« Spotted here, a lot of non tech and tech details about a recent combo of Firefox and Windows Zero Day. User were helpless as soon as they connected to a malicious website. For the Firefox part, I wonder if moving fully the JavaScript engine to Rust could help avoiding issues like this Use After Free. For the Windows part, it explains how the Firefox sandbox could be escaped. But the good part is: they released a patch in 25 hours, very close to their best during pwn2own in 21 hours. »

« WebAssembly is most of the time branded as "almost as fast as native". But almost how ? This paper, with it's presentation, tries to measure it with original methods, and moreover explains why WebAssembly, which is compiled by a JIT (i.e time constrained) compiler and extra security checks, can't be as fast as native. »

« Deno is a runtime for JavaScript and TypeScript, started by the creator of Node (Ryan Dahl) around 2018. Its stable release is a bit more than one year old. This article gives a bit more detail than the official documentation about the differences between Node and Deno. »

« Express, as Node and JavaScript engines, is single threaded, so how does it achieve concurrency ? »

« This talks start from basic stuff and manages to explain in a very visual (and funny) way how the event loop and the different queues works (tasks, animation callback, micro tasks). Understanding the way a JS engine works behind the hood is very important to render things at the screen frequency, and avoid some some traps encoutered when testing pages with JS. »

« Le premier d'une série de 6 articles pour explorer Javascript, ses éléments et ses principes. »