[cap-talk] Capabilities and Freedom vs. Safety

[James A. Donald]

James A. Donald:
 >> The you have to download music, then run another
 >> program to play what you just downloaded - you the
 >> human has to transport information between these two
 >> programs by hand.

Pierre THIERRY wrote:
 > Oh my, how hard would it be to write an interface to
 > connect them.

The interface to connect them would be written by the
issuer of both programs, and would provide the
backchannel to rat you out the RIAA.

Such an interface is itself a durable privilege, and
every durable privilege is a security flaw.

Any program that do enough to be useful, can do enough
to harm you.  The point is to reduce the potential harm,
and to detect it, not to eliminate potential harm.