[cap-talk] capabilities Q - charts review + comments

[Sandro Magi]

Jed at Webstart wrote:
> I wonder if people would as easily recognize that codec software
> needs even less authority (e.g. no keyboard/display authority)?
> Perhaps the codec example is more obscure because it's functioning
> is more hidden.  Still, from a technical viewpoint (perhaps depends
> on the audience) I consider it a more compelling example.

I think codecs require too much technical background to be an effective,
broad example.

> I suppose one could use jpg decompression software as a bit
> more immediate example - e.g. the famous exploit in Microsoft's
> software in that area.  To me any of this media manipulation
> software effectively fits into this "don't need to trust, but
> are forced to by the environment" category.

I was just about to suggest this example. It's good for hitting so close
to home for so many. :-)

Again though, I think codecs and image renderers presupposes a
familiarity with software design that will limit the audience; on the
other hand, even grandma can understand that Solitaire shouldn't be able
to e-mail her financial statements.

Sandro