Re: Access control for IoT

--===============8113282296148960250==
Content-Type: multipart/alternative; boundary=001a1145504cec0075052968339e

--001a1145504cec0075052968339e
Content-Type: text/plain; charset=UTF-8

Indeed, capabilities have always seemed to me like an obvious fit for IoT.

Current practice seems to be that all IoT devices connect to the respective
manufacturer's cloud servers. How are they supposed to interoperate? Will I
have to make sure all of my devices come from the same company? Do people
really want their entire house to be under the direct control of and
sending all data to Nest/Apple/whomever?

In my dream world devices speak Cap'n-Proto-based protocols to a
house-local Sandstorm server. :)

-Kenton

On Fri, Jan 15, 2016 at 3:53 PM, Tony Arcieri <[email protected]> wrote:

> I would just generally love to see more talk about the capability
> perspective towards solving the IoT problem. Most of the solutions I've
> heard so far either make extreme sacrifices for security to improve UX, or
> vice versa. There is a middle ground...
>
> On Fri, Jan 15, 2016 at 3:13 PM, Alan Karp <[email protected]> wrote:
>
>> For reasons that I don't understand, I got a slot at an invitation only
>> IEEE workshop on security and privacy for IoT.  (Maybe not enough people
>> are willing to go to Washington, DC, in February.)  Invitees can submit
>> papers, and 15 will be selected for presentation.  Mine is at
>> http://alankarp.parseapp.com/Access-Control-for-IoT.pdf.
>>
>> The submission deadline has passed, so it's too late for me to fix any
>> errors.  However, if you find things that need changing, I can address them
>> in the presentation should I get one of the slots.
>>
>> --------------
>> Alan Karp
>>
>> _______________________________________________
>> cap-talk mailing list
>> [email protected]
>> http://www.eros-os.org/mailman/listinfo/cap-talk
>>
>>
>
>
> --
> Tony Arcieri
>
> _______________________________________________
> cap-talk mailing list
> [email protected]
> http://www.eros-os.org/mailman/listinfo/cap-talk
>
>

--001a1145504cec0075052968339e
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Indeed, capabilities have always seemed to me like an obvi=
ous fit for IoT.<div><br></div><div>Current practice seems to be that all I=
oT devices connect to the respective manufacturer&#39;s cloud servers. How =
are they supposed to interoperate? Will I have to make sure all of my devic=
es come from the same company? Do people really want their entire house to =
be under the direct control of and sending all data to Nest/Apple/whomever?=
</div><div><br></div><div>In my dream world devices speak Cap&#39;n-Proto-b=
ased protocols to a house-local Sandstorm server. :)</div><div><div><div><b=
r></div><div>-Kenton</div></div></div></div><div class=3D"gmail_extra"><br>=
<div class=3D"gmail_quote">On Fri, Jan 15, 2016 at 3:53 PM, Tony Arcieri <s=
pan dir=3D"ltr">&lt;<a href=3D"mailto:[email protected]" target=3D"_blank">=
[email protected]</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote=
" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><=
div dir=3D"ltr">I would just generally love to see more talk about the capa=
bility perspective towards solving the IoT problem. Most of the solutions I=
&#39;ve heard so far either make extreme sacrifices for security to improve=
 UX, or vice versa. There is a middle ground...</div><div class=3D"gmail_ex=
tra"><br><div class=3D"gmail_quote"><div><div class=3D"h5">On Fri, Jan 15, =
2016 at 3:13 PM, Alan Karp <span dir=3D"ltr">&lt;<a href=3D"mailto:alanhkar=
[email protected]" target=3D"_blank">[email protected]</a>&gt;</span> wrote:<br=
></div></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;b=
order-left:1px #ccc solid;padding-left:1ex"><div><div class=3D"h5"><div dir=
=3D"ltr">For reasons that I don&#39;t understand, I got a slot at an invita=
tion only IEEE workshop on security and privacy for IoT. =C2=A0(Maybe not e=
nough people are willing to go to Washington, DC, in February.) =C2=A0Invit=
ees can submit papers, and 15 will be selected for presentation.=C2=A0 Mine=
 is at <a href=3D"http://alankarp.parseapp.com/Access-Control-for-IoT.pdf" =
target=3D"_blank">http://alankarp.parseapp.com/Access-Control-for-IoT.pdf</=
a>.<div><br></div><div>The submission deadline has passed, so it&#39;s too =
late for me to fix any errors.=C2=A0 However, if you find things that need =
changing, I can address them in the presentation should I get one of the sl=
ots.<br clear=3D"all"><div><div><br>--------------<br>Alan Karp</div></div>
</div></div>
<br></div></div>_______________________________________________<br>
cap-talk mailing list<br>
<a href=3D"mailto:[email protected]" target=3D"_blank">cap-talk@mai=
l.eros-os.org</a><br>
<a href=3D"http://www.eros-os.org/mailman/listinfo/cap-talk" rel=3D"norefer=
rer" target=3D"_blank">http://www.eros-os.org/mailman/listinfo/cap-talk</a>=
<br>
<br></blockquote></div><span class=3D"HOEnZb"><font color=3D"#888888"><br><=
br clear=3D"all"><div><br></div>-- <br><div>Tony Arcieri<br></div>
</font></span></div>
<br>_______________________________________________<br>
cap-talk mailing list<br>
<a href=3D"mailto:[email protected]">[email protected]</a><=
br>
<a href=3D"http://www.eros-os.org/mailman/listinfo/cap-talk" rel=3D"norefer=
rer" target=3D"_blank">http://www.eros-os.org/mailman/listinfo/cap-talk</a>=
<br>
<br></blockquote></div><br></div>

--001a1145504cec0075052968339e--

--===============8113282296148960250==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
cap-talk mailing list
[email protected]
http://www.eros-os.org/mailman/listinfo/cap-talk

--===============8113282296148960250==--