Strengthening the Microsoft Edge Sandbox

#1

Post by vezycash » Sat, Mar 25, 2017, 4:35 PM UTC

Strengthening the Microsoft Edge Sandbox
blogs.windows.com

Re: Strengthening the Microsoft Edge Sandbox

#2

Post by thr0waway1239 » Sat, Mar 25, 2017, 5:57 PM UTC

From the comments section:

"I want to support MS, I’m a development partner. But I feel like you guys spend way too much time thinking about how to push intrusive ad’s into the OS and trying to get easy ad-based revenue from your browser: Talking very good security talk but not walking a very good security walk."

The commenter also makes a comment about how Chrome the older browser was found to be much more secure than Edge the newer one. And then a bunch of technical stuff from someone responding to it (the respondent is not the person writing the article).

Am I the only one who feels MSFT would simply be better off not writing these articles at all if they don't particularly care for engaging with their audience?

Oh, and you can't leave a comment without signing in with a Microsoft account. :-)

Re: Strengthening the Microsoft Edge Sandbox

#3

Post by [deleted] » Sat, Mar 25, 2017, 5:58 PM UTC

thr0waway1239 wrote: post #2

From the comments section: "I want to support MS, I’m a development partner. But I feel like you guys spend way too much time thinking about how to push intrusive ad’s into the OS and trying to get easy ad-based revenue from your browser: Talking very good security talk but not walking a very good security walk." The commenter also makes a comment about how Chrome the older browser was found to be much more secure th…

[deleted]

Re: Strengthening the Microsoft Edge Sandbox

#4

Post by tapirl » Sat, Mar 25, 2017, 6:09 PM UTC

just checked my website visitor log. Only 1% people use Edge. It is not a surprise at all.

The best way to secure a browser is just like what chrome and firefox do: open source it.

Re: Strengthening the Microsoft Edge Sandbox

#5

Post by Someone1234 » Sat, Mar 25, 2017, 6:12 PM UTC

Is the AC Access Scope whitelisting described in the article available to all UWP apps in the Creators Update?

I understand it was added specifically for Edge sandboxing, but it sounds like useful functionality (albeit niche) for other apps that deal with untrusted data routinely.

PS - In terms of technology and standards Edge is a pretty solid browser. I love the Dark theme.

Re: Strengthening the Microsoft Edge Sandbox

#6

Post by youdontknowtho » Sat, Mar 25, 2017, 6:14 PM UTC

On the subject of the actual content of the article, it was a really interesting read. I would like to hear more about how they profiled or "tuned" the app containers for API access. That might be really useful for other devs.

Re: Strengthening the Microsoft Edge Sandbox

#7

Post by youdontknowtho » Sat, Mar 25, 2017, 6:16 PM UTC

Someone1234 wrote: post #5

Is the AC Access Scope whitelisting described in the article available to all UWP apps in the Creators Update? I understand it was added specifically for Edge sandboxing, but it sounds like useful functionality (albeit niche) for other apps that deal with untrusted data routinely. PS - In terms of technology and standards Edge is a pretty solid browser. I love the Dark theme.

Yeah, actually app container tech is available to any native developer. (Maybe there's a .Net API for dealing with them. Don't know.)

Re: Strengthening the Microsoft Edge Sandbox

#8

Post by Someone1234 » Sat, Mar 25, 2017, 6:16 PM UTC

tapirl wrote: post #4

just checked my website visitor log. Only 1% people use Edge. It is not a surprise at all. The best way to secure a browser is just like what chrome and firefox do: open source it.

Chrome isn't Open Source. Chromium is Open Source.

Chrome adds a lot of proprietary bits including (but not limited to): Audio & Video Codecs, Flash Plugin, Crash Reporting, Metrics, et al.

Re: Strengthening the Microsoft Edge Sandbox

#9

Post by Someone1234 » Sat, Mar 25, 2017, 6:18 PM UTC

youdontknowtho wrote: post #7

Someone1234 wrote: post #5

Is the AC Access Scope whitelisting described in the article available to all UWP apps in the Creators Update? I understand it was added specifically for Edge sandboxing, but it sounds like useful functionality (albeit niche) for other apps that deal with untrusted data routinely. PS - In terms of technology and standards Edge is a pretty solid browser. I love the Dark theme.

Yeah, actually app container tech is available to any native developer. (Maybe there's a .Net API for dealing with them. Don't know.)

I wasn't asking about app containers in general. I was asking specifically about the AC Access Scope whitelisting discussed in the article.

Essentially the thing they added in the Creators Update and are discussing here.

Re: Strengthening the Microsoft Edge Sandbox

#10

Post by josteink » Sat, Mar 25, 2017, 6:23 PM UTC

Someone1234 wrote: post #8

tapirl wrote: post #4

just checked my website visitor log. Only 1% people use Edge. It is not a surprise at all. The best way to secure a browser is just like what chrome and firefox do: open source it.

Chrome isn't Open Source. Chromium is Open Source. Chrome adds a lot of proprietary bits including (but not limited to): Audio & Video Codecs, Flash Plugin, Crash Reporting, Metrics, et al.

And not to mention: DRM.

No thanks.