Securing Browsers Through Isolation Versus Mitigation
https://medium.com/@justin.schuh/securing-browsers-through-isolation-versus-mitigation-15f0baced2c2 [medium.com]
2017-02-28 17:00
When this works it’s a great way to stop an attacker cold. However, the downside of these things is that they can turn into a cat and mouse game, where each mitigation just demands more work from an attacker, but none of them can actually block an exploit outright.
Some great points about limits of mitigation, although sandbox breaks are common too. And sometimes hard to isolate all the things that need it.
source: green