Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Maybe I'm misunderstanding, but isn't NaCl meant to be cross-platform? ActiveX was basically "hook directly into Windows (and only Windows) from the browser." It gave many free-license to create "Windows-only" webpages, in addition to producing many security holes during its run. This is where much of the resentment comes from.

How many security bugs does NaCl have compared to ActiveX? How do Microsoft's attempts to sandbox ActiveX compare to the efforts made to sandbox NaCl? IIRC, you could format the C: drive in ActiveX with a couple of lines of code (by design). NaCl (so far as I know) isn't supposed to allow that.

As far as I'm concerned, NaCl and ActiveX aren't even in the same ballpark.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: