Hacker News new | past | comments | ask | show | jobs | submit login

The whole point of WASM was to provide fine grained capability based security in a portable environment. This made it safer than previous sandboxes, specifically because your code couldn't just open a random file in the host environment.

I think this is a very bad idea, and should be rejected. If not... we'll just take another 10 years until capabilities show up again, continuing the Sisyphean cycle.




Twitter Community Notes:

* WASIX does not allow one to open a random file in the host environment, in fact WASIX changed absolutely nothing in file system ABI's at all from preview1 - it just added other extensions.

* WASIX has not removed the capabilities model and instead extended it to support Berkley sockets - i.e. there are capabilities defined for the new socket operations.

* WASIX is fully sandboxed, meaning the network is completely virtual and can be restricted as much as one likes

* TTY and forking is also fully sandboxed.

* You can't reject the Internet




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: