Trust No Program

sandboxie for mac?

If it doesn't fit elsewhere, it goes here

sandboxie for mac?

Postby harry747 » Fri Dec 19, 2008 8:48 pm

will there ever be a version for mac OSX?
harry747
 

Postby tzuk » Sat Dec 20, 2008 3:42 am

I won't say never, but it's also not likely that I will be able to create Sandboxie for OS X. It's a completely different operating environment and I don't know the first thing about it.
tzuk
tzuk
 
Posts: 16076
Joined: Tue Jun 22, 2004 5:57 pm

Postby harry747 » Wed Dec 31, 2008 11:09 pm

the problem is intercepting those function calls that open the files and everything. I have no idea how to accomplish that. how do you do it on windows?

come to think of it, such functionality could be useful for other purposes too...
harry747
 

Postby tzuk » Thu Jan 01, 2009 2:10 pm

I replace the first few bytes of machine code at the top of the function, with a branch to my code. It's a fairly simple idea, the hard part was implementing an instruction analyzer that can understand the bytes of code that I'm overwriting, and can move them correctly to somewhere else.

Check out "Detours" from Microsoft Research -- they have their own implemention of the same general idea.
tzuk
tzuk
 
Posts: 16076
Joined: Tue Jun 22, 2004 5:57 pm

Sandboxie for the Mac

Postby DC9 » Sat Jan 24, 2009 10:19 pm

I'd really love to have Sandboxie for my Mac! Please!
DC9
 

Postby wraithdu » Sun Jan 25, 2009 4:07 am

Here's the hook technique I think tzuk is referring to (and the one I used to create an AutoIt hook engine). Very cool stuff :) Ths use of the distorm disassembler is a very nice idea.

http://www.ntcore.com/Files/nthookengine.htm
wraithdu
 
Posts: 1410
Joined: Fri Jun 29, 2007 7:54 pm

Postby tzuk » Sun Jan 25, 2009 9:00 pm

Yes, same technique. I wrote my own disassembler though.
tzuk
tzuk
 
Posts: 16076
Joined: Tue Jun 22, 2004 5:57 pm

Sandboxie for Mac OSX ?

Postby jazzvibes » Wed Feb 24, 2010 11:37 pm

Is there Mac-Sanboxie or a similar program able to run on Mac OSX?
Is there a need to protect Mac systems with a program like this?
Is this true all Macs are infection-resistant and have their own protection system already built in OSX?
Thanks.
jazzvibes
 

Postby Guest10 » Thu Feb 25, 2010 1:19 pm

Paul
XP Pro SP3 (Admin), Zone Alarm Pro Firewall, Malwarebytes Pro, Firefox 34, Thunderbird 31.
Sandboxie user since March 2007.
Guest10
 
Posts: 4867
Joined: Sun Apr 27, 2008 10:24 pm
Location: Ohio, USA


Return to Anything Else

Who is online

Users browsing this forum: No registered users and 2 guests