News for hackers. Stuff that matters.

A comment on Lucet: Native WebAssembly Compiler and Runtime. Parent comment

Re:Lucet: Native WebAssembly Compiler and Runtime by littlestymaar on Friday March 29, 2019 @07:43AM (#19520740)
The issue with Unix process is that a process has the same rights than the user who ran that process. The design goal of WASI is to provide a capability-based system[1], so an attacker exploiting a buffer overflow wouldn't be able to access things that the original program wasn't supposed to.

[1]: https://hacks.mozilla.org/2019/03/standardizing-wasi-a-webas...

[ Parent | on HN ]
Re:Lucet: Native WebAssembly Compiler and Runtime by hawski on Friday March 29, 2019 @11:56AM (#19522754)
Then it's a bit bizarre to call it memory safe. I would say that "sandbox" is far more established term for what it is or does. Because if by using seccomp and/or user namespaces I would say that Linux/C is memory safe wouldn't it be an unhelpful statement? Can we say that Chrome or Qemu are implemented on memory safe platform?
[ Parent | on HN ]