Re:Chrome 0-day exploit used in Operation WizardOpium
by est31 on Saturday November 02, 2019 @10:13AM
(#21427806)
wasm is only a new phenomenon and those APIs were designed without wasm in mind. Note that wasm is also slower and thus more resource (battery) consuming than a native C++ implementation. Also, Chrome is already adding audioworklets to WebAudio so it will become customizeable. Last but not least, browsers are at least a central place that can be patched. Compare this to a possible future where vulnerable wasm libraries are being used in web apps, allowing third parties to run cross site wasm based exploits. Websites can't even switch off sms based 2fA, would you expect them to keep their wasm libraries up to date?
[ Parent
| on HN ]
Re:Chrome 0-day exploit used in Operation WizardOpium
by jbk on Sunday November 03, 2019 @05:30AM
(#21433125)
> Note that wasm is also slower and thus more resource (battery) consuming than a native C++ implementation.
My tests for codecs is now around 20% slower than native code, for the naive implementation. And SIMD.wasm helps a lot.
Re:Chrome 0-day exploit used in Operation WizardOpium
by baybal2 on Saturday November 02, 2019 @10:24AM
(#21427857)
Long story short, WASM must be removed from browsers before it reaches wider adoption. And along with other completely unneeded APIs.
Parties opposing that must be expelled from standard bodies.
P.S. Just look at completely outrageous effort to push payment APIs into the browser and stuff they want to bundle along https://www.w3.org/2019/09/15-wpwg-minutes.html