Conversation

Notices

1. Embed this notice
   Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 14-Oct-2024 13:31:20 JST Haelwenn /элвэн/ :triskell:

   in reply to

   • Rich Felker
   • Paul SomeoneElse
   • LisPi
   @lispi314 @dalias @pkw Well ressource exhaustion… that's the job of the OS to prevent.
   Like sure applications should be good neighbors but ultimately the OS has CPU and I/O schedulers plus virtual memory for a reason.
   • Embed this notice
     LisPi (lispi314@udongein.xyz)'s status on Monday, 14-Oct-2024 13:31:21 JST LisPi

     • Rich Felker
     • Paul SomeoneElse
     @dalias @pkw You can, but that is only because HTML in most browsers has too much access.
     
     The less functional access one gives on a machine, the less attack surface is reachable.
     
     One doesn't need turing completeness to expose too much attack surface. However turing completeness makes it a hell of a lot easier to expose too much surface though, and facilitates nuisances like denial of service & resource exhaustion (still readily feasible without turing completeness).