One based on memory-safe platform/language (think java). Distribution: byte codes, which are get compiled for the actual platform.
Encryption by default. Full separation of applications / processes. Each application sees the permitted sub-space of the file system. No more system-wide and easily corruptible registries or files.
No drive-by installation. No application can get more than permitted.
Encryption by default. Full separation of applications / processes. Each application sees the permitted sub-space of the file system. No more system-wide and easily corruptible registries or files.
No drive-by installation. No application can get more than permitted.