8 ms·

Yeah, but only the Java VM is relevant in a web context. WebAssembly is the new applets.

• reader_mode 5y ago
  Not even remotely. WASM uses the same sandboxed DOM APIs JS does, that's a huge difference compared to Applets or ActiveX.
  • pjmlp 5y ago
    Almost, "Everything Old is New Again: Binary Security of WebAssembly" https://www.usenix.org/conference/usenixsecurity20/presentation/lehmann https://www.usenix.org/conference/usenixsecurity20/presentat...
    • reader_mode 5y ago
      From what I saw that's just about exploiting WASM memory within the sandbox - like they say "at wrost WASM can make a mess of it's own memory" and they show some implications of that. That's mildly interesting to me, you still need to go through DOM to do anything system related - you can't just read random files off of disk or use some system API to exploit other parts of the system. If API security is broken for WASM it's broken for JS as well. That's completely different from having a separate sandbox running as a native extension.
• pjmlp 5y ago
  Except this is all about running outside the browser. The new applets was Flash with their new format that supported C++ as well, Silverlight and PNaCL.
  • meepmorp 5y ago
    touche