Don't Trust Anything! Real-world Uses For WebAssembly • Katie Bell • YOW! 2023

This presentation was recorded at YOW! Australia 2023. #GOTOcon #YOW https://yowcon.com Katie Bell - Freelance Software Developer and Creator of SplootCode RESOURCES https://linkedin.com/in/katie-bell-b578a3aa https://katiebell.net https://github.com/katharosada https://docs.docker.com/desktop/wasm https://github.com/katharosada/wasm-snippy ABSTRACT Let's face it, we all use libraries written by strangers on the internet that we shouldn't entirely trust. It's not just that there could be malicious code but even a library with an accidental vulnerability can wreak havoc. You've probably heard of WebAssembly, but maybe you think of it as only relevant to browsers and front end development. It was created for browsers, but now WebAssembly is a battle-tested, fast, standardised, language-independent and cross-platform runtime. Most importantly, it was designed from the ground up to securely run untrusted code. This talk will go through how WebAssembly works with practical examples and explore case studies of real-world companies using WebAssembly to run code securely and efficiently. [...] TIMECODES 00:00 Intro 00:25 Untrusted code 14:23 WebAssembly 19:17 Sandboxing without using a separate process 24:10 WASI (WebAssembly System Interface) 29:48 Demo 34:03 WASI continued 34:50 Case study: Shopify functions 36:41 Case study: Mozilla Firefox 39:28 Security 41:49 Reminder: Security in depth 42:39 Where are we now? 45:50 When are you running untrusted code? 47:54 Outro Download slides and read the full abstract here: https://yowcon.com/sydney-2023/sessions/3089 RECOMMENDED BOOKS Kevin Hoffman • Programming WebAssembly with Rust • https://amzn.to/48msEBz Valerio De Sanctis • Building Web APIs with ASP.NET Core • https://amzn.to/42MWuOq Brian Sletten • WebAssembly: The Definitive Guide • https://amzn.to/3OQdHRf Sendil Kumar Nellaiyapen • Practical WebAssembly • https://amzn.to/4bK3j7s https://twitter.com/GOTOcon https://www.linkedin.com/company/goto- https://www.instagram.com/goto_con https://www.facebook.com/GOTOConferences #WebAssembly #Wasm #WASI #WebAssemblySystemInterface #MozzillaFirefox #Shopify #KatieBell #SplootCode #YOWcon Looking for a unique learning experience? Attend the next GOTO conference near you! Get your ticket at https://gotopia.tech Sign up for updates and specials at https://gotopia.tech/newsletter SUBSCRIBE TO OUR CHANNEL - new videos posted almost daily. https://www.youtube.com/user/GotoConferences/?sub_confirmation=1