On: DARPA's “Unhackable” Computer

[nickpsecurity]

CHERI a capability machine designed for C programs that runs FreeBSD.

[deepnotderp → nickpsecurity]

My point is more that it requires modifications to existing C code to use the full capabilities (no pun intended) of a capability machine.

[fao_ → deepnotderp]

I wonder if this could be done with an alternate stdlib. Editing the usual e.g. heap management functions et al. so it does stuff behind the scenes.