Re: Fwd: [friam] Could you/somebody make a safe browser?

Tony Arcieri <[email protected]> Sat, 21 Mar 2015 10:52:31 -0700
Newsgroups gmane.comp.capabilities.general
Message-ID <CAHOTMVJHdtJ1NngU4HOHYkLbeM6o8MxN64HcUNhdhEXLpduC=g@mail.gmail.com>
On Fri, Mar 20, 2015 at 11:04 PM, Dan Connolly <[email protected]> wrote:

> I agree Servo is a step in the right direction, but
> (1) the Rust stdlib has plenty of ambient authority. In 2012, I
> started doing an audit, but I haven't managed to put enough time into
> it to make a real contribution.
> https://github.com/rust-lang/rust/issues/3094#issuecomment-9589749


I agree that using a memory safe language is necessary-but-not-sufficient,
however the current state of affairs is depressing:

http://www.eweek.com/security/hp-awards-240k-for-firefox-ie-chrome-and-safari-exploits.html


> Discipline around explicit authority seems just as important as
> memory-safety. After all, PHP is memory-safe too.


Let me know when someone writes a decent web browser in PHP ;)

-- 
Tony Arcieri

_______________________________________________
cap-talk mailing list
[email protected]
http://www.eros-os.org/mailman/listinfo/cap-talk