Re: Slides
Jed Donnelley <capability-iCFHVraI1K1Wk0Htik3J/[email protected]>
| Newsgroups | gmane.comp.capabilities.general |
|---|---|
| Message-ID | <[email protected]> |
On 8/4/2013 1:53 PM, Jonathan S. Shapiro wrote: > I also get a 404, and I'd like to look at the slides. > > On Sun, Aug 4, 2013 at 11:13 AM, Guido Witmond <guido-EBfTt96odT/[email protected] > <mailto:guido-EBfTt96odT/[email protected]>> wrote: > > I don't know about the other 49, I found your talk useful. You > gave me a > good overview of what's wrong with AppArmor and where and how to use > MinorFS.... > Interesting. I've been able to view the slides at: http://ohm2013.capibara.com/slides/ohm2013_trojans_with_notes.pdf and I'll note for others that the slides begin to repeat at page 59 including the text (notes) of Rob's presentation - quite useful. I probably wouldn't have looked through the bare slides if I'd have known the "notes" versions were also there later. With his later link: http://ohm2013.capibara.com/slides/ the version with notes starting at page 59 is the last link. To me this talk ends up not so much referring to MinorFS, but being more of a version of AlanK's famous solitaire discussion. It seems to me the talk hinges around chart #90 (from the notes set): ________________________ Weakest link? ? The user <red with a line through it> ? Disregard for socio-genetic security-awareness ? Identity centric security models ? Single-granularity abstractions ? Public/global mutable state ? Massive size of trusted code-base What I do know is, that given this list, and its impact on what we ask of our user, the user won't become the weakest link until we fix each and every one of the other five issues first. _________________________ I'm quite sympathetic to this message - not surprising. Of course I also find it discouraging that the message isn't better received, but after all these years I'm not surprised. --Jed _______________________________________________ cap-talk mailing list [email protected] http://www.eros-os.org/mailman/listinfo/cap-talk