Hacker News Reader

so something say, sandboxed (like in a browser running webassembly) could get at non-sandboxed data?

Or something in one VM getting at data from a different VM?

There are examples of straight JavaScript exploits that allow a website to read memory from anywhere in the process its code is running in.