1) Why is the compiler the "confused deputy"?


2) How could capabilities have prevented the confusion?


3) Describe how Capsicum can be used for Chromium, based on our discussion of Chromium’s security architecture last time.