The Chrome browser is built around a sandboxed architecture in which browser apps are locked down using Windows-specific features like Job objects and restricted tokens. I wrote about this at length when Chrome debuted. It's not especially innovative, but it's a step in the right direction.

Google bought GreenBorder last year, a company that uses virtualization to sandbox programs and specifically browsers. There hasn't been any news about this that I've seen since the purchase, but the basic point is the same: Prevent anything that goes wrong in the browser from affecting the rest of the system.

The newest and probably most interesting sandbox is the Google Native Client, known casually in their docs as NaCl. (I'm not sure if the "salt" reference has any meaning.) What is NaCl? Many of the quick reactions to it are miles away from what I got out of their white paper on the technology. (The white paper seems like a very honest explanation of the technology to me, even if some of the writing is really bad.) 

Read the rest of this article on eWEEK.com.