4 ms·
Not true. A good security model is added.
by TomMarius 9y ago
Not true. A good security model is added.
- pjmlp 9y agoIt remains to be tested on the wild. Lets see when the first examples pop up on Project Zero or CCC.
- mrec 9y agoIt reuses the existing Javascript security model, which has been tested pretty extensively in the wild.
- pjmlp 9y agoShould I list all of the CVEs related to exploits on JavaScript VMs? Just today there were a few on another HN thread.
- TomMarius 9y agoIt happens, yes. But we're not building WAsm on a greenfield.
- tzahola 9y ago>the javascript security model :Ddd So you’re saying they have mitigated every cross-origin-based exploit? I bet they really mean it this time.
- mrec 9y agoNobody's claiming it's flawless. I'm just objecting to the claim that it's untested.
- CaptSpify 9y agoReally? Yeah, it's been tested extensively, but it's security has also been found to be quite lacking. I'm legitimately surprised someone can say this with a straight face.