awesome-ocap
by dckc
Awesome Object Capabilities and Capability Security
AI summary
Capability security resource
A curated list of resources and examples for building secure software using object capabilities
- stars
- 348
- forks
- 25
- watching
- 33
- awesome lists
- 3
- entries
- 91
What's in the list
91 links in 33 sections, with live GitHub stats.activeno commit in 2y
Links
Applications and Services
Applications and Services / Cloudflare Workers
Applications and Services
- Sandstorm
is a self-hosted web productivity suite and with WordPress, Rocket.Chat, IPython Notebook and many more. protects you and your data against application bugs
Applications and Services / Sandstorm
- Announcing the release of vagrant-spk 1.0
2020-02-22:
- Reviving Sandstorm - Sandstorm Blog
2020-02-03:
connecting to external HTTP APIs via the Powerbox
2017-03-02: and related powerbox enhancements v0.200 (2017-01-28), v0.203
Applications and Services
- Tahoe-LAFS
is a highly available decentralized cloud storage system. Even if some of the servers fail or are taken over by an attacker, the entire file store continues to function correctly, preserving your privacy and security
Applications and Services / Tahoe-LAFS
- v1.19.0 released
2024-01-01
Libraries and Frameworks / JavaScript
- Making 'npm install' Safe - QCon New York
2019-12: "Kate Sills on security issues using NPM packages, the EventStream incident, and SES" as possible solutions to npm supply-chain risks
- Higher-order Smart Contracts across Chains
2019-06: Agoric + Protocol Labs // - Mark Miller
- Agoric Releases SES: Secure JavaScript
2018-07-28: f4d3d5a
- fun with Capper and OFX financial transaction fetching
Jan 2016 to cap-talk
- The Attacker is Inside: Javascript Supplychain Security and LavaMoat
2022-11: by kumavis at Ethereum Devcon Bogota
Libraries and Frameworks / C++
- Cap’n Proto
is a high performance serialization and RPC protocol with distributed and persistent capabilities and promise pipelining. Bindings to python, JavaScript (in node.js), Go, Rust, etc. are available
Libraries and Frameworks / C++ / Cap’n Proto
- Cap'n Proto 0.5, and how it is central to Sandstorm
2014-12-15: by Kenton Varda
Libraries and Frameworks / Scheme (racket)
- Content Addressed Descriptors and Interfaces with Spritely Goblins paper
2021-07 "how to perform "conversational" programming in Spritely Goblins, or any other system which assumes a mutually suspicious network. ... The reason this system is able to be elegantly embedded in a network environment is its use of Spritely's implementation of CapTP."
- Motile: Reflecting an Architectural Style in a Mobile Code Language.
Gorlick, Michael M., and Richard N. Taylor. (2013)
- COASTmed: software architectures for delivering customizable, policy-based differential web services.
Baquero, Alegria. Companion Proceedings of the 36th International Conference on Software Engineering. ACM, 2014
- Shill: A Secure Shell Scripting Language
. Scott Moore, Christos Dimoulas, Dan King, and Stephen Chong. 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI), October 2014
Libraries and Frameworks / Scala
- ocaps
is a library for working with object capabilities in Scala
- guide to capabilities
Comes with a
Libraries and Frameworks / Scala / guide to capabilities
- Presentation at Scaladays
2018-09-22
Libraries and Frameworks / rust
cap-std
Capability-oriented version of the Rust standard library
Libraries and Frameworks / rust / cap-std
Libraries and Frameworks / rust
Libraries and Frameworks / rust / capnproto/capnproto-rust: Cap'n Proto for Rust
Libraries and Frameworks / rust
- Using Capabilities to Design Safer, More Expressive APIs
Zack Mullaly Jan 19, 2018
Libraries and Frameworks / go
Libraries and Frameworks / go / capnproto/go-capnproto2: Cap'n Proto library and code generator for Go
Libraries and Frameworks / python
- Network protocols, sans I/O
supports object capability discipline by letting the caller handle network access
Libraries and Frameworks / nim
Programming Languages
- ponylang
docker images:
- Fully concurrent garbage collection of actors on many-core machines
S. Clebsch and S. Drossopoulou OOPSLA 2013
- Gilad Bracha: Newspeak on the Web
2021-09: at California Smalltalkers
- Live IDEs in the Web Browser: What's Holding Us Back
2021-03: Includes a brief demo of the WASM based Newspeak IDE
- montelang
Docker images:
- Monte: A Spiritual Successor to E
2017-03: presented by Corbin Simpson at OCAP 2017
Operating Systems
- genode
is a novel OS architecture that is able to master the complexity of code and policy -- the most fundamental security problem shared by modern general-purpose operating systems -- by applying a strict organizational structure to all software components including device drivers, system services, and applications
Operating Systems / genode
- Genode - Sculpt OS release 23.10
2023-10 with power management
- Genode OS Framework release 21.08
2021-08 "revamped GPU support as well as new drivers for the Pinephone and MNT-Reform"
- Genode OS Framework 20.05
2020-05-28 with ,
- MNT Reform - The Campaign is Live
2020-05-07:
- Sculpt OS release 20.02
2020-03-10: Version 20.02 of the Sculpt operating system revisits the administrative user interface for a more intuitive and logical user experience
- Genode OS Framework release 20.02
2020-02-28: With version 20.02, Genode makes Sculpt OS fit for running on i.MX 64-bit ARM hardware, optimizes the performance throughout the entire software stack, and takes the next evolutionary step of the user-facing side of Sculpt OS
- Road Map for 2020
2020-01-20:
- Genode OS Framework Foundations
2019-05: book ( )
- Genode OS Framework release 17.11
Nov 30, 2017
Operating Systems
- cr0 blog: A few thoughts on Fuchsia security
2021-06 Julien Tinnes
- Playing Around With The Fuchsia Operating System
2020-06-09 -
- Google’s “Fuchsia” smartphone OS dumps Linux, has a wild new UI
2017-05-08 Ars Technica
- seL4 Summit 2022
2022-10: Munich, Germany (hybrid), 10-13 Oct 2022
Operating Systems / seL4 Summit 2022
- 2022-10: 4th seL4 Summit
video playlist
Operating Systems
wasmedge-seL4
2021-10: Integrate WasmEdge with seL4
- The seL4® Microkernel An Introduction
2020-05-25 Gernot Heiser
- seL4 on the Raspberry Pi 3
FEBRUARY 8, 2017
- Comprehensive formal verification of an OS microkernel
Gerwin Klein, June Andronick, Kevin Elphinstone, Toby Murray, Thomas Sewell, Rafal Kolanski and Gernot Heiser
- seL4 enforces integrity
Thomas Sewell, Simon Winwood, Peter Gammie, Toby Murray, June Andronick and Gerwin Klein International Conference on Interactive Theorem Proving, pp. 325-340, Nijmegen, The Netherlands, August, 2011
- Announcing KataOS and Sparrow | Google Open Source Blog
2022-10: “As the foundation for this new operating system, we chose seL4 as the microkernel because it puts security front and center; it is mathematically proven secure, with guaranteed confidentiality, integrity, and availability.”
CPUs
- CHERI
is an open source capability CPU design
CPUs / CHERI
- Arm releases experimental CHERI-enabled Morello board as part of £187M UKRI Digital Security by Design programme
2022-01 CHERI implements architectural capabilities that directly enable software security features such as fine-grained memory protection and scalable software compartmentalisation — both important software vulnerability mitigation techniques that are not well supported on current processor architectures. ... memory-safe C compilation and linkage
- The Arm Morello Board
2019-09 Arm announced Morello, an experimental CHERI-extended, multicore, superscalar ARMv8-A processor, System-on-Chip (SoC), and prototype board to be available from late 2021. Morello is a part of the UKRI £187M Digital Security by Design Challenge (DSbD) supported by the UK Industrial Strategy Challenge Fund, including a commitment of over £50M commitment by Arm
- An Introduction to CHERI
2019-09
Presentations, Talks, Slides, and Videos
Articles
- Blogging about Midori
in series:
Articles / Peer-reviewed Articles
Nothing in this list matches your filter.
Featured in 3 awesome lists
Each link jumps to the spot where the list mentions awesome-ocap.