4 ms·
Minified obfuscated Javascript isn't really all that different. You can create call graphs out of WASM binary as well, decompile and analyze it in detail. In f
by vardump 4y ago
Minified obfuscated Javascript isn't really all that different. You can create call graphs out of WASM binary as well, decompile and analyze it in detail.
In fact, even before WASM, you could compile C++ to very hard-to-read asm.js subset of Javascript as well, see Emscripten.
You could create tools to block WASM based on signatures, heuristics, behavioral analysis, etc. Difficulty level is very similar to doing same with Javascript.
[0]: https://en.wikipedia.org/wiki/Emscripten https://en.wikipedia.org/wiki/Emscripten
- pmoriarty 4y ago"You could create tools to block WASM based on signatures, heuristics, behavioral analysis, etc." Yes, the concern is that as the browser becomes the operating system, we'll need anti-malware and anti-virus tools on it just as we've needed them on Windows.