Reply to topic  [ 6 posts ] 
Let's sandbox the lot! 
Author Message
I haven't seen my friends in so long
User avatar

Joined: Thu Apr 23, 2009 6:36 pm
Posts: 5161
Location: /dev/tty0
Reply with quote
Yesterday, two stories emerged which caught my attention, the first was saying how Dell has created a version of Firefox that runs in a sandbox, the second said how Adobe are going to sandbox Reader.

I find it interesting that this is being done for the reasons it is being done. Chrome sandboxes tabs, IIRC, to enhance performance; if something crashes it only crashes that tab, not the whole browser.
By sandboxing something like Adobe Reader, all you are doing is saying "We really can't be arsed to fix this, lets put it in a situation where it doesn't need to be fixed", isn't that like having a leaky bucket and rather than patching it just putting it into a larger bucket? It works, but it's lazy.

Is this the new lazy era of computing?* If it's a security risk shove it in a sandbox?

*The previous era being lack of memory management and consideration for CPU usage because the hardware will support anything we write


Wed Jul 21, 2010 10:05 am
Profile WWW
What's a life?
User avatar

Joined: Thu Apr 23, 2009 8:25 pm
Posts: 10691
Location: Bramsche
Reply with quote
Google sandbox tabs, so that, if they die, they don't bring the whole browser down AND, if a site attempts to attack the browser and cause a buffer overflow, the attack stays in the sandbox - exactly the same as with Firefox and Adobe Reader - except that Chrome does its own sandboxing.

Security is the only real reason for sandboxing something like that - other than testing products, before releasing them.

_________________
"Do you know what this is? Hmm? No, I can see you do not. You have that vacant look in your eyes, which says hold my head to your ear, you will hear the sea!" - Londo Molari

Executive Producer No Agenda Show 246


Wed Jul 21, 2010 11:10 am
Profile ICQ
Spends far too much time on here

Joined: Fri Apr 24, 2009 9:44 pm
Posts: 4860
Reply with quote
i've been banging on about sand boxing for years, especially web/file browsers

i'm just glad that the big boys are starting too see the security light …

_________________
Hope this helps . . . Steve ...

Nothing known travels faster than light, except bad news ...
HP Pavilion 24" AiO. Ryzen7u. 32GB/1TB M2. Windows 11 Home ...


Wed Jul 21, 2010 2:17 pm
Profile
Legend
User avatar

Joined: Fri Apr 24, 2009 2:02 am
Posts: 29240
Location: Guantanamo Bay (thanks bobbdobbs)
Reply with quote
MrStevenRogers wrote:
i've been banging on about sand boxing for years, especially web/file browsers

i'm just glad that the big boys are starting too see the security light …

Yes browsers should be more secure, if sand boxing achieves that then it is clearly the way to go.

_________________
Do concentrate, 007...

"You are gifted. Mine is bordering on seven seconds."

https://www.dropbox.com/referrals/NTg5MzczNTk

http://astore.amazon.co.uk/wwwx404couk-21


Thu Jul 22, 2010 10:29 am
Profile
Doesn't have much of a life
User avatar

Joined: Thu Apr 23, 2009 8:30 pm
Posts: 1757
Location: Cardiff, Wales
Reply with quote
Now they just need to sandbox Windows...

_________________
G.


Fri Jul 23, 2010 2:04 pm
Profile WWW
I haven't seen my friends in so long
User avatar

Joined: Thu Apr 23, 2009 6:58 pm
Posts: 8767
Location: behind the sofa
Reply with quote
I just wished the Firefox sandbox actually worked properly. When Flash crashes now, I get plugin-container.exe hanging and stopping FF dead. I can't switch tabs because it doesn't respond, although it often comes back for a second or so if you leave it long enough.

_________________
jonbwfc's law: "In any forum thread someone will, no matter what the subject, mention Firefly."

When you're feeling too silly for x404, youRwired.net


Fri Jul 23, 2010 2:21 pm
Profile WWW
Display posts from previous:  Sort by  
Reply to topic   [ 6 posts ] 

Who is online

Users browsing this forum: No registered users and 21 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group
Designed by ST Software.