Thread

1. aaronvg · 1790796164 · focus · HN ↗

   Wish it explained where the v8 isolate latency is coming from compared to microvms

   1. vmg12 · 1790796414 · focus · HN ↗

      v8 isolates aren't actually a great sandbox and I would not trust them implicitly in the AI era. This is probably why they wrap them in an additional sandbox.

      1. torginus · 1790801275 · focus · HN ↗

         But I guess they are good enough to isolate multiple instances of the same code, ran by the same customer in parallel.

         1. Normal_gaussian · 1790803125 · focus · HN ↗

            Without commenting on v8 isolates specifically, this doesn't necessarily hold in any isolation situation; many customers are running code on behalf of their customers, which are often submitting jobs on behalf of theirs, and so on. Isolation breaches within a platform customer can result in significant cross-user data breaches.

            1. torginus · 1790842655 · focus · HN ↗

               You're right, but there are cases when the risk can be managed. Like if you're running an auth lambda in one isolate, and another isolate is running the exact same copy of the code, I'd say malicious exploitation would be low enough a risk, that I'd be comfortable running things like this.

               And I'd say this even is a majority use case.

Unofficial Hacker News client; not affiliated with Y Combinator.