3 ms·
Erlang has had hotloading for a long time and seems to be fine security wise AFAIK.
by dmix 4y ago
Erlang has had hotloading for a long time and seems to be fine security wise AFAIK.
- kaba0 4y agoHot reloading’s quality (and to a degree, security) depends mostly on how fine-grained a change can be. The reason Lisp-REPl workloads are so well loved is that very small scopes can be changed easily, Erlang also has a sane encapsulation that can be swapped without much fuss.
- jjtheblunt 4y agojust wanted to say i really like the clarity of that explanation
- melony 4y agoMost of (traditional) Erlang deploymens are in embedded systems. They have a different threat model.
- toast0 4y agoErlang has a very limited security model. In the default distribution, any process on any node can spawn a process on any other connected node to run any function --- you can send the function too. Modules can have a function to run on load, too. Loading an untrusted module is asking for that module to take over your whole system. Best to make sure nobody unauthorized can do that.