Remix.run Logo
mikewarot 2 hours ago

>cybersecurity exploits at scale

Cybersecurity is actually a solved problem, but most people don't know it.

During the Vietnam war, there were two sources of information that had to be processed to plan air missions, and they were of different classification levels. There was no computer system at the time that could be trusted to operate with mixed levels of security. Research began in 1973, and there were a number of security models found that could actually do the job.

The EROS system, and its successors, were based on the principle of least privilege, and capabilities. In such a system, you can have security and usability together, if the OS is properly constructed.

It was the timing of the wave of cheap personal computers that drew focus away from security, and into functionality. The default security model of almost everything we use is ambient access, where a process can access everything the user is allowed to touch, by default. This is outright silly in an age of persistent internet connectivity.