4 ms·

Shopify seems to basically have given up on application-level sandboxing, and now relies on process-level sandboxing (e.g. seccomp). This is probably wise; the

Shopify seems to basically have given up on application-level sandboxing, and now relies on process-level sandboxing (e.g. seccomp). This is probably wise; the track record of in-language sandboxing is pretty bad (see also: Java applets.)

thegeomaster 10y ago
I was under the impression that JVM, CLR and probably e.g. V8 are reasonably secure. I'd like to learn more about recent sandbox-escaping vulnerabilities in these runtimes. Got any resources?
- __s 10y ago
  "reasonably secure" isn't good enough. Chrome puts additional sandboxing around V8
- sanxiyn 10y ago
  For JVM, consider this update which happened in 2016: "Multiple flaws were discovered in the Hotspot and Libraries components in OpenJDK. An untrusted Java application or applet could use these flaws to completely bypass Java sandbox restrictions. (CVE-2016-3606, CVE-2016-3587, CVE-2016-3598, CVE-2016-3610)" https://access.redhat.com/errata/RHSA-2016:1458 https://access.redhat.com/errata/RHSA-2016:1458