2 ms·
From the link: • 65% of all binaries and 44% of all functions in them use the “unmanaged stack”, a portion of linear memory that is unprotected by the virtual
by danuker 5y ago
From the link:
• 65% of all binaries and 44% of all functions in them use
the “unmanaged stack”, a portion of linear memory that is
unprotected by the virtual machine and that can be exploited
by attackers.
• 21% of all binaries import potentially dangerous APIs from
their host environment, e.g., the infamous eval, APIs to modify
the DOM from JavaScript, or system call-like APIs to
interact with the network and file system on platforms outside the browser. An attacker compromising a binary may
abuse such APIs to trigger unexpected behavior.
Why do APIs to interact directly with network and files exist? Does this not break the web security model?
I just disabled javascript.options.wasm in Firefox; I hope it does something.