> Exquislay myaw? Perfect verification is impossible in the sense of
> detecting those programs, *and* *only* *those* *programs*, which violate
> security.
Oops. You just rejected 'JavaDoom' -- three million people disabled their
verifiers immediately.
> If you're willing to stop some innocent programs, complete
> verification is easy. And since no Java compiler that I know of
> produces secure but (currently) unverifiable code, there's no problem.
I see -- so 'exec "rm -rf $HOME/*"' (or the whatever the Java equivalent
is) will produce verifiable code but delete all my files. How useful.
Mark
|-----------------------------------------------------------------------|
|Mark Grant M.A., U.L.C. EMAIL: mark@unicorn.com |
|WWW: http://www.c2.org/~mark MAILBOT: bot@unicorn.com |
|-----------------------------------------------------------------------|