3 ms·
We went wrong in the 1970s, when a stripped down clone of Multics (without capability based security -- CabSec) grew in popularity and outgrew it. That basic la
by mikewarot 4y ago
We went wrong in the 1970s, when a stripped down clone of Multics (without capability based security -- CabSec) grew in popularity and outgrew it. That basic lack of a system that can allow the user to securely and transparently manage what resources are to be given to a program is at the root of all the evil (mediocrity?) that follows.
Imagine you have a wallet, and you aren't allowed to take coins or bills out of it, you simply must hand the whole thing to someone else, and trust they only withdraw the right amount. This is what computers are like without CabSec.
In the 1970s, the personal computer started to become popular. Because home computer users didn't share systems, or network them, and data was stored on write protectable floppy disks, the lack of CabSec wasn't an issue.
Think of each floppy disk as a separate "wallet" from the above
It really wasn't a problem in corporate settings, or even in the early years of shareware, etc. Users were technical enough to know what data was going where, and manage things appropriately. Most locations still only had separate computers, and used diskettes to move data, via sneaker-net.
It's when you got to installing software that things started deteriorating. You suddenly couldn't really have a bunch of separate areas to store your data and programs on. It all became one all-important "wallet".
Then the internet came, and internet access became the standard, instead of internet connections. This moved things further out of the control of the users.
It's all worse in each iteration, now everything is out of your hardware, and into a single "2FA" system that is based around your smartphone. If you lose it, you could lose everything. It's the worst possible single "wallet".