@nornagon @natecull @mala @Shamar

Sure automatically executing #JS on #Web page was a dumb idea from the very beginning.

But #WASM is worse because it's a binary format.

If you have ever had to debug a #GCC optimized binary without source code or debug symbols, you know that reading an obfuscated #JavaScript is a kids play compared to this.

So even if JS was the first offender, #WebAssembly is going to be the worse one for the Web users' #security: it will be way harder to detect an attack.