Re: [friam] SOSP History Day

Square root having authority to delete files, were the library
compromised, is an excellent example.

It seems odd at first that Javascript keeps all its math methods in
the core math object
rather than allowing them to have global primitive status, but one of
the benefits of doing
it that way is that a capability-oriented (message passing,
distributed) Javascript could grant the math object only the authority
required to read arguments, calculate, and return results.


>> >> > The square root function in my math library can delete my files.
>> >> > Although it does not abuse this excess authority,
>> >> > if it has a flaw enabling an attacker to subvert it,
>> >> > then anything it may do, the attacker can do.
>> >> > It is this excess authority that invites most of the attacks we see
>> >> > in the world today.




-- 
"If I can quote Alice Walker, 'The biggest way people give up power is
by not knowing they have it to start with.' " -- Jill Stein, the most
successful female candidate for POTUS to date