3 ms·
This is wishful thinking at the moment. I understand perfectly well what that means but data is data. An application typically has access to all data and the fa
by passfree 13y ago
This is wishful thinking at the moment. I understand perfectly well what that means but data is data. An application typically has access to all data and the fact that you run it through a VM doesn't change anything.
I can find this technology useful only in areas where you want untrusted 3rd-party code to run without worrying about what it will do.
- pkconstantine 13y agoTypically - yes, but we can change that. Application does not need to access all data, it happens because today any web application serves millions of requests and thousands of users, it needs to access all the data of all users at any time. When using ZeroVM you can serve one user and one request by one VM instance. Then you may explicitly define what data is accessible to that one VM instance. Yes, you can implement such controls in your application yourself, but we are just doing it for you, uniformly, on infrastructure level. And about "3rd party code". If we have two developers, each works on a different module of the same application, isn't their code is "3rd party" to each other?
- vidarh 13y agoIt is only "wishful thinking" is as much as people are usually lazy because the effort required to sandbox small pieces of code is prohibitive in most current platforms. But larger systems are already often layered in ways that layer access to data anyway (though often not intentionally for security).
- passfree 13y agoGood luck with this approach. I am not saying you should throw away this - awesome technology btw - but rather impractical in many ways. You will find very little use-cases where you can apply this with direct benefit. In most cases this wont change a thing - only perhaps on highly specialised software.