WebAssembly: A New World of Native Exploits on the Browser

The goal of this talk is to provide a basic introduction to WebAssembly and examine the actual security risks that a developer may take on by using it. We will cover the low-level semantics of WebAssembly, including the Javascript API, the linear memory model, and the use of tables as function pointers. By Justin Engler + Tyler Lukasiewicz Full abstract and materials: https://www.blackhat.com/us-18/briefi...