@davesomebody I'm saying that I don't need any of that for this application, just "Is it this date yet?"
@davesomebody Nope, none of that.
@peribotsarah Nothing so complex! These systems pre-date blockchains by decades.In its most primitive form, OCAP simply means that capabilities are expressed as unforgable addresses in a system.A file descriptor in a Unix system is an example of one, as is a password reset token. A password reset token can only be used for password reset on one account. It can't be used to do other things. A file descriptor lets you do things to one file, not any file you want, etc.Imagine if you handed a malicious program a read only file descriptor to a file. It might want to write to it, but if all it had was just the file descriptor and nothing else, it wouldn't be able to do anything.
The potential power of agents can't really be overstated. Systems that in aggregate can change the way we work at basically every level.People are worried about AI for damn good reasons. AI companies power their business through our private information. But it doesn't have to be that way. Fossil fuel companies do awful things to the earth, but that doesn't make electricity bad. AI companies are evil, but AI isn't bad on its own.If we want good AI that means good privacy, and good security. It means that a program that is there to record my voice and transcribe it doesn't need to have access to my personal photos. We need models of computing that are designed around consent, and build for small, singular tasks that compose.That's why the capabilities model is so necessary and we see so much work from different people and projects going into it.With Smart Contracts, it's necessary. With AI agents, we need it yesterday.#Programming #AI #OCAP #Capabilities #Agents #SmartContracts
Yes, 100% we can solve this if we're developing the application!
I'm talking about how we solve if it we're on the user end.
Another approach would be if Alice could generate multiple Passkeys and hand them out to individuals she trusts, and then retaining the ability to revoke them. Sadly many sites don't yet support Passkeys, and this model still lets someone like Mal revoke Alice's access, so that's not great.
Bitwarden has a feature whereby Alice can share a password with Eve but not let her see it or export it. This could work pretty well, except that if the site requires 2FA from a SMS text message (vs TOTP or a token) or if Eve has the knowhow to intercept the password.
I still think that what we ultimately want is attenuated scopes because then we can track all actions by the delegated party.
I do wonder if this need is niche or if the current solution of "good faith password sharing" works well enough often enough that it's not risen to the level of concern for developers.
2/2
#Authentication #Authorization #InfoSec #Passwords #Passwordless #Programming