Re: Arbitrary Sandbox

[Brian Drummond <brian@shapes.demon.co.uk>]

On Thu, 09 Feb 2012 20:41:05 -0800, Rob Shea wrote:

>>    Could you be more specific?  That sounds like a computer running
>> Windows, alone in a dedicated room, with no connections to the outside.
> 
> Well, virtually speaking, that is exactly what I want... literally
> speaking it's a Windows system, networked, with removable disks, that
> needs to run untrusted code processing untrusted data. This untrusted
> data and the system, network, printer, usb, etc must be immutable. A
> read-only compartment that can run arbitrary, dangerous, code, safely.

It's not clear to me how "arbitrary" this code is...
do you mean, arbitrary code that is part of this project, written in 
(your choice of) Ada or C#, to establish the trustworthiness of your 
team's app?

or do you mean that Ada or C# is to be used to help sandbox the machine 
against unknown executables, maybe downloaded from dodgy Iranian websites 
or lottery emails via those removable disks?

The former case, it seems to me, Ada would be the better choice.
In the latter, there may be more tools and better integration between C# 
and Windows, that make C# easier and faster to develop, if not 
necessarily ultimately better.

- Brian