3 ms·

> WASM is already bad for user security Any source?

• techntoke 7y ago
  You are running a binary and you have to trust the sandbox. Hasn't worked so well for web browsers even with JavaScript.
  • weego 7y ago
    Also didn't work well for Flash.
• ineedasername 7y ago
  Here's one: https://www.fastly.com/blog/hijacking-control-flow-webassembly https://www.fastly.com/blog/hijacking-control-flow-webassemb... I'm not sure any of this is any worse than javascript though.
• pjmlp 7y ago
  Internal memory corruption caused by out of bounds accesses, in case the code was generated from C derived languages, as it doesn't provide memory tagging.