BufferZone, sandboxie or other of this kind software

[mattbiernat]

anyboyd tried BufferZone or sandboxie?

http://www.sandboxie.com/

http://www.trustware.com/

anybody got an idea how effective could they be?

[christopher_wolf]

Sandboxie is useless without good server-client security encryption and it pretty much only covers your tracks on your own system. Although, with a minor amount of work, you could setup web caching and/or read/write I/O ops to a removable USB flash device and then use something like Torpark on the USB stick to browse the web without the need for Sandboxie.

BufferZone has a good idea, but it ends up being just like another VM PE....which already exist (again, you can make a PE or PVE and stick it on a Flash drive with limited local execute permissions).

That said, I have tried Sandboxie and BufferZone and they are good pieces of software that do their job well; what is important to remember, however, is the context with which they are applied in.

[mattbiernat]

Sandboxie is useless without good server-client security encryption and it pretty much only covers your tracks on your own system. Although, with a minor amount of work, you could setup web caching and/or read/write I/O ops to a removable USB flash device and then use something like Torpark on the USB stick to browse the web without the need for Sandboxie.

BufferZone has a good idea, but it ends up being just like another VM PE....which already exist (again, you can make a PE or PVE and stick it on a Flash drive with limited local execute permissions).

That said, I have tried Sandboxie and BufferZone and they are good pieces of software that do their job well; what is important to remember, however, is the context with which they are applied in.

so would they (sandbox/bufferzone) be any good in stopping spyware, malware, trojan and virus infections?
excuse my noob question i don't know much about computers.

[DIGITALgimpus]

Virtualization in general is a very good way to enhance security, but the caveats of performance, and other issues (such as downloads you actually want) make it rather impractical for normal use in most cases.

AV and spyware research companies use virtualization to do their work constantly.

[christopher_wolf]

If the spyware was opened in it, yes.

But if it can link up with another computer, or even a drive, then you might run into problems depending on how you set it up as the malware could launch from a PE of its own on the drive (I have several examples of such that can take advantage of U3s and do just that).

Although you are still in a VM environ, so you aren't getting optimal performance if/when you need it.

[mattbiernat]

ty