Collaborate Disseminate
Google has announced several new security tools for G Suite admins and users, as well as a new 2FA option: one-time security codes based on security keys. Email security enhancements The security sandbox and advanced phishing and malware protection opt… Continue reading Google delivers new G Suite security tools
I am analyzing malware and I see that two executables when run in a sandbox made DNS requests for www.epochconverter.com
Why would an attacker risk detection by making a network request to epochconverter.com? What is it nece… Continue reading Why might malware make a DNS request for an epoch time converter?
I like lowering my access privilege mid-program (e.g. restrict my program to the current directory and files, disable networking). I imagine this is a pretty common wish.
I would like to be able to do this as a normal user, without the in… Continue reading Opt-in a security profile at runtime, without tedious setup
The upcoming, newest version of Android – still only known as “Android Q” – will have many new and improved protections for user privacy. Google has now also outlined the changes aimed at enhancing the security of the devices ru… Continue reading Android Q: Enhanced security for consumers and enterprises
We are excited to welcome Yomi: The Malware Hunter from Yoroi to the mutisandbox project. This brings VirusTotal upl to seven integrated sandboxes, in addition to VT’s own sandboxes for Windows, MacOS, and Android. In their own words:Yomi engine impl… Continue reading VirusTotal MultiSandbox += Yoroi: Yomi sandbox
We are pleased to announce that the multisandbox project has partnered with NSFOCUS POMA. This brings VirusTotal up to six integrated sandboxes. The NSFOCUS sandbox gives us insight into the behaviour of samples that run on Windows 7 and XP SP3.In thei… Continue reading VirusTotal Multisandbox += NSFOCUS POMA
I would like to create an app that accepts users python scripts and executes them as part of its functionality. What I am wondering is if its possible to block I/O, network and other attack vectors so I can have some confiden… Continue reading Is it possible to securely run user defined python code in AWS?
Starting Brave browser (on Linux manjaro) shows the message:
“You are using an unsupported command-line flag: –no-sandbox. Stability and security will suffer.”
Reading the support forums it seems that one needs to enable user namespaces t… Continue reading What "stability and security will suffer" by using a browser with the –no-sandbox flag?
Google today launched a number of security updates to G Suite, its online productivity and collaboration platform. The focus of these updates is on protecting a company’s data inside G Suite, both through controlling who can access it and through providing new tools for prevening phishing and malware attacks. To do this, Google is announcing […] Continue reading Google launches new security tools for G Suite users
I’m writting a online judge(support C/C++、GoLang). I want to implement a sandbox by myself. my idea:
namespace and cgroups
compile user’s source code statically
run executable file in a complete new namespace (CLONE_NEWUS… Continue reading use namespace and cgroups or seccomp to implement online judge?