Category Archives: Uncategorized

Sandboxie-Plus v1.15.12 Released & New Insider Build

Sandboxie Plus version 1.15.12 / 5.70.12 introduces a range of enhancements, fixes, and usability improvements. This release adds Indonesian language support to the Plus UI, a new template for the WeType Input Method Editor (IME), and support for proxy configuration using host names instead of raw IPs by resolving them at WSA_Startup. Sandboxie can now bind to network adapters rather than specific IP addresses, providing more flexibility in networking setups. Additionally, support for the %ProgramFiles(x86)% environment variable has been introduced, along with a new TemplateDefaultFolders entry to define standard paths in privacy-enhanced boxes.

Several changes improve usability and performance. The "Move Sandbox" list sorting behavior has been refined, and personal details like name and hardware ID in the Support tab are now hidden by default. An experimental alternative proxy relay implementation has also been added, shifting from socket modification to relay threads.

Numerous issues have been addressed. These include the BoxAlias not appearing in the "run in box" dialog, UI inconsistencies after using Ctrl+F, and persistent high I/O usage by SbieCtrl.exe and SandMan.exe. Registry access functions were hardened with additional checks, and problems with Tencent TIM, MSI installer behavior, and oversized Sandboxie.ini files have been resolved. Other fixes address UI glitches, translation inconsistencies, drag-and-drop issues, and crashes related to SbieDll.dll. Compatibility problems with PingInfoView and a loop condition in CollectProducts() have also been fixed.

For a full list of changes please review the change log.

Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.15.12

May Insider Download (for great patreons and above only): https://github.com/DavidXanatos/Sandboxie-Next/releases/tag/May-01-2025

Major Privacy v0.97.2 BETA

This release of MajorPrivacy introduces several powerful new features and important improvements. A DNS filter server has been added, enabling more granular control over DNS traffic. Users can now define Windows Firewall rule templates with wildcard-enabled paths, significantly streamlining rule creation. The ingress view includes a new operation filter, and program items in the UI now display memory usage for log and trace data, with a total memory usage indicator for services. We've also introduced trace presets per process and added an option to enable debugging of processes running in enclaves. For easier navigation, a new "expand/collapse all" button has been added to the program tree.

Path rule handling has been reworked with a more flexible mechanism supporting DOS-style patterns, with plans for a future rule import system. The firewall popup now ignores incoming connection attempts to avoid unnecessary prompts. Internally, the project structure, framework, and variant implementation have been refactored and cleaned up, resulting in a more stable and maintainable codebase. Log and trace data are now managed using dedicated memory pools per program, improving performance and reliability.

This version also resolves a deadlock issue during program list cleanup and a crash that could occur when stopping the service while the UI remained open.

Download: https://github.com/xanasoft/MajorPrivacy/releases/tag/v0.97.2

Sandboxie-Plus Insider Build April 04 2025

A new Sandboxie-Plus Insider build based on 1.15.11 is available for Great Patreon's and above: https://github.com/DavidXanatos/Sandboxie-Next/releases/tag/April-04-2025 as well as to all holders of DEVELOPER type supporter certificates.

Exclusive Insider Features

The Insider builds introduce several powerful enhancements designed to improve security, usability, and customization in Sandboxie-Plus:

  • Isolated Desktops – Run applications in their own fully isolated Windows desktop environment, separate from the default user desktop.

  • Isolated Clipboard – Each sandbox can have its own independent clipboard, fully isolated from the host system, with options for read-only or write-only integration.

  • Portable Sandboxes – Use sandboxes configured in independent .ini files, enabling fully self-contained and portable sandbox setups.

Sandboxie-Plus v1.15.10 Released

This release primarily addresses critical compatibility issues with Firefox, ensuring that version 137.0 and later now runs correctly within Sandboxie Plus without generating SBIE2328 notifications. This fix restores proper functionality for Firefox users, resolving a major disruption introduced in the previous version.

In addition to the Firefox fix, this update introduces a new configuration option, BindAdapterIP, which allows users to bind sandboxed applications to a specific host IP address. This can be defined globally or per process via the INI file, offering greater control over network behavior within the sandbox. It’s important to note that the specified IP must be bound to a local network interface, or connections will fail.

Several additional issues have been resolved, including problems affecting Thunderbird. Memory leaks related to process command line retrieval have been addressed, and missing components like SbieShellExt.dll have been restored.

For a full list of changes please review the change log.

Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.15.10

Sandboxie-Plus 1.15.9 Released

Sandboxie Plus 1.15.9 delivers a robust update centered on security, stability, and compatibility—particularly for users of modern web browsers and those prioritizing privacy and sandbox integrity.

A key highlight is the improved compatibility with Firefox 137 Nightly and later, resolving previous hooking issues that caused instability or functional limitations. Firefox now runs smoothly within sandboxed environments once again.

Security enhancements are another major focus. This release addresses a potential IP leakage vulnerability affecting dual-stack IPv4/IPv6 setups when only one proxy type was configured. Connections now fail gracefully if no proxy is set for the relevant IP type, effectively preventing unintentional bypasses and preserving user anonymity—a critical improvement for users relying on VPNs or proxies.

Additionally, a serious local privilege escalation vulnerability tied to the HostenjectDll mechanism has been patched, thanks to responsible disclosure. This fix strengthens Sandboxie's role as a secure execution layer.

For advanced users, a new debug option OpenAllSysCalls=y has been added, allowing unrestricted system call access for testing purposes. However, due to its permissive nature, it should be used with caution.

Among the usability improvements, users can now duplicate sandboxes and their contents directly from the UI, streamlining environment management. The update also introduces a new developer certificate type that disables user-mode component verification for advanced use cases. This node-locked certificate is available at no additional cost to existing Contributor or Eternal/Huge certificate holders upon request.

Overall, version 1.15.9 brings a thoughtful balance of new features, critical fixes, and user-focused enhancements, reinforcing Sandboxie Plus as a powerful tool for secure application isolation.

For a full list of changes please review the change log.

Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.15.9

Major Privacy v0.97.1 BETA

Version 0.97.1 of MajorPrivacy introduces several new features, improvements, and fixes, enhancing both functionality and reliability. This update continues to refine the tool’s ability to manage privacy, security, and process control in modern Windows environments.

In this release, an optional user password cache is now available, allowing users to store credentials locally if desired, to simplify certain interactions. The tray menu has also been expanded, providing more convenient access to frequently used functions directly from the system tray. To improve visibility into network activity, additional filters have been added to the network views, giving users more granular control over what data is displayed.

Several significant changes have also been made to enhance usability and functionality. Signature verification has been reworked and improved. The Ingress record has been moved to its own dedicated file, separating it from other logs for better organization. Along with this, file naming conventions have been revised: AccessLog.dat has been renamed to AccessRecord.dat and TrafficLog.dat is now called TrafficRecord.dat. Since MajorPrivacy is still in beta, the old files will not be automatically migrated or cleaned up, so users are encouraged to manually delete them from C:ProgramDataXanasoftMajorPrivacy if they are no longer needed.

Another important change is that, by default, no records (Traffic, Execution, Ingress, Access) are stored to disk anymore. This change reflects a stronger focus on privacy by default, ensuring that only users who explicitly choose to enable logging will have data written to disk. Furthermore, the services configuration file has been renamed to PrivacyAgent.ini to better align with the service’s role. Finally, popup notifications have been cleaned up to avoid showing redundant entries, improving readability and reducing noise in high-activity environments.

This release also addresses several critical bugs and compatibility issues. An incompatibility between ZwLockRegistryKey usage and HVCI (Hypervisor Code Integrity) has been resolved, ensuring MajorPrivacy works correctly on systems with HVCI enabled. Multiple UI crashes related to process protection and DLL loading have been fixed, significantly improving stability. Lastly, a crash occurring when setting the firewall filtering mode has been corrected, ensuring smoother configuration changes.

With these additions, improvements, and fixes, MajorPrivacy 0.97.1 offers a more robust and reliable experience, particularly for users working with advanced security configurations and detailed process monitoring needs.

Download: https://github.com/xanasoft/MajorPrivacy/releases/tag/v0.97.1

Task Explorer v1.6.2 Released

Download: https://github.com/DavidXanatos/TaskExplorer/releases/tag/v1.6.2

Added

  • added driver DynData updater, on start when the current DynData is not compatible with the windows kernel TE will offer an option to update the DynData

    • Note: the updater extracts the DynData from regular SystemInformer canary update packages.

  • added preparations (not enebled) to use the old driver on windows 7

Changed

  • moved translations to translations.7z

Fixed

  • incompatybility witn windows 7 introduced in 1.16.1

  • fixed crash in module search window

  • fixed performance issue with codepage detection