HOME     MENU     SEARCH     NEWSLETTER    
NEWS & INFORMATION FOR TECHNOLOGY PURCHASERS. UPDATED 14 MINUTES AGO.
You are here: Home / Personal Tech / Flash Gets Key Security Fix in Safari
Adobe Puts Flash into Security Sandbox in Safari
Adobe Puts Flash into Security Sandbox in Safari
By Barry Levine / NewsFactor Network Like this on Facebook Tweet this Link thison Linkedin Link this on Google Plus
PUBLISHED:
OCTOBER
24
2013


One of the issues surrounding Adobe's Flash technology -- and one that Apple in particular has criticized -- is its vulnerability to malware. On Wednesday, Adobe announced that Flash will be sandboxed in the Safari browser under Apple's new Mavericks 10.9 operating system, as it is on other browsers.

Sandboxing contains a process or application, making it harder for malware to do any harm outside of the infected application. The Flash Player plug-in has specific security permissions when it runs within the sandbox, which limit the Player's capabilities to reading and writing files only within needed locations and sets limits on connections to local computer resources or connections. The sandbox profile for the Flash plug-in is now included in the Webkit project, which is the browser engine employed by Safari.

Adobe has also released sandboxed versions of its Reader and Acrobat software for OS X Mavericks. Both of those applications, like Flash, have been malware targets and, in January, Adobe issued security updates for both.

'Thoughts on Flash'

In a posting on the Adobe Secure Software Engineering Team blog on Wednesday, platform security strategist Peleus Uhley noted that Adobe has worked with Google's Chrome, Microsoft's Internet Explorer and Mozilla's Firefox to similarly deploy sandboxes for Flash on their respective browsers.

"Safari users on OS X Mavericks," he wrote, now "can view Flash Player content while benefiting from those added security protections," and he acknowledged the assistance Adobe received from Apple's security team.

Apple iOS devices do not directly support Flash, and the company has been promoting the use of HTML5 technologies in its stead. Adobe has also been emphasizing its development of HTML5-based tools.

'Thoughts on Flash'

In a well-known open letter published on Apple's Web site in the spring of 2010 and entitled "Thoughts on Flash," Apple co-founder and CEO Steve Jobs cited six reasons that Apple was not supporting Flash on its then-recently released iPad. He pointed to Flash's proprietary nature, the existence of other Web technologies, battery life, performance, reliability and security. In particular, he noted that Apple didn't want to "reduce reliability and security of our iPhones, iPods, and iPads by adding Flash."

He added that security firm Symantec had highlighted Flash as "having one of the worst security records in 2009," said that Flash "is the number one reason Macs crash," and said that, in spite of Apple's "working with Adobe to fix these problems," they had persisted. In addition, he said, Adobe needed to adapt Flash for touchscreen interaction.

About five months after that open letter, Apple did allow Flash to become available for developers in its App Store using Adobe's iOS packager, which compiles the runtime with the app into a single app that iOS can run.

Tell Us What You Think
Comment:

Name:

Like Us on FacebookFollow Us on Twitter
TOP STORIES NOW
MAY INTEREST YOU
Salesforce.com is the market and technology leader in Software-as-a-Service. Its award-winning CRM solution helps 82,400 customers worldwide manage and share business information over the Internet. Experience CRM success. Click here for a FREE 30-day trial.
MORE IN PERSONAL TECH
Product Information and Resources for Technology You Can Use To Boost Your Business

NETWORK SECURITY SPOTLIGHT
Using Internet-connected devices without strong passwords is inherently risky, as illustrated by reports that a Russian Web site is showing live footage from thousands of people's webcams.

ENTERPRISE HARDWARE SPOTLIGHT
Doctor Who had K-9, the robot dog that accompanied him on adventures through space. Now, Mountain View has K5, a 5-foot-tall, 300-pound robot security guard patrolling in the Bay Area.

MOBILE TECHNOLOGY SPOTLIGHT
To better its customer service, Comcast is pulling out at least some of the stops. The cable giant has launched an app so you can track the cable guy in real time. It's designed to ease customer frustration.

© Copyright 2014 NewsFactor Network, Inc. All rights reserved. Member of Accuserve Ad Network.