Major Sandboxie News: Sandboxie is now a free tool with plans to transition it to an open source tool

Thank you for making Sandboxie open source, or at least for announcing you will. I guess if you won't maintain it anymore this is the best solution.

About the new update, is it just to remove the paid limitations or is there any other fix?

Vivaldo Sagese said:

About the new update, is it just to remove the paid limitations or is there any other fix?

 

It might be the end of THIS edition, if focus slows down, but think of all the forks that can come out of this. Some company bigger than Sophos, or more focused on Sandboxie stuff, is surely going to take a look at Sandboxie code and see what they can borrow to make their own version (fork) or to add to their existing product, so in that way, it's never dead. Even Microsoft might be taking a peak at it to see, because they are working on similar things.

apalm123 said:

It might be the end of THIS edition, if focus slows down, but think of all the forks that can come out of this. Some company bigger than Sophos, or more focused on Sandboxie stuff, is surely going to take a look at Sandboxie code and see what they can borrow to make their own version (fork) or to add to their existing product, so in that way, it's never dead. Even Microsoft might be taking a peak at it to see, because they are working on similar things.

For me it's completely useless if a company takes the useful parts from Sandboxie code to improve, let's say, their web browser.

The reality punch some of you are going to receive will be epic.

Actually I am professional C++ developer and I am looking forward to it being open source. Will for sure take a look at it and I think many others will take too. I think you underestimate the skills available in the OpenSource community. Of cause it can go both ways but who knows maybe somebody drives a nice open source team and you will see interesting new sandboxie versions and also sepecialized sandboxie forks. 

I remember the very good cryptographic program TrueCrypt, which were dropped from its developers. In the first moment all people thought, that this will be the end of this software. But then the community created good forks of it, because the source code was available before the stop of development. And now i am using VeraCrypt, which is a fork of TrueCrypt, and it is getting regularly updates. And TrueCrypt / VeraCrypt also was a very complicated program, because the developers have to understand the cryptographic things, so not everyone was able to continue its development. But nevertheless the development continues. So i also think (and hope), that the wonderful Sandboxie will find some good developers, which are enthusiastic enough to update and develop it.

Ha!  So it did turn out to be an attempt to release to opensource.  This was my guess and my hope after reading all of the discussions.

I am CAUTIOUSLY optimistic.

Why cautiously?

In a previous post some weeks ago I recited the story of an experience I had in the 90s with another (completely different category) program developed by another developer coincidentally about the same size as Sophos.  It was a "cult" program with an extremely loyal user group some of whom, such as myself, are still actively participating in user groups and related projects with it to this day -- 22 years after all development ceased.

Like Sandboxie it is a kind of geeky program, and like Sandboxie it was at the very top of its game just before the developer decided to take it off the market.  Like Sandboxie that developer acquired the program from the original developer, treated it as a second string offering and felt it did not fit in with its business plan.  And like Sandboxie, Microsoft just coincidentally came out with its own similar program at the same time this other developer decided to stop marketing theirs.  The similarities between Sandboxie and my unnamed program in terms of circumstances is so striking that it made me suspect that Sandboxie might be going through the same thing as I experienced with that program in the 90s.  And that's why I made that prediction.

The developer of program "X" announced they would be releasing the program to opensource right at the time of the intersection between the same exact circumstances.

Now for the reason that I am only cautiously optimistic....

After waiting for months...maybe even a year or more, they never released it.  The very day they promised to be ready to release it, they suddenly went dark and never said another word about it.  It was never released and never made opensource.  It was just buried.

There were many rumors about what happened, but it wasn't until years later that the definitive reason was confirmed.  But sorry folks I'm going to have to leave you hanging.  I don't want to jinx this effort and I've got my fingers crossed that Sophos will do a better job with this project than that other developer did with theirs.  I want this to succeed.

I am encouraged by the decision Sophos seems to have made.  But I'm still a bit rattled by the experience that happened in the 90s to this day and I hope it is not being ungrateful that I hold my thank yous until it is released.  I'll be glad to coat those thank yous in chocolate and put sprinkles on them when it actually comes to pass.

I will say now however, that I thank Sophos and the Sandboxie team for their efforts and for generously releasing the cost free Sandboxie version (which has already been done).  And for the considerable effort I know you have to go through to release it to opensource.

I would recommend that now that you have made the decision to devote the resources necessary to release Sandboxie to opensource that you make every effort to follow through.  On the one hand it would create much goodwill for Sophos if it is released, and on the other probably create much displeasure if it is not.

Think of the costs as a brand marketing expense to create goodwill for the Sophos brand.

I wish you all good luck and thank you for your consideration and effort.

"But sorry folks I'm going to have to leave you hanging.  I don't want to jinx this effort and I've got my fingers crossed that Sophos will do a better job with this project than that other developer did with theirs.  I want this to succeed."

Ha!  Forever the tease you are, Ryan!

I say that good-naturedly.  The myriad concerns, thoughts and issues that you've expressed on this forum concerning Sandboxie/Sophos mirror mine.  I appreciate your posts.  [Y]

Andreas Fischer1 said:

Actually I am professional C++ developer and I am looking forward to it being open source. Will for sure take a look at it and I think many others will take too. I think you underestimate the skills available in the OpenSource community. Of cause it can go both ways but who knows maybe somebody drives a nice open source team and you will see interesting new sandboxie versions and also sepecialized sandboxie forks. 

<3 It's people like you we're working on open sourcing Sandboxie for, Andreas! We have high hopes that the open source community will relish the opportunity to dive into a codebase for such powerful technology and to be able to guide it forward in the right direction.

Open sourcing Sandboxie is a lot of work for us and will cost us a lot of time and money. But we feel it's the right thing to do. I've personally been using Sandboxie since 2004 and there is a lot of love for it internally, throughout Sophos.

Personally, sandboxing feels like a technology that should be open source for Windows just as it is on Linux and Unix - it's a technology that has a lot of uses in a variety of applications. I dream of Sandboxie's technology being forked and incorporated into other software so that more people can benefit from isolation. Perhaps Sandboxie will finally see the pervasive use it deserves but, for whatever reason, was never able to find.

These are the posts I like to see. Long live Sandboxie!

SecBug said:

Perhaps Sandboxie will finally see the pervasive use it deserves but, for whatever reason, was never able to find.

I blame the GUI that has never changed since the beginning, I'm fine with it, but it could use a lot of QoL improvements like drag&drop support, I could probably list over 20 little things to improve the using of it while keeping everything else the same.

We all love Sandboxie, that's why we use it. The main problems with this process have arisen from the lies, disinformation, and a lack of transparency from Sophos (corporately) over an extended period. Is the server still broken, and why aren't the old forums available still?

It is good to read that you also want it to continue, but is it correct to assume that your enthusiasm is as an individual rather than as a Sophos employee/spokesperson?

As far as I can tell, Sandboxie is a unique programme; certainly I have never found a way to replace it successfully, and I have tried. So lets hope this open-sourcing is not all "hot air" by Sophos, and we can look forward to ongoing development. Sadly I won't be holding my breath.

Does anyone know what happened to Tzuk once he sold Sandboxie?

We all love Sandboxie, that's why we use it. The main problems with this process have arisen from the lies, disinformation, and a lack of transparency from Sophos (corporately) over an extended period. Is the server still broken, and why aren't the old forums available still?

It is good to read that you also want it to continue, but is it correct to assume that your enthusiasm is as an individual rather than as a Sophos employee/spokesperson?

As far as I can tell, Sandboxie is a unique programme; certainly I have never found a way to replace it successfully, and I have tried. So lets hope this open-sourcing is not all "hot air" by Sophos, and we can look forward to ongoing development. Sadly I won't be holding my breath.

Does anyone know what happened to Tzuk once he sold Sandboxie?

I think the best thing to do now is to give Sophos the benefit of the doubt and support their effort to release to open source.

Bashing them at this point is counterproductive.

Sophos has no obligation to do this, let alone provide further support for Sandboxie and from a direct revenue point of view it's a cost for them not a profit.  The carrot for Sophos is the goodwill it creates and let's give them room to create it without taking that carrot away.

Likely there were those at Sophos who argued to scuttle Sandboxie rather than release it.  Let's not provide fodder for their case.

On its face, this is a respectful and generous decision by Sophos.  Unless and until such time as there is reason to doubt their intent, based specifically on events that happen after the announcement to release, I think we should keep an open mind and support their effort in any way we can.