3 ms·

I'm probably revealing my ignorance here, but what are the security issues inherent with replacing Javascript with a bytecode based VM type solution? Surely Jav

I'm probably revealing my ignorance here, but what are the security issues inherent with replacing Javascript with a bytecode based VM type solution? Surely Javscript runs in a VM too, just one that is not really designed to run anything other than Javascript. Why does the type of code the VM runs cause any fundamental changes in security? (What I really came here to say is that this is a pretty terrible article. I dislike JS a lot, but this article makes many strange assertions and presents personal (often misinformed) opinion as fact. I'm not sure why people are upvoting it.)

untog 15y ago
I'm probably revealing my ignorance here, but what are the security issues inherent with replacing Javascript with a bytecode based VM type solution? I suppose it's true that if the functionality was locked down to match JS, there would be no greater security issues. But usually the whole reason for making a VM is to allow more functionality (as in Google's NaCl), so the two issues get lumped together. Even WebGL has issues with vulnerabilities in graphics drivers. I'm not sure why people are upvoting it Everyone loves to bring the juiciest piece of flame-bait to the barbeque? :)