Show HN: SQLite Playground

Re:Show HN: SQLite Playground by nicolasmelo12 on Tuesday September 28, 2021 @02:33AM (#28679907)

really nice that you've used wasm and no server. This seems really secure to test.

I was thinking at first: Hey, this might be kinda dangerous, imagine iterating in a tool and sending my database to a server and any attacker retrieves the database.

But since it runs everything inside of the browser with wasm i found it WAY more secure. Nice that you've done it, will probably use it a lot.

[ Parent | on HN ]

Re:Show HN: SQLite Playground by nalgeon on Tuesday September 28, 2021 @02:59AM (#28680057)

Thanks! I've always liked the idea of SQL in the browser, since the Web SQL times.

That part is provided by the excellent sql.js project btw: https://github.com/sql-js/sql.js/

[ Parent | on HN ]

Re:Show HN: SQLite Playground by gizlu on Tuesday September 28, 2021 @10:20AM (#28683079)

It would of course also increase server's potential attack layer. sqlite had some bugs, potentially exploitable, if you are able to invoke arbitrary statements

https://www.sqlite.org/cves.html https://www.sqlite.org/security.html

[ Parent | on HN ]

Re:Show HN: SQLite Playground by Siira on Tuesday September 28, 2021 @02:44AM (#28679959)

It can't change under you on a whim though, can't it? Unless you host it yourself.

[ Parent | on HN ]

Re:Show HN: SQLite Playground by jazzyjackson on Tuesday September 28, 2021 @10:37PM (#28689698)

Sure but you can always keep the network tab in the devtools open and be confident nothing is getting exfiltrated

[ Parent | on HN ]

Re:Show HN: SQLite Playground by krageon on Wednesday September 29, 2021 @09:11AM (#28693095)

Once you see a connection doing so, it is too late :)

[ Parent | on HN ]