Skip to main content
6 events
when toggle format what by license comment
May 17, 2011 at 23:47 comment added atdre Uh... I meant TCSEC "Beyond A1" formal verification of everything: design, code, whole system -- the whole thing. I don't even know what Common Criteria is, nor do I care. I'm talking about formal methods, not a marketing sticker.
May 17, 2011 at 15:52 comment added rook Doing any kind of mathematical proof of correctness on something as large as a browser would be a nightmare.
May 17, 2011 at 9:53 comment added john Well, even if it was formally verified, there are no guarantees. EAL4 systems are compromised all the time. Formal compliance is good, but by no means a guarantee against competent attackers.
May 17, 2011 at 9:17 comment added Rakkhi Even where something has been formally verified e.g. Common Criteria it is only applicable to that specific configuration and systems, doesn't help the ordinary user. E.g. refer the UK chip and pin readers with basic lack of encryption in transit after EAL 4: cl.cam.ac.uk/research/security/banking/nopin/press-release.html
May 17, 2011 at 9:13 comment added Rakkhi Agree with @atdre there are no guarantees, but the measures you have taken have reduced the risk of malware and driveby's. You can further reduce risk by installing Notscripts (like No script for Firefox) chrome.google.com/webstore/detail/… .You can then allow Javascript on whitelisted sites. Also could run either your normal browsing and sensitive Internet use (e.g. online banking, shopping) on different machines / VM's. Of course technology will only do so much, you still need common sense Interent use i.e. no free iPad.
May 17, 2011 at 8:52 history answered atdre CC BY-SA 3.0