17 ms·
It provides a security model that actually works. WASM code can't access the outside world, except for channels you explicitly provide to it. Everything before
by mikewarot 4y ago
It provides a security model that actually works. WASM code can't access the outside world, except for channels you explicitly provide to it.
Everything before it eventually let you have full access to the host file system, if you asked nicely, were given permission, or leveraged a bug in the system.
- int_19h 4y agowasm is only as secure as the runtime that you're using, and I would be extremely surprised if none of them have sandbox-breaking bugs in the long term.
- Etherlord87 4y agoCan you elaborate? To my understanding you compile code into opcodes and it's as safe as the stack machine going through the opcodes. To my understanding the runtime is the part of the compiled code, and not the stack machine going through it.
- pjmlp 4y agoUsenix Security '20-Everything Old Is New Again: Binary Security of WebAssembly" https://www.youtube.com/watch?v=glL__xjviro https://www.youtube.com/watch?v=glL__xjviro "The Security Risk of Lacking Compiler Protection in WebAssembly" https://arxiv.org/abs/2111.01421 https://arxiv.org/abs/2111.01421