From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from atuin.qyliss.net (localhost [IPv6:::1]) by atuin.qyliss.net (Postfix) with ESMTP id D92E68ABC; Mon, 22 Jun 2026 13:26:34 +0000 (UTC) Received: by atuin.qyliss.net (Postfix, from userid 993) id B21578A4B; Mon, 22 Jun 2026 13:26:31 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on atuin.qyliss.net X-Spam-Level: X-Spam-Status: No, score=-0.8 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DMARC_MISSING,RCVD_IN_DNSWL_LOW,SPF_HELO_PASS autolearn=unavailable autolearn_force=no version=4.0.1 Received: from fout-a8-smtp.messagingengine.com (fout-a8-smtp.messagingengine.com [103.168.172.151]) by atuin.qyliss.net (Postfix) with ESMTPS id 2DEF08A49 for ; Mon, 22 Jun 2026 13:26:31 +0000 (UTC) Received: from phl-compute-10.internal (phl-compute-10.internal [10.202.2.50]) by mailfout.phl.internal (Postfix) with ESMTP id 7EDBFEC0385; Mon, 22 Jun 2026 09:26:30 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-10.internal (MEProxy); Mon, 22 Jun 2026 09:26:30 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alyssa.is; h=cc :cc:content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:subject :subject:to:to; s=fm3; t=1782134790; x=1782221190; bh=rF/0L4w8lz ROdZSQ/wZtaaTi4SUGj2717gNrnKxp4cQ=; b=iuq0mujxbqQvgLvZ5a5YVbg4EY zDCv46FBp0H8YtJWyearR/NVhA+MWemYTky21cL7ZcnBbNqdKgPaKTmKPe3NQXrb pdICBSxRzaQaiQ5XxFhaHc4m7BYomQmDpBTVYzp0cpN7wkwRAXR936vyfjIYAXdX iVmecVRK22pFf+47CyrLUgUVebzJ52UnY6sUGBjvF2fFWlJNIy7TcHRpe1FIDBvY BkupGYPp0fRdHbg8NQlz5HRkUhRMOkh/1/GrguWFBMLw/jCEKsj4fY76kD/Ea4sP cmqtgj4IdUpgycwg6EuVTSnBqT/h82YUzu1o4/0ZjcwhcHZAY5XUdbStgJaQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t= 1782134790; x=1782221190; bh=rF/0L4w8lzROdZSQ/wZtaaTi4SUGj2717gN rnKxp4cQ=; b=PQDevPCdUBUhezvb+sGVuQJpzUuTAQxE9KLVyurfbqmfHFoKOio ox+TCBMuZbaNbaTqDLCABdTSwC/u1JBSg/oeRG//3Wa6Jg9Oe0TAJCSfsuj/rRX8 IGUH+N7w3iZaLZesSijXdwSP6oCQZzEYCp1sQc6LKdp4E1743bJK7ilSCvvRWEPN Xh3b701UD/62MPp8zoveT8mvUHrVlEn5alr5s/fJxb5kKJjUQwaoNMmGUUqBj0wD tTyLN22bMp7FrLo5iDkYcX/16cqbi4dDkq3/kgPfmW1JQfFcinIUVbhEXuh7TNsK yJlboEDOAKnkLBsyrhQsADynGWNUgzByWWg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: dmFkZTF7LldLT9h93Mv2ApeNQjSHnhX7G1Mwz6+mRtFIyjOs95/3jcf/7sapyBe2ckpFix hH9aGEEdhpgC6HxxYrirSFW4HhEl0ayT+xWaB1MrN6L8ePhehPApJCVs4k1pxpFluJToNm pJGigeOJ3ttp35qpqRDPQ/OXRU7qR2kWnZAwk190w4Sb4pNwm/dPOavPP3HBH1ULEcmTFb Ng/t5pnnvOVN+qbSwndLbB2PzZ+MU19Eavx0BJADY5vgT0mj5CCrXUHNkeO0uPFD+Oklu6 DugOb5lzYExcu+qV3m76kT4U1KU13rXGVjCRmy2Hf+TL79kmUYLNSGYdeikE1/Gq1DQIlY Cj6GTWRkFVr8VD3XmOTQjsDbgQsomTSxAntLoIjnd86j9ZjhIszEnLZMiHC6Aw86A68cuP tW+txbe3ln+Ca+/tWSrB/zrW5wRRgqYQw5XWJkxgUHCh29iT4JDcxFkN1NQIA3PyT1zHxU mkNa5WCnlKhMWcoazbnQgweM1Ku5q5i92Gf4tHOFC2PJbze+BlmvNI/puio7/IdrsIrPCE KSoEbkSnqDWqL4o3S3Q6gooWQ348RCCzuQWmlMAAyDVVZNZE+pwG+paohuDVmed2SKgdTn TDZ9pIlKi928IMHnUKnR6m4qHAsxQNNVfsR6qx7/hI5uBWy1EI6/w8xegreg X-ME-Proxy: Feedback-ID: i12284293:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon, 22 Jun 2026 09:26:30 -0400 (EDT) Received: by mbp.qyliss.net (Postfix, from userid 1000) id B40B182AFFD8; Mon, 22 Jun 2026 15:26:27 +0200 (CEST) From: Alyssa Ross To: Valentin Gagarin Subject: Re: [PATCH v2 2/2] Documentation: sketch the threat model on the front page In-Reply-To: <20260622095556.170159-2-valentin@gagarin.work> References: <20260617132414.103828-1-valentin@gagarin.work> <20260622095556.170159-1-valentin@gagarin.work> <20260622095556.170159-2-valentin@gagarin.work> Date: Mon, 22 Jun 2026 15:26:26 +0200 Message-ID: <87echyiu4d.fsf@alyssa.is> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Message-ID-Hash: SZAGZ2SUWOMDM6TJOD66KWL52DTIWTC2 X-Message-ID-Hash: SZAGZ2SUWOMDM6TJOD66KWL52DTIWTC2 X-MailFrom: hi@alyssa.is X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-devel.spectrum-os.org-0; header-match-devel.spectrum-os.org-1; header-match-devel.spectrum-os.org-2; header-match-devel.spectrum-os.org-3; header-match-devel.spectrum-os.org-4; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: devel@spectrum-os.org X-Mailman-Version: 3.3.10 Precedence: list List-Id: Patches and low-level development discussion Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Valentin Gagarin writes: > Also capture the poking-holes security model and hint at the trust > boundary. > > This way of phrasing it intentionally doesn't go into any detail. > Proper exposition in dedicated documents would still be fruitful, > especially for readers less experienced with the domain. But this way > we already mention all the most important ideas in the first few > paragraphs, which should be more likely to capture attention of experts. > > Signed-off-by: Valentin Gagarin Good addition. > --- > Documentation/index.html | 7 ++++++- > 1 file changed, 6 insertions(+), 1 deletion(-) > > diff --git a/Documentation/index.html b/Documentation/index.html > index 6d4f07b..e1c5ebb 100644 > --- a/Documentation/index.html > +++ b/Documentation/index.html > @@ -21,9 +21,14 @@ the principle of security by compartmentalization. It= aims to have a > lower barrier to entry and to be easier to use and maintain than other > such systems. >=20=20 > +

> +By isolating each application in a virtual machine, Spectrum prevents un= trusted > +software from accessing what you haven't explicitly allowed or disruptin= g other > +applications. > + >

> Persistent data will be managed centrally, while > -applications remain isolated. This means that the system can still be > +preserving boundaries between compartments. This means that the system c= an still be Do you think it's already understandable by this point what a compartment is, to a reader that is learning about security by compartmentalization for the first time? > thought of as a whole, rather than many virtual > machines each becoming a system of its own. >=20=20 > --=20 > 2.54.0 --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRV/neXydHjZma5XLJbRZGEIw/wogUCajk4AgAKCRBbRZGEIw/w ohMUAQDyuLG9tAVrovKUOZq/LyN+ujrk4ziWjwKIZNPTkIrw2wD/etXvcdNJXh4E SID6DQJJLoqpwA+YHfV4V2W1o3ZWJgo= =bWgR -----END PGP SIGNATURE----- --=-=-=--