2 ms·
maybe if they had a sane security model for the browser this wouldn't be an issue? I have to believe chrome team is thinking this with how the browser puts eac
by taf2 15y ago
maybe if they had a sane security model for the browser this wouldn't be an issue? I have to believe chrome team is thinking this with how the browser puts each renderer into a sandbox process... but maybe MS doesn't want to do that because of how they've HW accel'ed so much?
- Someone 15y agoSandboxing builds on top of existing OS functionality to give each sandbox a separate address space and to guarantee freeing of resources on process exit. The sandboxing code would have to rely on the video drivers ("the OS running on the card") to similarly manage resources on a video card. Problem with that is that the video card may not support some required functionality or that the driver may be buggy. Top of the line video hardware has a shelf life of say a year. That puts serious pressure on producing drivers fast. In addition, there is pressure to produce fast drivers, as that is what reviewers look at. You cannot get fast reliable drivers soon, so drivers will be buggy, incomplete, etc. You cannot build reliable sandboxing on top of buggy drivers.