▲ 69 ▼ Making WebAssembly a first-class language on the Web – Mozilla Hacks - the Web developer blog (hacks.mozilla.org) submitted 8 months ago by SorteKanin@feddit.dk to c/rust@programming.dev 9 comments fedilink hide all child comments
[–] protogen420@lemmy.blahaj.zone -1 points 8 months ago (5 children) make RCE a second class feature instead permalink fedilink source hideshow 5 child comments replies: [–] LPThinker@lemmy.world 3 points 8 months ago (4 children) What RCE are you talking about? permalink fedilink source parent hideshow 4 child comments replies: [–] Ephera@lemmy.ml 3 points 8 months ago I'm guessing, they mean JavaScript and WebAssembly in general... permalink fedilink source parent [–] protogen420@lemmy.blahaj.zone 5 points 8 months ago (1 child) wasm and js are by definition remote code execution "oh but is sandboxed" how many sandbox bypass and sanbox escape CVEs have we had? incountably many beyond that, that is code using your cpu cycles often inefficiently and for useless purposes or outright malicious purposes such as tracking permalink fedilink source parent hideshow 1 child comment replies: [–] ISO@lemmy.zip 4 points 8 months ago* Let's take Lemmy UIs as an example. In a world where this "RCE" is removed, all API calls and returned data would have to go through a "server client" first. I hope this won't take you long to ponder if that's an improvement or not 😉 The web is indeed shit. But dumber web means more "clouding", or if it's not "clouding", and to borrow from your reductionist fatalism: Dumber web replaces a potential RCE with a definite MITM. permalink fedilink source parent [–] rtxn@lemmy.world 2 points 8 months ago All the RCE vulnerabilities that Apple introduced as "features" permalink fedilink source parent
[–] LPThinker@lemmy.world 3 points 8 months ago (4 children) What RCE are you talking about? permalink fedilink source parent hideshow 4 child comments replies: [–] Ephera@lemmy.ml 3 points 8 months ago I'm guessing, they mean JavaScript and WebAssembly in general... permalink fedilink source parent [–] protogen420@lemmy.blahaj.zone 5 points 8 months ago (1 child) wasm and js are by definition remote code execution "oh but is sandboxed" how many sandbox bypass and sanbox escape CVEs have we had? incountably many beyond that, that is code using your cpu cycles often inefficiently and for useless purposes or outright malicious purposes such as tracking permalink fedilink source parent hideshow 1 child comment replies: [–] ISO@lemmy.zip 4 points 8 months ago* Let's take Lemmy UIs as an example. In a world where this "RCE" is removed, all API calls and returned data would have to go through a "server client" first. I hope this won't take you long to ponder if that's an improvement or not 😉 The web is indeed shit. But dumber web means more "clouding", or if it's not "clouding", and to borrow from your reductionist fatalism: Dumber web replaces a potential RCE with a definite MITM. permalink fedilink source parent [–] rtxn@lemmy.world 2 points 8 months ago All the RCE vulnerabilities that Apple introduced as "features" permalink fedilink source parent
[–] Ephera@lemmy.ml 3 points 8 months ago I'm guessing, they mean JavaScript and WebAssembly in general... permalink fedilink source parent
[–] protogen420@lemmy.blahaj.zone 5 points 8 months ago (1 child) wasm and js are by definition remote code execution "oh but is sandboxed" how many sandbox bypass and sanbox escape CVEs have we had? incountably many beyond that, that is code using your cpu cycles often inefficiently and for useless purposes or outright malicious purposes such as tracking permalink fedilink source parent hideshow 1 child comment replies: [–] ISO@lemmy.zip 4 points 8 months ago* Let's take Lemmy UIs as an example. In a world where this "RCE" is removed, all API calls and returned data would have to go through a "server client" first. I hope this won't take you long to ponder if that's an improvement or not 😉 The web is indeed shit. But dumber web means more "clouding", or if it's not "clouding", and to borrow from your reductionist fatalism: Dumber web replaces a potential RCE with a definite MITM. permalink fedilink source parent
[–] ISO@lemmy.zip 4 points 8 months ago* Let's take Lemmy UIs as an example. In a world where this "RCE" is removed, all API calls and returned data would have to go through a "server client" first. I hope this won't take you long to ponder if that's an improvement or not 😉 The web is indeed shit. But dumber web means more "clouding", or if it's not "clouding", and to borrow from your reductionist fatalism: Dumber web replaces a potential RCE with a definite MITM. permalink fedilink source parent
[–] rtxn@lemmy.world 2 points 8 months ago All the RCE vulnerabilities that Apple introduced as "features" permalink fedilink source parent