Re: Capability allegories

Matt Rice <[email protected]> Tue, 2 Feb 2016 13:36:22 -0800
Newsgroups gmane.comp.capabilities.general
Message-ID <CACTLOFpysLGBR5izShRYOwQRX2ncbtY+gR62KLerLey5qBzGCg@mail.gmail.com>
Yeah, it is a bit of a stretch, I should probably said its a well
known story that can be framed in capability terms.

A few points, that the order of the story matters...

god makes adam,
Revokes authority to the tree of knowledge of good and evil,
only then he knocks Adam out, and creates Eve from Adam's rib..
Then Eve gets tricked into taking the fruit, and sharing it with Adam.

It at least allows us to show that the access control that god used
was not transitive to eve (who was created *from* Adam)

On Tue, Feb 2, 2016 at 1:23 PM, Mark S. Miller <[email protected]> wrote:
> Unless I am missing something, I don't see how Eve is the story is a
> Confused Deputy, in the security sense of the term as coined and explained
> in Norm's paper <http://www.cis.upenn.edu/~KeyKOS/ConfusedDeputy.html>.
>
> The "Confused Deputy" is about a threat much more specific than the general
> threat of confusing a deputy. See Tyler Close's "ACLs don't"
> <http://waterken.sourceforge.net/aclsdont/current.pdf> for IMO the clearest
> explanation of how to think about the Confused Deputy, and what is and is
> not a Confused Deputy problem. (My own Capability Myths Demolished
> <http://srl.cs.jhu.edu/pubs/SRL2003-02.pdf> is also good and complementary.)
>
>
>
>
> On Tue, Feb 2, 2016 at 10:00 AM, Matt Rice <[email protected]> wrote:
>>
>> Rob has shared the Rumpelstiltskin interpretation,
>>
>> One of the examples i have used to explain the confused deputy,
>> is in Genesis (from the bible)
>>
>> Eve in the story is both described as both helper, and tricked
>> it has the benefit of being both well known, and the word of god.
>> _______________________________________________
>> cap-talk mailing list
>> [email protected]
>> http://www.eros-os.org/mailman/listinfo/cap-talk
>
>
>
>
> --
>     Cheers,
>     --MarkM
>
> _______________________________________________
> cap-talk mailing list
> [email protected]
> http://www.eros-os.org/mailman/listinfo/cap-talk
>