This is pretty cool and leaves an additional thought: Could the wasm vm be used to add instrumentation to a precompiled wasm bytecode thingy? 🤔

I’m pretty sure the answer is yes for most modern JS engines, just need to add instrumentation to the bytecode before JIT

Browser is running inside a bellard.org/jslinux/ linux instance running in a table inside another browser. The outer browser is running in a cloud vm.

syzkaller fuzzing jslinux was one of the first suggested improvements I got