Collaborate Disseminate
Have you ever dreamt of developing games that run on practically anything, from a modern browser to a microcontroller? Enter WASM-4, a minimalist fantasy console where constraints spark creativity. Unlike …read more Continue reading WASM-4: Retro Game Dev Right in Your Browser
It’s a great joke, and like all great jokes it makes you think. [Søren Fuglede Jørgensen] managed to cram a 15 M parameter large language model into a completely valid …read more Continue reading Llama.ttf is AI, in a Font
I’m trying to offer a service to users that allows them to write Python via pyodide or R code via webR in their browser against my own data. I’ve been thinking of ways to go about this and I’m curious if this is a stupid idea.
pyodide and … Continue reading Using API key as public key and IP address as private key to WASM application
JavaScript is useful for interactivity. However, it is often disabled by security conscious browsers, such as the Tor Browser Bundle, and blocked with plugins such as NoScript.
I was wondering if it was possible for WebASM to provide JavaS… Continue reading Can WebASM provide JavaScript style interactivity without the same vulnerabilities?
I understand that nothing is perfectly secured.
If we have a web app where most of the functionality is done inside the browser using WASM, can someone get the binary of that WASM and use most of its functionality?
What do we need to pay a… Continue reading How secure is it to implement most of the applications functionality using WASM on the client side/ in the browser?
Rust WASM’s web_sys add_event_listener_with_callback "callback" is actually an eval() function under the hood. Isn’t this dangerous? if so, how?
Here is a link to js_sys function, which describes the use of eval (to bind to any … Continue reading Rust WASM’s web_sys add_event_listener_with_callback "callback" is actually an eval() function under the hood. Isn’t this dangerous?
When building electronic assemblies there is quite often the need to construct custom cables to hook things up. It’s all very well if you’re prototyping by hand, or just building …read more Continue reading A Simple Web-Based Wiring Harness Tool
I have been working on an app that uses a combination of different encryption methods; some of them are libraries, and the most important ones are my own implementations. The app is cross-platform that are compiled natively on desktop (Lin… Continue reading Need a cross-platform method of generating near truly random numbers
I am looking to deploy webassembly at scale in production. Before I do so, like to know if there are any 0-day exploits so far and if there are devsecops tools pipeline specifically targetted at webassembly?
Suppose that we have this code (in TypeScript syntax):
function one(str: string): string {
// do something with the string
return str
}
function two() {
let s = getSomeString() // returns some unknown string that may contain surroga… Continue reading A runtime sometimes converts string arguments (or string returns) from WTF-16 to UTF-16 between functions in a call stack. Is this a security concern?