Shoulder Surfing defenses (hiding PID's and such)

[ghost]

I think Sandboxie momentarily lists PID's when it launches a sandboxed process. Is it possible to disable that feature to improve shoulder surfing protection?

This should probably be placed in "Ideas and Suggestions" category.

[offhub]

If you use the Sandboxie Plus interface, you can turn off the PID column.
If you use the Sandboxie Classic interface, you can resize the PID column.

[bastik-1001]

In the same way as offhub describes, within Sandman you can choose not to display the title and the path, if they consider those to be something an onlooker should not be able to see. The window title of a window under Sandboxie's control, contains potentially private information, that is displayed in the sandbox manager, while the window is not shown.

[ghost]

I knew about the columns, but I think the window I saw flashing for a second was a CMD window, not a GUI one.

[ghost]

Now I know for sure that Sandboxie briefly displays a window with PID's when a sandboxed application is launched. This shouldn't be happening. To an advanced attacker knowing PID and/or TID is almost as bad as knowing victim's password.

[offhub]

Sandboxie will not run any additional programs unless you configure it to do so. If you can provide some information, such as what application and configuration you were using, we may be able to help you.

[diversenok]

To an advanced attacker knowing PID and/or TID is almost as bad as knowing victim's password.

This is total nonsense. PID and TID values give you nothing. They are easy to guess (as they are small multiples of 4 allocated in sequential blocks); they are possible to enumerate in many different ways, even from the context of the strongest browser sandboxes; and they do not offer any advantages for gaining more access than allowed. The icons on your taskbar reveal many times more information to attackers then your PID values.

[bastik-1001]

Now I know for sure that Sandboxie briefly displays a window with PID [...]
How did you get to know? Or in other words, how can it be reproduced?

[....] knowing PID and/or TID is almost as bad as knowing victim's password.

Are you confusing it with a PIN? (many of the generated PIDs are surely someone's PIN) If not, what can be gained by knowing it?

[bastik-1001]

Well, today I learned about Parent PID Spoofing. A lot more background on it. This is a Windows issue and anything started in the sandbox should stay in the sandbox, as far as Sandboxie is concerned.