Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

CDMs are sandboxed, which is an improvement over the NPAPI plugins. I don't think we have to worry much about Sony rootkit attacks at least.


> which is an improvement over the NPAPI plugins.

why does that argument get thrown around so much? flash runs in sandboxed processes too these days.


It runs in a separate process. I don't think that process is sandboxed in Firefox. And you probably can't restrict it too much or most Flash apps wouldn't work.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: