News for hackers. Stuff that matters.
Re:Making WebAssembly a first-class language on the Web by rishflab on Wednesday March 11, 2026 @07:33PM (#47344028)
> The web is fascinating: we started with a seemingly insane proposition that we could let anyone run complex programs on your machine without causing profound security issues.

Isnt this what an OS is supposed to do? Mobile operating systems have done a pretty good job of this compared to the desktop OS.

Re:Making WebAssembly a first-class language on the Web by jitl on Wednesday March 11, 2026 @08:16PM (#47344488)
mobile operating systems review all the code that gets installed on every device
Re:Making WebAssembly a first-class language on the Web by rishflab on Wednesday March 11, 2026 @09:18PM (#47345020)
Security does not depend on code review. They have stronger sandboxing and have granular permissions that the user must allow. My point is running untrusted code securely should be the operating systems job. It is possible to do this at the operating system level, a browser is not required. The problem is the security model for desktop operating systems is ancient and has not kept up with today's requirements.
Re:Making WebAssembly a first-class language on the Web by lich_king on Wednesday March 11, 2026 @10:38PM (#47345690)
Mobile OSes don't allow random people to run code on your device. They allow you to install software you want and sort-of trust, which is conceptually close to the desktop model. There are some safeguards on top of that, but the primary line of defense is that cheap-pillz.virus-basket.ru can't actually execute anything on your device.
Re:Making WebAssembly a first-class language on the Web by pjmlp on Thursday March 12, 2026 @04:23AM (#47347928)
Desktop model at least on Apple, Google and Microsoft platforms is slowly adopting similar security models, boiling water and frogs kind of approach.