This really was a fantastic talk. Where can I read more about this kernel-level sandboxing that's discussed towards the end? Additionally: as I understand th

This really was a fantastic talk. Where can I read more about this kernel-level sandboxing that's discussed towards the end? Additionally: as I understand things, the methodology behind asm.js could (in principle) be applied to any JIT-ed language. Is the choice of doing this in JS only because JS is the language of browsers (i.e.: kernel-level sandboxing can easily use existing browser sandboxing code) or are there other technical considerations behind this decision?