WWW Security FAQ
These people address a real security problem that is different from what we address.
I have no idea if they succeed.
Section 3 of “Native Client:
A Sandbox for Portable, Untrusted x86 Native Code” tells how the NaCl inner sandbox works.