3 ms·
CDMs are sandboxed, which is an improvement over the NPAPI plugins. I don't think we have to worry much about Sony rootkit attacks at least.
by metajack 9y ago
CDMs are sandboxed, which is an improvement over the NPAPI plugins. I don't think we have to worry much about Sony rootkit attacks at least.
- the8472 9y ago> which is an improvement over the NPAPI plugins. why does that argument get thrown around so much? flash runs in sandboxed processes too these days.
- metajack 9y agoIt runs in a separate process. I don't think that process is sandboxed in Firefox. And you probably can't restrict it too much or most Flash apps wouldn't work.