Live data from Hacker News

Extism makes WebAssembly easy

dylibso.com

61–70 of 100 posts

Re: Extism makes WebAssembly easy

#61

This is an ad. Just use WASI.

"Just" use WASI is not useful advice. I've been trying to do that for my own purposes for over a year. The learning curve on that (as a Python programmer who wants to use WebAssembly for sandboxing) is practically a vertical wall.

Re: Extism makes WebAssembly easy

#62
post #52

Earlier quoted context omitted.

Most forums were awful phpbb nonsense where it was impossible to find the information you wanted. Search always required logging in and the only interface for very long threads was paging through them 10 badly laid out posts at a time. No thank you. Of course modern forums are better. Disqus is ok, and D's forum software is arguably the best thing to come out of the D project. In any case Discord is not a replacement…

None of the phpBB-like forums that I am aware of (phpBB, SMF, vbulletin) require login to search.

I recall running into the odd one or two like that - I have vague memories that it was because searching was _slow_ and it didn't take more than a few people using it to bring the site to its knees. Restricting it to logged in users helped, and I think I saw some sites restrict searching to only post bodies for a period too, for similar reasons.

I haven't run into it recently, but I have at least vague memories of it happening in the past.

Re: Extism makes WebAssembly easy

#63
post #23

The thing I want to achieve with WebAssembly is still proving a lot harder than I had anticipated. I want to be able to take strings of untrusted code provided by users and execute them in a safe sandbox. I have all sorts of things I want this for - think custom templates for a web application, custom workflow automation scripts (Zapier-style), running transformations against JSON data. When you're dealing with untru…

I'm working on this problem as well and would be happy to sling you some thoughts and notes. Check my website https://runno.dev and send an email to the address on that website!

Re: Extism makes WebAssembly easy

#65
post #4

Another open Source project locking their community discussions away on Discord where it can't be easily discovered or searched. At least consider mirroring to the web - or at this stage inform people you will one day make posts available on the open web. Acquiring that consent afterwards is painful.

I prefer to read documentation via Minecraft chat. That way I can craft a diamond pickaxe to smash my head in.

You can run examples in redstone

Re: Extism makes WebAssembly easy

#66
post #23

The thing I want to achieve with WebAssembly is still proving a lot harder than I had anticipated. I want to be able to take strings of untrusted code provided by users and execute them in a safe sandbox. I have all sorts of things I want this for - think custom templates for a web application, custom workflow automation scripts (Zapier-style), running transformations against JSON data. When you're dealing with untru…

> I want to be able to take strings of untrusted code provided by users and execute them in a safe sandbox.

Isn't this the entire pitch of the browser as an app platform rather than a document viewer? Why target it if it's not sandboxed?

Re: Extism makes WebAssembly easy

#67
post #27
post #24

Earlier quoted context omitted.

Thanks. I'm not sure how this maps to the original example, though. This is about compiling a standalone program which translates POSIX apis, it seems? How about calling it from Rust with string args etc?

Exactly. That's what Extism is trying to solve. That WASI post doesn't show at all how to use the WASM code from C, or vice versa, because it just compiles the entire C program to WASM which uses the POSIX-based WASI API. If you want an alternative to Extism, you need something like wasmer.io, not just wasmtime (Extism actually uses wasmtime as mentioned in the post).

Right. The point being that you can take your pick of WASI compliant runtimes which have those features. Extism isn't something special compared to any other open source project in this domain, yet it smells of a commercial venture. Count me out.

Re: Extism makes WebAssembly easy

#68
post #61

This is an ad. Just use WASI.

"Just" use WASI is not useful advice. I've been trying to do that for my own purposes for over a year. The learning curve on that (as a Python programmer who wants to use WebAssembly for sandboxing) is practically a vertical wall.

I should have said "Just use any WASI compliant runtime". There's a ton of them with these features, and none of the commercial angle.

Re: Extism makes WebAssembly easy

#69
post #23

The thing I want to achieve with WebAssembly is still proving a lot harder than I had anticipated. I want to be able to take strings of untrusted code provided by users and execute them in a safe sandbox. I have all sorts of things I want this for - think custom templates for a web application, custom workflow automation scripts (Zapier-style), running transformations against JSON data. When you're dealing with untru…

I'm building something that solves this exact problem, and I'll have an alpha version ready soon. Drop me a mail at marc@ my username .net, if you're interested. I'd also really like to have a chat about your use cases if you're up for it.

Cheers, Marc

Re: Extism makes WebAssembly easy

#70
post #23

The thing I want to achieve with WebAssembly is still proving a lot harder than I had anticipated. I want to be able to take strings of untrusted code provided by users and execute them in a safe sandbox. I have all sorts of things I want this for - think custom templates for a web application, custom workflow automation scripts (Zapier-style), running transformations against JSON data. When you're dealing with untru…

I created https://github.com/dicej/component-sandbox-demo when you asked about this on the Bytecode Alliance Zulip. Curious if you have any feedback on it.
Post reply on HN