Capability Myths Demolished.¶
Miller, M. S., Yee, K., & Shapiro, J. (2003). Capability Myths Demolished.
Cited by¶
2 citations across 2 artifacts.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Confused Deputy
- Rather than treating each as its own problem with its own ad-hoc countermeasures, a diagnostician reasons about one structural defect (authority composing as union rather than intersection) and selects from three intervention families. Capability-based access carries the originating authority as an unforgeable token, so the intermediary acts on a capability the caller supplied rather than on ambient authority. Caller-aware authorisation has the intermediary explicitly check that the action is permitted for the caller, not merely permitted for itself. Two-person or out-of-band confirmation on intent adds a separate step verifying that the intent matches the actor.
This sourceDistinguishes capability-based from ambient-authority access control and shows capabilities re-attach the originator's authority, defeating the confused deputy.
- Rather than treating each as its own problem with its own ad-hoc countermeasures, a diagnostician reasons about one structural defect (authority composing as union rather than intersection) and selects from three intervention families. Capability-based access carries the originating authority as an unforgeable token, so the intermediary acts on a capability the caller supplied rather than on ambient authority. Caller-aware authorisation has the intermediary explicitly check that the action is permitted for the caller, not merely permitted for itself. Two-person or out-of-band confirmation on intent adds a separate step verifying that the intent matches the actor.
- Latent Realizable Capacity
- In computer science it is lazy evaluation, where a thunk is a capacity to produce a value realized only when forced; promises and futures; class methods as capacities manifest only on dispatch; and object capabilities as dispositions to perform protected operations.
This sourceDefines object capabilities as unforgeable tokens conferring narrowly scoped authority to perform protected operations whether or not exercised, and informs the transfer into digital financial rights.
- In computer science it is lazy evaluation, where a thunk is a capacity to produce a value realized only when forced; promises and futures; class methods as capacities manifest only on dispatch; and object capabilities as dispositions to perform protected operations.
Verification¶
This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.
Links previously used in the corpus¶
Before the registry existed this work was also linked 1 other way.
Registry ID ref:13c39431a2c0 · see in the full table