3 ms·
We all have different definitions of important problems. For me, Secure General Purpose computation is one of the most important problems, but most people don'
by mikewarot 3y ago
We all have different definitions of important problems.
For me, Secure General Purpose computation is one of the most important problems, but most people don't seem to even realize the scope/nature of the problem. You've got an entire industry focused on the wrong problems, and thus offering the wrong solutions.
The problem is one of a huge missing feature, the ability to spend a chunk of your compute resources (CPU time, files, etc) on a problem in a safe and secure manner.
Because of this, much effort is being put on "safe" languages, "safe" programming techniques, teaching users how to be "safe", and updating/patching everything, every day, on every device in the world.
At it isn't working. That approach can't work.
Thus, computing isn't something you can trust. You're left in a world of potential land mines everywhere, metaphorically. This then makes any play outside of the cleared zones (FAANG run sites) unsafe. So effectively, general purpose use of the internet is no-go to 99.9% of the public.
This gives the gatekeepers almost unchecked power to control discourse, and subvert Democracy.
It can be fixed, the solutions have been known since the 1970s. There's no general interest in this, nor even a perception that the problems can be solved. We've generally convinced ourselves that computers require the services/subscriptions from experts to "keep them safe"
Would you want a locksmith continuously updating your locks on your doors? Why put up with one on your computer?
- meshr 3y agowhat solutions do you mean?
- mikewarot 3y agoThe Capability Object Model, AKA, Capability Based Security. It was invented in response to issues discovered during the Viet Nam conflict by the US Military. The Bell-LaPadula model is an example of a policy model that can keep a computer secure while keeping it usable. The permission flags mess on your smartphone is NOT capability based security. Neither is AppArmour, or SeLinux. Linux is completely incompatible, as are Windows, MacOS, etc. Interestingly, it's not much change in code for an application to be ported. You take out code for calling file selection dialogs, and file opens, and replace then with a call for a powerbox to select a capability, and use that in place of the file handles, and you're done. It's more like cash in your wallet... you can easily take out $5 to pay for something, limiting the side effects of the transaction to $5. It's not possible to run code (without gymnastics) and only give it file X on most operating systems. WASM is as close as we've gotten in a while since they gave up on Multics. Genode is coming, but they seem to have been distracted by smartphones.