3 ms·
Live patching has its serious critics, and it is also not nearly finished "I think they are fundamentally misguided in both implementation and in design, which
by justincormack 12y ago
Live patching has its serious critics, and it is also not nearly finished "I think they are fundamentally misguided in both implementation and in design, which turns them into an (unwilling) extended arm of the security theater." [1]
[1] http://lwn.net/SubscriberLink/634649/f6a2aa1f39c538b7/ http://lwn.net/SubscriberLink/634649/f6a2aa1f39c538b7/
- azakai 12y agoThanks for the link! Reading that, it looks pretty pessimistic actually. There seems to be nowhere near a clear path forward for how to actually do this. One concern is that stack traces are "best-effort" and not guaranteed to work. Isn't there a way to force them to work, by disabling some stack-related optimizations (like no-omit-frame-pointer)? I imagine there would be a little slowdown, but maybe worth it for the ability to do quick stacktrace-based live patching?
- deleted 12y ago[deleted]