Tag Info

Hot answers tagged

8

It seems to me you're discussing two things: sandboxing on the desktop and then strategies for user content access in sandboxed applications. Sandboxing There are many sandboxing models out there, including the ones used by OSes: Windows 8 WinRT Store Apps OS X Sandboxed Store Apps iOS Apps Android Apps Some apps are shipped sandboxed, for instance ...


1

To get to another aspect of the question: Same-Origin-Policy is an important security boundary and it sounds nice in theory. But, like with other security boundaries, it is often in the way so it gets frequently worked around in praxis. The most common workaround is to include third-party sides as script. Advertisements, tracking or social networks are ...


1

I think it comes down to what you consider to be a "same origin" for a desktop application. In a perfect world ignoring some Windows functionality: Is it a process? Process A can't access Process B memory. Is it a user? User A can't access User B's files. Is it user session? If you're not in Session 0, then you're not SYSTEM. So I think sandboxing a ...



Only top voted, non community-wiki answers of a minimum length are eligible