Federated microkernels when?

@deadsuperhero languages are operating systems, so arguably E is a federated microkernel at a certain level of abstraction ;)

@cwebber @deadsuperhero Which raises an interesting point: we'll get federated microkernels when people get over their fetish for ACL-based security.

@seanl @cwebber What's wrong with ACL-based security?

@deadsuperhero @seanl Why Object Capabilities are better than ACLs

- Why should a pinprick-sized exploit of libpng be able to result in a single image you open in your email being able to entirely compromise your home directory?
- A world without CSRF attacks is possible. Just because I link you to a url-shortened link to an in-theory cat picture doesn't mean I should be able to transfer money from your poorly coded bank if you're logged in. It shouldn't be able to "act as you"

@deadsuperhero @seanl

- Alan asked Mark to let him store something in his garage. Mark gave his son the garage key and he gave it to Alan who later stored some stuff in the garage. Why then when Alan wanted to store a file on Mark's computer wouldn't Mark give Alan his password?