4 ms·

You can’t express anything malicious in JavaScript either, yet vulnerabilities are constantly found in web browsers, including WebAssembly JITs. You can expres

You can’t express anything malicious in JavaScript either, yet vulnerabilities are constantly found in web browsers, including WebAssembly JITs. You can express malicious things in Go, yet the number of RCEs in Go apps is pretty much zero.

amelius 6y ago
> You can’t express anything malicious in JavaScript either You have to be more specific because lots of fraud is possible by misleading the user through JavaScript tricks.
- CyberRabbi 6y ago
  Full device root from JavaScript https://github.com/synacktiv/PS4-webkit-exploit-6.XX https://github.com/synacktiv/PS4-webkit-exploit-6.XX
alquemist 6y ago
That's a bit of apples and oranges. JS/WASM are runtimes executing hostile code, whereas Go apps are trusted code.
etimberg 6y ago
What about something like https://github.com/IAIK/rowhammerjs https://github.com/IAIK/rowhammerjs ?