"Using Sandboxie Plus Snapshot Feature to Manage Legal Software with Monthly Online Requirement on an Air-Gapped System"

[ccchan234]

Title:
"Using Sandboxie Plus Snapshot Feature to Manage Legal Software with Monthly Online Requirement on an Air-Gapped System"

Post Body:
Hi everyone,

I’m using legal (non-pirated) software that requires an online check once a month for verification. As an air-gap advocate, I prefer to keep my systems offline to avoid potential data leaks. To work around this requirement while maintaining my air-gapped setup, I’ve come up with a method using Sandboxie Plus and its snapshot feature. Here’s how I plan to do it:

1. Set Up a Sandbox: Create a dedicated sandbox in Sandboxie Plus for the software.
2. Install the Software: Install the legal software inside the sandbox.
3. Take a Snapshot: Use Sandboxie Plus’s snapshot feature to save the state of the sandbox before granting file access.
4. Go Online Once: Temporarily connect to the internet, let the software verify, and then take another snapshot (this will be the "last touch" point).
5. Grant File Access: After verification, allow the software to access necessary files within the sandbox.
6. Monthly Cycle: At the end of each month:
   • Revoke file access (you can use a config file or Sandboxie’s settings to make this easier).
   • Revert to the "last touch" snapshot using Sandboxie Plus.
   • Go online briefly to let the software verify again.
   • Repeat the process.

This approach leverages Sandboxie Plus’s snapshot feature to minimize my system’s exposure to the internet while complying with the software’s online requirement.

Has anyone else tried something like this with Sandboxie Plus? Do you have any tips or suggestions to improve this method? I’d love to hear your thoughts!

Thanks in advance!

^--- processed using deepseek.

[ccchan234]

i'll say semi air gapped, not completely air gap. you know, sort of, as internet is essential nowadays

the idea is i dont mind they encrypt my data, i got backups.

i worry data leak.

and for data leak, you need data + internet connection.

those closed source SW could analysis your data every month and only send back in that ONE day in every cycle.

in the method above, they could send back nothing.

[DavidXanatos]

This should work as planned.