[mikewarot]

Using Virtual Machines as capability based security is something I've come to accept.

Windows and Linux are vulnerable to the confused deputy problem, so you separate your concerns into separate VMs and give each "machine" a set of resources (capabilities)

IBM and Digital machines have done this since the 1960s.

[dannyobrien]

Yep, I've been thinking the same thing. Thanks for conveying it so well!