3 ms·
That's only true if there are no bugs in the kernel or anything that implements the namespaces. You're needlessly adding a huge attack surface.
by mikewarot 3y ago
That's only true if there are no bugs in the kernel or anything that implements the namespaces. You're needlessly adding a huge attack surface.
- mirashii 3y agoDevil's advocate, using WASI assume there are no bugs in the new specifications or anything that implements those specifications. We already have a variety of tools to sandbox processes, by implementing and adopting WASI, you're needlessly adding a huge attack surface.