3 ms·
I think they're saying that there's no secure language-level VM for Rust, compared to JS or, say, Lua.
by Kinrany 4y ago
I think they're saying that there's no secure language-level VM for Rust, compared to JS or, say, Lua.
- jsjohnst 4y agoHow do you define secure in this case though? A definite case could be made that Rust is more secure than either option listed. Context matters and arbitrarily picking a context to exclude one vs another is rather disingenuous on the authors’ part.
- 10000truths 4y agoNative code already executes in a sandbox, it’s called a process. It’s fine if implementing multitenancy with processes doesn’t fit the use case specified in the article, but for the article to state that a secure execution context for native code doesn’t exist and call it unsafe is ignorant.
- pjmlp 4y agoIt is called an OS process.