4 ms·
The classic way of mitigating the issue of intent, of course, is capability-based security. Standard ambient authority models basically leave the door wide open
by vezzy-fnord 11y ago
The classic way of mitigating the issue of intent, of course, is capability-based security. Standard ambient authority models basically leave the door wide open by decontextualizing all action, such that merely riding on someone's session from their end is sufficient.
- digi_owl 11y agoThat finds me thinking that a issue is perhaps that with modern personal computing, the system/kernel view of state (or some such), and the user view of state, are not lined up.