Re: Disabling the Sandbox
erictetz@gmail.com wrote:
As an aside, even signed applets have 'issues' in IE on
Vista - a new security model limits them to accessing
files from specific directories. If it needs to be signed,
or otherwise 'loosen' that restrictive sandbox for web
deployed apps., I would tend to look to web start*.
*sigh*
What about Flash?
(shrugs) ..dunno. Don't know Flash, don't have it installed.
Last time I heard, it was going through some serious security
issues, and I don't need the bother.
What is it, in this *trusted* applet, that requires trust?
Note that barring the 'seamless integration with web content'
mentioned below, JWS would be a good fit for this, and
could probably achieve what is needed in a sandboxed
app.
...
...Simplicity (read: idiot-proofing) is the primary objective.
No such thing. When you design something that is
'idiot-proof', they release a 'new and improved' idiot.
Any user might not have *either* Flash or Java installed.
Any user might not only not have it installed, but either
be unwilling or *unable* (they don't control the hardware)
to install it. Any user might have the right plug-in installed,
but an insufficient version of it.
It is *our* responsibility as developers to go to our
best effort to either get the app. running, or to provide
useful feedback to the user if that is not possible.
That's why we get the 'big bucks'. ;-)
...Is this Applet restriction
something Microsoft acknowledges as a problem on Vista -- something
what will be eventually fixed -- or is it a permanent restriction?
MS says it is Sun's problem, and there is a bug raised
with Sun against it. I had not looked at the details closely,
but many of the other Java developers involved seemed
to see it as Sun's problem, though Sun was not showing
any clear signs of rushing to put forward a fix.
If you care that much, search the bug DB (always a
chore) find the bug, and vote for it to be fixed.
...It
seems pretty stupid that users are limited in what kinds of
permissions they can willingly grant to web applications.
Yeah, yeah.. preaching to the converted.
..You're new to this whole 'trusted apps. embedded
in a web page' type project, aren't you?
It might help for you to describe what it is your app.
is intended to achieve (besides being embedded in
a web page, involved with content and 'trust' I still
have little idea what is the ultimate point) - the app.
might not require as much trust as you expect.
--
Andrew Thompson
http://www.athompson.info/andrew/
Message posted via http://www.javakb.com