Justin_Engler

Less "inherent vulnerabilities" than "If you're using a memory unsafe language (like C), the protections WASM gives you aren't enough to mitigate every possible vuln you might have had in your C code"

The WASM platform does provide some really cool protections, but it's not a silver bullet, you still need to fix your C code.

If you're looking for bugs in WASM implementations, take a look at https://www.blackhat.com/us-18/briefings/schedule/#the-probl... (https://news.ycombinator.com/item?id=17782552 previously posted a week ago)

Our paper/talk was more about the security implications of using WASM in your stack.