3 ms·
> an Erlang process can be orphaned if its Process Identifier becomes inaccessible. Has this ever actually happened? Surely with as many deploys as erlang has
by dnautics 7y ago
> an Erlang process can be orphaned if its Process Identifier becomes inaccessible.
Has this ever actually happened? Surely with as many deploys as erlang has, it would have been observed. A casual google search of "orphaned erlang process" shows the parent comment in the top four results, and no other results that mention orphaned erlang processes.
My point about erlang is that it's great precisely because, like all great systems, it doesn't dogmatically adhere to the academic design, and rather makes compromises and is refined by practitioners.
> re-entry into the region of mutual exclusion potentially enabling cyberattacks from outside the process
Typically you run your erlang actors inside of a trusted system. The only way to give untrusted actors access to your system, is explicitly (so no one does it). There are warning signs all over the place around every place where that might happen (for example distributed erlang) and in prod you really really shouldn't deploy distributed erlang without tons of security in depth in a deeply buried vLAN, or, TLS (instructions provided in the standard libs).
The only realistic vectors of attacks on your actor system is by compromising the entry points, like the actors which live to process your TCP or TLS entry points, but you can bet that ericcson has taken a lot of effort to harden those systems and, in fact, the ericcson SSL system was not vulnerable to the Heartbleed attack (despite using OpenSSL) because there are some very smart engineers at ericcson, and also the language generally doesn't have buffer overflows.
BTW, thanks for coming to my stanford ee380 talk a couple of Februaries ago -- unfortunately I wasn't aware of what you looked like, so I didn't get that you were in the audience at the time.
- ProfHewitt 7y agoErlang's insecurities will become more of a problem in the implementation of Reusable Scalable Intelligent Systems. See the following: https://papers.ssrn.com/abstract=3428114 PS. You are very welcome. Thanks for your EE380 talk!