Re: [Gnu-arch-users] Re: arch roadmap 1 (and "what's tom up to")

[Tom Lord]

    > From: Andrew Suffield <address@hidden>

    > There are two ways to do it: complete segregation of behaviour, which
    > makes it extremely difficult to do anything useful (an applet that
    > cannot do IO, except via the browser UI, is of limited value), and
    > partial segregation, where different bits of code have different
    > access rights and can call each other across access boundaries. Java
    > does the latter. It's *really* hard to get right.


Sure, that makes sense.  Each new primitive is a little security
puzzle and the answer might be context specific.  No silver bullet for
that.


    > What Java discovered was that to do really useful sandboxing in the
    > real world, you need to do it the hard way. They also discovered that
    > it was really hard, and that they hadn't got it right
    > (repeatedly). 

Interesting.

    > And Java's still growing at an exponential rate
    > (codebase roughly doubles at each release).

Lovely.


-t