New answers tagged sandbox
-1
I would like to add to and correct some of the initial comments regarding CDR. I would also like to highlight that I work for Votiro.
There are many vendors who claim that they provide CDR. Most of the solutions on the market are taking a document and converting it to an image. This process is highly secure but not productive at all. We call this Level 1 ...
3
CDR Overview
CDR (Content Disarm and Reconstruction) describes the process of creating a safe copy of an original file by including only the safe elements from the original file, as defined by the document manufacturer (e.g. Adobe for PDF, MSFT for Word etc.).
CDR Advantages
High Security
Protects from known and unknown attacks.
Deterministic – Since ...
4
CDR and analysis inside a sandbox are both techniques which have their own problems.
Sandboxes can be bypassed by clever attackers by basing the behavior of the malware on environment and time and thus not showing malicious behavior inside the sandbox.
CDR instead somehow must assume what kind of payload is allowed in the first place in order to remove ...
0
I don't think that running puppeteer as a non-root user requires any modification of the configuration of the underlying host, as there are a number of Docker images which do this successfully.
One example is Decktape which is built on top of Puppeteer. The Docker image (which has commands linked in the GH repo) runs as the user node and works on an ...
Top 50 recent answers are included
