Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Today I have looked at the desktop application framework - Pokki. The first questions were: how it works and is it secured. What I have found about security architecture: Pokki Security Overview. So my questions are:

1) Is the sandbox architecture secure?

2) How can I test that a pokki application (or any other) has met all the requirements of this architecture (certified)?

share|improve this question
    
Secure from whose point of view? From a user's point of view? –  user606723 Aug 24 '11 at 17:05
    
@user606723 of course –  garik Aug 24 '11 at 17:06
    
@Rory Alsop thank you for edit –  garik Aug 25 '11 at 15:31
    
Secure for what, from whom? –  this.josh Aug 26 '11 at 1:56
    
The link to the Pokki Security Overview is broken. Does anyone have a more recent one? –  D.W. Sep 8 '12 at 19:32
add comment

2 Answers

up vote 3 down vote accepted

Pokki is secure the same way that chrome is.

  1. A Pokki process is severely limited and thus no malicious software can infect your system from within a Pokki without breaking several security layers simultaneously (very unlikely).
  2. There are no tests because the application itself doesn't have anything to do with the sandbox architecture except it runs ontop of it. I fit's a Pokku app then it's secure (in this way)

These security measures only stop malicious software from infecting your system.
It does not secure against anything else.

If you could be more specific about what you're trying to prevent, I could explain further.

share|improve this answer
add comment

You may want to check out this presentation that gives you a fairly detailed overview of the google chrome sandbox and some potential security concerns. Hope you find it interesting. http://www.matasano.com/research/Escaping_The_Sandbox-2010.pdf

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.