4 ms·
> To make a memory safe language capability secure, you simply remove all sources of ambient authority. Isn't this more or less what Sun tried to do with Java
by ptx 10y ago
> To make a memory safe language capability secure, you simply remove all sources of ambient authority.
Isn't this more or less what Sun tried to do with Java applets, which in practice turned out not to be so simple while providing a rich API?
- naasking 10y ago> Isn't this more or less what Sun tried to do with Java applets, which in practice turned out not to be so simple while providing a rich API? I'm not familiar with the Java applet model specifically, but Java's general security model is based on stack inspection, which is nothing like capabilities.
- nickpsecurity 10y agohttp://www.cs.cornell.edu/home/chichao/sip99.ps http://www.cs.cornell.edu/home/chichao/sip99.ps http://www4.cs.fau.de/Projects/JX/ http://www4.cs.fau.de/Projects/JX/ Note: JX takes a different route but shows POLA can be done simply and performant.