Sanboxes on OLPC and WMF, MAF
From the One Laptop Per Child: Development site we have the Bitfrost platform specification — public release which seems to be (haven’t read it all) an amazing description of the security measures implemented in this laptop. I really like their efforts in containing malicious code by limiting what it can do.
Here Windows Presentation Foundation Security Sandbox is a presentation on WPF partial trust enviroments, where it gives details on what (from the WPF) will work in Partial Trust and what will not.
- This is from Sep 2005 so it might be a bit out of date
- I wonder how many real-world, usable and ‘buyable’ apps we will see that will work in WPF Partial trust
- There seemed to be a more in depth paper here Windows Presentation Foundation Security Whitepaper but this document doesn’t seem to be online
And on the subject of safely handling potential malicious adds, here is an interresting Framework (need to look more into it, has anybody used this stuff?) from MS
- MAF (Managed AddIn Framework)
- Let Users Customize Your Apps With Visual Studio Tools For Applications
- VSTO Embraces MAF
- VSTA and Generics
And on the Java camp here is an interresting tool: Java Explorer A tool to easily explore the java sandbox from javascript, for the purpose of better understanding what java makes available to web applications nowadays.