News for hackers. Stuff that matters.
Re:Strengthening the Microsoft Edge Sandbox by repples on Saturday March 25, 2017 @10:20PM (#13958700)
As Chakra is part of Edge, then Edge is not fully closed source.
Re:Strengthening the Microsoft Edge Sandbox by satysin on Sunday March 26, 2017 @09:08AM (#13960580)
Edge is closed source. You have no way of verifying the build of Chakra used is the same as the open source version. Well it might be possible to reproduce a build of Chakra to do a binary comparison but i am not aware of anyone doing it.
Re:Strengthening the Microsoft Edge Sandbox by repples on Sunday March 26, 2017 @02:21PM (#13962211)
There's nothing stopping you from compiling https://github.com/Microsoft/ChakraCore and checking if Chakra.dll matches that which is distributed with Edge.
Re:Strengthening the Microsoft Edge Sandbox by satysin on Sunday March 26, 2017 @03:03PM (#13962469)
AFICT you cannot build a like-for-like chakra.dll from ChakraCore due to https://github.com/Microsoft/ChakraCore#using-chakracore

The chakra.dll that comes as part of Windows/Edge includes the additional parts not included with ChakraCore (at least that is how it reads to me).