Comments on: Languages and security: a short reading list http://radian.org/notebook/languages-and-security-reading Code. Culture. Clarity. Mon, 08 Jun 2009 00:35:59 +0000 http://wordpress.org/?v=2.9.1 hourly 1 By: Ben Laurie http://radian.org/notebook/languages-and-security-reading/comment-page-1#comment-1128 Ben Laurie Fri, 13 Mar 2009 14:43:10 +0000 http://radian.org/notebook/?p=456#comment-1128 I'm sad that you didn't reference my wonderful <a href="http://www.links.org/files/capabilities.pdf" rel="nofollow">paper</a> on capabilities (called "Access Control" to fool the sceptics). Designed to be rather easier reading than Mark's thesis or the Caja website :-) I’m sad that you didn’t reference my wonderful paper on capabilities (called “Access Control” to fool the sceptics). Designed to be rather easier reading than Mark’s thesis or the Caja website :-)

]]> By: James Iry http://radian.org/notebook/languages-and-security-reading/comment-page-1#comment-1127 James Iry Wed, 11 Mar 2009 15:19:25 +0000 http://radian.org/notebook/?p=456#comment-1127 There's a <a href="http://lambda-the-ultimate.org/node/3230" rel="nofollow">discussion</a> on Lambda the Ultimate. There’s a discussion on Lambda the Ultimate.

]]> By: Grant Rettke http://radian.org/notebook/languages-and-security-reading/comment-page-1#comment-1126 Grant Rettke Wed, 11 Mar 2009 01:49:43 +0000 http://radian.org/notebook/?p=456#comment-1126 How would you classify <a href="http://en.wikipedia.org/wiki/SPARK_(programming_language)" rel="nofollow">Spark ADA</a>? How would you classify Spark ADA?

]]> By: Mark S. Miller http://radian.org/notebook/languages-and-security-reading/comment-page-1#comment-1125 Mark S. Miller Tue, 10 Mar 2009 15:55:01 +0000 http://radian.org/notebook/?p=456#comment-1125 Hi Ivan, Thanks for the kind words as well as the helpful criticism. I'd just like to clarify that Caja is the joint work of Mike Samuel, Ihab Awad, Ben Laurie, Mike Stay, Jasvir Nagra, and myself; with significant contributions from David-Sarah Hopwood and Doug Crockford. Joe-E is the joint work of Adrian Mettler and David Wagner. Any suggestions for how members of school 3 could better explain ourselves? The horrible state of our current explanations is not due to lack of trying. Perhaps a fresh angle is needed? Hi Ivan,

Thanks for the kind words as well as the helpful criticism. I’d just like to clarify that Caja is the joint work of Mike Samuel, Ihab Awad, Ben Laurie, Mike Stay, Jasvir Nagra, and myself; with significant contributions from David-Sarah Hopwood and Doug Crockford. Joe-E is the joint work of Adrian Mettler and David Wagner.

Any suggestions for how members of school 3 could better explain ourselves? The horrible state of our current explanations is not due to lack of trying. Perhaps a fresh angle is needed?

]]> By: Steven Cheng http://radian.org/notebook/languages-and-security-reading/comment-page-1#comment-1124 Steven Cheng Tue, 10 Mar 2009 15:06:27 +0000 http://radian.org/notebook/?p=456#comment-1124 Are there any approaches that introduce/use programming language features to better capture and abstract standard security practices? So maybe something like static typing used to ensure that information is exchanged in a certain way? Guess that's something like 2? Are there any approaches that introduce/use programming language features to better capture and abstract standard security practices?

So maybe something like static typing used to ensure that information is exchanged in a certain way?

Guess that’s something like 2?

]]>