Adobe adds Flash sandboxing to Firefox

[Concerned User]

http://www.theregister.co.uk/2012/02...ndbox_firefox/

Adobe's beta for flash sandboxing in firefox (flash incubator):

http://labs.adobe.com/downloads/flas...incubator.html


Better late than never

[eyeb]

yeah i saw this on lifehacker i think and i'll say the same thing...

doesn't the plugin container do this? I mean I know the "sandboxing" adobe describes is more like sandboxie, but for the size that it'll add and performance on older machine :S I don't know if I'd want it...

[Anupam]

In Chrome, it uses the sandboxing capabilities of Chrome, but what about on Firefox? Firefox has no sandboxing presently... so, if this will increase memory usage of Firefox, or any other such disadvantage, then it will be a problem.

Plugin container is not a sandboxing technique... it just creates another process... so that if that process crashes, it does not affect the browser.

[Concerned User]

Originally Posted by Anupam

In Chrome, it uses the sandboxing capabilities of Chrome, but what about on Firefox? Firefox has no sandboxing presently... so, if this will increase memory usage of Firefox, or any other such disadvantage, then it will be a problem.

Yes, I hope it does not end up creating more bloat!

According to ghacks:

http://www.ghacks.net/2012/02/07/lat...s-for-firefox/

Flash Player Protected Mode aims to limit the impact of Flash based attacks in Firefox on Windows systems. The new Flash Player feature is compatible with Firefox 4.0+ on Windows Vista or higher. Only a 32-bit version of the Flash Player release is available for download.

and further....

The security mode is automatically enabled when users view Flash Player files in the Firefox web browser. Flash contents are executed in a restricted environment that prevents attacks from reaching the operating system or other applications. It is basically a sandbox comparable with Google Chrome’s sandboxing technology, Protected Mode in Adobe Reader, and Protected View in Office 2010.

Sounds promising, but looks like it will run as two separate process and will be active if you view sites with flash content.

Adobe notes that these are the “broker and sandbox” processes which only run if Protected Mode is enabled. These are child processes of the plugin-container.exe process if enabled in the browser. Plugin-Container adds crash protection to the browser.

[Anupam]

Windows Vista or higher.. good... so am safe from this flash menace .

[J_L]

I thought it was already here. Guess not for the Firefox version.