Explores how memory safety affects sandboxing in complex systems like browsers, challenging the view that they are purely complementary security approaches.
A developer explores the challenges of sandboxing untrusted Python code in a side-project, using process isolation and seccomp.
Explores JavaScript sandboxing for secure code execution, inspired by Val Town and discussing solutions like vm2, Deno, and V8 Isolates.
Overview of new WKWebView features in iOS 14, including JavaScript sandboxing, async JS calls, text find, PDF creation, and zoom.
Explains how to handle macOS sandbox file permissions in AppKit, covering methods like NSOpenPanel and Full Disk Access for accessing folders outside an app's sandbox.
A Firefox security engineer investigates exploit mitigations like Arbitrary Code Guard (ACG) and its feasibility for macOS, focusing on dynamic code generation restrictions.
Explores the technical challenges and differences between traditional containers and true sandbox environments, focusing on user namespaces and privilege levels.
