<tease> But does it run on <a href="http://www.reactos.org/en/index.html">Reactos</a>? </tease><br><br><br><div class="gmail_quote">On Sun, Mar 29, 2009 at 4:54 PM, Skidz Tweak <span dir="ltr"><<a href="mailto:skidz.tweak@gmail.com">skidz.tweak@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hey Ralf...<br>
<br>
Thanks for the information, I had never heard of virtualbox before and will<br>
defentrly check it out.<br>
<br>
But how does virtualization provide security? Besides the fact that you can<br>
roll back any changes made?<br>
I currently run my sims on a esxi 3.5 server, and really I don't believe it<br>
helps with security at all.<br>
<br>
If a exploit was discoved in Opensim, and someone took advantage of it, with<br>
sandboxie it would stop them from accessing anything on the computer..<br>
but with virtualization, it would not do anything at all.<br>
<div class="im"><br>
<br>
-----Original Message-----<br>
From: <a href="mailto:opensim-users-bounces@lists.berlios.de">opensim-users-bounces@lists.berlios.de</a><br>
</div><div class="im">[mailto:<a href="mailto:opensim-users-bounces@lists.berlios.de">opensim-users-bounces@lists.berlios.de</a>] On Behalf Of Ralf Haifisch<br>
Sent: Sunday, March 29, 2009 6:47 AM<br>
To: <a href="mailto:opensim-users@lists.berlios.de">opensim-users@lists.berlios.de</a><br>
</div><div><div></div><div class="h5">Subject: Re: [Opensim-users] Securing OpenSim with Sandboxie<br>
<br>
Hey Skidz,<br>
<br>
It´s a quite good idea to have isolated environment - at least if you<br>
want/need to run opensim or other software in an "unclear security state" on<br>
a non dedicated system.<br>
<br>
I had a look into sandboxie and would maybe suggest to use a "full<br>
virtualization". Since Hypervisor are not suitable for many people (need to<br>
run the virtualization on top of a operating system) and may have own<br>
security riscs, regular emulation type virtualization works nice.<br>
<br>
A nice opensource project is vbox from sun. <a href="http://www.virtualbox.org/" target="_blank">http://www.virtualbox.org/</a> It<br>
comes with binaries for most linux boxes, as well as for windows.<br>
<br>
In benchmarks compared to vmware server (not 3i), it did perform amazing<br>
fast. You can even swap premade system or virtual disks for diagnosis.<br>
<br>
In any virtualization, remember to use a dedicated network interface card,<br>
if you want to protect against denial of service etc.<br>
<br>
So:<br>
- great idea to make a save environment<br>
- if you want a fast way and are not to paranoid about security or multi<br>
platform sandboxie seems a choice<br>
- if you look into multiplatform, or swapable virtual machines - or are more<br>
paranoid about security I would advice vbox<br>
<br>
<br>
I really love to see, that more and more people think about security and<br>
production environments.<br>
<br>
<br>
Cheers,<br>
Ralf<br>
<br>
Date: Sat, 28 Mar 2009 19:35:58 -0500<br>
From: Skidz Tweak <<a href="mailto:skidz.tweak@gmail.com">skidz.tweak@gmail.com</a>><br>
Subject: [Opensim-users] Securing OpenSim with Sandboxie<br>
To: <<a href="mailto:opensim-users@lists.berlios.de">opensim-users@lists.berlios.de</a>><br>
Message-ID: <<a href="mailto:49cec273.14b48c0a.2fd7.ffff8964@mx.google.com">49cec273.14b48c0a.2fd7.ffff8964@mx.google.com</a>><br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
I just finished up an article on how to secure OpenSim server with<br>
Sandboxie:<br>
<a href="http://blog.skidzpartz.com/post/2009/03/28/OpenSim-Security-Part-1-Sandboxie" target="_blank">http://blog.skidzpartz.com/post/2009/03/28/OpenSim-Security-Part-1-Sandboxie</a><br>
.aspx<br>
<br>
I hope you all don't think that's spam, I just wanted to share something I<br>
wrote I honestly thought you all might be interested in.<br>
<br>
Any feedback on this subject would be greatly appreciated.<br>
<br>
<br>
<br>
_______________________________________________<br>
Opensim-users mailing list<br>
<a href="mailto:Opensim-users@lists.berlios.de">Opensim-users@lists.berlios.de</a><br>
<a href="https://lists.berlios.de/mailman/listinfo/opensim-users" target="_blank">https://lists.berlios.de/mailman/listinfo/opensim-users</a><br>
<br>
_______________________________________________<br>
Opensim-users mailing list<br>
<a href="mailto:Opensim-users@lists.berlios.de">Opensim-users@lists.berlios.de</a><br>
<a href="https://lists.berlios.de/mailman/listinfo/opensim-users" target="_blank">https://lists.berlios.de/mailman/listinfo/opensim-users</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>(\__/)<br>(='.'=)<br>(")_(")<br>