Author Topic: Isolate desktop versions of web apps?  (Read 1217 times)

shmu26

  • Active Testers
  • Sr. Member
  • *****
  • Posts: 438
  • Win10 x64 latest stable
Isolate desktop versions of web apps?
« on: October 22, 2018, 08:12:34 am »
What about the desktop versions of Slack, Wavebox, Toggl, etc?
Should they be isolated? What are the security risks?
And what if I run them from Program Files, instead of from Appdata?
I am particularly interested in Toggldesktop, because that's the one I actually use.
https://toggl.com
https://toggl.com/toggl-desktop/
Toggldesktop works when isolated, but it does not respond to keyboard shortcuts to start and stop the timer.
« Last Edit: October 22, 2018, 10:35:04 am by shmu26 »

fixer

  • Administrator
  • Hero Member
  • *****
  • Posts: 1395
Re: Isolate desktop versions of web apps?
« Reply #1 on: October 22, 2018, 12:18:50 pm »
There was a blogpost about what programs should be isolated here https://forum.rehips.com/index.php?topic=9542.0
From this blogpost and from the official site description of what this program does, I personally wouldn't isolate Toggl.

shmu26

  • Active Testers
  • Sr. Member
  • *****
  • Posts: 438
  • Win10 x64 latest stable
Re: Isolate desktop versions of web apps?
« Reply #2 on: October 22, 2018, 05:21:04 pm »
Thanks fixer.
Since apps of this type display content from a remote server, I thought they might be similar to a browser. Some apps, such as Slack, display what you would see if you logged on to the website.
Toggl used to be like that, but now it has a very different GUI from the webpage, although the data it presents is essentially the same.
« Last Edit: October 22, 2018, 05:26:47 pm by shmu26 »

fixer

  • Administrator
  • Hero Member
  • *****
  • Posts: 1395
Re: Isolate desktop versions of web apps?
« Reply #3 on: October 22, 2018, 07:49:45 pm »
This software is active and updated.
It doesn't work with files (like Word for example).
I haven't heard of any critical exploits.
While it's internet-facing, it doesn't work as a server (allowing any client to connect and interact with it) and it usually connects to relatively trusted servers (like pool of servers mantained by developers).

Yeah, I know, it's just an approximate and not 100% precise info. But I wouldn't isolate them as I consider them a low-risk programs.

shmu26

  • Active Testers
  • Sr. Member
  • *****
  • Posts: 438
  • Win10 x64 latest stable
Re: Isolate desktop versions of web apps?
« Reply #4 on: October 23, 2018, 01:11:02 pm »
That's an interesting analysis.
More knowledge = less paranoia.