Re: TIL: all exceptions before the commit point
"Mark S. Miller" <[email protected]> Fri, 18 Mar 2016 20:18:13 -0700
| Newsgroups | gmane.comp.capabilities.general |
|---|---|
| Message-ID | <CABHxS9ij=QYV8xikEYyjc6syo6f6Jwo5dsDocSOhnm=FATpuTw@mail.gmail.com> |
--===============8934333070918873527== Content-Type: multipart/alternative; boundary=001a1130d2ea5e8322052e5e50e8 --001a1130d2ea5e8322052e5e50e8 Content-Type: text/plain; charset=UTF-8 Your memory is correct. I got the principle from KeyKOS and EROS, both of which practiced it brilliantly. Although both as ocap systems, as it my application of it, I think the point is orthogonal from ocaps. It is just a beautiful way to structure a system. I have had many idle thoughts about direct language support for this pattern but I have not pursued it. I encourage someone to. It smells promising. On Fri, Mar 18, 2016 at 7:15 PM, Dan Connolly <[email protected]> wrote: > I have flipped through the Secure Distributed Programming with > Object-capabilities in JavaScript > <http://soft.vub.ac.be/events/mobicrant_talks/talk1_ocaps_js.pdf> slides > a few times, but this week I discovered a very interesting point about 48 > minutes into the talk > <https://www.youtube.com/watch?v=oBqeDYETXME&feature=youtu.be&t=2915> that > isn't on the slides: > > Do all of your gating checks before you do any of your irrevocable side > effects. > > It's somewhat obvious in retrospect, but I don't recall reading it in the > "robust composition" thesis or anywhere else. Perhaps it's just my memory > that's failing. I should check again. > > > -- > Dan Connolly > http://www.madmode.com/ > > > _______________________________________________ > cap-talk mailing list > [email protected] > http://www.eros-os.org/mailman/listinfo/cap-talk > > -- Cheers, --MarkM --001a1130d2ea5e8322052e5e50e8 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">Your memory is correct. I got the principle from KeyKOS an= d EROS, both of which practiced it brilliantly. Although both as ocap syste= ms, as it my application of it, I think the point is orthogonal from ocaps.= It is just a beautiful way to structure a system.<div><br></div><div>I hav= e had many idle thoughts about direct language support for this pattern but= I have not pursued it. I encourage someone to. It smells promising.</div><= div><br><div><br></div><div><br></div></div></div><div class=3D"gmail_extra= "><br><div class=3D"gmail_quote">On Fri, Mar 18, 2016 at 7:15 PM, Dan Conno= lly <span dir=3D"ltr"><<a href=3D"mailto:[email protected]" target=3D"_bl= ank">[email protected]</a>></span> wrote:<br><blockquote class=3D"gmail_q= uote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1e= x"><div dir=3D"ltr"><div>I have flipped through the=C2=A0<a href=3D"http://= soft.vub.ac.be/events/mobicrant_talks/talk1_ocaps_js.pdf" target=3D"_blank"= >Secure Distributed Programming with Object-capabilities in JavaScript</a>= =C2=A0slides a few times, but this week I discovered a very interesting poi= nt <a href=3D"https://www.youtube.com/watch?v=3DoBqeDYETXME&feature=3Dy= outu.be&t=3D2915" target=3D"_blank">about 48 minutes into the talk</a>= =C2=A0that isn't on the slides:</div><div><br></div><div>Do all of your= gating checks before you do any of your irrevocable side effects.</div><di= v><br></div><div>It's somewhat obvious in retrospect, but I don't r= ecall reading it in the "robust composition" thesis or anywhere e= lse. Perhaps it's just my memory that's failing. I should check aga= in.</div><span class=3D"HOEnZb"><font color=3D"#888888"><div><br><br>-- <br= >Dan Connolly<br><a href=3D"http://www.madmode.com/" target=3D"_blank">http= ://www.madmode.com/</a><br><br></div></font></span></div> <br>_______________________________________________<br> cap-talk mailing list<br> <a href=3D"mailto:[email protected]">[email protected]</a><= br> <a href=3D"http://www.eros-os.org/mailman/listinfo/cap-talk" rel=3D"norefer= rer" target=3D"_blank">http://www.eros-os.org/mailman/listinfo/cap-talk</a>= <br> <br></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div cla= ss=3D"gmail_signature">=C2=A0 =C2=A0 Cheers,<br>=C2=A0 =C2=A0 --MarkM</div> </div> --001a1130d2ea5e8322052e5e50e8-- --===============8934333070918873527== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ cap-talk mailing list [email protected] http://www.eros-os.org/mailman/listinfo/cap-talk --===============8934333070918873527==--