ssj100 Security Forums
Would you like to react to this message? Create an account in a few clicks or log in to continue.

Strange behaviour on certain forums...

Go down

Strange behaviour on certain forums... Empty Strange behaviour on certain forums...

Post by ssj100 16/4/2010, 06:20

The following is a recent PM from me to noorismail of an interesting behaviour while using Shadow Defender:

Anyway, I'm currently using 1.1.0.326 (not available on the home page, but seems to be the latest version). Which version are you using?

I'm still finding some unsettling behaviour in that when in Shadow Mode, it appears to be at least partially bypassed? Try this:
1. Log into Sandboxie forum (or even Shadow Defender), and tick "Log me on automatically each visit" or similar.
2. Go into Shadow Mode
3. Log out of the forum (remembering that you are in Shadow Mode and that any change should be discarded on reboot)
4. Reboot
5. Go back to the Sandboxie or Shadow Defender forum and you'll find that you are still logged out of the forum! If Shadow Defender was truly working, shouldn't you remain logged in?
Or am I missing something here? Thanks for testing. Interestingly, other forums (like the Comodo forums) don't exhibit this behaviour, and Shadow Defender seems to work fine. As far as I can tell, it's only with Sandboxie and Shadow Defender (phpbb?) forums. Maybe these forums don't just rely on cookies to remember your site settings?
In any case, after reboot while in Shadow Mode, sometimes I find my Sandboxie/Shadow Defender forum status has been logged out, even though I didn't issue any such command.

Anyway, if you can reproduce the above, I'd be grateful.

What's rather interesting is that I can reproduce this in a VM containing a cleanly installed Windows XP, 32-bit system, with Shadow Defender...and also with Returnil 2010. I have not tested with Windows 7 yet.

Furthermore, I can only reproduce this on the Shadow Defender and Sandboxie forums. If anyone can add more to the list, I'd be interested to know. I have tested with the Comodo and ssj100 forums, and neither exhibits the behaviour. I understand that noor has tested with the Wilders forum, and there is no such behaviour there either with Shadow Defender.

So the one million dollar question is: why do we only observe this with the Shadow Defender and Sandboxie forums?


Last edited by ssj100 on 16/4/2010, 06:54; edited 1 time in total
ssj100
ssj100
Administrator
Administrator

Posts : 1390
Join date : 2010-04-14

https://ssj100.forumotion.com

Back to top Go down

Strange behaviour on certain forums... Empty Re: Strange behaviour on certain forums...

Post by Guest 16/4/2010, 06:45

Right ssj100,
Neither Wilders,nor SuperAntiSpyWare forums,exhibit this behavior.

I will register with Avira and try there as well.

Thanks for the Returnil test.

Million dollar question indeed!!

noor

Guest
Guest


Back to top Go down

Strange behaviour on certain forums... Empty Re: Strange behaviour on certain forums...

Post by ssj100 16/4/2010, 16:16

Indeed.

By the way, confirmed same issue on Windows 7 32-bit. There's definitely something going on with these 2 forums (Sandboxie and Shadow Defender). Perhaps we should ask Tzuk (Sandboxie) about it.
ssj100
ssj100
Administrator
Administrator

Posts : 1390
Join date : 2010-04-14

https://ssj100.forumotion.com

Back to top Go down

Strange behaviour on certain forums... Empty Re: Strange behaviour on certain forums...

Post by Guest 20/4/2010, 09:13

HeyGuys,I can confirm the behavior seen on Shadow Defender,and Sandboxie Forums,does not reproduce on Avira Forum's.


thanks,
noor

Guest
Guest


Back to top Go down

Strange behaviour on certain forums... Empty Re: Strange behaviour on certain forums...

Post by ssj100 20/4/2010, 09:41

I sent an e-mail to Returnil Support about this issue and this was their reply:

As noted, it is reproducible with Returnil 2010 on Windows XP, 32 bit.

The only explaination I have at the moment, without knowing more is that these forums use some type of server oriented process when logging in or logging out. As you can see in other forums, when they use a cookie to track your status it reverts to to the version of the cookie you had before turning the virtualization off. We would be interested however in getting more information about how these forums handle logins. Have you sent a note to the SBIE staff to ask? If yes, what was their reply?

I've since PM-ed Tzuk from the Sandboxie forums (he's the sole developer of Sandboxie and the sole admin/moderator of the support forum), and he replied that he currently does not have time to look at this issue.
ssj100
ssj100
Administrator
Administrator

Posts : 1390
Join date : 2010-04-14

https://ssj100.forumotion.com

Back to top Go down

Strange behaviour on certain forums... Empty Re: Strange behaviour on certain forums...

Post by Guest 21/4/2010, 09:40

Thanks ssj100.
Does not really leave a lot of hope for getting a responce out of Tony,
I am afraid.

noor

Guest
Guest


Back to top Go down

Strange behaviour on certain forums... Empty Re: Strange behaviour on certain forums...

Post by ssj100 21/4/2010, 16:06

noorismail wrote:Thanks ssj100.
Does not really leave a lot of hope for getting a responce out of Tony,
I am afraid.

noor

E-mailed Tony yesterday about this and no reply so far...as expected haha.
ssj100
ssj100
Administrator
Administrator

Posts : 1390
Join date : 2010-04-14

https://ssj100.forumotion.com

Back to top Go down

Strange behaviour on certain forums... Empty Re: Strange behaviour on certain forums...

Post by ssj100 5/5/2010, 12:42

Same behaviour is observed with Wondershare Time Freeze.

There's definitely something "out of the ordinary" specifically with the Sandboxie and Shadow Defender forums. I don't see this as a bypass of the respective virtualisation software products - rather, I suspect these particular forums are remembering your log in and log out details on their servers (meaning this is out of the protection scope of virtualisation software), rather than with your cookies.
ssj100
ssj100
Administrator
Administrator

Posts : 1390
Join date : 2010-04-14

https://ssj100.forumotion.com

Back to top Go down

Strange behaviour on certain forums... Empty Re: Strange behaviour on certain forums...

Post by Sponsored content


Sponsored content


Back to top Go down

Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum