Firefox to use Flash Player sandbox

February 10, 2012

The new Flash Player sandbox for Firefox is currently still in public beta mode. Adobe has decided to sandbox each plugin process to ensure that  a plugin crash will not occur with the entire web browser (one of the main reasons why Apple never introduced Flash).  It appears though, that there are no security restrictions on the plugin process. Mozilla has previously rolled out an out-of-process plugin support in previous versions of Firefox but the Adobe sandboxing appears to take this one step further.

Flash Player Protected Mode creates a separate process but the app and OS-level security controls will be restricted but not from a functionality perspective.  Adobe calls this the ‘broker process’. This is a privileged process that runs with default rights and provides secure access to specific resources not available in the sandbox. When writing content within the sandbox, if there is a need to store data, then the LSO will handle this by requesting the broker to write the LSO content to the disk. This restricts where the content can be written too on the user’s hard drive.Comments

Tagged with:

Leave a Comment

Please keep in mind that comments are moderated and rel="nofollow" is in use. So, please do not use a spammy keyword or a domain as your name, or it will be deleted. Let us have a personal and meaningful conversation instead.

You must be logged in to post a comment.

IT MAGAZINES: Hakin9 Magazine | Pentest Magazine | eForensics Magazine | Software Developer's Journal | Hadoop Magazine | Java Magazine
IT Blogs: Hakin9 Magazine Blog | Pentest Magazine Blog | eForensics Magazine Blog | Software Developer's Journal Blog | Hadoop Magazine Blog | Java Magazine Blog
IT ONLINE COURSES: Pentest Laboratory
JOB OFFERS FOR IT SPECIALIST: Jobs on Hakin9 Magazine | Jobs on Pentest Magazine | Jobs on eForensics Magazine | Jobs on Software Developer's Journal | Jobs on Java Magazine | Jobs on Hadoop Magazine
Hakin9 Media Sp. z o.o. Sp. komandytowa ul. Postępu 17D, 02-676 Warszawa