, then it would be possible to run the website on sandboxie.com without the wwww.

    Sandboxie is good software and it would be a shame and disappointing if it would be gone forever.
    There is simply no other product that can give this protection with minimal effort.

  • In reply to Barb@Sophos:

    Barb@Sophos

    Glad to hear things are fine now. We did not make any changes, so not sure what could have happened

     

    You must be joking, right? There was a checksum mismatch and you don't know why? So who can access "your" servers  beside you? Are you auditing SB source code? If you can't guard you ftp, your code probably already carries a malicious payload...

  • In reply to Jarosław Glaca:

    Hi Jarosław Glaca ,

    Most likely, they checked the hash using the wrong executable files. Nothing changed on our end and our files are fine. 
    The SHAs and MD5s were corroborated an posted along with the new builds. 

    Regards,