Re:Everything Old Is New Again: Binary Security of WebAssemb...
by azakai on Friday April 30, 2021 @12:17PM
(#26995415)
It depends on what you mean by "safely". The spectre family of exploits has no general solution and requires specific mitigations. Aside from that, Wasm provides a sandbox that disallows escaping from it. That does leave scribbling on memory inside the sandbox, which is what this paper focuses on.
So for many use cases Wasm does allow what you mention, running unsafe code quickly on normal hardware, and it is being used in production for that purpose.
So for many use cases Wasm does allow what you mention, running unsafe code quickly on normal hardware, and it is being used in production for that purpose.