News for hackers. Stuff that matters.

A comment on Rust's 2018 roadmap. Parent comment

Re:Rust's 2018 roadmap by kibwen on Monday March 12, 2018 @01:25PM (#16569700)
I'm not just being diplomatic when I say that hopefully we can avoid the Rust vs. Go debate here. :P WASM is a bid to help future-proof the relevancy of the web in the face of mobile app stores, and seeing many languages embrace it is a good thing, no matter what those languages are. Heck, since WASM is sandboxed anyway it doesn't even matter if you choose C or C++ over Go or Rust, since memory unsafety shouldn't be exploitable from WASM anyway.
[ Parent | on HN ]
Re:Rust's 2018 roadmap by geofft on Monday March 12, 2018 @01:34PM (#16569775)
Well, it's not exploitable to get out of the sandbox, but there's still interesting data inside the sandbox. For instance, if some website's wasm is parsing the URL to read the URL fragment or something, you could imagine an attacker sending me to a malformed URL, hoping to overflow the URL parser and gain execution with all the cookies of that web page.
[ Parent | on HN ]
Re:Rust's 2018 roadmap by kibwen on Monday March 12, 2018 @01:41PM (#16569846)
True, I suppose I should temper down "shouldn't be exploitable" to "shouldn't be able to provide a stepping stone to system-wide arbitrary code execution".
[ Parent | on HN ]