> Conclusion:<p>> * Programming language implementations <i>cannot establish confidentiality</i> on today's hardware<p>> * Don't run untrusted code in the same process with secrets it could steal<p>I understand that because of this, browsers are moving towards running untrusted JavaScript code in separate processes, so that confidentiality is provided by process boundaries.<p>Does anyone know whether other applications that embed scripting languages and run untrusted code (e.g. games that embed Lua[JIT]) are also moving towards a multi-process architecture?