Adobe confirms Flash Player is sandboxed in Safari for OS X Mavericks

After years of fighting malware and exploits facilitated through Adobe's Flash Player, the company is taking advantage of Apple's new App Sandbox feature to restrict malicious code from running outside of Safari in OS X Mavericks.



As outlined in a post to Adobe Secure Software Engineering Team (ASSET) blog, the App Sandbox feature in Mavericks lets Adobe limit the plugin's capabilities to read and write files, as well as what assets Flash Player can access.


Adobe platform security specialist Peleus Uhley explained that in Mavericks, Flash Player calls on a plugin file - specifically com.macromedia.Flash Player.plugin.sb - used to define security permissions defined by an OS X App Sandbox. The player's capabilities are then restricted to only those operations that are required to operate normally.


In addition, Flash Player can no longer access local connections to device resources and inter-process communications (IPC) channels. Network privileges are also limited to within OS X App Sandbox parameters, preventing Flash-based malware from communicating with outside servers.


Uhley noted that the company has effectively deployed some method of sandboxing with Google's Chrome, Microsoft's Explorer and Mozilla's Firefox browsers. Apple will now be added to that list as long as users are running Safari in Mavericks.


'Safari users on OS X Mavericks can view Flash Player content while benefiting from these added security protections,' Uhley said. 'We'd like to thank the Apple security team for working with us to deliver this solution.'


Comments

Post a Comment

Popular posts from this blog

Eset nod32 ativirus 6 free usernames and passwords

Image
                              Hi friends,after little long time I'm going to write again about eset nod 32 antivirus.As I told in previous post if you are user on windows 8 Eset nod 32 is the best antivirus for your personal computer.the latest product eset nod 32 antivirus 6 has special features with 100% really working.Not need to purchase full version from buying it.Download the eset nod 32 trial version and activate your est antivirus from below updated usernames and passwords. Firstly I would like to tell something about est nod32 antivirus 6. The latest product having: Eset smarter scan  Scan while downloading something Anti-Theft Idle-state scanning Clean and safe E-mail Removable media security system tools         Download Eset nod32 antivirus 6 Trial version Here     After downloading Eset nod32 Antivirus activate it using below usernames and passwords. Username: EAV-...
Read more

5 Reasons iPhone 6 Won't Be Popular

Image
The majority of users are waiting for the next smartphone from Apple - iPhone 6 – this year. Unfortunately, the hype around iPhone began to gradually subside with each passing year after the 4th model launched. Therefore, it is possible that the sixth iPhone model of  will not be nearly as popular as it was in the beginning. Global audience perceived iPhone 4S and iPhone 5 much cooler than its early models New iPhones will not cause that “wow”-effect, which was in the beginning, when Steve Jobs' presentations caused a delight and admiration of every new Apple gadget. Some leaked photos of iPhone 5S prototype show that it does not differ from its predecessor at all. Therefore, all hopes for something radically new in design and features are laid on iPhone 6. And if Apple is no longer holds its standards, that seem to be a little bit old-fashioned already, it is unlikely that iPhone 6 will be interesting for people next year. 5 main reasons can be found to think like ...
Read more

Tips: Optimize your blog loading times

A slow loading blog can prevent you from getting new readers and it can also adversely affect your Google rankings.  If you notice your blog loading too slowly, or just want to optimize the speed there are a few things you can do. 1. Use a free web analyzer to determine where your bottlenecks are.  A couple good sites for this are Pingdom and GTMetrix .  These will test your site speed and list out all your elements so you can see which ones are taking the longest to load.  From there you can decide how to improve your speed. 2. Move JavaScript to the bottom of your template. This doesn't actually make your blog load any faster, but it gives the illusion of it because browsers cannot load any other elements such as images at the same time as a script.  So moving them to the bottom allows your other elements to load and render on screen first making the user think your site is faster. To do this, go to Design > Edit HTML and place your scripts just before th...
Read more