News for hackers. Stuff that matters.

A comment on How Shopify Uses WebAssembly Outside of the Browser. Parent comment

Re:How Shopify Uses WebAssembly Outside of the Browser by alquemist on Saturday December 19, 2020 @07:56AM (#25477123)
Assuming that Intel / ARM microarch implementations are bug free, that is correct. In the real world there are no bug free implementations.

Edit. This is the strategy Chrome sandboxing uses: a hardened runtime (JS/WASM) inside a seccomp enclosure. https://chromium.googlesource.com/chromiumos/docs/+/master/s...

[ Parent | on HN ]
Re:How Shopify Uses WebAssembly Outside of the Browser by CyberRabbi on Saturday December 19, 2020 @08:15AM (#25477213)
Running code in a wasm vm doesn’t magically prevent user code from exploiting uarch bugs. Lucet specifically does not mitigate spectre variant 2.
[ Parent | on HN ]