Major Sandboxie News: Sandboxie is now a free tool with plans to transition it to an open source tool

Thank you for making Sandboxie open source, or at least for announcing you will. I guess if you won't maintain it anymore this is the best solution.

About the new update, is it just to remove the paid limitations or is there any other fix?

Vivaldo Sagese said:

About the new update, is it just to remove the paid limitations or is there any other fix?

 

I will say now however, that I thank Sophos and the Sandboxie team for their efforts and for generously releasing the cost free Sandboxie version (which has already been done).  And for the considerable effort I know you have to go through to release it to opensource.

I would recommend that now that you have made the decision to devote the resources necessary to release Sandboxie to opensource that you make every effort to follow through.  On the one hand it would create much goodwill for Sophos if it is released, and on the other probably create much displeasure if it is not.

Think of the costs as a brand marketing expense to create goodwill for the Sophos brand.

I wish you all good luck and thank you for your consideration and effort.

"But sorry folks I'm going to have to leave you hanging.  I don't want to jinx this effort and I've got my fingers crossed that Sophos will do a better job with this project than that other developer did with theirs.  I want this to succeed."

Ha!  Forever the tease you are, Ryan!

I say that good-naturedly.  The myriad concerns, thoughts and issues that you've expressed on this forum concerning Sandboxie/Sophos mirror mine.  I appreciate your posts.  [Y]

Andreas Fischer1 said:

Actually I am professional C++ developer and I am looking forward to it being open source. Will for sure take a look at it and I think many others will take too. I think you underestimate the skills available in the OpenSource community. Of cause it can go both ways but who knows maybe somebody drives a nice open source team and you will see interesting new sandboxie versions and also sepecialized sandboxie forks. 

<3 It's people like you we're working on open sourcing Sandboxie for, Andreas! We have high hopes that the open source community will relish the opportunity to dive into a codebase for such powerful technology and to be able to guide it forward in the right direction.

Open sourcing Sandboxie is a lot of work for us and will cost us a lot of time and money. But we feel it's the right thing to do. I've personally been using Sandboxie since 2004 and there is a lot of love for it internally, throughout Sophos.

Personally, sandboxing feels like a technology that should be open source for Windows just as it is on Linux and Unix - it's a technology that has a lot of uses in a variety of applications. I dream of Sandboxie's technology being forked and incorporated into other software so that more people can benefit from isolation. Perhaps Sandboxie will finally see the pervasive use it deserves but, for whatever reason, was never able to find.

These are the posts I like to see. Long live Sandboxie!

SecBug said:

Perhaps Sandboxie will finally see the pervasive use it deserves but, for whatever reason, was never able to find.

I blame the GUI that has never changed since the beginning, I'm fine with it, but it could use a lot of QoL improvements like drag&drop support, I could probably list over 20 little things to improve the using of it while keeping everything else the same.

We all love Sandboxie, that's why we use it. The main problems with this process have arisen from the lies, disinformation, and a lack of transparency from Sophos (corporately) over an extended period. Is the server still broken, and why aren't the old forums available still?

It is good to read that you also want it to continue, but is it correct to assume that your enthusiasm is as an individual rather than as a Sophos employee/spokesperson?

As far as I can tell, Sandboxie is a unique programme; certainly I have never found a way to replace it successfully, and I have tried. So lets hope this open-sourcing is not all "hot air" by Sophos, and we can look forward to ongoing development. Sadly I won't be holding my breath.

Does anyone know what happened to Tzuk once he sold Sandboxie?

I think the best thing to do now is to give Sophos the benefit of the doubt and support their effort to release to open source.

Bashing them at this point is counterproductive.

Sophos has no obligation to do this, let alone provide further support for Sandboxie and from a direct revenue point of view it's a cost for them not a profit.  The carrot for Sophos is the goodwill it creates and let's give them room to create it without taking that carrot away.

Likely there were those at Sophos who argued to scuttle Sandboxie rather than release it.  Let's not provide fodder for their case.

On its face, this is a respectful and generous decision by Sophos.  Unless and until such time as there is reason to doubt their intent, based specifically on events that happen after the announcement to release, I think we should keep an open mind and support their effort in any way we can.

I’ll insert my comment here, as it seems as good a place as any.  Is there any other product like Sandboxie out there?  What would Sophos have to charge to make SB a viable, profitable product?  It seems to provide protection not found anywhere else.

Thoughts?

Scott Cox said:

 Is there any other product like Sandboxie out there? 

Thoughts?

Scott Cox said:

What would Sophos have to charge to make SB a viable, profitable product?  It seems to provide protection not found anywhere else.

Thoughts?

Apparently more than what people would be willing or possibly capable of paying.

While it indeed provides protection not found anywhere else its not a tool that can be easily used by ordinary users. Its a tool for experts.

I think the user base is just not large enough for a < 50$ tool to be profitable and at the same time > 500$ probably most people would be reluctant to pay.

I don't think that the sandboxie concept is mass compatible at least not without massive rework which is expensive.

On the other hand with a massive rework that makes it n00b compatible it would become much more automatized and would superficially not differentiate itself that much from other offerings which are much simple and just do "sandboxing" by using a separate user account.

For me and I think for many others the appeal of sandbox is its FileSystem and Registry virtualization. But there are simpler ways to achieve a similar level of security by using a VM or just a separated user account. The greatness of sandboxie lyes in the transparent virtualization that allows one to test out things with installed applications or test out new applications without the need to alter the actual system.

So one can install an update to a program into a sandbox and check out if one likes it.

Or one can use sandboxie to audit what changes a particular installer is doing to the system before letting it mes with the real system.

And much more...

All great things to do, but only experts do them.

The average Jo just wants some protection and just that can be achieved much simpler. Using techniques which are not so prone to failure whenever MSFT changes something internally.

I think making sandboxie opensource in this day and age is the right way to go to ensure it will continue to be maintained.

>Have you tried https://www.shadesandbox.com/

>Have you tried https://www.shadowdefender.com/

Are these still being developed?

I use Shadow Defender (mainly when Sandboxie refuses to run an installer), but the author did not respond to an email. Nevertheless, it's good IMO but requires a reboot after each use to get back to a 'normal' environment. Contrast that with Sandboxie where it is easy to 'throw away' a sandbox and start over without needing to reboot.

I tried but didn't like Shades.

The is also the Microsoft Windows 10 Sandbox, but I find it a PITA and too limited by comparison. It may be more secure though.

>Have you tried https://www.shadesandbox.com/

>Have you tried https://www.shadowdefender.com/

Are these still being developed?

I use Shadow Defender (mainly when Sandboxie refuses to run an installer), but the author did not respond to an email. Nevertheless, it's good IMO but requires a reboot after each use to get back to a 'normal' environment. Contrast that with Sandboxie where it is easy to 'throw away' a sandbox and start over without needing to reboot.

I tried but didn't like Shades.

The is also the Microsoft Windows 10 Sandbox, but I find it a PITA and too limited by comparison. It may be more secure though.