{"action":"created","issue":{"url":"https://api.github.com/repos/bluejekyll/trust-dns/issues/71","repository_url":"https://api.github.com/repos/bluejekyll/trust-dns","labels_url":"https://api.github.com/repos/bluejekyll/trust-dns/issues/71/labels{/name}","comments_url":"https://api.github.com/repos/bluejekyll/trust-dns/issues/71/comments","events_url":"https://api.github.com/repos/bluejekyll/trust-dns/issues/71/events","html_url":"https://github.com/bluejekyll/trust-dns/pull/71","id":191795133,"number":71,"title":"object capability discipline audit (WIP, FYI)","user":{"login":"dckc","id":150986,"avatar_url":"https://avatars.githubusercontent.com/u/150986?v=3","gravatar_id":"","url":"https://api.github.com/users/dckc","html_url":"https://github.com/dckc","followers_url":"https://api.github.com/users/dckc/followers","following_url":"https://api.github.com/users/dckc/following{/other_user}","gists_url":"https://api.github.com/users/dckc/gists{/gist_id}","starred_url":"https://api.github.com/users/dckc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dckc/subscriptions","organizations_url":"https://api.github.com/users/dckc/orgs","repos_url":"https://api.github.com/users/dckc/repos","events_url":"https://api.github.com/users/dckc/events{/privacy}","received_events_url":"https://api.github.com/users/dckc/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-11-26T08:52:28Z","updated_at":"2016-11-26T23:04:03Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/bluejekyll/trust-dns/pulls/71","html_url":"https://github.com/bluejekyll/trust-dns/pull/71","diff_url":"https://github.com/bluejekyll/trust-dns/pull/71.diff","patch_url":"https://github.com/bluejekyll/trust-dns/pull/71.patch"},"body":"Implicit access to stuff like files and the clock makes unit testing awkward and hinders security auditing.\r\n\r\nThe lint stuff goes beyond stable so it would have to go in the long term, once I/we refactor for explicit access.\r\n\r\nBut I got far enough tonight that I thought I'd share my work in progress."},"comment":{"url":"https://api.github.com/repos/bluejekyll/trust-dns/issues/comments/263091305","html_url":"https://github.com/bluejekyll/trust-dns/pull/71#issuecomment-263091305","issue_url":"https://api.github.com/repos/bluejekyll/trust-dns/issues/71","id":263091305,"user":{"login":"dckc","id":150986,"avatar_url":"https://avatars.githubusercontent.com/u/150986?v=3","gravatar_id":"","url":"https://api.github.com/users/dckc","html_url":"https://github.com/dckc","followers_url":"https://api.github.com/users/dckc/followers","following_url":"https://api.github.com/users/dckc/following{/other_user}","gists_url":"https://api.github.com/users/dckc/gists{/gist_id}","starred_url":"https://api.github.com/users/dckc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dckc/subscriptions","organizations_url":"https://api.github.com/users/dckc/orgs","repos_url":"https://api.github.com/users/dckc/repos","events_url":"https://api.github.com/users/dckc/events{/privacy}","received_events_url":"https://api.github.com/users/dckc/received_events","type":"User","site_admin":false},"created_at":"2016-11-26T23:04:03Z","updated_at":"2016-11-26T23:04:03Z","body":"The first commit replaces \"ambient\" access to the command line args with explicit access. One benefit is that we can substitute the args with our own for testing. Likewise the clock: if some random bit of code deep in the call stack can just reach out and access the clock without explicitly being given access, we can't make unit tests that provide a simulated clock.\r\n\r\nIt also lets us enforce the principle of least power. I'll have to think about how to explain succinctly.\r\n\r\nMeanwhile, perhaps one of the talks in https://github.com/dckc/awesome-ocap#presentations-talks-slides-and-videos is worth your time? Flipping through the \"Bringing Object-orientation to Security Programming\" slides takes just a few minutes.\r\n"}}
{"actor":{"display_login":"dckc"}}