View Single Post
  #12 (permalink)  
Old 09-03-2008, 06:03 PM
wige's Avatar
wige wige is offline
Moderator
WebProWorld Moderator
 
Join Date: Jun 2006
Location: United States
Posts: 2,651
wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9wige RepRank 9
Default Re: Google defines "Sandboxing"

Several things about Chrome's security model stand out to me, not the least of which is their sandbox approach. This would limit the possibility of a site in one tab (process) from communicating with another, preventing malicious scripts from affecting other sites. The approach to permissions seems interesting as well. By limiting the read and write capabilities of these processes, it may hinder the functionality of certain types of spyware.

However, since Javascript, applets and plugins all seem to share processes, this could be an easy attack vector.

Only time, and an army of hackers better than I, will tell.
__________________
The best way to learn anything, is to question everything.
Reply With Quote