WebAssembly has undeniably expanded the horizons of web development and user experience. However, the potential for misuse and the rising concern surrounding malicious parties exploiting WebAssembly requires the implementation of some kind of permissions management. This would allow users to explicitly give permissions (more control) and promote more transparency. According the article WebAssembly Is Abused by eCriminals to Hide Malware the "CrowdStrike researchers analyzed 12,291 unique WebAssembly (Wasm) samples from May 2018 to June 2021 and found that 75% of Wasm modules are malicious". They discovered that "cryptocurrency miners boost efficiency by abusing WebAssembly to achieve near-native execution performance" and they also "turn to WebAssembly to hide web-based malware". Without a proper permissions management system in place, malicious code could use WebAssembly to harness the power of users devices to perform actions without their consent. A permissions framework would act as a crucial layer of defense, ensuring that only trusted sites can use WebAssembly. Apart from that, many users would like to have more control about which websites uses WebAssembly, given them the power to decide what a website can or cannot do with their processing power.
... View more