Bitcoin Forum
May 07, 2024, 02:59:06 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: How to browse the internet and run suspect software safely?  (Read 137 times)
NiceSoft12 (OP)
Sr. Member
****
Offline Offline

Activity: 433
Merit: 251


View Profile
December 28, 2017, 09:16:03 AM
 #1

So in this day and age of so many online threats; malwares, ransomware, wallet stealing software, phishing, etc.

Is there a way to run something in an isolated environment where it cannot infect your actual pc or steal from hotwallet?

I saw something on virtual pc, vmware, sandboxie, and comodo sandbox, are they all the same?
1715050746
Hero Member
*
Offline Offline

Posts: 1715050746

View Profile Personal Message (Offline)

Ignore
1715050746
Reply with quote  #2

1715050746
Report to moderator
The Bitcoin network protocol was designed to be extremely flexible. It can be used to create timed transactions, escrow transactions, multi-signature transactions, etc. The current features of the client only hint at what will be possible in the future.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715050746
Hero Member
*
Offline Offline

Posts: 1715050746

View Profile Personal Message (Offline)

Ignore
1715050746
Reply with quote  #2

1715050746
Report to moderator
1715050746
Hero Member
*
Offline Offline

Posts: 1715050746

View Profile Personal Message (Offline)

Ignore
1715050746
Reply with quote  #2

1715050746
Report to moderator
bob123
Legendary
*
Offline Offline

Activity: 1624
Merit: 2481



View Profile WWW
December 28, 2017, 12:06:10 PM
 #2

Is there a way to run something in an isolated environment where it cannot infect your actual pc or steal from hotwallet?

The most handy way would be to run the software in a virtual machine.
The more safer way would be to run it on a second dedicated PC.

I saw something on virtual pc, vmware, sandboxie, and comodo sandbox, are they all the same?

Generally, yes.
But VirtualBox [1] (from Oracle) and VMware [2] are the most reputable.
You should also keep in mind that this is not 100% safe. There also has been found exploits to escape the safe environment of a virtual machine.
For example: Pown2own hacking contest in march, this year: https://www.pcworld.com/article/3182816/security/pwn2own-hacking-contest-ends-with-two-virtual-machine-escapes.html
These exploits arleady have been fixed. But the possibility of breaking out does exist.
Of course, there isn't a high risk. Most of the malware trying to steal private keys, wallets are coded extremely bad. But you should be aware of the possibility.

[1] https://www.virtualbox.org/
[2] https://www.vmware.com/

NiceSoft12 (OP)
Sr. Member
****
Offline Offline

Activity: 433
Merit: 251


View Profile
December 29, 2017, 12:27:32 AM
 #3

Quote
I saw something on virtual pc, vmware, sandboxie, and comodo sandbox, are they all the same?

Generally, yes.
But VirtualBox [1] (from Oracle) and VMware [2] are the most reputable.
You should also keep in mind that this is not 100% safe. There also has been found exploits to escape the safe environment of a virtual machine.
For example: Pown2own hacking contest in march, this year: https://www.pcworld.com/article/3182816/security/pwn2own-hacking-contest-ends-with-two-virtual-machine-escapes.html
These exploits arleady have been fixed. But the possibility of breaking out does exist.
Of course, there isn't a high risk. Most of the malware trying to steal private keys, wallets are coded extremely bad. But you should be aware of the possibility.

[1] https://www.virtualbox.org/
[2] https://www.vmware.com/

I mean if Sandboxie does the same job as VirtualBox and VMware, than I'd rather jsut use Sandboxie as it's so simple and fast.
legend018
Member
**
Offline Offline

Activity: 84
Merit: 10


View Profile
December 29, 2017, 01:53:48 AM
 #4

Sandboxie requires you save files on storage drives. It works different them virtual machines.
markasoftware
Full Member
***
Offline Offline

Activity: 166
Merit: 100


View Profile WWW
December 29, 2017, 02:13:34 AM
 #5

You may wish to look into https://qubes-os.org, it's designed to make it quite easy to isolate applications. So you can run untrusted software, and if it turns out to be a virus, oh well, the rest of your system is completely safe.

Check out MarkaPool.
Also check out my open source projects.
pikecara
Newbie
*
Offline Offline

Activity: 52
Merit: 0


View Profile
December 29, 2017, 02:14:54 AM
 #6

Sandboxie is free and super easy. Has the same properties than a virtual machine but you can sandbox specific applications. If you want to create a complete environment and run insecure software then a virtual machine is the best option.
mpufatzis
Full Member
***
Offline Offline

Activity: 840
Merit: 128



View Profile WWW
December 29, 2017, 07:18:44 AM
 #7

I am a holder, so I dont have many transactions to do.
I think the best option is to use a dedicated PC (or a Raspberry Pi, if you have one) for your transactions.
Virtualbox is an option but I dont know how safe it is.
You could also buy a Ledger/Trezor for sending money and use your PC with a virtuabox for more security.
bob123
Legendary
*
Offline Offline

Activity: 1624
Merit: 2481



View Profile WWW
December 29, 2017, 12:06:11 PM
 #8

I mean if Sandboxie does the same job as VirtualBox and VMware, than I'd rather jsut use Sandboxie as it's so simple and fast.

Sanboxie might be simplier and faster to set up.. but security-wise it is pretty weak.
A huge amount of exploits have been found in 2013. Since then a lot of improvements have been done.
But i wouldn't rely on the 'features' of sandboxie. VM's would definetly be safer.
You can read more about the vulnerabilities/attacks on sandboxie here: https://bromiumlabs.files.wordpress.com/2013/07/application_sandboxes_a_pen_tester_s_perspective2.pdf

But you should always keep in mind that a PC connected to the internet is never a safe way to store your coins.
You should only store an amount on your hot wallet PC which you can afford to lose.

mpufatzis
Full Member
***
Offline Offline

Activity: 840
Merit: 128



View Profile WWW
December 29, 2017, 10:28:27 PM
 #9

It's better to use cold storage for the majority of your coins, and a hot wallet for transactions.
Split your coins in several addresses.


I mean if Sandboxie does the same job as VirtualBox and VMware, than I'd rather jsut use Sandboxie as it's so simple and fast.

Sanboxie might be simplier and faster to set up.. but security-wise it is pretty weak.
A huge amount of exploits have been found in 2013. Since then a lot of improvements have been done.
But i wouldn't rely on the 'features' of sandboxie. VM's would definetly be safer.
You can read more about the vulnerabilities/attacks on sandboxie here: https://bromiumlabs.files.wordpress.com/2013/07/application_sandboxes_a_pen_tester_s_perspective2.pdf

But you should always keep in mind that a PC connected to the internet is never a safe way to store your coins.
You should only store an amount on your hot wallet PC which you can afford to lose.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!