4 ms·
Breaking the JIT is just the first step for most browser exploits. The JIT lives in the renderer process, which is heavily sandboxed in modern browsers. To do a
by nneonneo 4y ago
Breaking the JIT is just the first step for most browser exploits. The JIT lives in the renderer process, which is heavily sandboxed in modern browsers. To do anything useful, an exploit usually has to compromise the browser process with a second bug (“sandbox escape”). Rewriting the browser part in e.g. Rust would be a great step towards closing off that avenue of attack.
- kitsunesoba 4y agoI wouldn’t be surprised if significant chunks of WebKit start getting rewritten in Swift once it gains C++ interop. Not that use of Rust is impossible but so far Apple’s interest in Rust has been as far as I know entirely in server usage.