[EROS-Arch] Re: Interaction Design for End-User Security

[Mark S. Miller]

At 03:24 AM Thursday 3/22/01, wojtek@ifirma.pl wrote:

>Hi everybody!
>
>I am very new to this list. Could somebody email me the article you are
>talking about, please. I couldn't find it on EROS website.

The article itself is http://www.cs.berkeley.edu/~pingster/sec/project/ .

The thread root in the e-lang archives is 
http://www.eros-os.org/pipermail/e-lang/2001-March/004818.html .
(although for some mysterious reason the pipermail archiving software sees 
this message not as a thread root but as a reply to the unrelated 
http://www.eros-os.org/pipermail/e-lang/2001-March/004817.html .)

The thread root in the eros-arch archives is 
http://www.eros-os.org/pipermail/eros-arch/2001-March/002858.html , which is 
the message I cross posted that caused the rest of the discussion to be 
duplicated.

Since I'm the one who perpetrated the cross-posting, and not having heard 
back from Ping, I may as well decide.  I think the discussion should 
continue only on eros-arch, as EROS, unlike E, is trying to build a 
comprehensive secure platform from the ground up, whereas E is trying to 
create a secure environment on top of other platforms, whether these other 
platforms are secure or not.  (Yes, I'm fully aware of the implied 
impossibility.)  E must delegate many issues to the platform, like what a 
filesystem is.  EROS seeks principled answers to all such questions.

I think the "Interaction Design for End-User Security" proposal is best 
discussed with EROS, rather than E, as a framing context.

Also, EROS, more urgently than E, need to figure out what it's going to do 
for a user interface.  I think this work is an excellent place to start that 
discussion.

I encourage all e-lang'ers who are interested in the topic to join the 
discussion on eros-arch.


        Cheers,
        --MarkM