3 ms·
This is not make any software magically secure. It‘s only purpose is to _sandbox_ a library to prevent it doing anything malicious. As wasm cant do any more tha
by tpetry 6y ago
This is not make any software magically secure. It‘s only purpose is to _sandbox_ a library to prevent it doing anything malicious. As wasm cant do any more than computing you simply contain the library, it cant anymore open any files, make network calls, etc.
- mehrdadn 6y ago> As wasm cant do any more than computing you simply contain the library, it cant anymore open any files, make network calls, etc. I wish the world was that simple.
- wahern 6y ago> As wasm cant do any more than computing you simply contain the library, it cant anymore open any files, make network calls, etc. That presumes the WASM implementation is bug free, which is not a great presumption, especially for the more sophisticated implementations with JIT engines, and even more so for those adding multi-threading, GC, etc.
- pjmlp 6y agoIt doesn't prevent Heartbleed like kind of attacks. Also doesn't prevent internal memory corruption attacks that expose unintended behaviors from the public module interface.