Re:Making Rust supply chain attacks harder with Cackle
by ufmace on Saturday October 14, 2023 @03:23PM
(#37883431)
It's a neat idea, but you'd probably have to build it into the OS from ground-up to work. And then a whole ecosystem of development languages and tools built around it. Quite a lot of work to have something anywhere near as functional as what's around today.
[ Parent
| on HN ]
Re:Making Rust supply chain attacks harder with Cackle
by fiddlerwoaroof on Saturday October 14, 2023 @05:07PM
(#37884285)
I don’t think so, a language by default doesn’t really have any access to the environment (ignoring side channels like Rowhammer attacks) aside from access to memory and the CPU. Ensuring the security properties I’m talking about is mainly a matter of designing the runtime’s OS interfaces from the ground up with a capability model.