News for hackers. Stuff that matters.

A comment on Everything Old Is New Again: Binary Security of WebAssembly [pdf]. Parent comment

Re:Everything Old Is New Again: Binary Security of WebAssemb... by flohofwoe on Friday April 30, 2021 @01:00PM (#26996069)
No, it's a completely different topic. Java applets were "unsafe by design" in that they allowed to escape the sandbox (even as a feature via calling out into native DLLs).

This paper is only about messing up the WASM heap, which might cause the WASM application to crash, but this doesn't cause damage outside the sandbox.

[ Parent | on HN ]
Re:Everything Old Is New Again: Binary Security of WebAssemb... by cbsmith on Monday May 03, 2021 @11:59AM (#27026733)
> Java applets were "unsafe by design" in that they allowed to escape the sandbox (even as a feature via calling out into native DLLs).

The design of the Java applet security model did not include being able to escape the sandbox. That was something Microsoft did that deliberately broke the security model. The closest thing Java applets had to "escape the sandbox" was popping up a new window, and even that involved presenting the user with a warning that the window belonged to the applet.

[ Parent | on HN ]