[cap-talk] Midori in The Register

[Jonathan S. Shapiro]

On Thu, 2008-07-31 at 00:17 +0100, Toby Murray wrote:
> > Perhaps more importantly, users will not accept a "multiple worlds"
> > view. Solving the multiple worlds perception would be a significant
> > challenge.
> 
> Not necessarily. Plash and the OLPC system demonstrate that one can
> virtualise standard POSIX APIs on top of a capability-like least
> privilege system...

You miss my point. There is no question that the API can be virtualized.
That isn't the problem. The question is whether, at the UI level, you
can make things like cut&paste and program launch operate transparently
enough that the user never realizes that multiple worlds are present.

The filesystem alone seems hugely problematic.

Remember Workplace Shell:

  Fleisch, The Failure of Personalities to Generalize.

shap