Ben Coman wrote
On Wed, Apr 12, 2017 at 3:34 PM, LaeMing <
laeming@.com
> wrote:
Hi, I am fishing about for an environment to try to develop a simple virtual world system in (yes, I'm aware of croquet/cobolt!).
In a smalltalk-like environment, that might conceivably involve inviting multiple people into the 'image' where the world is hosted to interact with objects within it (if I was to use a smalltalk, it would want it to interleave the entire system, not just host it on top.)
What sort of security implications might that have and are there any current solutions to a multi-user single-image situation?
If you want hostile actors working directly within the Image with a full environment, then Pharo is probably not suitable. Its easy to get hold of global class from the Playground references and overwrite/compile any method in the system like this...
SomeClass compile: 'initialize MyEvilHack dostuff. ^ super initialize '
You might want to consider Newspeak, which runs on the same VM as Pharo and has a focus on security. * https://www.slideshare.net/esug/8-gilad-brachaesug08 * https://www.youtube.com/watch?v=UwkROn7OmNQ
cheers -ben
Thanks, Ben. I am looking into Newspeak now. I am rather impressed so far! -- View this message in context: http://forum.world.st/Security-in-the-image-tp4941857p4941932.html Sent from the Pharo Smalltalk Developers mailing list archive at Nabble.com.