|
I worked on a product that did this. The primary server downloaded code to access servers at run time, on a per-session basis. It took the form of opcodes in an interpreted language, running on a virtual stack machine. The access servers were also preloaded with "scripts" that the downloaded code could invoke, which reduced its size. This was an embedded system, so security wasn't an issue. It wasn't too complex, but a detailed spec didn't have to be written: it was proprietary, so however the access devices worked was the de facto spec. New access devices had to be backward compatible, which sometimes meant replicating the idiosyncrasies of the original access devices with regard to how the language was interpreted. All of this generally worked well, but you can add backward compatibility as a third problem if trying to do this for more complicated applications.
|
|
|
|
|
That's interesting. I like embedded stuff, and certainly that can either disappear security issues, or it can make them much worse.
I'm remembering the radiation dosing machine decades ago that was multithreaded and overdosed and killed 3 people because of a race condition. At least if I remember the story correctly. It was taught to me as a lesson about multithreaded code.
So I guess it depends on what it controls.
Real programmers use butterflies
|
|
|
|
|
This was a very large embedded system, a telecom call server with tens of millions of lines of code if you added up all the product lines that used the same platform (and that could theoretically be built into one distributable).
|
|
|
|
|
That reminds me of a plum creek project i consulted on. huge.
Real programmers use butterflies
|
|
|
|
|
honey the codewitch wrote: but what if you could send *code* in the stream, even across process or network?
I did a test case of that using Docker and Python, including the ability to do some basic UI layout, etc. I really liked the idea and it worked well - spin up a Docker instance, run the code, and after a period of inactivity or when the user logs out, kill the Docker instance. Given that one is working in essentially a VM, the only thing one has access to is one's own Linux instance, so I wasn't too concerned with security, haha. For example, you could, in Python, list the contents of the OS folders, etc., but I didn't really care.
The impetus for this are those sites that let you run C# code snippets, and I was curious how they might do such a thing, especially given the security issues.
|
|
|
|
|
Marc Clifton wrote: especially given the security issues.
There's always the possibility they're relying on .NET's Code Access Security feature to do the heavy lifting.
It works pretty well. I could probably find out if I tinkered with the C# code enough to see what it let you do and what it didn't but it's work. 
Real programmers use butterflies
|
|
|
|
|
honey the codewitch wrote: but what if you could send *code* in the stream, even across process or network?
Silverlight?
Dunno. Maybe you could call it Flash?
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
I wasn't thinking anything quite that ambitious. Mostly the instructions would be service specific. A graphics rendering server for example, would have instructions to create new filters and such but they all deal in polygons, pixels and math. A DSP application might accept instructions to do FFTs or other operations to transform a stream. That sort of thing.
Real programmers use butterflies
|
|
|
|
|
Sounds like you want Erlang.
|
|
|
|
|
I think it is great idea, because... I have also thought of it 
I don think it is useful for replacing message passing in general, but in specific cases where you don't know beforehand what types (e.g. structure and contents) of messages you will need.
An example is debugging, where you would need to query the state of the program and optionally change the value of some variables. Its probably easier to write a small program for the debugging actions you need, than to add support for all of the possible messages you think you might need in the future. Security wise, they are both risky, though.
Another example is to use the replace communication protocols. Instead of adapting an existing protocol to your needs, or worse creating your own, you can use the VM to implement a domain specific language (DSL) suitable for your needs. So instead of "byte zero is the header, byte two is type of message, bytes 2 to 10 are optional and if present ...." you could simply have "write this octet string to memory address X, set variable Z to 42, restart thread W".
I think SQL is a good example of what it could become of passing programs instead of messages. SQL has made it very easy to interact with databases, no matter the underlying implementation. But there also security dangers in using it (<obligatory "boby="" drop="" tables;"="" reference="">)
|
|
|
|
|
Just few quick thoughts:
distributed systems like kubernetes and service fabric already implement rolling updates, i.e. update application components while the application is running (included is also rollback/failover strategy if things go wrong)
if you want to make your own distributed functionality upgrade on the run you might send a "reference" to the new functionality instead of the actual code instructions. You could add some kind of "authorized store" containing validated code. The message receiver gets a reference to the function to use to process that message, if not already available locally it downloads it from the store (only from the authorized one). This way you could mitigate security risk and avoid to implement a complicated code validation strategy at instruction level.
Again these are quick thoughts, I didn't spend much time to validate my ideas but maybe they can be useful to you... I guess that's the spirit of this forum
|
|
|
|
|
Congratulations. You just invented (the worst bits of) Windows 10. 
You know, the server sends messages to the client, that include new "capabilities" and "instructions". The only capabilities that can't be changed are the capacity for the server to totally screw up the client, and for the client to stick its fingers in its ears and reject the "messages".  
|
|
|
|
|
In a way that is what SQL does.
|
|
|
|
|
Sorry to rain on your idea, but it's called grid computing, and has been around for at least 30 years now. Use of a VM is a tweak to the idea, but doesn't address all of the concerns. One that's missing off your list, is who pays for the hardware and electricity to run your VM?
Most people want some benefit to themselves for letting you use their hardware. Doesn't mean it's impossible, for example people donate their resources to things like SETI and protein folding. However, when they get nothing from it, they don't like it (e.g. the bitcoin mining browser exploits).
|
|
|
|
|
patbob wrote: One that's missing off your list, is who pays for the hardware and electricity to run your VM?
I think your thinking of something like the JVM or CLI, not something like a Pike VM, which is a microvm that accepts a very limited instruction set suited for it's particular purpose, not general programming. Because the instructions are geared for what the service does, how much extra overhead the VM causes really depends on how crappy you designed your instruction set. It's a special purpose, not general purpose VM, and being dedicated, the inefficiency on introducing one is reduced considerably.
Of course, it wouldn't be appropriate to use such a technology in all places.
Real programmers use butterflies
|
|
|
|
|
Doesn't matter what the code is, or what it runs on, there's still a hardware cost (physical electronic circuitry) and electricity cost to running code. You simply cannot escape thermodynamics.
|
|
|
|
|
LOL, if it's really a big deal, let's write all of our services in unmanaged code, throw .NET away, PHP? gone. No more java, node.js. Nothing. Hell, C++ is too inefficient, let's code the entire thing in assembly.
Real programmers use butterflies
|
|
|
|
|
Sounds great. You can do the debugging!
|
|
|
|
|
Look into agent frameworks, especially autonomous agents. [Software agent - Wikipedia[^]
I played around with the concept in the early days of the internet.
|
|
|
|
|
Sounds like CORBA, or some kind of offshoot. Sorry if I'm way off on this - been retired a few years now. Around 20 years ago, or so, was looking at something like what you are describing. But at that time i didn't want to convert our systems to JAVA. perhaps by now Microsoft has caught up.
Anyways, just disregard if not applicable. 
Time is the differentiation of eternity devised by man to measure the passage of human events.
- Manly P. Hall
Mark
Just another cog in the wheel
|
|
|
|
|
Is a Petunia a domesticated fish?
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
"Common sense is so rare these days, it should be classified as a super power" - Random T-shirt
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
Your post looks the salmon all browsers: some sort of fin-ish humor, but the scale of it cod be determined.
| Ravings en masse^ |
|---|
| "The difference between genius and stupidity is that genius has its limits." - Albert Einstein | | "If you are searching for perfection in others, then you seek disappointment. If you seek perfection in yourself, then you will find failure." - Balboos HaGadol Mar 2010 |
|
|
|
|
|
After having an opportunaty to mullet over, I believe they would simply be prawns in the game of life.
"the debugger doesn't tell me anything because this code compiles just fine" - random QA comment
"Facebook is where you tell lies to your friends. Twitter is where you tell the truth to strangers." - chriselst
"I don't drink any more... then again, I don't drink any less." - Mike Mullikins uncle
|
|
|
|
|
Is this what happens when you get too pond of your livestock?
Freedom is the freedom to say that two plus two make four. If that is granted, all else follows.
-- 6079 Smith W.
|
|
|
|
|
If anyone out there does, we can drop them off tomorrow?
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
"Common sense is so rare these days, it should be classified as a super power" - Random T-shirt
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
