Re: Slides

Jed Donnelley <capability-iCFHVraI1K1Wk0Htik3J/[email protected]>
Newsgroups gmane.comp.capabilities.general
Message-ID <[email protected]>
On 8/4/2013 1:53 PM, Jonathan S. Shapiro wrote:
> I also get a 404, and I'd like to look at the slides.
>
> On Sun, Aug 4, 2013 at 11:13 AM, Guido Witmond <guido-EBfTt96odT/[email protected] 
> <mailto:guido-EBfTt96odT/[email protected]>> wrote:
>
>     I don't know about the other 49, I found your talk useful. You
>     gave me a
>     good overview of what's wrong with AppArmor and where and how to use
>     MinorFS....
>

Interesting.  I've been able to view the slides at:

http://ohm2013.capibara.com/slides/ohm2013_trojans_with_notes.pdf

and I'll note for others that the slides begin to repeat at page 59 
including the text (notes) of Rob's presentation - quite useful.  I 
probably wouldn't have looked through the bare slides if I'd have known 
the "notes" versions were also there later.

With his later link:

http://ohm2013.capibara.com/slides/

the version with notes starting at page 59 is the last link.

To me this talk ends up not so much referring to MinorFS, but being more 
of a version of AlanK's famous solitaire discussion.

It seems to me the talk hinges around chart #90 (from the notes set):
________________________
Weakest link?
? The user <red with a line through it>
? Disregard for socio-genetic security-awareness
? Identity centric security models
? Single-granularity abstractions
? Public/global mutable state
? Massive size of trusted code-base

What I do know is, that given this list, and its impact
on what we ask of our user, the user won't become
the weakest link until we fix each and every one of
the other five issues first.
_________________________

I'm quite sympathetic to this message - not surprising.  Of course I 
also find it discouraging
that the message isn't better received, but after all these years I'm 
not surprised.

--Jed

_______________________________________________
cap-talk mailing list
[email protected]
http://www.eros-os.org/mailman/listinfo/cap-talk
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.