3 ms·
This sounds like dumb marketing material of "This is the only security software you need!" Turing completeness means there's nigh infinite ways to convolute ma
by duckfang 5y ago
This sounds like dumb marketing material of "This is the only security software you need!"
Turing completeness means there's nigh infinite ways to convolute malware that will evade all scanners. And as long as users have capabilities to their data, they will be subject to attacks against data they have access to.
Tl;dr. Grandiose claims require grandiose proof.
- geofft 5y ago> Turing completeness means there's nigh infinite ways to convolute malware that will evade all scanners. No, it does not. Turing-completeness simply means that for certain properties which could be true or false about some software (like whether it halts), given an arbitrary piece of software, you won't always know whether or not it satisfies the property. It does not prevent you from assuming "No" in the cases where you don't know. Nor does it prevent there from being other properties (e.g., ability to access another user's data) for which the answer is always no.
- duckfang 5y agoI work in this area. And yes, for any function that does malware, there's an infinity of similar functions that do the same. And you cannot catch them all. What you typed is good for an academic setting, in the "wellactually technical correct" sense of the term.
- geofft 5y agoThe solution I outline is exactly how countless real-world systems, from cloud computing to web browsers to eBPF, safely run user-provided arbitrary code.