• Home
  • Apps
  • Apps News
  • Mozilla Firefox 95 Update to Deploy RLBox Sandboxing Technology for Enhanced Browser Protection

Mozilla Firefox 95 Update to Deploy RLBox Sandboxing Technology for Enhanced Browser Protection

Mozilla Firefox 95 update is now rolling out to users.

Mozilla Firefox 95 Update to Deploy RLBox Sandboxing Technology for Enhanced Browser Protection

Photo Credit: Mozilla

Mozilla Firefox 95 update is for both desktop and mobile platforms

Highlights
  • RLbox is a new technology developed by Mozilla
  • It offers protection from zero-day vulnerabilities
  • Firefox 95 is claimed to offer multi-layer protection

Mozilla Firefox 95 update is being rolled out with a new sandboxing technology called RLBox that is touted to enhance the browser's protection against malicious code. Mozilla says the new technology makes it easy and efficient to isolate potentially buggy code to make the browser secure so much so that even zero-day vulnerabilities in some cases are claimed to pose no threat to users on Firefox. Additionally, Mozilla has updated its bug bounty programme to pay researchers for bypassing the sandbox.

Sandboxing is a practice that is used to keep potentially malicious code isolated from the rest of the organisation's environment. As per a blog post by Mozilla, the RLBox sandboxing technique uses WebAssembly to isolate five modules of the Firefox browser. WebAssembly technology enables high-resource apps like games, video, and image editors to run in a browser at speed on par with a local computer. “Going forward, we can treat these modules as untrusted code, and even a zero-day vulnerability in any of them should pose no threat to Firefox,” the company said.

The technology, which has been developed in collaboration with researchers at the University of California San Diego and the University of Texas, is now being released for all supported Firefox platforms (desktop and mobile).

In order to understand how RLBox sandboxing works, we must first understand the nature of threats that are being posed online.

Just like all major Web browsers that run content in their own sandboxed process to plug vulnerabilities, Firefox also isolates each site in its own process for protection. Mozilla says threat actors attack users by chaining together two vulnerabilities — “one to compromise the sandboxed process containing the malicious site and another to escape the sandbox”. To tackle this scare, multi-layer protection is needed.

As mentioned, RLBox sandboxing technology compiles the code into WebAssembly instead of hoisting it into a separate process. It then compiles that WebAssembly into native code allowing Firefox to run trusted and untrusted code in the same process. Mozilla says RLBox helps in sanitising any values that come from the sandbox, resulting in enhanced protection from malicious code.


Will Snapdragon's new 2022 chips make it more prominent as a brand? We discuss this on Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.
Comments

For the latest tech news and reviews, follow Gadgets 360 on Twitter, Facebook, and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel.

Sourabh Kulesh
Sourabh Kulesh is a Chief Sub Editor at Gadgets 360. He has worked in a national daily newspaper, a news agency, a magazine and now writing technology news online. He has knowledge on a wide gamut of topics related to cybersecurity, enterprise and consumer technology. Write to sourabhk@ndtv.com or get in touch on Twitter through his handle @KuleshSourabh. More
Realme RMX3310 Specifications Tipped by TENAA Listing, Believed to Be New Realme GT Series Phone
Share on Facebook Tweet Snapchat Share Reddit Comment
 
 

Advertisement

Advertisement

© Copyright Red Pixels Ventures Limited 2022. All rights reserved.