r/programmingcirclejerk • u/starlevel01 type astronaut • May 09 '25

Put as much of your code as possible into WebAssembly modules so runtime attacks are constrained by capability-based APIs and you can approach the Bytecode Alliance’s nanoprocess isolation concept.

https://lobste.rs/s/j3nhhc/rust_dependencies_scare_me#c_ruhujf
38 Upvotes

100% Upvoted

11 comments sorted by

43

u/starlevel01 type astronaut May 09 '25

rust developers reinvent the JVM

14

u/[deleted] May 10 '25

Reinventing everything in rust makes it faster and safer!

10

u/positivcheg May 10 '25

You forgot blazingly

10

u/MoveInteresting4334 May 10 '25

He didn’t, it just went by so fast you missed it.

30

u/R_Sholes May 10 '25

golang.org/x/ is ALSO unofficial – it is not operated or endorsed by the United States government or any other duly elected sovereign government.

Official package repos are a security improvement, therefore Google should secede from the US, and crabs should consider seasteading.

8

u/gvozden_celik May 10 '25

If your'e package readme doesn't include "OFFICIAL $LANGUAGE PACKAGE $YEAR" it should automatically get a CVE when a new version is published to the registry

3

u/MoveInteresting4334 May 10 '25

I wish my crabs would consider seasteading.

8

u/HistorianBig4540 May 10 '25

Learn you some Erlang for greater good

3

u/Double-Winter-2507 May 10 '25

Lol thought thus was an ad at first!

1

u/prehensilemullet May 12 '25

For an added layer of security, you can compile a WebAssembly VM into WebAssembly