[cap-talk] Monash as an object-cap system or not (was: Wikipedia: Object-capability model - reference vs. capability?)

[Toby Murray]

On Mon, 2007-01-08 at 10:37 -0800, Mark S. Miller wrote:
> In any case, the Monash system isn't an objcap system either, since for any 
> cap and any subject, there exists some bit string which, if the subject did 
> guess it, it would be able to exercise that cap. Within the rules of their 
> system, it is only infeasible to guess such a number, not impossible.

I must be misunderstanding you. Surely E's captp URLs also suffer from
the above but E is still an object-cap system. Or is it only the
intra-vat portion of E that qualifies as adhering to the object-cap
model?