[cap-talk] - Karp - Capabilities - tracking responsibility (Was: Bellizzomi - Users in object/capability systems (was: MLS gone bad, Lampson))

[Karp, Alan H]

Valerio Bellizzomi wrote:

> >Not if Bob is an identity of Tyler's creation.
> 
> Do you mean that Bob's identity is created by Tyler?
> I started thinking that Bob is a figment of Tyler's imagination.
> Can you expand on this ?
> 
Tyler wants to escape liability for something he is about to do.  Tyler
creates a new identity (a figment of his imagination) and introduces it
to Jed as Bob.  Tyler now uses the Bob identity to do something bad.
Holding Bob accountable will do Jed no good.  Hence, Jed will have to
hold Tyler accountable for the actions taken with the Bob identity.  The
point is that identities have no meaning outside the trust relationships
used to establish them.

_________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories 
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp/
  
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Karp, Alan H.vcf
Type: text/x-vcard
Size: 423 bytes
Desc: Karp, Alan H.vcf
Url : http://www.eros-os.org/pipermail/cap-talk/attachments/20061204/73dc9342/attachment.vcf