Re: Fwd: [friam] Could you/somebody make a safe browser?

On 21 March 2015 at 07:58, Tony Arcieri <[email protected]> wrote:

> On Fri, Mar 20, 2015 at 1:48 PM, Raoul Duke <[email protected]> wrote:
>
>> >> If you could start from scratch, could you use a better architecture &
>> design to make a fundamentally safer web browser?
>
>
> To wash it all away, eh? ;)
> http://research.microsoft.com/en-us/people/mickens/ToWashItAllAway.pdf
>
> A lot of attention is placed on classical web vulnerabilities like XSS,
> CSRF, cookies, etc, and those things are definitely huge problems...
>

​And that's not even the worst of it really these days.  We're taught to
download code and run it, over insecure connections, all the time.  That's
just how we do things, and we teach others to do it too.

I would really like not to have another conversation like this:

   ​http://www.minecraftforge.net/forum/index.php/topic,28418.0.html

Warning: you may feel dumber just for having read the above.  Lex is the
creator of forge, hundreds of thousands of kids are downloading and
installing the software I'm discussing.

But the reality of being a developer is that I `git clone` and build all
the time, with not much reason to expect that the build process won't own
my machine.  At least git/hg usually encrypt the connection.  Of course, a
lot of the time you're suggested to use root to install things you've
downloaded.  ):

-- 
William Leslie

Notice:
Likely much of this email is, by the nature of copyright, covered under
copyright law.  You absolutely MAY reproduce any part of it in accordance
with the copyright law of the nation you are reading this in.  Any attempt
to DENY YOU THOSE RIGHTS would be illegal without prior contractual
agreement.

_______________________________________________
cap-talk mailing list
[email protected]
http://www.eros-os.org/mailman/listinfo/cap-talk