[cap-talk] Javascript power box

[Stiegler, Marc D]

> AIR is just a way to run Flash in an application window 
> instead of a browser.  When I used the earlier version, there 
> was no difference in its security model from that of 
> ActionScript, which is JavaScript with classes.

Well, ActionScript's relationship to JavaScript is more complicated than
that. As markm was pointing out a couple weeks ago, the security
policies in Flash are far stranger and scarier than the ones in
JavaScript (despite how strange and scary the security policies in
JavaScript may be ... In the computer security field, you really can
always do worse, and worse, and worse :-).

--marcs