Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

More languages should really be doing this and encouraging it. The JVM can sandbox pretty well using a security manager, but most people don't use the sandbox.


Only very few language also provide the type of security the JVM (partially) protects against: resource exhaustion attacks. Being able to prevent time (e.g. infinite loops) and space (memory allocation) exhaustion by being able to specify absolute or relative limits on these.

Stackless Python is able to limit the number of instruction steps that are run in a tasklet: https://stackless.readthedocs.io/en/latest/library/stackless...

With some ugly hacks, Lua can do it too.

But no language I know of can do all these things, I tried to build one once: https://esolangs.org/wiki/RarVM




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: