fwsgonzo

8 ms·

61.
by fwsgonzo 2y ago
There's many ways to go about it, but essentially yes, brk and mmap and a few others just to get into main() for some common run-times. But you can do whatever you want. For example in libriscv I override the global allocator in my gue
62.
by fwsgonzo 2y ago
Perhaps, but I can't imagine its buggy for general registers like those used in system calls. I haven't seen that bug, but I don't doubt it. There's many obscure registers for various architectures that could bug out.
63.
by fwsgonzo 2y ago
Yep. I could imagine a deterministic method of just sending the executable + changed pages. Then load the program in the same way on the other machine, and then apply the changed pages. It would be a minimal transfer. Thread state can also
64.
by fwsgonzo 2y ago
You can run v8 jitless, if you want. It's going to be much faster than QuickJS. Adding JIT support means adding a fixed executable range, which you also can do already, but you can't run it in the dumb CLI example. JITs love to be
65.
by fwsgonzo 2y ago
Someone joined my discord recently and showed me this one: https://github.com/ashishbijlani/kwarantine It runs on bare metal, though. I just thought it was very interesting to see. Must have been a lot of work.
66.
by fwsgonzo 2y ago
Register variables are idiomatic when you're locking down every single register anyway, which is always the case for system calls. If you're writing assembly where you want the register allocators help, by all means use regular in
67.
by fwsgonzo 2y ago
This is inline assembly.
68.
by fwsgonzo 2y ago
The inline assembly is not idiomatic. Today you should be using register asm. Here is a RISC-V example: register long a0 asm("a0") = arg0; register long syscall_id asm("a7") = n; asm volatile ("ecall&
69.
by fwsgonzo 2y ago
Yep, the amount of contradiction one can hold probably has no bounds when not subjected to some kind of deprogramming. I occasionally look at conservative messaging boards and most members are just asking for what to think not really asking
70.
by fwsgonzo 2y ago
Well, I updated my submodule to latest dev and it doesn't even build. Trying to figure out what broke. Looking forward to seeing the improvements. EDIT: Found the offending PR and made an issue
71.
Using C++ as a Scripting Language, part 14(fwsgonzo.medium.com)
1 points by fwsgonzo 2y ago|0 comments
72.
by fwsgonzo 2y ago
As someone who has written a RISC-V sandbox for that purpose, I say stay the course. We need more competition to WASM. At the end you'll find that register machines make for faster interpreters than Harvard architectures. You can have
73.
RISC-V Sandboxing Library(github.com)
25 points by fwsgonzo 2y ago|0 comments
74.
by fwsgonzo 2y ago
Indeed, just look at the perp walk of Luigi Mangione. I've never seen so many feds in one place for one guy. I guess the rulers didn't like that one bit.
75.
by fwsgonzo 2y ago
A trend? People never capitalized anything on IRC in the early 90s. The only time I saw it was on forums and other longer forms of text. And then eventually everyone else joined the Internet and more formal writing became the norm. Not want
76.
by fwsgonzo 2y ago
Not really, no
77.
Using C++ as a Scripting Language, part 14(fwsgonzo.medium.com)
1 points by fwsgonzo 2y ago|0 comments
78.
by fwsgonzo 2y ago
I have a bit of experience in this, and adding monitoring, logging and observability doesn't really affect it compared to the non-sandboxing path: All of those things should already be happening. There should already be logging and sta
79.
by fwsgonzo 2y ago
That's what libriscv excels at. It's the ideal solution for exactly that https://libriscv.no/docs/intro/
80.
by fwsgonzo 2y ago
Absolutely not! It's better to use something backed by KVM, so that you can use all the features of the CPU. This is just a proof-of-concept that was fun to make.
81.
by fwsgonzo 2y ago
FireCracker has a jailer: https://github.com/firecracker-microvm/firecracker/blob/main...
82.
by fwsgonzo 2y ago
The VM could only make requests if you add a system call specifically for that purpose. Eg. if you add something like sys_request that takes a URL as argument and some input and output arguments. It's not that the VM couldn't open
83.
by fwsgonzo 2y ago
Well, the boundary between the host and the guest, the system call API, is always going to be the biggest vector of attacks no matter what the solution used is. But, if you find a problem and fix it, you're back to being safe again, un
84.
by fwsgonzo 2y ago
Funny you mention that because mini-moonbitlang seems to be using libriscv! https://github.com/moonbitlang/minimoonbit-public So, maybe not the official compiler but something else is already using it?
85.
Show HN: Ephemeral VMs in 1 Microsecond(github.com)
84 points by fwsgonzo 2y ago|47 comments
86.
by fwsgonzo 2y ago
Yes, we have spoken to a lawyer and it is indeed the case. It still costs money, and we are not sure how to proceed yet, outside of removing links to the domain.
87.
by fwsgonzo 2y ago
You're completely right. It's a squatter and he wants money. The project is not dead, however. It's currently used for research at University of Oslo, and I think we can expect much more activity in the coming years, such as
88.
by fwsgonzo 2y ago
We are indeed Norwegian! The domain is owned by a squatter now. He wants EUR 3000 to release it back to us. It's simply too much right now. So, I wish that this HN post could change from the squatter URL to GitHub instead.
89.
by fwsgonzo 2y ago
Maybe you already considered this, but contracts are full of unenforceable and illegal clauses. At the end of the day you did work for them that they agreed to and then they stiffed you on it in a very visible way. Generally, if the work is
90.
Not an Introduction to Godot Sandbox(fwsgonzo.medium.com)
2 points by fwsgonzo 2y ago|0 comments

More ›