Back to all stories
LobstersHN🔥2seen ×7

I’m not a fan of Deno’s security model (2024)(goldstein.lol)

The article discusses the author's concerns with Deno's security model, specifically its permission system. Deno, a JavaScript runtime, allows developers to specify which accesses to the outside world are permitted or denied, with the goal of being "secure by default". However, the author argues that this approach is fundamentally insecure and misleading. The permission system can be bypassed by requesting permissions at runtime, which may prompt the user to grant access, potentially leading to security vulnerabilities. The author criticizes this model, suggesting that it may not provide adequate protection and could be improved, highlighting the need for a more robust security approach in Deno and other similar systems.