Hacker News Reader

WASM brings a memory sandbox that prevents out of bounds access to arbitrary pointers.

The only bounds that are checked is the overall size of the linear memory block, there is no bounds checking inside the same segment.

Which is exactly the point made by GP.

Right. The sandbox can scramble its own state, but as long as the accessible APIs have a protected interface it can't mess up the overall game.