Justin Cormack, jise Mirage OS aur Unikernel Systems mein kaam kiya tha, unhone unikernels mein vriddhi dekhkar uski newsletter ke liye author se baat ki. Is baat cheet beer par pub main hui, Mirage, Orleans, Haskell, Nix aur Cursed par charcha ki. Unikernel application aur OS ko merge karta hai, userland hatata hai—isliye web servers ya DNS jaise services libraries banaane padte hain.
Istahas mein driver aur storage support khali hone ke karan, NetBSD se components laane padte the. Author traditional OS design ko ‘design debt’ khta hai, jo 40 saal purane multi-user assumptions par basa hota hai insaan operators ke liye. Is legacy se attack surfaces bante hain: userland app uthakar attackers ko shell aur ‘VIP butler’ milta hai jo exfiltration ke liye use hota hai.
Unikernels isse kam karte hain shell aur interpreters hatakar—bina unke, AI jaise model weights ke koi next action nahi hota, easy RCE exploits ko targeted attacks banata hai jo source code chahte hain. Library gaps (jaise OCaml mein Stripe) adoption ko previously rok rahi thi, lekin AI ab automation se missing libraries port kar sakti hai. Is shift sirf technical nahi—cognitive bhi hai: ‘hard’ dogma ko overcome karna AI se complexity handle karna.
स्रोत: Hacker News · HeadlinesBriefing द्वारा सारांशित