> you cannot express anything malicious in Wasm
This feels like a comment that will as age as badly as “you can’t get a virus just from looking at an email”
This feels like a comment that will as age as badly as “you can’t get a virus just from looking at an email”
You can express malicious things in Go, yet the number of RCEs in Go apps is pretty much zero.
You have to be more specific because lots of fraud is possible by misleading the user through JavaScript tricks.
"The first version of Java was released by Sun Microsystems in 1995 [2]. One year later, researchers at Princeton University identified multiple flaws enabling an analyst to bypass the sandbox [3]. The authors identified weaknesses in the language, bytecode and object initialization, to name a few, some of them still present in Java at the time of writing."[0]
[0] https://www.exploit-db.com/papers/45517
[2] http://www.oracle.com/technetwork/java/javase/overview
[3] Drew Dean, Edward W. Felten, Dan S. Wallach. "Java security: From HotJava to Netscape and beyond." In Security & Privacy, IEEE, 1996