Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is a very old-school way of thinking, without any mention of privacy or how to share data safely between different users. As soon as you have multiple users, especially when they don't trust each other, things get much more complicated.

Should you really be able to do anything you like with your bank account or DMV record? And do you really want the people you interact with to download all the photos you share?

Single-user systems are much easier to deal with, but they're just sandboxes that don't do every much.



There's prior art for all of that, including object and method-level security, in Microsoft's Distributed COM (DCOM). It can be made to work.


Sure, but if you're doing RPC and it does a security check, this isn't all that different from filling out a form and getting a response. It's not empowerment since you don't get to do anything more with the data than you could otherwise.

That's not much like playing with your own data in a sandbox.


Seems to me that objects provide a much better way to do security than applications, as they allow permissions to be much more specific and granular.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: