✨ 2024-02-14

Author: ctcpip

README.md

@@ -4,7 +4,7 @@ This repository contains documents, agendas, and notes for the ECMAScript - Secu
 
 ## Agenda
 
-see [2024-02-14](meetings/notes/2024/2024-02-14.md) and [the backlog](meetings/notes/backlog.md) 👀
+see [2024-02-27](meetings/notes/2024/2024-02-27.md) and [the backlog](meetings/notes/backlog.md) 👀
 
 ## Meetings
 

meetings/notes/2024/2024-02-14.md

@@ -2,10 +2,15 @@
 
 ## Folks
 
-| Name      | GH Username     | TLA | Affiliation  |
-| --------- | --------------- | --- | ------------ |
-| Full Name | @githubUsername | FNE | organization |
-|           |                 |     |              |
+| Name             | GH Username     | TLA | Affiliation  |
+| ---------------- | --------------- | --- | ------------ |
+| Full Name        | @githubUsername | FNE | organization |
+| Chris de Almeida | @ctcpip         | CDA | IBM          |
+| Mark Miller      | @erights        | MM  | Agoric       |
+| Jordan Harband   | @ljharb         | JHD | HeroDevs     |
+| Kris Kowal       | @kriskowal      | KKL | Agoric       |
+| Richard Gibson   | @gibson042      | RGN | Agoric       |
+| Daniel Veditz    | @dveditz        | DVE | Mozilla      |
 
 ## Agenda
 
@@ -14,12 +19,38 @@
 
 Happy Valentine's Day to all whom'st've celebrate! 💘
 
-| Topic                                                                                  | Presenter(s)     |
-| -------------------------------------------------------------------------------------- | ---------------- |
-| review issues in security repo                                                         | Chris de Almeida |
-| ? discuss [WasmGC shared memory proposal][wasm] / [shared structs proposal][structs] ? |                  |
-| ? does TC39 need a formal security review for proposals? [related issue][related]      |                  |
+| Topic                                                                                                           | Presenter(s) |
+| --------------------------------------------------------------------------------------------------------------- | ------------ |
+| discuss [WasmGC shared memory proposal][wasm] / [shared structs proposal][structs] / [convergence][convergence] |              |
+
+### [WasmGC shared memory proposal][wasm] / [shared structs proposal][structs] / [convergence][convergence]
+
+MM:
+
+- does not want shared mem multi-threading in JS
+- dangerous for engine integrity
+- concurrent GC dangerous for engine integrity
+- will discuss concerns at upcoming structs mtg
+- also: general issue of JS as a language to support defensive programming, integrity protection
+
+  - shared mem multithreading difficult to defend, not a that supports interaction of components, whereas comm event loops does support
+  - related: <https://papers.agoric.com/papers/concurrency-among-strangers/abstract/>
+
+- structs mtg tomorrow at 18:00 UTC
+  - MM, others attending
+
+ACTION: CDA, invite SYG to TG3 to discuss, also ask for new version of proposal referenced in slides (splitting into MVP for WASM convergence)
+
+JHD: us govt requirements suggest that in near future, memory-unsafe languages will be forbidden in any products/services consumed
+
+- <https://media.defense.gov/2023/Dec/06/2003352724/-1/-1/0/THE-CASE-FOR-MEMORY-SAFE-ROADMAPS-TLP-CLEAR.PDF>
+
+related: overwhelming majority of all security vulns are caused by memory safety issues
+
+CDA: recommendation for proposals repo: presentation history
+
+- need to better understand the split of the TC39 structs proposal re: MVP for WASM proposal convergence/delivery/ask for stage 2 at TC39
 
 [wasm]: https://github.com/WebAssembly/shared-everything-threads/blob/main/proposals/shared-everything-threads/Overview.md
 [structs]: https://github.com/tc39/proposal-structs
-[related]: https://github.com/tc39/security/issues/4
+[convergence]: https://docs.google.com/presentation/d/1j0W_mFaR8wEBqgBPRzJ0h4-lmgl87U92TQeokfy0N2w/edit#slide=id.gc6f889893_0_0

meetings/notes/2024/2024-02-27.md

@@ -0,0 +1,20 @@
+# TG3 - 2024-02-27
+
+## Folks
+
+| Name      | GH Username     | TLA | Affiliation  |
+| --------- | --------------- | --- | ------------ |
+| Full Name | @githubUsername | FNE | organization |
+|           |                 |     |              |
+
+## Agenda
+
+> [!NOTE]
+> See [backlog.md](backlog.md) for outstanding action items and agenda topics.
+
+| Topic                                      | Presenter(s) |
+| ------------------------------------------ | ------------ |
+| review of previous agenda and action items |              |
+|                                            |              |
+
+### review of previous agenda and action items