sandbox

Up until that point, Valve had been operating under the assumption that they had a working sandbox - worse than if they had no sandbox at all.

Everybody is cooking their own soup and no-one wants to share their toys and sandbox with the other children.

We need a viewport-size-agnostic graphical native sandbox that works on x86_64 and ARM, and can be reasonably sure is escape-proof.

There’s no combat, no health bars and no death – you simply explore the virtual sandbox as you see fit.

The most common usage of seccomp is hardening an existing sandbox by reducing kernel attack surface.

When seccomp is actually being used to implement the sandbox semantics, the application usually needs to be designed around it.

Native applications (meaning software running on a computer, outside a browser sandbox) have always offered a smoother, more comprehensive user experience.

The imgix sandbox is meant as a tool to experiment and try things out.

It seems that most of the pain of Flash exploits comes from the fact that Flash doesn't run in a (proper) sandbox.

It might actually be possible to sandbox the codec components for increased security.

In general, both require splitting up programs into components to implement a sandbox.

With either feature, you end up needing a multi-process architecture as soon as you want to allow access to certain paths in a sandbox.

There has been a huge upturn in "sandbox" style games, mostly thanks to Minecraft or Garry's Mod, but this one has the storyline element too.

Even if you try really hard to get away from "document"-style nature of the web, the sandbox and realities of making things safe for the user will always be a problem.

In this case though, the problem with growing the permission set is you then need rules to define the sandbox "size" outside the process, then tools to administer it, then the policies to be deployed with the program.

When I got my most recent phone I didn't install the Facebook app and instead just use either the bookmarked mobile site or one of several third party apps that "sandbox" your website login so Facebook can't pull other info from your device.

Sandbox games like Beseige also would be fun in this type of world.