Re:WebAssembly support now shipping in all major browsers
by phkahler on Tuesday November 14, 2017 @12:39PM
(#15697266)
>> This is wrong. The focus will simply switch to sandbox escapes.
Thank you. We have a winner here! And the people trying to escape them will have the full capability of native code running on your CPU.
In the mean time, permissions will be granted for ever increasing parts of the system. Users will not be prompted to "allow" for every site they visit because that will be tedious so browsers will start the enable permissions by default. But either way, we now have the browser acting as the keeper of permissions that our OSes are not able to enforce at the granularity we need for such things.
We've been continually migrating the browser to the role of an OS. It's just insane.
Re:WebAssembly support now shipping in all major browsers
by Rusky on Tuesday November 14, 2017 @01:35PM
(#15697838)
How is it insane? It does a lot of things better than our current OSes. As long as we go into it knowing that's what we're doing it's an inherently better application and security model in a lot of ways.
On x86, the only real "sandbox" you have is what your MMU gives you. For as long as executable has access to browser's address space, it can do anything a browser can, including reading your webcam, mic, sensors, GPS, etc