| ▲ | krautsauer 2 hours ago | |
https://news.ycombinator.com/item?id=49374811 (Oh and btw, proc macros also run arbitrary code.) | ||
| ▲ | quotemstr 2 hours ago | parent [-] | |
There's no good reason a proc macro can't run in a no-IO sandbox by default. None. Doesn't require a language change. Doesn't require some microvmcapabilityeffect BS. It requires looking people straight in the eye and saying "no" when they complain about needing to prompt for privileges. | ||