Re: [dev] Interesting Web Browser Decoupling Concept

2017-06-12 Thread Louis Santillan
:D On Mon, Jun 12, 2017 at 4:35 PM, Bobby Powers wrote: > Rendov Norra wrote: >> Yes, remote arbitrary code execution is already the norm. And if you >> ask me, is precisely the reason Web browsers suck as much as they do. >> Maybe it could be done well, but you'll have to forgive me, I've been

Re: [dev] Interesting Web Browser Decoupling Concept

2017-06-12 Thread Bobby Powers
Rendov Norra wrote: > Yes, remote arbitrary code execution is already the norm. And if you > ask me, is precisely the reason Web browsers suck as much as they do. > Maybe it could be done well, but you'll have to forgive me, I've been > burned too many times. Fun fact, arbitrary code execution is

Re: [dev] Interesting Web Browser Decoupling Concept

2017-06-12 Thread Rendov Norra
CSS+HTML+a user can implement rule 110 [0]. Key part is the user, since CSS cannot iterate rule 110 on its own. This is not to say that HTML/CSS is exempt from criticism, just that javascript is far worse https://stackoverflow.com/questions/2497146/is-css-turing-complete On 6/12/17, Calvin Morris

Re: [dev] Interesting Web Browser Decoupling Concept

2017-06-12 Thread Calvin Morrison
> Also HTML/CSS is not code that is executed or interpreted, it's a > markup language, a description of a document. Plugins are also not > remote arbitrary code execution, they are local code execution, code > you have control over. Last time I checked, CSS is turing complete

Re: [dev] Interesting Web Browser Decoupling Concept

2017-06-12 Thread Rendov Norra
Yes, remote arbitrary code execution is already the norm. And if you ask me, is precisely the reason Web browsers suck as much as they do. Maybe it could be done well, but you'll have to forgive me, I've been burned too many times. Also HTML/CSS is not code that is executed or interpreted, it's a

Re: [dev] Interesting Web Browser Decoupling Concept

2017-06-12 Thread Louis Santillan
On Sun, Jun 11, 2017 at 5:19 AM, Hiltjo Posthuma wrote: > On Sat, Jun 10, 2017 at 01:30:12PM -0700, Louis Santillan wrote: >> https://youtu.be/1uflg7LDmzI?t=5m35s >> >> James Mickens calls it Project Atlantis. > > I could not find any Project Atlantis code, do you know where to find it? I haven't

Re: [dev] Interesting Web Browser Decoupling Concept

2017-06-12 Thread Louis Santillan
You have remote arbitrary code execution now (because of HTML, CSS, JS, and plugins) in your current web browsers. However, if the remote code was effectively constrained (yes, a difficult problem [0][1][2]), there could be hope. The code bloat of others isn't something you have to worry about. T