[cap-talk] Midori in The Register

Jonathan S. Shapiro shap at eros-os.com
Tue Aug 5 14:49:35 CDT 2008


On Tue, 2008-08-05 at 15:37 -0400, Ivan Krstić wrote:
> On Aug 5, 2008, at 10:49 AM, Jonathan S. Shapiro wrote:
> > I am not aware that any guarantee stronger than these exists. Have I
> > missed something?
> 
> 
> Presumably that's exactly James' concern: the apparent conflation of  
> actual security with execution correctness (as promoted by managed  
> code). Execution correctness, while a step in the right direction, is  
> several astronomic units away from solving the key desktop security  
> problems we have today.

But what I am saying is: managed code does not make the claim that James
is concerned about, so there is no conflation. The fact that James
*alleges* that managed code systems make this claim is not a deficiency
of the managed code systems. It is merely a misrepresentation by James.



More information about the cap-talk mailing list