3 ms·
From what I have heard, ksplice is pretty popular with VPS (virtual private server) providers. When there is an exploitable bug, they have to announce the plann
by soult 15y ago
From what I have heard, ksplice is pretty popular with VPS (virtual private server) providers. When there is an exploitable bug, they have to announce the planned upgrade to their customers and wait for a few days until they can run the upgrade. Even worse, they basically announce that there is a hole in their system to the very people that already have elevated access to that system. (Even non-remotly-exploitable bugs are a problem here.) Ksplice allows for an upgrade as soon as the bug is found/fixed in source code without tipping off potential attackers that could exploit the bug.
- rwmj 15y agoThey should be able to migrate the VMs off to another box, allowing the first one to be upgraded and rebooted. The additional benefit is that this tests a migration path that ought to exist in case of hardware failures.