3 ms·
Maybe I am missing something,but it sounds like the features the author is looking for could be part of an OS, not a language. For example: > An example is tha
by sebtron 3y ago
Maybe I am missing something,but it sounds like the features the author is looking for could be part of an OS, not a language. For example:
> An example is that a hash table lookup function should be unable to connect to the internet. That way the function can be used without fear of it becoming a liability if it contains bugs or its source code is manipulated by an attacker.
Reminds me of OpenBSD's pledge [1].
[1] https://man.openbsd.org/pledge.2 https://man.openbsd.org/pledge.2
- stefanha 3y agoHi, I'm the author. See the "The best approach we have today for run-time isolation is through sandboxing" part in the blog post. It covers sandboxing, which pledge(2) is an example of. My experience with sandboxing approaches is that they are only used in the most security-critical software because they are difficult to integrate. If the programming language isolates components by default, then the majority of software should be able to benefit.