CapDesk, a capability-based secure desktop

Something very very interesting looking that I stumbled across:

http://wiki.erights.org/wiki/CapDesk

Basically a desktop shell that allows its applications access only to the file they just opened. Just getting normal user access from a program compromise would (for a CapDesk application) require an OS vulnerability, not just a flaw in the application.

It also supposedly can run on top of Win2k! Woo!

Unfortunately it looks like one of those things that is so proprietary as to be useless, i.e. not even available for public consumption. Come on guys, at least have the decency to sell your stuff on the open market instead of this ZOMG TOP SECRET NO PUBLIC ACCESS garbage. Makes you wonder if CapDesk isn't vaporware.