Comments on: Adobe: ‘Sandbox’ Will Stave Off Reader Attacks

By: Babylon

Babylon — Thu, 18 Nov 2010 09:24:06 +0000

I’ve had problems printing from Foxit, so I’ve had to switch back to Adobe

Like or Dislike: 1 0

By: Dan

Dan — Tue, 27 Jul 2010 06:54:37 +0000

Getting rid of Javascript in a freakin’ document reader will “stave off Reader attacks” MUCH more reliably than any patch.

Like or Dislike: 3 1

By: Rick

Rick — Fri, 23 Jul 2010 23:11:46 +0000

Thank goodness no one on OS X has needed that reader for a long time. With all happening on OS X, one app keeps going forward: Preview. +5 for that one!

Like or Dislike: 3 3

By: Rick

Rick — Fri, 23 Jul 2010 23:10:01 +0000

Just taking all the bells and whistles out of the spec would do a lot to making the client code thinner. And this in turn would make it easier to consolidate the remaining code and hopefully weed out any remaining bugs.

Like or Dislike: 1 2

By: Rick

Rick — Fri, 23 Jul 2010 23:08:10 +0000

Yeah the bloat. They always seem too busy to do anything.

Like or Dislike: 1 1

By: Rick

Rick — Fri, 23 Jul 2010 23:06:34 +0000

Why can’t they switch?

Like or Dislike: 1 1

By: Rick

Rick — Fri, 23 Jul 2010 23:05:41 +0000

Yes, yes, yes, yes, and yes. Bingo!

Like or Dislike: 3 1

By: Rick

Rick — Fri, 23 Jul 2010 23:04:45 +0000

Damn! Seems a lot of work to protect the pig when all you need to do is fix the pig. I love the phrase ‘ previously unidentified security holes’. Have they never thought of a thorough security audit a la Theo de Raadt?

Like or Dislike: 2 2

By: Stardance

Stardance — Thu, 22 Jul 2010 07:58:45 +0000

If you want to run Adobe Reader and/or any other applications, such as your web browser and e-mail client, in a traditional, actual sandbox, then visit http://www.sandboxie.com and download Ronen Tzur’s Sandboxie utility. It is free of charge with some functionality added if you pay the one-time license fee, but it is not crippleware. Be forewarned, though that it does require some time and effort to configure the sandbox(es) which you choose to use. The configuration is effected by using a component of the primary program, or by editing the configuration file directly (which has a learning curve). Sandboxie is well documented, although sometimes it does not immediately cover all of the new aspects of using it in the most recent version. The user forum is a friendly place to receive expert advice and aid, often from “tzuk” himself. I’ve been using it since November 2008, and run Firefox, Thunderbird, I.E. 8, and iPodder in sandboxes, not in straightjackets.

Like or Dislike: 1 2

By: BattleChicken

BattleChicken — Wed, 21 Jul 2010 20:41:47 +0000

I always thought it was strange that a document *reader* required write access at all.

Well-loved. Like or Dislike: 12 1