NASA’s new dark energy space telescope can also detect killer asteroids
technologyreview.com·3h ago
Data Science
Simon Willison's Blog·Jun 6·5 min read
Running Python code in a sandbox with MicroPython and WASM
TL;DR
Existing plugin systems in Python allow code execution with full privileges, posing security risks. To address this, Simon Willison developed micropython-wasm, a sandbox for running Python code safely.
✦ Why It Matters
Engineers can now implement safer plugin systems that limit code execution risks in Python applications.
Key Takeaways
- Explore micropython-wasm for secure plugin execution in Python applications.
- Implement strict resource controls to prevent malicious code execution.
- Utilize WebAssembly for sandboxing dynamic languages like Python.
- Test the alpha package in your projects to assess its capabilities.
How It Works
The micropython-wasm package compiles MicroPython to WebAssembly, allowing Python code to run in a controlled environment. It uses the wasmtime library to manage execution, enforcing limits on memory and CPU usage.
The design includes a mechanism for persistent interpreter state, enabling the reuse of variables and functions across multiple code executions. This is achieved by running code within MicroPython that calls a host function to fetch new code, allowing for interactive sessions.