Mark S. Miller erights at google.com
Thu Jun 19 11:32:53 PDT 2014

>From a security perspective as well, I have always been uncomfortable with
observable uninitialized objects, though I have been too lazy to try
demonstrating a concrete attack.
 On Jun 19, 2014 11:12 AM, "Brendan Eich" <brendan at mozilla.org> wrote:

> Kevin Smith wrote:
>> The current design does posit uninitialized objects, which implementers
>> are obviously uncomfortable with.  Could it be that we just haven't yet
>> developed the implementation techniques for dealing with such uninitialized
>> objects? Or is there a real problem with being able to observe them?
> André replied well, but I just wanted to confirm: this is not some shallow
> whiny-implementor-knee-jerk-reaction problem. It's a real problem, for JS
> programmers as well as implementors.
> /be
> _______________________________________________
> es-discuss mailing list
> es-discuss at mozilla.org
> https://mail.mozilla.org/listinfo/es-discuss
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/es-discuss/attachments/20140619/994f5d95/attachment-0001.html>

More information about the es-discuss mailing list