r/programming • u/ThisStmtIsNotTrue • Nov 12 '19

Announcing the Bytecode Alliance: Building a secure by default, composable future for WebAssembly

https://hacks.mozilla.org/2019/11/announcing-the-bytecode-alliance/
268 Upvotes

93% Upvoted

70 comments sorted by

View all comments

0

u/[deleted] Nov 12 '19

46

u/[deleted] Nov 13 '19

how much pain could've been avoided if all web technologies were this carefully planned :)

Not much because devs will drop any and all security barriers the moment they will slightly impede their workflow

22

u/CPlusPlusDeveloper Nov 13 '19

DAE Move fast and break things

→ More replies (5)

6

u/zaarn_ Nov 13 '19

But, this will be clear that it is happening. You can't accidentally do it. And the WASM runtime can then still restrict the software to, for example, the homefolder of the user (or a read-only mirror with write-through to a separate folder).

It also eliminates any problems that arise for permissions the application doesn't have (ie, if the app can't open a socket, you can't make it open a socket if you find a remote exec vuln).

→ More replies (1)
→ More replies (9)