3 ms·

This slideshow is pretty interesting (in particular slide 14): https://www.slideshare.net/KTNUK/digital-security-by-design-security-and-legacy-at-microsoft-mat

This slideshow is pretty interesting (in particular slide 14): https://www.slideshare.net/KTNUK/digital-security-by-design-security-and-legacy-at-microsoft-matthew-parkinson-microsoft https://www.slideshare.net/KTNUK/digital-security-by-design-... Talks about sandboxing C/C++ libraries that interact with Rust. Kinda make a safe unsafe sandbox Rust interface ("less unsafe?") if I understand it correctly (I likely don't). The actual linked article is all over the place, I cannot make heads or tails of it and seems to be conflating multiple security issues/mitigations together into a mish mash.

alimbada 7y ago
> The actual linked article is all over the place, I cannot make heads or tails of it and seems to be conflating multiple security issues/mitigations together into a mish mash. Typical ZDNet.
pjmlp 7y ago
You really need to watch the video. Basically a new language for system software and containers that allow to tame existing software, due to the expenses of rewriting everything into safe languages. It is based on the CHERI tagged architecture. https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/ https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/ Just starting now, they have done the ground work, will open source it and are looking for collaborators.