Thursday, October 3, 2002

Phillip Pearson: "It must suck to run a shared web host, because it doesn't look like there's any way to get the permissions sorted out right so that everybody's scripts work but nobody can hack anybody." [Scripting News] This is an excellent point, and has motivated my exploration of Capability Security for the past couple of years now. I can't emphasize this enough: the popular UNIX, Windows, and Macintosh security models are broken in ways that were identified in the 1960's. Systems that lack this type of security breakage were also designed, implemented, and deployed in the 1960's. It's time to go back to the future. See EROS and E and start developing secure systems, where "secure" means "exhibiting patterns of cooperation without vulnerability among mutually distrustful parties." 8:08:20 AM    comment []

© Copyright 2002 Paul Snively. Last update: 11/5/02; 5:54:40 AM. This theme is based on the SoundWaves (blue) Manila theme.