3 ms·
The whole point of WASM was to provide fine grained capability based security in a portable environment. This made it safer than previous sandboxes, specificall
by mikewarot 3y ago
The whole point of WASM was to provide fine grained capability based security in a portable environment. This made it safer than previous sandboxes, specifically because your code couldn't just open a random file in the host environment.
I think this is a very bad idea, and should be rejected. If not... we'll just take another 10 years until capabilities show up again, continuing the Sisyphean cycle.
- tokera 3y agoTwitter Community Notes: * WASIX does not allow one to open a random file in the host environment, in fact WASIX changed absolutely nothing in file system ABI's at all from preview1 - it just added other extensions. * WASIX has not removed the capabilities model and instead extended it to support Berkley sockets - i.e. there are capabilities defined for the new socket operations. * WASIX is fully sandboxed, meaning the network is completely virtual and can be restricted as much as one likes * TTY and forking is also fully sandboxed. * You can't reject the Internet