News for hackers. Stuff that matters.
Re:JsonLogic – Build complex rules, serialize them as JSON by boomlinde on Tuesday October 25, 2016 @11:09AM (#12788608)
Lua isn't executable either. The point at which it results in some corresponding machine instructions wouldn't be much different in this case.
Re:JsonLogic – Build complex rules, serialize them as JSON by MichaelBurge on Tuesday October 25, 2016 @07:56PM (#12792831)
ELF binaries aren't executable either: They require the kernel to interpret them, preparing virtual memory and granting it a pid. Alone, they're just sequences of bytes.
Re:JsonLogic – Build complex rules, serialize them as JSON by boomlinde on Wednesday October 26, 2016 @02:13AM (#12794274)
What's your point? That you are willing to extend this principle to ELF binaries doesn't really affect my argument.

My point is that for the purpose of letting some non-trusted instructions run safely in a program, encoding them as JSON or Lua will come with the same caveats. Ultimately, they are both interpreted and can be sandboxed thus. Neither contain any code that will be passed off as-is for the CPU to execute. In some cases, neither does an ELF blob.