4 ms·
With what? lisp? Java? MSIL? https://hacks.mozilla.org/2019/11/announcing-the-bytecode-al.. https://hacks.mozilla.org/2019/11/announcing-the-bytecode-al....
by wffurr 7y ago
With what? lisp? Java? MSIL?
https://hacks.mozilla.org/2019/11/announcing-the-bytecode-al.. https://hacks.mozilla.org/2019/11/announcing-the-bytecode-al.... "secure-by-default foundations for native development that are portable and scalable."
- pjmlp 7y agoYou can compile Hearbleed to WASM, secure by default, as long C or any of its derived languages are not used.
- wffurr 7y agoSure, you can build a flimsy deathtrap house on top of a solid foundation in a lot of contexts. But if the foundation is unsound, it doesn't matter if your Ada is formally verified or not.
- pjmlp 7y agoAt least the Ada folks acknowledge that the language isn't perfect, and don't pretend they were the very first one on its field.
- wffurr 7y agoI don't see anyone pretending any such thing about WebAssembly or WASI. If anything they are drawing on the decades of experience with bytecode formats and security research.
- pjmlp 7y agoApparently not, otherwise bounds checking inside of the same linear memory segment would actually be supported. Likewise, they wouldn't "forget" the formats that already had support for languages like C when talking about what is "new" with WebAssembly.
- zozbot234 7y ago> bounds checking inside of the same linear memory segment That can be supported in the source language.
- pjmlp 7y agoWhich is meaningless for module consumers and hardly any different from native processes.
- zozbot234 7y agoAIUI, wasm does support using multiple linear memory segments at the same time. You don't get that on native processes short of using memory segmentation, which no modern architecture supports.
- pjmlp 7y agoCPUs like SPARC ADI and ARM MTE offer much better memory protection than what is being sold by WASM. Solaris, iOS and future Android versions take advantage of their existence.
- afiori 7y agoWhich is completely irrelevant as by definition they are not portable. The fact remain that wasm module have a very well defined behavior when embedded in other applications and can be embedded in a portable way.
- deleted 7y ago[deleted]