4 ms·
Is it impractical to employ firecracker vm like separation to isolate untrusted code, severely reducing the impact of any bugs? Browsers split their various co
by ec109685 2y ago
Is it impractical to employ firecracker vm like separation to isolate untrusted code, severely reducing the impact of any bugs?
Browsers split their various components across multiple processes to provide isolation. VMs would provide even more isolation.
- fwsgonzo 2y agoThat's what they do. They add additional layers on top of the sandbox like jailing. You can jail your sandboxes, but it's not so easy to make that a multi-platform solution for gaming. I think for games I would just stick to a fast interpreter and apply some generally appropriate measures to discourage timing attacks.