3 ms·
Combining syntactic closures with the Scheme module system's ability to carefully control exports and imports seems like it should be enough. However, high-sec
by brandmeyer 11y ago
Combining syntactic closures with the Scheme module system's ability to carefully control exports and imports seems like it should be enough.
However, high-security language runtimes have a history of being subverted anyway.
- agumonkey 11y agoI don't know what to Google ('lisp evaluator security' wasn't fruitful) but I'd love to see research on the subject.
- bitwize 11y agoJonathan Rees's 1995 paper "A Security Kernel Based on the Lambda Calculus" was enlightening. Not only was it capability-based security in Scheme -- but capabilities are lambdas! http://mumble.net/~jar/pubs/secureos/ http://mumble.net/~jar/pubs/secureos/
- agumonkey 11y agoHa, I knew it. Lambda the ultimate everything.