Sandbox security threat with VMWare Workstation 6

By medistorm
in Smart Home, Network & Security

 Share

Recommended Posts

Neowinian

medistorm

Posted
Posted

Hi. This is my situation. On the same pc, I would like to do some Internet banking but son want to use it to play games and go to questionable website. Security wise, these 2 things do not mix and that got me thinking about VMWare virtual pc. And very much appreciate experience VMWare users? advise on this.

Can I set up a virtual pc and let my son uses that? And any securities threats will be sand boxed in VM virtual pc and not infest the host pc?

Alternatively, can I set up a virtual pc and I use that to do my banking stuff and any virus in the host pc will not get into?

I have some doubt about this because I tried setting up a virtual pc for the very 1st time and found I could drag & drop files from the host to the virtual pc and vice versa at ease. If files could move so easily between host and guest, couldn?t virus do the same?

Thanks.

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

The only reason you could move files between the host and guest so easy, is you setup that feature in vmware workstation.

So playing games -- that he bought from a store? You feel is a security issue?

As to questionable websites? Have him sandbox any connections he makes to "questionable" websites http://www.sandboxie.com/

Playing "games" in a vmware normally is a huge performance hit on the game, the newer games require as much of the computers cpu and memory and video card to play the game as it was meant to be played... Trying to run it in a vm is going to be a hit on that performance.

Neowinian

medistorm

Posted
  • Author
Posted

Thank you BudMan,

This Sandboxie looks perfect for the job.

Assuming my host pc is infested with virus or malware or keylogger. If I go open up a sandbox and do my internet banking stuff inside it, would security be compromised? i.e., nothing comes out or go into the sandbox from the host pc.

Thank you.

Grand Master

+InsaneNutter MVC

Posted
  • MVC
Posted

I would assume if the host pc has a key logger installed it?s still going to log whatever you type in as your keystrokes are been logged before they even get to the sandbox application.

You could always boot a Linux live cd such as Ubuntu and do your banking like that, this way you know you will be virus free and any sensitive information you enter will be erased once you power the pc down as it will all be saved in the ram.

Grand Master

+BudMan MVC

Posted
  • MVC
Posted
Hi. I was wondering, how to do the proper setup
What do you mean "proper" You either allow for sharing files between host and guest or you do not.. Either way would be proper.

The use of the sandbox would be so your box does not get compromised, not for use on a compromised system, etc.

If you are so worried that your box is infected with keyloggers and such -- heres an idea, clean it!

Is this paranoia medically induced, or is your tinfoil hat just a bit loose? If you feel your box has been compromised -- then freaking nuke it from orbit and start over..

If your so worried your son will get your machine infected -- then don't let him use it!

Booting a liveCD every time you want to look at the balance of your checkbook or pay a bill seems a bit over the top if you ask me. Its not like this is a public computer or anything -- just take steps to make sure its clean and practice safe computing, and tighten up your tinfoil hat and you will be fine ;)

Grand Master

.Kompressor

Posted
Posted

because it is questionable with sandboxie and vmware for elminating viruses, spyware, trojans, keyloggers....it's skeptible if both use the same OS...the banking host must be locked down but at what cost?

this is where an old laptop comes in useful....for banking/accounting and nothing else...

Neowinian

medistorm

Posted
  • Author
Posted

I have created a vm virtual pc. I have disabled "Shared Folder", disabled Guest Isolation (so there will be no dragging of file from host to guest and vice versa). But I have trouble setting Ethernet to Bridged mode. So I am using NAT instead. Would there be any security compromises in this area?

My son likes to go watch TV programs and movies at sites like www.pipifilm.com or www.xunlei.com or www.ppstream.com

Friends who have been to those sites told me they get fed up with viruses and nasty stuffs coming in after watching those programs. Hence my concerns. So either surf those sites in virtual pc or do online banking in virtual pc.

Any advise appreciated.

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • Samsung is shutting down yet another app used by millions

      By Elliot B. · Posted

      "Samsung is shutting down yet another app used by millions" I will fix the clickbait title for you, free-of-charge: "Samsung shutting down it's Max VPN app"
    • Microsoft brings Planner Agent to all Microsoft 365 Copilot users

      By Ivan Jenic · Posted

      Microsoft brings Planner Agent to all Microsoft 365 Copilot users by Ivan Jenic Image: Microsoft Microsoft has announced that Planner Agent in Microsoft 365 Copilot is now generally available to all users with a Microsoft 365 Copilot license. Planner Agent is the latest addition in the string of AI features that Microsoft is implementing across virtually all of its products. The agent lets you manage tasks through natural language prompts directly inside Microsoft 365 Copilot. You can create and update tasks, check priorities, and get insights about current entries without leaving the chat interface. The general availability release comes with a handful of new additions on top of what was available during the initial rollout. A new plan picker lets you search and filter your plans by name, then update task names, statuses, due dates, or priorities through the agent. There's also a goals bucket now, which lets you group tasks under specific goals. This builds on the Goals view, a feature that was introduced as part of the broader Planner refresh that rolled out earlier. Image: Microsoft | Planner Agent in Microsoft 365 Copilot All AI-generated plans and tasks are created in draft mode by default, so you can review and approve changes before anything goes through. This is actually a thoughtful safety feature, because trusting AI to handle all your tasks without a human in the loop is usually a recipe for disaster. Having tasks initially saved as drafts is the best possible middle ground. Microsoft also says that not all tasks are executed equally. Simple tasks get processed quickly, while more complex ones, like building a plan from a Word, Excel, or PowerPoint file, are handed to a more capable model. Microsoft says this approach delivers the best performance, but it could also help with usage management, as you won't have to waste tokens on performing simple tasks. Planner Agent is available now across Teams, Loop, SharePoint, and other Microsoft 365 apps for anyone on a Microsoft 365 Copilot subscription.
    • EA Sports UFC 6 review: Brutal, satisfying, and surprisingly accessible to newcomers

      By ryansurfer98 · Posted

      To be clear I'm anti trump, the bigger point is why review this game at all?
    • Major Xbox layoffs may claim South of Midnight developer Compulsion entirely

      By ryansurfer98 · Posted

      Trillion dollar Microsoft has to reduce spending by hurting more people. Good job Microsoft. Good Job Asha.
    • Major Xbox layoffs may claim South of Midnight developer Compulsion entirely

      By Geezy · Posted

      That's a shame. The big Xbox reset when Phil and Sarah left and then Asha came on and brought a new team of executives, and all the layoffs last year and saying that the ABK merger wouldn't result in redundancies I am surprised they are calling for yet another reset and yet more layoffs.

  • Recent Achievements

    • First Post
      Cosminus earned a badge
      First Post
    • One Year In
      ThatGuyOnline earned a badge
      One Year In
    • Week One Done
      Jeroen Wilms earned a badge
      Week One Done
    • Week One Done
      rolfus earned a badge
      Week One Done
    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later

  • Popular Contributors

    1. 1
      +primortal
      499
    2. 2
      +Edouard
      194
    3. 3
      PsYcHoKiLLa
      125
    4. 4
      Steven P.
      87
    5. 5
      neufuse
      73
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!