Episode 111 of The Technical Co-Founder Podcast dives into WebAssembly as a sandbox for running untrusted code in production. Lucas and Luna explore how a startup called Extism uses WASM to let customers run custom plugins without security nightmares. They break down the technical trade-offs: why WASM's linear memory model beats containers for isolation, the performance overhead compared to native, and how Extism handles language-agnostic plugin systems. Specific numbers: a typical Extism plugin boots in under 100 microseconds versus 100+ milliseconds for a container. Luna challenges Lucas on whether WASM's lack of system call access limits real-world use cases. The conversation also touches on WASI, the WebAssembly System Interface, and where WASM is heading for server-side computing. If you're building a platform that needs safe extensibility, this episode gives you a concrete architecture to evaluate.

#WebAssembly #WASM #Extism #UntrustedCode #Sandbox #PluginSystems #PlatformEngineering #SecurityIsolation #WASI #ServerSideWASM #Containers #Performance #Microseconds #Business #Technology #FexingoBusiness #BusinessPodcast #TechnicalCoFounder

Keep every episode free: buymeacoffee.com/fexingo