Hacker News Reader

i wonder what are the security implications. how many new vulnerabilities will be uncovered, machines infected, and viruses implemented in wasm.

the concept of wasm doesn't really fly with zero-trust internet

View on HN

> if any website can load a javascript that loads wasm code that does whatever

Any website can already do that with asm.js. WASM does not change the security model of browsers.

Can you elaborate? I would think the sandbox nature of wasm would be a better fit than other models, and presumably no worse than JavaScript?

i am not convinced that wasm interpreter will be bug/vulnerability free. as it was the case for every new piece of software there will be ton of vulnerabilties in the VM itself that will be exploited

Reply on news.ycombinator.com