4 ms·
I assume there will be no more security holes than there are in javascript, since it's effectively a sibling to it, implementing the exact same APIs
by stepanhruda 10y ago
I assume there will be no more security holes than there are in javascript, since it's effectively a sibling to it, implementing the exact same APIs
- azakai 10y agoIt's also being run using the same VMs as JavaScript. There is some new code, but overall it's the same JITs, so similar security risks.
- akavel 10y agoI suspect it (the WASM VM) will "bubble out" from inside the JS VM in browsers sooner or later, as a distinct entity in browsers. To enable better optimizations, if only. And especially better optimizations means closer to metal, which I think makes it harder not to introduce security holes. Also, brand new external WASM VMs will be created (as in the OP link), and possibly used in future (or current but new versions?) browsers, again allowing for brand new security holes. So, I'm not very convinced by this argument as of now.