Explore security in a malleable environment about malleable.systems HOT 3 OPEN

As one example, browser extensions with their permission prompts where the user grants specific types of access would be one way to introduce some safety.

from malleable.systems.

In the Matrix room, @dannyob suggested:

For security in a malleable environment I think it’s worth looking at the recent renaissance in Mark S. Miller’s capability-based systems. I know Chris Lemmer Webber has been working on a prototype in Racket, and MSM himself is leading the work on a JavaScript-based capability system: https://agoric.com/ https://dustycloud.org/blog/state-of-spritely-2020-02/

from malleable.systems.

I think that a big piece of security when novices are free to change things at will is making environments easy / low cost. Often people are stuck only being able to build in prod, so it's important that systems be designed from the ground-up to make practice environments with less sensitive data cheap and plentiful for novices

from malleable.systems.