News for hackers. Stuff that matters.
Re:No More Blue Fridays by titzer on Monday July 22, 2024 @02:38PM (#41038060)
WebAssembly is a better choice for sandboxing kernel code. It has a full formal specification with a mechanized proof of type safety, many high-performance implementations, broad toolchain support, is targetable from many languages, and a capability security model.
Re:No More Blue Fridays by rapidlua on Tuesday July 23, 2024 @05:10AM (#41044127)
Hardly. For starters, wasm doesn’t guarantee that a piece of code terminates in bound time. There are further security guarantees in ebpf such as any lock acquired must be released.
Re:No More Blue Fridays by titzer on Wednesday July 24, 2024 @12:41PM (#41058883)
You can apply additional static checks to Wasm, e.g. control flow analysis, and reject programs without obvious loop bounds or unbalanced locking operations. Or you could apply dynamic techniques like tracking acquired locks and automatically releasing them, or charging fuel (gas). The latter is quite common for blockchain runtimes based on Wasm.
Re:No More Blue Fridays by jules on Monday August 05, 2024 @08:10PM (#41166752)
[delayed]