Re: [friam] SOSP History Day
"Mark S. Miller" <[email protected]> Fri, 9 Oct 2015 05:52:33 -0700
| Newsgroups | gmane.comp.capabilities.general |
|---|---|
| Message-ID | <CABHxS9j2H+AD8n3zsEP1fCWPcRydAc=AYg+n5W47nJXa6qYhRA@mail.gmail.com> |
Too strong and simply untrue, to the point of inviting accusations of "straw man". On Thu, Oct 8, 2015 at 9:00 PM, Dan Connolly <[email protected]> wrote: > On Thu, Oct 8, 2015 at 9:22 AM, Mark S. Miller <[email protected]> wrote: > ... > > Today, when we secure systems, we assign authority to identities. > > When I run a program, it runs as me. > > The square root function in my math library can delete my files. > > Although it does not abuse this excess authority, > > if it has a flaw enabling an attacker to subvert it, > > then anything it may do, the attacker can do. > > It is this excess authority that invites most of the attacks we see in > the > > world today. > > Borrowing from MLK, how's this for a bumper-sticker version of the > consequences of the conventional approach? > > Insecurity anywhere is a threat to security everywhere. > > > -- > Dan Connolly > http://www.madmode.com/ > _______________________________________________ > cap-talk mailing list > [email protected] > http://www.eros-os.org/mailman/listinfo/cap-talk > -- Cheers, --MarkM _______________________________________________ cap-talk mailing list [email protected] http://www.eros-os.org/mailman/listinfo/cap-talk