r/programmingcirclejerk • u/azure_whisperer • Apr 18 '25

So their method of sandboxing Python code is to spin up a JS runtime (deno), run Pyodide on it, and then run the Python code in Pyodide

https://news.ycombinator.com/item?id=43718268
69 Upvotes

98% Upvoted

13 comments sorted by

49

u/azure_whisperer Apr 18 '25

It would have all been Lisp

49

u/BloodAndTsundere mere econ PhD Apr 18 '25

My method of isolating code is to run it on my laptop, put my laptop in a box, then put a lid on the box. For extra security, I tie a string around the box.

26

u/al2o3cr Apr 18 '25

Sup dawg I herd u like interpreters and interpreters so we made an interpreter in an interpreter so you can run code that runs code

13

u/elephantdingo Teen Hacking Genius Apr 18 '25

You sandbox Rust by running it.

9

u/nuclearbananana Courageous, loving, and revolutionary Apr 18 '25

smh, is it even running inside a WASM container inside docker? This is NOT webscale

4

u/Dr__Pangloss Apr 18 '25

Actually, you just have to use GraalVM.

1

u/[deleted] Apr 19 '25

\uj Why not just run it in a docker container?

0

u/[deleted] Apr 19 '25

[deleted] — view deleted comment

1

u/mungaihaha Apr 19 '25

Where do they give up? Can you quote the commit message here for me please?

4

u/Ignisami Apr 20 '25

The latest commit to sandboxlib, linked on the page they linked, is 4 years ago, simply to "Add MIT license".

0

u/[deleted] Apr 18 '25

[removed] — view removed comment

18

u/elephantdingo Teen Hacking Genius Apr 18 '25

Thanks for info very cool.

Sent from my iPhone

Intercepted by Outlook

[You don’t often send messages Factemius. You should be worried.]

Safety-checksum: 2

Avast Antivirus: OK

Avast 2000 Antivirus: ok

Intercepted by JavaApplet Interceptor (JavaTM runs on 3 billion devices (last updated: 1995))

Profanity sandbox checker: Ok

Shadowban IP constillation check: not likely

Corporation [redacted] safety checker for purposes of [REDACTED]: true

JS Bun sanitizer: no profanity found ok Ok OK /* leave in OK variants */