News for hackers. Stuff that matters.

A comment on WebAssembly: The New Kubernetes?. Parent comment

Re:WebAssembly: The New Kubernetes? by eyberg on Friday January 21, 2022 @04:11PM (#30030055)
It doesn't matter if it's rust or not. You can still modify read only data and still redirect indirect calls. You can still modify the stack and the heap. Rust changes nothing.

Also, not sure where the comparison to a hypervisor is coming into play. As @kllrnohj mentioned hypervisors are relying on actual hardware.

[ Parent | on HN ]
Re:WebAssembly: The New Kubernetes? by nullifidian on Friday January 21, 2022 @04:24PM (#30030191)
I'm not a rust expert, but I thought rust without unsafes should prevent such things at the compile time. C# and Java will be compiled into WASM differently, I believe no less securely than JVM or .NET. Having information leaks is still better than arbitrary code execution.
[ Parent | on HN ]
Re:WebAssembly: The New Kubernetes? by pjmlp on Saturday January 22, 2022 @06:01AM (#30035615)
No safe language in the world prevents anything if the attacker can change the binary contents, it is no longer the code produced by the compiler.

That is why we have signed binary execution to start with, WASM doesn't support any of this.

[ Parent | on HN ]