3 ms·
It still amazes me just how nonstandard the sandbox in browsers is. The browser should be a VM host.
by dekhn 9mo ago
It still amazes me just how nonstandard the sandbox in browsers is.
The browser should be a VM host.
- bloppe 9mo agoVMs are pretty heavy-weight to run all the JavaScript on a modern page. A proper VM requires a dedicated kernel. Firecracker boots the whole 40MB Linux kernel just to run a "function". A container doesn't have this baggage, but would never be considered secure enough for the web environment.