4 ms·

Windows 8 Metro apps can be written in real C++. How could they sandbox a custom C++ app? There's no virtual machine to do it. http://msdn.microsoft.com/en-us/

• drivebyacct2 14y ago
  It's C++/CX. It's not just "real C++".
  • contextfree 14y ago
    They can be written in ISO C++ (or if you're a masochist, in C) as well, just without some conveniences.
• barrkel 14y ago
  You don't need a virtual machine to sandbox C++; or rather, there's already a virtual machine in action, in the form of virtual memory and CPU privilege levels. The only way C++ (or any other native language) has to access to the outside its world is through calls to the kernel. Without direct file I/O APIs, options are even more limited (e.g. you can't easily write your own DLL loader).
• msftguy 14y ago
  OS X/iOS use a 'sandbox' driver that utilizes TrustedBSD MAC infrastructure ( https://developer.apple.com/library/mac/#documentation/Darwin/Reference/KernelIOKitFramework/mac_policy_h/index.html https://developer.apple.com/library/mac/#documentation/Darwi... ). Basically, most system calls can be verified against one or more policy modules, and blocked if non-compliant. Not really possible with Windows and its bajillion of syscalls (1000 in win32k alone afair)
• krasin 14y ago
  >How could they sandbox a custom C++ app? There's no virtual machine to do it. They could use NaCl [1] or develop a similar SFI technology just for Windows. [1] http://en.wikipedia.org/wiki/Google_Native_Client http://en.wikipedia.org/wiki/Google_Native_Client
• mkup 14y ago
  Virtual machine is not required for sandboxing C++ apps in 21st century. [1] http://code.google.com/p/nativeclient/ http://code.google.com/p/nativeclient/ [2] http://www.cl.cam.ac.uk/research/security/capsicum/ http://www.cl.cam.ac.uk/research/security/capsicum/
  • deleted 14y ago
    [deleted]
• bringking 14y ago
  It may be C++ but it is managed C++ that runs on the above the WinRT layer just like C#, and Javascript for metro. It will have the same restrictions as the other languages. It is actually interesting, in fact when you start a metro project at least in beta, you get the WinRT libraries and that's it. A ton of the traditional .NET classes have been moved into the WinRT library or removed all together.