The bug is thinking we can sandbox and run arbitrary code safely. Java, Javascript, flash, and even intel have failed at this.
It would be nice if we could acknowledge this rather than rewrite everything again and still fail.
It would be nice if we could acknowledge this rather than rewrite everything again and still fail.
if the protections that sandboxing offered were so flimsy as to be a false sense of security, that would be an argument against sandboxing. but that does not seem to be the situation we're in.