
Google
has released an early version of Native Client, a framework designed to run portable x86 binaries inside a web browser - in a sandbox. Native Client also includes technologies that allow for easier communication between JavaScript and Native Client executables, which makes it possible for web applications to leverage native code when it comes to processor intensive tasks. This sounds eerily similar to Microsoft's ActiveX - one of the biggest security failures of the Windows operating system. Google insists, however, that Native Client is much, much more secure.
Member since:
2008-08-19
Agreed. It's one thing to provide a sandbox for scripting code that requires an interpreter. It's another matter entirely to sandbox code that's running natively on the CPU. Without knowing more about the security they'd be putting in place, I'm not at all comfortable with this idea.