[cap-talk] Correlating Bitfrost with Threats

[Stiegler, Marc D]

Since my "Threats and Mitigation" document, and your Bitfrost spec, developed independently of one another, I have published a document on the olpc wiki that attempts to reconcile them, at http://wiki.laptop.org/go/Correlating_Bitfrost_and_Threats. 

Ivan, for a little background, I thought I'd mention that Ka Ping Yee and I have known each other and worked together off and on since 1996 or thereabouts. While I started designing CapDesk in '98, I started implementing it about the same time that ping started work on his usable security paper. Though ping and I rarely spoke to each other directly about our different but closely related efforts, we were both reviewing our efforts with Mark Miller on a weekly basis. Ping's paper and my desktop both arise out of a common stewpot of object-capability ideas. Ping deserves the credit for doing the influential work, since far more people (including yourself) have read his paper than have experimented with my code.

--marcs