NHacker Next
  • new
  • past
  • show
  • ask
  • show
  • jobs
  • submit
Show HN: Tiny VM sandbox in C with apps in Rust, C and Zig (github.com)
bdjjwjd 19 minutes ago [-]
Interesting with Rust support. Just sucks that Rust critics are SWATted. https://www.tomshardware.com/software/linux/linux-dev-swatte...
reactordev 6 minutes ago [-]
They went off a tip sent in via email. They probably click those phishing links too. Not the brightest of folks hunting for criminals.

(and yet they still catch some, which is telling of the criminal). Fact is this happens all the time in the USA. It’s why I don’t stream any development of games or tech despite me creating.

idle_zealot 9 hours ago [-]
I suppose this is in the same realm as what some people are trying to do with WASM, creating a common execution environment? This is built on RISC-V instead though. I wish I knew more about the limitations/capabilities of each approach, but in any case a future where applications are built for a common VM seems like something we've been building to for a while, the modern web being the closest we've come.
apitman 5 hours ago [-]
I did a brief comparison a while back, specifically WASM vs libriscv for. I decided to go with WASM, primarily because it was much more closely designed for this sort of thing, and it works in browsers. libriscv is really cool and impressive though.

EDIT: Found this link in my notes as well: https://news.ycombinator.com/item?id=24900376

trj 2 hours ago [-]
libriscv looks amazing but its's much larger. It says "Less than 40kB total memory usage". My first version (unpublished) of uvm32 was called uvm80 and emulated a Zilog Z80 CPU. My aim is to have a safe, embeddable sandbox for any device, rather than the best performance.
IshKebab 8 hours ago [-]
See https://opensource.googleblog.com/2025/11/secure-by-design-f...

This looks like it has a smaller code footprint at least. I'm not sure RISC-V is a very good target for this sort of thing. E.g. decoding the immediates in software is going to be very slow, whereas in hardware it's fast.

But on the other hand it is a stable target and can be configured to be a lot simpler than WASM.

trj 7 hours ago [-]
Thanks for the link, Wasefire looks interesting. I suspect that their design goals are very different to mine. https://github.com/ringtailsoftware/uvm32?tab=readme-ov-file...
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact
Rendered at 08:33:41 GMT+0000 (Coordinated Universal Time) with Vercel.