Re:We All Dodged a Bullet
by mike_hearn on Tuesday September 09, 2025 @01:59PM
(#45185789)
Yes, but that was with a very ambitious sandbox that included full GUI access. Sandboxing a pure data transformation utility like something that strips ANSI escape codes would have been much easier for it.
It was too complex. Just making system calls require white listing libraries goes a long way of preventing a whole class of exploits.
There’s no reason a color parser, or a date library should require network or file system access.
Re:We All Dodged a Bullet
by 0xDEAFBEAD on Tuesday September 09, 2025 @11:37PM
(#45192926)
The simplest approach to whitelisting libraries won't work, since the malicious color parser can just call the whitelisted library.
A different idea: Special stack frames such that while that frame is on the stack, certain syscalls are prohibited. These "sandbox frames" could be enabled by default for most library calls, or even used by developers to handle untrusted user input.
It didn't go well. The JVM did it's part well, but they couldn't harden the library APIs. They ended up playing whack-a-mole with a steady stream of library bugs in privileged parts of the system libraries that allowed for sandbox escapes.