HackerTube / Video
Capsicum: Practical Capabilities for UNIX
USENIX

Robert Watson presents the Capsicum paper at USENIX Security 2010, describing practical capability-based sandboxing for UNIX. The paper won Best Student Paper.
Referenced as the authoritative talk on Capsicum, including comparisons of how little code it takes to sandbox programs versus SELinux.
3 Hacker News mentions · 2013–2017