Re: [friam] SOSP History Day

"Mark S. Miller" <[email protected]> Fri, 9 Oct 2015 05:52:33 -0700
Newsgroups gmane.comp.capabilities.general
Message-ID <CABHxS9j2H+AD8n3zsEP1fCWPcRydAc=AYg+n5W47nJXa6qYhRA@mail.gmail.com>
Too strong and simply untrue, to the point of inviting accusations of
"straw man".


On Thu, Oct 8, 2015 at 9:00 PM, Dan Connolly <[email protected]> wrote:

> On Thu, Oct 8, 2015 at 9:22 AM, Mark S. Miller <[email protected]> wrote:
> ...
> > Today, when we secure systems, we assign authority to identities.
> > When I run a program, it runs as me.
> > The square root function in my math library can delete my files.
> > Although it does not abuse this excess authority,
> > if it has a flaw enabling an attacker to subvert it,
> > then anything it may do, the attacker can do.
> > It is this excess authority that invites most of the attacks we see in
> the
> > world today.
>
> Borrowing from MLK, how's this for a bumper-sticker version of the
> consequences of the conventional approach?
>
>   Insecurity anywhere is a threat to security everywhere.
>
>
> --
> Dan Connolly
> http://www.madmode.com/
> _______________________________________________
> cap-talk mailing list
> [email protected]
> http://www.eros-os.org/mailman/listinfo/cap-talk
>



-- 
    Cheers,
    --MarkM

_______________________________________________
cap-talk mailing list
[email protected]
http://www.eros-os.org/mailman/listinfo/cap-talk