4 ms·

>"Due to the memory safety guarantees of Rust, they believe this is a secure implementation of Flash." Since the intended deployment is browser / wasm the secu

• teach 4y ago
  > "Ruffle runs natively on all modern operating systems as a standalone application" Ruffle isn't limited to running inside a browser, so the security is warranted.
  • jmull 4y ago
    That's true, of course, but hardly the purpose of ruffle.
• illiarian 4y ago
  Until a memory overflow in the monstrous machine that is the web browser will be exploited in 5 seconds at the next Black Hat Conference.
  • jmull 4y ago
    In that case attackers can simply not use rust or ruffle to craft their malicious wasm.
    • illiarian 4y ago
      Who said anything about attackers using Rust? The original statement is that the browser is already secure not to care about secure implementation of Flash in Rust. Meanwhile WebGL in browsers (Flash is likely to implemented in WebGL): https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=webgl https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=webgl
  • FpUser 4y ago
    >"in the monstrous machine that is the web browser" Or in one of Rust's unsafe calls / but in the compiler / etc