sandbox

Can you sign a Java applet but keep it in the sandbox (NOT give it full access to user's computer)?

南笙酒味 提交于 2019-11-30 06:03:20
Thanks to Oracle's latest changes, it appears I have to sign an applet even though I don't need or want it to have unrestricted access to the user's computer (which is why its currently unsigned). In particular, I don't want the warning they show for signed applets: This application will run with unrestricted access which may put your computer and personal information at risk. ...which will scare the people using it. Is it possible to sign an applet but mark it in some way to say "but keep using the sandbox"? The only reason I'm signing it is that as of Version 7, Update 40, Oracle has further

ScriptedSandbox64.exe has stopped working - Visual Studio 2015

点点圈 提交于 2019-11-30 05:42:06
This is the second time I've seen the error "Scripted Sandbox64.exe has stopped working" in Visual Studio 2015. In my particular case, I was building a Windows Forms application and you place the application into the system tray in Windows. This application also writes files using System.IO. The project has nothing more than that. Visual Studio 2015 Community Edition crashes. Bahien Nguyen Disable the Diagnostic tool under Tools -> Options -> Debugging -> General -> Enable Diagnostic Tools while debugging More information: https://stackoverflow.com/a/31904957/2856307 Just adding the

How can Linux ptrace be unsafe or contain a race condition?

点点圈 提交于 2019-11-30 05:35:35
问题 I'd like to implement a sandbox by ptrace() ing a process I start and all its children would create (including grandchildren etc.). The ptrace() parent process, i.e. the supervisor. would be a simple C or Python program, and conceptually it would limit filesystem access (based on the path name and the access direction (read or write) and socket access (e.g. disallowing socket creation). What should I pay attention to so that the ptrace() d process and its children (recursively) won't be able

Is there an alternative to rexec for Python sandboxing?

删除回忆录丶 提交于 2019-11-30 04:42:49
问题 Implementing a 'sandbox' environment in Python used to be done with the rexec module (http://docs.python.org/library/rexec.html). Unfortunately, it has been deprecated/removed due to some security vulnerabilities. Is there an alternative? My goal is to have Python code execute semi-trusted Python scripts. In a perfect world, calls to any functions outside of a pre-defined set would raise exceptions. From what I've read about rexec's deprecation, this may not be possible. So I'll settle for as

How to sandbox a command line tool?

╄→гoц情女王★ 提交于 2019-11-30 00:50:17
I've a simple unix tool made by me that launches the main cocoa app from a shell. I need to sandbox it but when I run it, it crashes with error "Illegal instruction: 4", on console.app I can see the following error message Sandbox creation failed: Container object initialization failed: NIL container info object with no error description for visdiff The file is correctly signed with codesign. I've read the post Mac OS app, sandbox with command line tool? but it doesn't help I was having this exact problem, and it went away when I added an embedded Info.plist. Try these clang flags (assuming

How to generate development MDM/APNS certificate?

泪湿孤枕 提交于 2019-11-29 20:21:11
We have taken iOS developer Enterprise account and we have received the MDM certificate which is in .pem format.We have download this mdm certificate from the portal https://identity.apple.com/pushcert/ But we don't have idea that this is production MDM certificate or development MDM certificate. First we want to test MDM commands using development certificate and after getting MDM payloads,we can can continue for production. So my question is how to create MDM/APNS certificate which can be used for getting MDM push notification from gateway.sandbox.push.apple.com , if this is possible. I have

android in-app billing sandbox

此生再无相见时 提交于 2019-11-29 19:49:31
问题 I'm developing a simple in-app billing library. It works with static responses from google, but now I'd like to test this lib with real in-app products. I have created a test account and I'm trying to buy a product, but google Play is asking me for a credit card. Is there any way to test in-app billing without using a real credit card (a sandbox environment, fake credit card, etc)? I have read here that the only way to test this is using a real credit card with a test account (so you don't

How can I sandbox untrusted user-submitted JavaScript content?

断了今生、忘了曾经 提交于 2019-11-29 19:33:55
I need to serve user-submitted scripts on my site (sort of like jsfiddle ). I want the scripts to run on visitors browsers in a safe manner, isolated from the page they are served on. Since the code is submitted by users, there is no guarantee it is trustworthy. Right now I can think of three options: Serve the user-submitted content in an iframe from a different domain , and rely on the same-origin policy. This would require setting up an additional domain which I'd like to avoid if possible. I believe this is how jsfiddle does it. The script can still do some damage, changing top.location

How do sites like codepad.org and ideone.com sandbox your program?

狂风中的少年 提交于 2019-11-29 18:57:23
I need to compile and run user-submitted scripts on my site, similar to what codepad and ideone do. How can I sandbox these programs so that malicious users don't take down my server? Specifically, I want to lock them inside an empty directory and prevent them from reading or writing anywhere outside of that, from consuming too much memory or CPU, or from doing anything else malicious. I will need to communicate with these programs via pipes (over stdin/stdout) from outside the sandbox. Angus codepad.org has something based on geordi , which runs everything in a chroot (i.e restricted to a

How to store local data after user delete my iOS app?

一笑奈何 提交于 2019-11-29 17:55:36
问题 I thought it's impossible, because all the data store in a sandbox, when user delete the app, all the data should be removed from the device. But somehow, this happened: I downloaded a wallpaper app from the appstore. It's a free app, if you don't pay, you can download limited wallpapers, up to 105. I download a wallpaper and save to my album. it's now 1/105. I delete the app, and delete the wallpaper in my album. I turn off the iCloud backup function. OK, It's totally removed from my device,