Re:Standardizing WASI: A system interface to run WebAssembly...
by AnIdiotOnTheNet on Wednesday March 27, 2019 @02:35PM
(#19504382)
It remains to be seen if WASI will actually have fewer holes in its sandbox. Fundamentally it is not different.
[ Parent
| on HN ]
Re:Standardizing WASI: A system interface to run WebAssembly...
by chubot on Wednesday March 27, 2019 @05:51PM
(#19506457)
I think an important difference is that in the new architecture, there's a separation between WASM and WASI.
That is, computation and I/O are treated separately. It's more like capability-based security. WASM modules have no capabilities except the ones explicitly injected when you instantiate it.
As far as I understand, the JVM wasn't as rigorous about this, although to be fair I don't know all the details.
So WASI could still have a lot of holes, but WASM would survive and be useful. And then maybe someone else could come around and do it in a different, better way. That hasn't happened with Java.