Apple's Safari finally gets sandboxed Flash. What does that mean?
Earlier this week, Apple announced it would make its new OS X Mavericks 10.9 operating system available as a free download through the App Store.聽
Mavericks, named after a popular surfing in Northern California, isn't exactly a sweeping overhaul of the hallowed Apple OS, but it does include a rejiggered Calendar, an improved iBooks application, multiple-display support, and a spruced-up Safari. And part of that new Safari experience is a sandboxed version of Flash, the popular multimedia player.聽
What is sandboxing, exactly? Well, in tech terms, it refers to protections that wall off the rest of the system from damage from potentially untrustworthy content. Adobe already offers a sandboxed Flash player on the聽Internet Explorer, Firefox, and Chrome browsers. But until recently, Safari was left out of party.聽
In a blog post today, Peleus Uhley聽聽the move would improve security on Safari. "For the technically minded, this means that there is a specific聽com.macromedia.Flash Player.plugin.sb聽file defining the security permissions for Flash Player when it runs within the sandboxed plugin process," Mr. Uhley wrote. "As you might expect, Flash Player鈥檚 capabilities to read and write files will be limited to only those locations it needs to function properly."聽
You can download Mavericks 鈥� and the new Safari, with all the new features, including the sandboxed Flash 鈥� to your machine via . Is it worth it? Probably, writes Matt Peckham of Time.聽
"It鈥檚 not a blanket guarantee of security, of course, since what an app needs to do can still, by design, involve access to critical or sensitive resources, but sandboxing prevents the app, or someone exploiting the app, from poking around anywhere they鈥檙e not supposed to be," he . "Think of it as putting the operating system鈥檚 resources behind doors with keycard access, then only handing out keycards to apps that warrant it."聽
