<story><title>Nginx on Wasmjit</title><url>https://www.wasmjit.org/blog/nginx-on-wasmjit.html</url></story><parent_chain><item><author>gok</author><text>Sounds like the big idea from Singularity (run everything in the same hardware security ring, use static analysis for memory safety) is going mainstream, incrementally. Unfortunate that this is happening right as it becomes clear that such a design is fundamentally unsound on modern hardware.</text></item></parent_chain><comment><author>zimbatm</author><text>+1 for pointing at the irony but it&amp;#x27;s not really true.&lt;p&gt;1. Hardware design flaws are not irremediable and will be fixed in time.&lt;p&gt;2. It&amp;#x27;s still very useful to run software that is trusted to  not be malicious and&amp;#x2F;but not trusted to be void of memory bugs.</text></comment>
<story><title>Nginx on Wasmjit</title><url>https://www.wasmjit.org/blog/nginx-on-wasmjit.html</url></story><parent_chain><item><author>gok</author><text>Sounds like the big idea from Singularity (run everything in the same hardware security ring, use static analysis for memory safety) is going mainstream, incrementally. Unfortunate that this is happening right as it becomes clear that such a design is fundamentally unsound on modern hardware.</text></item></parent_chain><comment><author>_wmd</author><text>The big news this year was that the majority of hardware isolation designs in existence were fundamentally unsound, this is a software sandbox. Are you referring to the recent discovery of a new hardware bug class here?</text></comment>