3 ms·
> In capability based security nothing prevents people from making up fake data if they don't have the capability for something. That's completely wrong. The
by still_grokking 4y ago
> In capability based security nothing prevents people from making up fake data if they don't have the capability for something.
That's completely wrong.
The whole point of capabilities is that they're unforgeable.
You can't mint a capability! You need to get it passed "form above". Nobody can create capabilities from thin air (not even the OS kernel).
- charcircuit 4y agoI do not follow your logic. Anyone can define a data type { latitude: 100. longitude: 100 }. The operating system is not going to stop you from creating this object.
- still_grokking 4y agoSuch a made up object would not be accepted by other parts of a capability secure system as it would lack the actual capability (which is unforgeable). But I'm coming to the conclusion that you're only trolling. You refuse to look at the facts and definitions, and just repeat the same nonsense over and over. I'm done here as I obviously can't help you understand this topic.