duncan Posted May 21, 2011 Report Share Posted May 21, 2011 BitBox Could Be Safest Windows Browser Ever by Carlo Orlando on 20110520 @ 10:12AM EST | google it | send to friends Filed under Security | (related terms: bitbox, operating system, browser, firefox, linux) German security technologies company Sirrix AG has recently released what some critics are calling the most secure web browser in existence: a sandboxed version of Mozilla firefox, known as BitBox. What makes this variation of Firefox most intriguing is that the web browser runs completely independent of Microsoft Windows. The program uses VirtualBox 4.04 (asoftware virtualization program by Sun Microsystems) and a securely locked-down ("hardened") implementation of Debian 6 Linux. The web browser (Firefox 4) then runs in a virtual machine with its own operating system (Debian 6 Linux), keeping it completely separate from the rest of the users' own operating system (Windows). BitBox Improves Sandboxing Format BitBox (short for "browser in a box") differs from the traditional sandboxing format of standard browsers because it runs a separate 'guest' operating system, meaning that all browser activity is isolated and kept secluded from the base operating system. If a user visited an infected web site serving up malware, for example, Microsoft Windows would not be affected. This is an extremely powerful security feature, especially if a PC is shared amongst multiple users, such as family members. (Source: pcworld.com) When BitBox is launched, the user is said to have all of the same Internet experiences as they would when running Firefox 4 in its standard format. A shared folder between both operating systems is accessible through a separate user account. To keep things extra secure, uploads and Internet access are disabled on the base operating system once BitBox is launched. (Source: pcworld.com) Boot Image Reset Ensures Added Security Its greatest feature, however, rests in the fact that every time the browser is restarted, BitBox resets to a different certified boot image. This means that any existing malware that might have come through in the previous session is isolated and eliminated -- all without having to continually run an antivirus scan of the system to weed out each individual piece of malware. (Source: yahoo.com) BitBox Download As it stands, BitBox runs on Windows XP, Vista and Windows 7, in addition to various Linux distributions, including Debian, Ubuntu, OpenSUSE and Gentoo. BitBox can be downloaded free of charge from Sirrix's website, though the download page is in German. Note that the Bitbox download file is a whopping 900 megabytes, so be prepared for a long wait. A DVD version of the software is also available. At the time of writing we were unable to locate an English download page with instructions. Link to comment Share on other sites More sharing options...
ritchie58 Posted May 22, 2011 Report Share Posted May 22, 2011 Interesting concept. I was just wondering how this browser would perform. Weather there would be any kind of degradation in browser speed with the integration of the sandbox feature and the Linux OS into the browser itself and would all of Firefox's features still work normally (eg. add-ons, themes and plug-ins). Having the extra hard drive space available is a consideration when using a virtual operating system also. As a Firefox user I would have to say that's worth looking into further. Thanks for the heads up on that Duncan. Link to comment Share on other sites More sharing options...
WacoJohn Posted May 22, 2011 Report Share Posted May 22, 2011 There is a product called SPLASHTOP OS which takes a similar approach .. though I don't think as thoroughly as BitBox is described. It is certainly smaller, .. I am sure ... nowhere NEAR 900MB. It doesn't use VM. It is a dual boot product .. booting up a MINIMAL Linux with a Browser in it. http://www.splashtop.com/os Link to comment Share on other sites More sharing options...
sweidre Posted May 22, 2011 Report Share Posted May 22, 2011 Hi, Very interesting topic of yours! Personally, I believe in a virtual layer approach (approx. = sandboxie approach) covering at least the systemdrive! Of course, this raises some questions: 1. When in Bitbox mode will then added Favorites( = Bookmarks ) when browsing, get thru the layer to the core systemdrive (OS) for permanent storage? 2. When in Bitbox mode will then added (updated) items to computer-based malwaredatabases get thru the layer to the core systemdrive for permanent storage? 3. Can Bitbox work with another OS than Linux? 4. Can Bitbox work with another browser than FF? (Opera or Chrome)? 5. I hope, that the size of the setup file of Bitbox (900 MB) can be reduced in the future! German-made products are often too huge! (Those Germams he,he..) I hope, that another producer will bring forward a more slimmed version! (On the other hand, if the 900 MB also at the end will cover the size of the virtual layer (sandboxie) as well, the size must in my mind be approx. 1 GB or maybe more!) As I know German as my second foreign language (learnt in school), I will soon study the German installtion instructions to get some questionmarks straightened out, hopefully! Cheers, sweidre Link to comment Share on other sites More sharing options...
ritchie58 Posted May 26, 2011 Report Share Posted May 26, 2011 As compelling as it was to try this "armored" version of Firefox, after doing some research, I discovered that since BitBox was originally developed for the German government it only comes with German language install instructions and settings. So unless you have a working knowledge of the German language this browser would be unusable. Also Firefox can not be customized with add-ons, themes or plug-ins since it reverts back to it's default state once the browser is closed and rebooted. So most people would not find this browser comfortable for everyday use who are use to the normal Firefox with all it's tweaks and customizations. You would also need about 2 gigs of space on your hard drive for BitBox. Aside from that if they ever come out with a English language version I would still like to give this browser a test spin someday. Link to comment Share on other sites More sharing options...
sweidre Posted May 26, 2011 Report Share Posted May 26, 2011 As compelling as it was to try this "armored" version of Firefox, after doing some research, I discovered that since BitBox was originally developed for the German government it only comes with German language install instructions and settings. So unless you have a working knowledge of the German language this browser would be unusable. Also Firefox can not be customized with add-ons, themes or plug-ins since it reverts back to it's default state once the browser is closed and rebooted. So most people would not find this browser comfortable for everyday use who are use to the normal Firefox with all it's tweaks and customizations. Aside from that if they ever come out with a English language version I would still like to give this browser a test spin someday. Hi, thanks fo the info Ritchie, Even if this version of Bitbox is now only in German, I think, that if the product turns out to be really useful, it will in the future be issued in other languages, as well! First of all into English, of course! (As it has not been translated into other languages yet, I regard the Bitbox as not yet having left the alpha or beta stage!) We do not what FF version will be used! FF without extension hmm...., I have not ever tried any version of FF without any extensions. I think, that it is too early to spend any more time regarding Bitbox, except doing a Google search for "Bitbox" now and then to keep informed about its development! I think & hope, that any virtual layer approach will do for any OS or browser chosen! Cheers, sweidre Link to comment Share on other sites More sharing options...
ritchie58 Posted May 26, 2011 Report Share Posted May 26, 2011 According to the information I obtained the latest build of BitBox comes with the newest 4.0.1 version of Firefox. I hope they do release a English version soon. I would really love to try it! I'm going to see if CNET has it as a download. If it's there then I can add it to my download watch list which tells me via email when software I've downloaded from CNET is updated. It wouldn't surprise me though if it's not available through CNET. Link to comment Share on other sites More sharing options...
ritchie58 Posted May 26, 2011 Report Share Posted May 26, 2011 I just checked and CNET does not have BitBox as a download as I feared. Link to comment Share on other sites More sharing options...
pooja007 Posted August 9, 2011 Report Share Posted August 9, 2011 There is a product called SPLAS-HTOP OS which takes a similar approach .. though I don't think as thoroughly as Box is described. It is certainly smaller, .. I am sure ... nowhere NEAR 900MB. Link to comment Share on other sites More sharing options...
pooja007 Posted August 9, 2011 Report Share Posted August 9, 2011 BitBox Could Be Safest Windows Browser Ever by Carlo Orlando on 20110520 @ 10:12AM EST | google it | send to friends Filed under Security | (related terms: bitbox, operating system, browser, firefox, linux) German security technologies company Sirrix AG has recently released what some critics are calling the most secure web browser in existence: a sandboxed version of Mozilla firefox, known as BitBox. What makes this variation of Firefox most intriguing is that the web browser runs completely independent of Microsoft Windows. The program uses VirtualBox 4.04 (asoftware virtualization program by Sun Microsystems) and a securely locked-down ("hardened") implementation of Debian 6 Linux. The web browser (Firefox 4) then runs in a virtual machine with its own operating system (Debian 6 Linux), keeping it completely separate from the rest of the users' own operating system (Windows). BitBox Improves Sandboxing Format BitBox (short for "browser in a box") differs from the traditional sandboxing format of standard browsers because it runs a separate 'guest' operating system, meaning that all browser activity is isolated and kept secluded from the base operating system. If a user visited an infected web site serving up malware, for example, Microsoft Windows would not be affected. This is an extremely powerful security feature, especially if a PC is shared amongst multiple users, such as family members. (Source: pcworld.com) When BitBox is launched, the user is said to have all of the same Internet experiences as they would when running Firefox 4 in its standard format. A shared folder between both operating systems is accessible through a separate user account. To keep things extra secure, uploads and Internet access are disabled on the base operating system once BitBox is launched. (Source: pcworld.com, pc security solution) Boot Image Reset Ensures Added Security Its greatest feature, however, rests in the fact that every time the browser is restarted, BitBox resets to a different certified boot image. This means that any existing malware that might have come through in the previous session is isolated and eliminated -- all without having to continually run an antivirus scan of the system to weed out each individual piece of malware. (Source: yahoo.com) BitBox Download As it stands, BitBox runs on Windows XP, Vista and Windows 7, in addition to various Linux distributions, including Debian, Ubuntu, OpenSUSE and Gentoo. BitBox can be downloaded free of charge from Sirrix's website, though the download page is in German. Note that the Bitbox download file is a whopping 900 megabytes, so be prepared for a long wait. A DVD version of the software is also available. At the time of writing we were unable to locate an English download page with instructions. Link to comment Share on other sites More sharing options...
ritchie58 Posted August 9, 2011 Report Share Posted August 9, 2011 BitBox's download site does have English language download instructions now. I haven't tried it though so I don't know if the software language strings have been translated to English as well. Anybody know? Link to comment Share on other sites More sharing options...
duncan Posted August 12, 2011 Author Report Share Posted August 12, 2011 There are translations for english users going on, however I would leave it for awhile and see how it goes. Given that it is developed by the German government, if they persevere with it, it should end up being really good and fully available in english. For avid window users who want a rock hard browsing experience this might be the best solution. The other side of the fence are secure linux based cd/usb booting browser distros designed by the U.S. Miltary: http://news.techworl...remote-workers/ http://linux.slashdo...ment-of-Defense Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.