News for hackers. Stuff that matters.

A comment on Strengthening the Microsoft Edge Sandbox. Parent comment

Re:Strengthening the Microsoft Edge Sandbox by partycoder on Saturday March 25, 2017 @10:18PM (#13958696)
Chakra is open source. The rest is not.

The IE/Edge layout engine has always been a source of infamous trickery. It would be good that they finally open source it.

[ Parent | on HN ]
Re:Strengthening the Microsoft Edge Sandbox by repples on Saturday March 25, 2017 @10:20PM (#13958700)
As Chakra is part of Edge, then Edge is not fully closed source.
[ Parent | on HN ]
Re:Strengthening the Microsoft Edge Sandbox by satysin on Sunday March 26, 2017 @09:08AM (#13960580)
Edge is closed source. You have no way of verifying the build of Chakra used is the same as the open source version. Well it might be possible to reproduce a build of Chakra to do a binary comparison but i am not aware of anyone doing it.
[ Parent | on HN ]
Re:Strengthening the Microsoft Edge Sandbox by repples on Sunday March 26, 2017 @02:21PM (#13962211)
There's nothing stopping you from compiling https://github.com/Microsoft/ChakraCore and checking if Chakra.dll matches that which is distributed with Edge.
[ Parent | on HN ]
Re:Strengthening the Microsoft Edge Sandbox by satysin on Sunday March 26, 2017 @03:03PM (#13962469)
AFICT you cannot build a like-for-like chakra.dll from ChakraCore due to https://github.com/Microsoft/ChakraCore#using-chakracore

The chakra.dll that comes as part of Windows/Edge includes the additional parts not included with ChakraCore (at least that is how it reads to me).

[ Parent | on HN ]