Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Sure I am might have been a wee bit too bitter writing that.

The point I want to make is that allowing remote code execution is such a big attack surface that it makes all the other security measures look silly, which indicates that signed execution contexts in them self is an attack on privacy and control etc.

If there was any actual security concerns there could be a push for server side rendering or something.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: