3 ms·
I keep seeing that wasm is safe and secure. But to my understanding wasm is just a bytecode spec. The interpreters are what have to be judged secure. If an inte
by daxfohl 6y ago
I keep seeing that wasm is safe and secure. But to my understanding wasm is just a bytecode spec. The interpreters are what have to be judged secure. If an interpreter has a hole then the sandbox is escapable. As you add jits and various cpu optimizations and other options, the more likely there's a bug there somewhere someone can exploit. I don't understand. Is there a mathematical way to verify that a wasm interpreter is secure?
- IncRnd 6y agoYes, there is, but you need to define what it should be secure against. Then, a proof can be constructed, given particular assumptions. I doubt this will ever be done for wasm.