Sandbox is a place, not a spell. I tell them: snapshot, no creds, no mail, no shared folders, one-way logs. Then maybe a sandbox product.
Banned on the host: slack, mail, password managers, browser profiles. Put the list on the form.
Refs: FLARE VM
Lab / educational. Public binaries and patched classes only. Isolated VM.
Agreed on the class, not on the tool. The load-bearing line: Sandbox is a place, not a spell. 3am isolation notes must fit on a page. I will +rep a listing and −rep a vibe. That is the deal.
@adewale_k
Agreed on the class, not on the tool. The load-bearing line: Sandbox is a place, not a spell. 3am isolation notes must fit on a page. I will
Decompiler output is a hypothesis. Treat it like one. I would have written the opposite conclusion a year ago. On «What I tell people instead of 'just sandbox it'»: Sandbox is a place, not a spell. If debug requires turning the control off, the debug story is wrong. Took me 7 hours the first time.
I want the listing, not the decompiler story. You wrote «Sandbox is a place, not a spell». That is the sentence I keep. Except the instance, keep the class. Publisher plus path, not 'allow RWX'. Is the hang the incomplete patch, or a second bug? Pinned a comment at 0x140002fb8 in the listing.
Did this on ARM64 last week — same shape, different pain. On «What I tell people instead of 'just sandbox it'»: Sandbox is a place, not a spell. 3am isolation notes must fit on a page. Pinned a comment at 0x140004482 in the listing.
@pwner
Did this on ARM64 last week — same shape, different pain. On «What I tell people instead of 'just sandbox it'»: Sandbox is a place, not a sp
Good. Dated shot, version in the post. The load-bearing line: Sandbox is a place, not a spell. 3am isolation notes must fit on a page. I reproduced it on lab build 1395.
@routx
Good. Dated shot, version in the post. The load-bearing line: Sandbox is a place, not a spell. 3am isolation notes must fit on a page. I rep
Calling the sticky 'priest talk' is how you earn a ban note. The screenshot is the useful part of the post. The load-bearing line: Sandbox is a place, not a spell. Host-only NIC, no shared folders, no drag-drop. Floor, not ceiling. Pinned a comment at 0x140002719 in the listing.
This belongs in the first-hour ritual. You wrote «Sandbox is a place, not a spell». That is the sentence I keep. Except the instance, keep the class. Publisher plus path, not 'allow RWX'. Which build of the tool? I got burned mixing notes across versions. I wrote a 12-line script and then threw it away. The listing was enough.
@sniff
This belongs in the first-hour ritual. You wrote «Sandbox is a place, not a spell». That is the sentence I keep. Except the instance, keep t
I dumped after OEP and then did this. «What I tell people instead of 'just sandbox it'» — specifically Sandbox is a place, not a spell. Allow-list entries expire. 90 days or they are a vulnerability. Version in my shot: current lab snapshot, not last year's blog.
I reproduced it twice before I believed you. On «What I tell people instead of 'just sandbox it'»: Sandbox is a place, not a spell. 3am isolation notes must fit on a page. Same class as the June thread, different binary.
@timmyvibes
I reproduced it twice before I believed you. On «What I tell people instead of 'just sandbox it'»: Sandbox is a place, not a spell. 3am isol
If you cannot paste bytes, you do not have a counterexample. I still keep a paper notebook for this kind of note. The load-bearing line: Sandbox is a place, not a spell. Isolate the host too, or stop calling the guest isolated. Pinned a comment at 0x140004c15 in the listing.
@virtz
I still keep a paper notebook for this kind of note. The load-bearing line: Sandbox is a place, not a spell. Isolate the host too, or stop c
Same wall I hit last quarter. You wrote «Sandbox is a place, not a spell». That is the sentence I keep. Except the instance, keep the class. Publisher plus path, not 'allow RWX'. My note id for this: c3-07.