Sandboxie VS Diun

I used to use sandboxie so I could emulate multiple browser sessions without worrying about cached creds or the different portals screwing up my context. It works decently.

Use Sandboxie on Windows. It's open source these days, and isolates processes from making changes on your system. It's perfect to install and run potentially unsafe programs. Sandboxie exists since 2003, and yet we still have people in business worlds running viruses from mail attachments.

Sandboxie

You can allow applications inside a Sandboxie to communicate with each other through sockets even when network access by Sandboxie is blocked1. You can enable Sandboxie network access and use Windows firewall outside Sandboxie to block all applications inside the Sandboxie from accessing the network1. It is also possible to specify ports that cannot be accessed by boxed applications2. However, it is not possible to specify IP’s or IP ranges that cannot be accessed by boxed applications2.

In addition to just taking all privileges way from the process, like Chrome does, there's also Sandboxie [1] and the official Windows Sandbox [2]

1: https://github.com/sandboxie-plus/Sandboxie

2: https://learn.microsoft.com/en-us/windows/security/threat-pr...

2b: https://learn.microsoft.com/en-us/windows/security/threat-pr...

VirtualBox dropped 3D acceleration for old OS like XP a while back, you can see it it running "dxdiag" on your windows XP and running the tests, it will do DirectDraw only since the game is a 32 bit windows game it should run on modern windows like 10 and 11, I saw that the main problem is the DRM, so you will need a "cracked/pached" exe, I can't help with that, but do your own search, if you want to be "safe" you can try running it using something like SandBoxie-plus https://github.com/sandboxie-plus/Sandboxie/releases

With those pre-reqs, is there anything Windows Sandbox can do that Sandboxie can't?

https://github.com/sandboxie-plus/Sandboxie

Could you pls. test if the vulnerability can be mitigated by using Sandboxie-Classic (that is the free version)?

I also want to recommand this piece of small software but it's very neat, Sandboxie: https://github.com/sandboxie-plus/Sandboxie

Thanks, I used to use it. I moved to using diun to just notify of updates but not apply them though.

https://crazymax.dev/diun/ and docker compose

Similar to Watchtower but without the option to auto-update containers, just notifying is diun. But imo it does that better and more reliable than Watchtower does. You can get notified by Email, Discord, Pushover, Telegram and many more options.

If your apps are container images, then there are tools like diun, watchtower and whatsupdocker, those can watch the image repository (like Docker Hub) and notify you if a new/updated image has been found. Some can even download and auto-update for you, but that comes at some risk of course.

You might want to have a look at https://crazymax.dev/diun/ which is purpose built for what you're trying to do (notify when an update is available, but not install).

Watchtower is inferior to a project like DIUN this way. Because with double you can actually be notified by newer image versions and act accordingly. But automatic updates (which latest is aswell) are bad practice.

diun is very similar to that, but it doesnt auto-update, just notifies but does that very well imo.

I use https://crazymax.dev/diun/ to send notifications of new images. I also hook it into webbooks with CI for mirroring images, but you should be able to use something like portainer webhooks to auto pull images.