Trustware’s BufferZone Pro Goes Free

View previous topic View next topic Go down

Trustware’s BufferZone Pro Goes Free

Post by p2u on 24/2/2011, 13:55

Trustware’s BufferZone Pro Goes Free
[Win32 only] The offer includes a FREE license for home users (Trustware forum support included).
Hope this won't be the end of yet another project...

Paul

p2u
Valued Member
Valued Member

Posts : 211
Join date : 2010-12-14

View user profile

Back to top Go down

Re: Trustware’s BufferZone Pro Goes Free

Post by Ruhe on 24/2/2011, 17:00

p2u wrote:Hope this won't be the end of yet another project
This was my first thought by reading the title of your post.
avatar
Ruhe
Valued Member
Valued Member

Posts : 261
Join date : 2010-04-16
Location : Germany

View user profile

Back to top Go down

Re: Trustware’s BufferZone Pro Goes Free

Post by ssj100 on 14/4/2011, 07:34

Just thought I'd mention something I've noticed with the latest version of BufferZone Pro (as of this post).

Kees1958 writes this:
BZ has the ability to switch between virtualised snapshots, way more advanced than SBIE does please check the BZ features link (Take a "snapshot" of the Virtual Zone for one- step restore).
I wouldn't say that this is "way more advanced than SBIE". In fact, I don't understand why anyone would say it's more advanced - the implementation is completely different and it's actually less advanced in some ways. For example, you can only have one virtual zone open at the same time. With Sandboxie, you can basically have unlimited individual "virtual zones" (sandboxes) running at the same time. Because these "virtual zones" are individual, you can therefore configure each zone to your heart's content. For example, if I wanted to do an on-demand scan with Emsisoft Free Emergency Kit, I'd ensure that the "zone" has as much system access as possible. But say I wanted to test a web browser, I may deny it access to sensitive areas of my registry/files and restrict which programs can start/run in association with it etc.

Anyway, I tested the Virtual Zone by installing Malwarebytes' Anti-Malware in it. It seemed to install fine, but I noticed a difference already - Malwarebytes' Anti-Malware's shortcut folder appeared to be added to the REAL "Start Menu/Programs". On "rolling back", the contents of the folder are deleted, but the folder remained. This was disappointing, and I'm not sure what else was left behind.

Anyone else have much experience with BufferZone Pro's Virtual Zone snapshot technology?

_________________
Sandboxie + LUA + SRP + DEP + SuRun
Windows Firewall + NAT Router + IPSec (on-demand)
VirtualBox (on-demand)
Drive SnapShot (on-demand)
avatar
ssj100
Administrator
Administrator

Posts : 1389
Join date : 2010-04-14

View user profile http://ssj100.fullsubject.com

Back to top Go down

Re: Trustware’s BufferZone Pro Goes Free

Post by Rico on 14/4/2011, 07:55

Testing wise, I remember seeing a yotube review from LanGuy99 for Bufferzone and apparently it missed some driveby crap. Its not as robust as Sandboxie and that is a fact. When testing it in a VM, I found its interface to be sparse and less featured than Sandboxie. I think that their product is tailored more for virtualization noobs who just got off using HIPS. Sandboxie's learning curve isn't that big, honestly, and once its figured out it makes much more sense than the bufferzone approach of having an HIPS mashed up and sewn together with a simple sandbox.

Sandboxie's immense popularity overshadowed them and so their 1 year free offer for the pro version is a last attempt to try and compete. I see that they've also come up with a x64 version, but I don't know how effective that is or how limited by patchguard they are. Unlike Tzuk's great policy of disclosing info about limitations they haven't done this. It might be worth putting their 64 beta to the test to see how they hold up.

As for the 'snapshot feature' thats useless for this class of apps IMO. It doesn't make sense unless you're using a full blown virtual machine product. Also Sandboxie's ability to tun differently cutomized sandboxes is an enormous advantage for running different apps restrained differently for their own purposes, simultaneously side by side.

Rico
Advanced Member
Advanced Member

Posts : 118
Join date : 2010-06-18

View user profile

Back to top Go down

Re: Trustware’s BufferZone Pro Goes Free

Post by ssj100 on 14/4/2011, 08:04

Rico wrote:Testing wise, I remember seeing a yotube review from LanGuy99 for Bufferzone and apparently it missed some driveby crap.
Actually, I've also seen other tests done where Sandboxie passed, but BufferZone failed. Can't recall where now, but someone else might. I think it was a test published on some Russian web-site?

Rico wrote:I see that they've also come up with a x64 version, but I don't know how effective that is or how limited by patchguard they are. Unlike Tzuk's great policy of disclosing info about limitations they haven't done this. It might be worth putting their 64 beta to the test to see how they hold up.
I don't think the 64-bit beta is available for testing yet. Same goes for GeSWall too. And yes, it wll be interesting to see if they disclose information regarding limitations on 64-bit, compared with 32-bit. I know Ilya (DefenseWall) was extremely resistant to developing a 64-bit version, as he "knew" it would not be as secure as the 32-bit version. However, I think he's finally falling to the pressure of developing a 64-bit version now, as more and more people start using 64-bit systems. Anyway, currently, it would appear that tzuk (Sandboxie) is well ahead with 64-bit development.

_________________
Sandboxie + LUA + SRP + DEP + SuRun
Windows Firewall + NAT Router + IPSec (on-demand)
VirtualBox (on-demand)
Drive SnapShot (on-demand)
avatar
ssj100
Administrator
Administrator

Posts : 1389
Join date : 2010-04-14

View user profile http://ssj100.fullsubject.com

Back to top Go down

Re: Trustware’s BufferZone Pro Goes Free

Post by Guest on 14/4/2011, 10:35

Bufferzone by default allows signed programs to install outside te sandbox.

It is very easy to change this (all programs from protected sources are installed inside the sandbox). It was the famaous test were malware was able to get a ligitemate sprogram signing.

When I test BZ I allow signed programs from trusted sources to install outside the sandbox (without prompt) and install all programs (and scripts) inside teh sandbox.

Counting from now in every thread whether SSJ100 brings in sandboxie just to tell it is better: lets start +1 here :-)

Guest
Guest


Back to top Go down

Re: Trustware’s BufferZone Pro Goes Free

Post by ssj100 on 14/4/2011, 10:45

Kees1958 wrote:Bufferzone by default allows signed programs to install outside te sandbox.

It is very easy to change this (all programs from protected sources are installed inside the sandbox). It was the famaous test were malware was able to get a ligitemate sprogram signing.
Regardless, the late and well respected "Franklin" also noticed that there was plenty of debris left behind following installation of programs in the virtual zone:
http://www.wilderssecurity.com/showpost.php?p=1808088&postcount=125
there still seems to be empty folders and dead shortcuts all over the place after emptying the bz?
Of course, purely from a security perspective, this probably isn't a big deal.
Kees1958 wrote:Counting from now in every thread whether SSJ100 brings in sandboxie just to tell it is better: lets start +1 here :-)
Haha good one Kees. Does Rico get a point too?

_________________
Sandboxie + LUA + SRP + DEP + SuRun
Windows Firewall + NAT Router + IPSec (on-demand)
VirtualBox (on-demand)
Drive SnapShot (on-demand)
avatar
ssj100
Administrator
Administrator

Posts : 1389
Join date : 2010-04-14

View user profile http://ssj100.fullsubject.com

Back to top Go down

Re: Trustware’s BufferZone Pro Goes Free

Post by Guest on 16/4/2011, 13:32

Here is a setup idea for BufferZone free http://www.wilderssecurity.com/showpost.php?p=1792546&postcount=34

You can also increase level of security by sandboxing signed programs. The chance of being intruded by a signed malware is so ridicule low, that I allow signed programs to elevate and have UAC off for instance. Avast free makes a real effort of catching signed malware (they have to because of their caching mechanism).


Guest
Guest


Back to top Go down

Re: Trustware’s BufferZone Pro Goes Free

Post by SE7EN on 26/5/2011, 00:41

BufferZone Pro bypass:
http://www.youtube.com/watch?v=TD69povsiQQ
avatar
SE7EN
New Member
New Member

Posts : 2
Join date : 2010-11-22

View user profile

Back to top Go down

Re: Trustware’s BufferZone Pro Goes Free

Post by Guest on 26/5/2011, 01:27

Yep, that is why I mentioned you can set signed programs to install also in the sandbox. USP of BZ is that it can auto quarantaine new executables also OUTSIDE the sandbox

By the way the only global DJ's were Dutch, First Tiesto, now Armin :-)

Guest
Guest


Back to top Go down

Re: Trustware’s BufferZone Pro Goes Free

Post by Sponsored content


Sponsored content


Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum