4 ms·
Super cynical, I realize, but whenever I see the description “secure by default” for something computer related, and they don’t mean, “we unplugged it,” I assum
by sparker72678 7y ago
Super cynical, I realize, but whenever I see the description “secure by default” for something computer related, and they don’t mean, “we unplugged it,” I assume what they really mean is, “we made the code so complex we can’t find the problems.”
- forkerenok 7y agoWell, you should really read it as "eliminating certain class(es) of vulnerabilities".
- chubot 7y agoI suggest reading the WebAssembly paper: Bringing the web up to speed with WebAssembly https://scholar.google.com/scholar?cluster=14979605902538775118&hl=en&as_sdt=0,5&sciodt=0,5 https://scholar.google.com/scholar?cluster=14979605902538775...
- naasking 7y agoInstead, they mean something sensible: that permission has been linked with designation as per capability security. Adding feature extensions are thus linked with the authorities required to implement those features, and the modules implementing those features can't do anything behind the scenes. So you would no longer be able to amplify a string value into a file descriptor as you can in systems with ambient authority (which is nearly every system in widespread use today). So "secure by default" here means, "programs conform to least privilege".
- deleted 7y ago[deleted]