3 ms·
> Where does he say that? He says, "security still isn’t a first class concern for most programmers", and puts it in the "No" column. He put it in the "Maybe"
by bascule 11y ago
> Where does he say that? He says, "security still isn’t a first class concern for most programmers", and puts it in the "No" column.
He put it in the "Maybe" column for 2015. Try searching for "Security"
So Capsicum patches landed in the Linux kernel mainline, Kenton Varda is shipping Cap'n Proto and Sandstorm.io, and capabilities get a "no" but security gets a "maybe"? K.
> I have no knowledge on this subject at all: I have no idea what capabilities are, I have never heard of Capsicum (or SELinux for that matter) and have never even worked on security related issue.
Well that explains a lot...
- pron 11y agoYou still fail to say where you disagree with what the article says as opposed to disagreeing with what you think the article says. It's not a matter of knowing the subject matter but of text comprehension. Sorry, I missed the "maybe" on security, but he explains that "a handful of projects with very high real world impact get a lot of mileage out of security research". With all due respect to Cap'n Proto and Sandstorm.io, neither have "very high real world impact". If you think capabilities are widely used in production, in multiple domains, and have had a significant and conclusive contribution to the industry, then you'd be in disagreement with the author, and I'm sure he'd gladly change his description in light of the new information. Like I said, it's an inventory, not a critique.