4 ms·
> Turing completeness means there's nigh infinite ways to convolute malware that will evade all scanners. No, it does not. Turing-completeness simply means tha
by geofft 5y ago
> Turing completeness means there's nigh infinite ways to convolute malware that will evade all scanners.
No, it does not. Turing-completeness simply means that for certain properties which could be true or false about some software (like whether it halts), given an arbitrary piece of software, you won't always know whether or not it satisfies the property. It does not prevent you from assuming "No" in the cases where you don't know. Nor does it prevent there from being other properties (e.g., ability to access another user's data) for which the answer is always no.
- duckfang 5y agoI work in this area. And yes, for any function that does malware, there's an infinity of similar functions that do the same. And you cannot catch them all. What you typed is good for an academic setting, in the "wellactually technical correct" sense of the term.
- geofft 5y agoThe solution I outline is exactly how countless real-world systems, from cloud computing to web browsers to eBPF, safely run user-provided arbitrary code.