Re: [friam] SOSP History Day
Dan Connolly <[email protected]> Thu, 8 Oct 2015 23:00:02 -0500
| Newsgroups | gmane.comp.capabilities.general |
|---|---|
| Message-ID | <CAD2Yivay_h=7s=6FPewW=BgUUUsOnE9RmZ12Que7dAJLrMp-eg@mail.gmail.com> |
On Thu, Oct 8, 2015 at 9:22 AM, Mark S. Miller <[email protected]> wrote: ... > Today, when we secure systems, we assign authority to identities. > When I run a program, it runs as me. > The square root function in my math library can delete my files. > Although it does not abuse this excess authority, > if it has a flaw enabling an attacker to subvert it, > then anything it may do, the attacker can do. > It is this excess authority that invites most of the attacks we see in the > world today. Borrowing from MLK, how's this for a bumper-sticker version of the consequences of the conventional approach? Insecurity anywhere is a threat to security everywhere. -- Dan Connolly http://www.madmode.com/