Today I have looked at the desktop application framework - Pokki. The first questions were: how it works and is it secured. What I have found about security architecture: Pokki Security Overview. So my questions are:

1) Is the sandbox architecture secure?

2) How can I test that a pokki application (or any other) has met all the requirements of this architecture (certified)?

  • Secure from whose point of view? From a user's point of view?
    – user606723
    Aug 24 '11 at 17:05
  • @user606723 of course
    – garik
    Aug 24 '11 at 17:06
  • You may want to check out this presentation that gives you a fairly detailed overview of the google chrome sandbox and some potential security concerns. Hope you find it interesting. matasano.com/research/Escaping_The_Sandbox-2010.pdf
    – Eric Ness
    Aug 25 '11 at 4:56
  • Secure for what, from whom?
    – this.josh
    Aug 26 '11 at 1:56
  • The link to the Pokki Security Overview is broken. Does anyone have a more recent one?
    – D.W.
    Sep 8 '12 at 19:32

Pokki is secure the same way that chrome is.

  1. A Pokki process is severely limited and thus no malicious software can infect your system from within a Pokki without breaking several security layers simultaneously (very unlikely).
  2. There are no tests because the application itself doesn't have anything to do with the sandbox architecture except it runs ontop of it. I fit's a Pokku app then it's secure (in this way)

These security measures only stop malicious software from infecting your system.
It does not secure against anything else.

If you could be more specific about what you're trying to prevent, I could explain further.

  • Can you please provide some sort of reference or document? I've never heard of Pokki and can't find anything on their site. What do they use to build their sandbox? What are the several layers if they do happen to use anything more than integrity levels? May 26 '15 at 18:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.