4 ms·
Applying sandbox around Safari with a single click
- verdant 18y agoThis would seem to address some of the concerns about Safari that are being discussed along side the recent Black Hat conference. It was mentioned earlier that Chrome had been the only browser not to fall due to the sandbox method of thinking. Seeing as Chrome is based on webkit, it is basically "Safari in a sandbox".
- verdant 18y agoEdit: My mistake - I wrote Black Hat, but it was actually Pwn2Own. Sorry for any confusion.
- sant0sk1 18y agoThis is a security non-starter until Apple enables the sandboxing by default on all systems. Average users just flat out won't do this. They won't even know about it.
- nirmal 18y agoYes, but I think it's safe to assume that HN readers are not average users. We can spread the word of safety :).
- blasdel 18y agoThe Sandbox Policy language is parsed by sandbox-compilerd, which embeds TinyScheme, and is sandboxed metacircularly.