Re:Why do our programs need to read input and write output?
by Gabriel439 on Sunday October 08, 2017 @02:34PM
(#15429339)
However, the compiler/interpreter places an upper bound on the amount of code that we need to audit because it acts like a trusted kernel. We only need to audit the compiler/interpreter itself for safety and once we do so we can automatically trust all programs written in the language that it compiles/interprets
[ Parent
| on HN ]
Re:Why do our programs need to read input and write output?
by marcosdumay on Sunday October 08, 2017 @08:19PM
(#15430761)
In a general case, the compiler acts as a sandbox. How much harm the malicious code can do depends on the specifics of how much IO it enables.
On the case of Dhall it's entirely safe, if you generalize it into a full OS equivalent system, you'd have to audit everything.