3 ms·

How is NaCL support any different than allowing Java Applets on a page, or Flash, or Silverlight?

• wmf 13y ago
  Java, Flash, and Silverlight were NPAPI plugins that could work in multiple browsers. NaCl uses PPAPI that's only supported in Chrome.
  • greggman 13y ago
    Here, Let me fix that for you Java, Flash, and Silverlight were insecure platform specific NPAPI plugins that make it easy to p0wn users machines. PNaCl uses PPAPI that together are designed from the ground up to be portable and secure. PPAPI provides the only APIs NaCL apps can call. They are cross platform so you write 1 plugin and it runs on Linux/OSX/Windows. Compare to NPAPI where the plugin has to be custom for each platform and calls into the OS directly unrestricted.
    • jimbobimbo 13y ago
      Actually, Silverlight is a pretty secure platform: out of 10 listed [1] vulnerabilities only 7 execute code and 2 gain admin access on the machine. Here's how Flash player looks like: [2] And here's Chrome's track of record: [3] (unfortunately, there's no good way to filter out NaCl defects) [1] http://www.cvedetails.com/vulnerability-list/vendor_id-26/product_id-19887/Microsoft-Silverlight.html http://www.cvedetails.com/vulnerability-list/vendor_id-26/pr... [2] http://www.cvedetails.com/vulnerability-list/vendor_id-53/product_id-6761/Adobe-Flash-Player.html http://www.cvedetails.com/vulnerability-list/vendor_id-53/pr... [3] http://www.cvedetails.com/product/15031/Google-Chrome.html?vendor_id=1224 http://www.cvedetails.com/product/15031/Google-Chrome.html?v...