3 ms·
Re: Graal, yes exactly. Yes attestation has to attest to the execution of a program and there's no program that can tell you the developer was competent/honest
by mike_hearn 3y ago
Re: Graal, yes exactly.
Yes attestation has to attest to the execution of a program and there's no program that can tell you the developer was competent/honest/not compromised. But what it can do is, for example, tell you that a build was done in a clean and verified environment i.e. one free of attackers/malware. And importantly this guarantee can be made also considering the cloud vendor as an attacker. Think about how horrific it'd be if an attacker got privileged access to AWS or GitHub Actions, for example.
- mlinksva 3y agoIndeed, thanks for explaining. Oh, and your mention of Graal reminds me of reading here 56 days ago that it has some support (JavaScript-only at that time) for sandboxing itsself https://news.ycombinator.com/item?id=37572536 https://news.ycombinator.com/item?id=37572536 presumably not nearly as fine-grained as capability-based schemes mentioned in the OP, but still a useful step perhaps.
- mike_hearn 3y agoIt's actually usable as a capability system. You can just run code in a context without permissions and then pass in cap objects that are exposed to that context.