ie8 fix
madison

Hardware 2.0

Adrian Kingsley-Hughes

Adobe puts Firefox Flash plugin in the sandbox

By | February 7, 2012, 5:16am PST

Summary: Flash to become safer for Firefox users.

Good news everyone (well, at least for Firefox users)!

You might be able to live without Flash in your favorite iDevice, but on the PC you’re likely to still be relying on this platform, which unfortunately is heavily targeted by hackers. The Adobe Flash plugin already runs in a sandbox mode in Microsoft’s Internet Explorer and Google’s Chrome browsers, and soon it will get the same treatment in Mozilla’s Firefox browser as Adobe announces the first public beta of its new Flash Player sandbox for Firefox.

Running the plugin in a sandbox, otherwise known as protected mode, will potentially reduce the seriousness of any code vulnerabilities by isolating it from the system.

‘Sandboxing technology has proven very effective in protecting users by increasing the cost and complexity of authoring effective exploits,’ said Peleus Uhley, senior security researcher for Adobe.

‘For example, since its launch in November 2010, we have not seen a single successful exploit in the wild against Adobe Reader X. We hope to see similar results with the Flash Player sandbox for Firefox once the final version is released later this year.’

I’ve been using the plugin for a few hours, and while I can’t claim to have tested it thoroughly, it seems to work well and seems quite stable. I wouldn’t use it on a mission-critical system, but it’s certainly safe for testing.

The beta plugin will work with Firefox 4.0 or later versions running on Windows 7 or Vista.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Adrian Kingsley-Hughes is an internationally published technology author who has devoted over a decade to helping users get the most from technology.

Disclosure

Adrian Kingsley-Hughes

All opinions expressed on Hardware 2.0 are those of Adrian Kingsley-Hughes. Every effort is made to ensure that the information posted is accurate. If you have any comments, queries or corrections, please contact Adrian via the email link here. Any possible conflicts of interest will be posted below. [Updated: February 23, 2010] - Adrian Kingsley-Hughes has no business relationships, affiliations, investments, or other actual/potential conflicts of interest relating to the content posted so far on this blog.

Biography

Adrian Kingsley-Hughes

Adrian Kingsley-Hughes is an internationally published technology author who has devoted over a decade to helping users get the most from technology -- whether that be by learning to program, building a PC from a pile of parts, or helping them get the most from their new MP3 player or digital camera.

Adrian has authored/co-authored technical books on a variety of topics, ranging from programming to building and maintaining PCs. His most recent books include "Build the Ultimate Custom PC", "Beginning Programming" and "The PC Doctor's Fix It Yourself Guide". He has also written training manuals that have been used by a number of Fortune 500 companies.

Adrian also runs a popular blog under the name The PC Doctor, where he covers a range of computer-related topics -- from security to repairing and upgrading.

10
Comments

Join the conversation!

Just In

RE: Adobe puts Firefox Flash plugin in the sandbox
BlinkyComix 9th Feb
Hm- maybe it will run just fine in Windows 8
0 Votes
+ -
Test
Dietrich T. Schmitz * Your Linux Advocate 7th Feb
test
0 Votes
+ -
test
Dietrich T. Schmitz * Your Linux Advocate 7th Feb
@Dietrich T. Schmitz * Your Linux Advocate
@Dietrich T. Schmitz * Your Linux Advocate

Dietrich looks like you haves two testes!
Followed the install instructions meticulously, but my RealPlayer couldn't interact with new FlashPlayer version at all, although it could see it. Ran through all the troubleshooting, etc....finally pulled it out and reinstalled my saved copy (thank god I kept it) of previous AdobeFlash 10 Active X. All is fine again.
You report that Flash already runs in a sandboxed mode in IE, but Lucian Constantin of PCWorld reports, via a quote from Wiebke Lips (of Adobe), that IE does not, in fact, have sandboxing.
http://www.pcworld.com/article/249393/adobe_launches_sandboxed_flash_player_for_firefox_hopes_for_fewer_exploits.html
@caspy7 I was under that impression too. IE never ever ran any of its plugins sandboxed. Its protected mode is just for the browser itself. IE would have to go through a major engineer reworking to sandbox all its plugins. In fact, Chrome doesn't sandbox any of its plugins except Flash, and its a specialized flash made in conjunction with Adobe.
The problem with Flash's sandbox is it's full of cat turds.
0 Votes
+ -
Flash
Martmarty 8th Feb
Thanks Adobe for the Firfox plugin, but most sites I am visiting are already HTML5 aware. So no need to install this flash plug-in.
So.. the real question.. drum roll. does this also stop information leaks via those pesky flash cookies? If Flash is in the sandbox, then the cat ought to be able to bury the flash cookies.
Hm- maybe it will run just fine in Windows 8

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix
Click Here
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix