Re:The Nature of Lisp (2006)
by btilly on Wednesday May 20, 2015 @02:35PM
(#9578225)
Capability based systems offer better options.
All access to anything important (network, files, other commands, etc) have to happen through opaque handles called capabilities. Think of them as objects that you can't look for.
When you call code, you pass it a set of capabilities that are available. That is all it can ever access.
But the whole language and environment needs to be defined from the bottom up to enable this.
All access to anything important (network, files, other commands, etc) have to happen through opaque handles called capabilities. Think of them as objects that you can't look for.
When you call code, you pass it a set of capabilities that are available. That is all it can ever access.
But the whole language and environment needs to be defined from the bottom up to enable this.